1# CRL Test Data
2
3This directory contains cert chains and CRL files for revocation testing.
4
5To print the chain, use a command like,
6
7```shell
8openssl crl2pkcs7 -nocrl -certfile security/crl/x509/client/testdata/revokedLeaf.pem | openssl pkcs7 -print_certs -text -noout
9```
10
11The crl file symlinks are generated with `openssl rehash`
12
13## unrevoked.pem
14
15A certificate chain with CRL files and unrevoked certs
16
17*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
18    OU=campus-sln, CN=Root CA (2021-02-02T07:30:36-08:00)
19    *   1.crl
20
21NOTE: 1.crl file is symlinked with 5.crl to simulate two issuers that hash to
22the same value to test that loading multiple files works.
23
24*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
25    OU=campus-sln, CN=node CA (2021-02-02T07:30:36-08:00)
26    *   2.crl
27
28## revokedInt.pem
29
30Certificate chain where the intermediate is revoked
31
32*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
33    OU=campus-sln, CN=Root CA (2021-02-02T07:31:54-08:00)
34    *   3.crl
35*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
36    OU=campus-sln, CN=node CA (2021-02-02T07:31:54-08:00)
37    *   4.crl
38
39## revokedLeaf.pem
40
41Certificate chain where the leaf is revoked
42
43*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
44    OU=campus-sln, CN=Root CA (2021-02-02T07:32:57-08:00)
45    *   5.crl
46*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
47    OU=campus-sln, CN=node CA (2021-02-02T07:32:57-08:00)
48    *   6.crl
49