1# This Source Code Form is subject to the terms of the Mozilla Public
2# License, v. 2.0. If a copy of the MPL was not distributed with this
3# file, You can obtain one at http://mozilla.org/MPL/2.0/.
4
5scenario AnyPolicyWithLevel
6
7entity RootCA
8  type Root
9
10entity CA1
11  type Intermediate
12  issuer RootCA
13  policy any
14  inhibit 1
15
16entity CA12
17  type Intermediate
18  issuer CA1
19  policy any
20
21entity CA13
22  type Intermediate
23  issuer CA12
24  policy OID.1.0
25
26entity EE1
27  type EE
28  issuer CA13
29  policy OID.1.0
30
31entity CA22
32  type Intermediate
33  issuer CA1
34  policy any
35
36entity CA23
37  type Intermediate
38  issuer CA22
39  policy any
40
41entity EE2
42  type EE
43  issuer CA23
44  policy OID.1.0
45
46entity CA32
47  type Intermediate
48  issuer CA1
49  policy any
50  inhibit 1
51
52entity CA33
53  type Intermediate
54  issuer CA32
55  policy any
56
57entity EE3
58  type EE
59  issuer CA33
60  policy OID.1.0
61
62entity CA42
63  type Intermediate
64  issuer CA1
65  policy any
66  policy OID.1.0
67
68entity CA43
69  type Intermediate
70  issuer CA42
71  policy any
72  policy OID.1.0
73
74entity EE4
75  type EE
76  issuer CA43
77  policy OID.1.0
78
79entity CA52
80  type Intermediate
81  issuer CA1
82  policy any
83  policy OID.1.0
84
85entity CA53
86  type Intermediate
87  issuer CA52
88  policy any
89
90entity EE5
91  type EE
92  issuer CA53
93  policy OID.1.0
94
95entity CA61
96  type Intermediate
97  issuer RootCA
98  policy any
99  inhibit 5
100
101entity CA62
102  type Intermediate
103  issuer CA61
104  policy any
105
106entity EE62
107  type EE
108  issuer CA62
109  policy OID.1.0
110
111entity CA63
112  type Intermediate
113  issuer CA62
114  policy any
115
116entity EE63
117  type EE
118  issuer CA63
119  policy OID.1.0
120
121entity CA64
122  type Intermediate
123  issuer CA63
124  policy any
125
126entity EE64
127  type EE
128  issuer CA64
129  policy OID.1.0
130
131entity CA65
132  type Intermediate
133  issuer CA64
134  policy any
135
136entity EE65
137  type EE
138  issuer CA65
139  policy OID.1.0
140
141entity CA66
142  type Intermediate
143  issuer CA65
144  policy any
145
146entity EE66
147  type EE
148  issuer CA66
149  policy OID.1.0
150
151entity CA67
152  type Intermediate
153  issuer CA66
154  policy any
155
156entity EE67
157  type EE
158  issuer CA67
159  policy OID.1.0
160
161db All
162
163verify EE1:CA13
164  cert RootCA:
165  cert CA1:RootCA
166  cert CA12:CA1
167  cert CA13:CA12
168  trust RootCA:
169  policy OID.1.0
170  result pass
171
172verify EE1:CA13
173  cert RootCA:
174  cert CA1:RootCA
175  cert CA12:CA1
176  cert CA13:CA12
177  trust RootCA:
178  policy OID.2.0
179  result fail
180
181verify EE1:CA13
182  cert RootCA:
183  cert CA1:RootCA
184  cert CA12:CA1
185  cert CA13:CA12
186  trust RootCA:
187  policy OID.2.5.29.32.0
188  result pass
189
190verify EE2:CA23
191  cert RootCA:
192  cert CA1:RootCA
193  cert CA22:CA1
194  cert CA23:CA22
195  trust RootCA:
196  policy OID.1.0
197  result fail
198
199verify EE2:CA23
200  cert RootCA:
201  cert CA1:RootCA
202  cert CA22:CA1
203  cert CA23:CA22
204  trust RootCA:
205  policy OID.2.0
206  result fail
207
208verify EE2:CA23
209  cert RootCA:
210  cert CA1:RootCA
211  cert CA22:CA1
