This adds a new INF for BaseCryptLib suitable for host based environments. It adds a host based unit test for BaseCryptLib that can also be built as a shell based Unit Test. In addition, this also adds a UnitTestHostCrtWrapper.c file, which provides some of the functionality not provided by the default host based unit test system that OpenSSL expects. This is used by UnitTestHostBaseCryptLib, a version of the BaseCryptLib meant specifically for host based unit testing. Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Xiaoyu Lu <xiaoyux.lu@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Signed-off-by: Matthew Carlson <matthewfcarlson@gmail.com> Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
46 lines
1.1 KiB
INI
46 lines
1.1 KiB
INI
[Version]
|
|
Signature="$Windows NT$
|
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
; 2.5.29.19 == Basic Constraints for CA
|
|
[Strings]
|
|
szOID_BASIC_CONSTRAINTS2 = "2.5.29.19"
|
|
|
|
[EnhancedKeyUsageExtension]
|
|
OID = 1.3.6.1.4.1.311.76.9.21.1
|
|
|
|
[NewRequest]
|
|
Subject = "CN=TestEKUParsingIssuingCA"
|
|
Exportable = true
|
|
KeyLength = 256
|
|
HashAlgorithm = sha256
|
|
KeyUsage = "CERT_KEY_CERT_SIGN_KEY_USAGE"
|
|
KeyUsageProperty = "NCRYPT_ALLOW_SIGNING_FLAG"
|
|
MachineKeySet = True
|
|
RequestType = cert
|
|
ValidityPeriodUnits = 20
|
|
ValidityPeriod = Years
|
|
ProviderName = "Microsoft Software Key Storage Provider"
|
|
KeyAlgorithm = "ECDSA_P256"
|
|
|
|
|
|
[Extensions]
|
|
%szOID_BASIC_CONSTRAINTS2% = "{text}"
|
|
_continue_ = "ca=True"
|
|
|
|
Critical=%szOID_BASIC_CONSTRAINTS2%
|
|
|
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
; This extension is so the this CA is only allowed to
|
|
; issue end-entity certs.
|
|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
[BasicConstraintsExtension]
|
|
PathLength=0
|
|
|
|
;
|
|
; Surface Firmware Signing EKU
|
|
;
|
|
[Extensions]
|
|
2.5.29.37 = "{text}"
|
|
_continue_ = "1.3.6.1.4.1.311.76.9.21.1"
|
|
|