1# CRL Test Data 2 3This directory contains cert chains and CRL files for revocation testing. 4 5To print the chain, use a command like, 6 7```shell 8openssl crl2pkcs7 -nocrl -certfile security/crl/x509/client/testdata/revokedLeaf.pem | openssl pkcs7 -print_certs -text -noout 9``` 10 11The crl file symlinks are generated with `openssl rehash` 12 13## unrevoked.pem 14 15A certificate chain with CRL files and unrevoked certs 16 17* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 18 OU=campus-sln, CN=Root CA (2021-02-02T07:30:36-08:00) 19 * 1.crl 20 21NOTE: 1.crl file is symlinked with 5.crl to simulate two issuers that hash to 22the same value to test that loading multiple files works. 23 24* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 25 OU=campus-sln, CN=node CA (2021-02-02T07:30:36-08:00) 26 * 2.crl 27 28## revokedInt.pem 29 30Certificate chain where the intermediate is revoked 31 32* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 33 OU=campus-sln, CN=Root CA (2021-02-02T07:31:54-08:00) 34 * 3.crl 35* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 36 OU=campus-sln, CN=node CA (2021-02-02T07:31:54-08:00) 37 * 4.crl 38 39## revokedLeaf.pem 40 41Certificate chain where the leaf is revoked 42 43* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 44 OU=campus-sln, CN=Root CA (2021-02-02T07:32:57-08:00) 45 * 5.crl 46* Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production, 47 OU=campus-sln, CN=node CA (2021-02-02T07:32:57-08:00) 48 * 6.crl 49