cryptoservices/certificateandkeymgmt/tcertstore/readme first.txt
author hgs
Thu, 24 Jun 2010 15:39:07 +0530
changeset 72 de46a57f75fb
permissions -rw-r--r--
201023_02
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
72
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     1
Current state of filecertstore tests
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     2
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     3
Scripts
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     4
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     5
UNIFIEDCERTSTORE1-CONF1.txt - All tests pass 
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     6
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     7
UNIFIEDCERTSTORE2-CONF1.txt - All tests pass (use techview mode)
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     8
de46a57f75fb 201023_02
hgs
parents:
diff changeset
     9
UNIFIEDCERTSTORE3-CONF1.txt - Most tests pass (expect 41 to fail)
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    10
Failure occurs because the tests attempt to add some certificates for which private keys do not exist yet AND because the test tries to do filtered listing on user certificates for a number of different keyId and key usage combinations.
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    11
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    12
To resolve these issues we need to 
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    13
(a) generate a couple more certificates with keys that have restricted usages, and import the keys at the beginning of the script (with the appropriate usage)
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    14
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    15
(b) Rewrite the filtering tests to use the appropriate combinations
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    16
de46a57f75fb 201023_02
hgs
parents:
diff changeset
    17
So far, I've added 3 certificates based on 3 different RSA keys with all usage (rsacert1, rsacert2 and rsacert3) and 1 certificate based on a NR key with NR usage (nrcert)