Add/Update NIST X.509 PKI Test Suite (PKITS)

randombit / botan

Cryptography Toolkit

https://botan.randombit.net

BSD 2-Clause "Simplified" License

2.59k stars 568 forks source link

Add/Update NIST X.509 PKI Test Suite (PKITS) #1047

Open neusdan opened 7 years ago

neusdan commented 7 years ago

There is a NIST X.509 test suite included in Botan in src/tests/data/nist_x509 and test_x509_path.cpp, but it seems its not the PKITS.

The NIST PKITS supersedes the path validation test suite, which is currently part of Botans test suite. The PKITS consists of two parts: A path validation and a path building test suite. Both are useful to be integrated into Botan.

randombit commented 7 years ago

This would be great to have. I can't remember the exact provenance of the current NIST tests, from the commit history looks like I added it in 2006 so presumably it is some PKITS predecessor. Aha, using the phrase "Conformance Testing of Relying Party Client Certificate Path Proccessing Logic" mentioned in the original commit leads to http://jitc.fhu.disa.mil/projects/pki/documents/conformance_testing_of_relying_party_client_certificate_path_v1_07_september_28_2001.pdf