212  cert CA23:CA22
213  trust RootCA:
214  policy OID.2.5.29.32.0
215  result fail
216
217verify EE2:CA23
218  cert RootCA:
219  cert CA1:RootCA
220  cert CA22:CA1
221  cert CA23:CA22
222  trust RootCA:
223  result pass
224
225verify EE3:CA33
226  cert RootCA:
227  cert CA1:RootCA
228  cert CA32:CA1
229  cert CA33:CA32
230  trust RootCA:
231  policy OID.1.0
232  result fail
233
234verify EE3:CA33
235  cert RootCA:
236  cert CA1:RootCA
237  cert CA32:CA1
238  cert CA33:CA32
239  trust RootCA:
240  policy OID.2.0
241  result fail
242
243verify EE3:CA33
244  cert RootCA:
245  cert CA1:RootCA
246  cert CA32:CA1
247  cert CA33:CA32
248  trust RootCA:
249  policy OID.2.5.29.32.0
250  result fail
251
252verify EE3:CA33
253  cert RootCA:
254  cert CA1:RootCA
255  cert CA32:CA1
256  cert CA33:CA32
257  trust RootCA:
258  result pass
259
260verify EE4:CA43
261  cert RootCA:
262  cert CA1:RootCA
263  cert CA42:CA1
264  cert CA43:CA42
265  trust RootCA:
266  policy OID.1.0
267  result pass
268
269verify EE4:CA43
270  cert RootCA:
271  cert CA1:RootCA
272  cert CA42:CA1
273  cert CA43:CA42
274  trust RootCA:
275  policy OID.2.0
276  result fail
277
278verify EE4:CA43
279  cert RootCA:
280  cert CA1:RootCA
281  cert CA42:CA1
282  cert CA43:CA42
283  trust RootCA:
284  policy OID.2.5.29.32.0
285  result pass
286
287verify EE5:CA53
288  cert RootCA:
289  cert CA1:RootCA
290  cert CA52:CA1
291  cert CA53:CA52
292  trust RootCA:
293  policy OID.1.0
294  result fail
295
296verify EE5:CA53
297  cert RootCA:
298  cert CA1:RootCA
299  cert CA52:CA1
300  cert CA53:CA52
301  trust RootCA:
302  policy OID.2.0
303  result fail
304
305verify EE5:CA53
306  cert RootCA:
307  cert CA1:RootCA
308  cert CA52:CA1
309  cert CA53:CA52
310  trust RootCA:
311  policy OID.2.5.29.32.0
312  result fail
313
314verify EE5:CA53
315  cert RootCA:
316  cert CA1:RootCA
317  cert CA52:CA1
318  cert CA53:CA52
319  trust RootCA:
320  result pass
321
322verify EE62:CA62
323  cert RootCA:
324  cert CA61:RootCA
325  cert CA62:CA61
326  cert CA63:CA62
327  cert CA64:CA63
328  cert CA65:CA64
329  cert CA66:CA65
330  cert CA67:CA66
331  trust RootCA:
332  policy OID.1.0
333  result pass
334
335verify EE63:CA63
336  cert RootCA:
337  cert CA61:RootCA
338  cert CA62:CA61
339  cert CA63:CA62
340  cert CA64:CA63
341  cert CA65:CA64
342  cert CA66:CA65
343  cert CA67:CA66
344  trust RootCA:
345  policy OID.1.0
346  result pass
347
348verify EE64:CA64
349  cert RootCA:
350  cert CA61:RootCA
351  cert CA62:CA61
352  cert CA63:CA62
353  cert CA64:CA63
354  cert CA65:CA64
355  cert CA66:CA65
356  cert CA67:CA66
357  trust RootCA:
358  policy OID.1.0
359  result pass
360
361verify EE65:CA65
362  cert RootCA:
363  cert CA61:RootCA
364  cert CA62:CA61
365  cert CA63:CA62
366  cert CA64:CA63
367  cert CA65:CA64
368  cert CA66:CA65
369  cert CA67:CA66
370  trust RootCA:
371  policy OID.1.0
372  result pass
373
374verify EE66:CA66
375  cert RootCA:
376  cert CA61:RootCA
377  cert CA62:CA61
378  cert CA63:CA62
379  cert CA64:CA63
380  cert CA65:CA64
381  cert CA66:CA65
382  cert CA67:CA66
383  trust RootCA:
384  policy OID.1.0
385  result pass
386
387verify EE67:CA67
388  cert RootCA:
389  cert CA61:RootCA
390  cert CA62:CA61
391  cert CA63:CA62
392  cert CA64:CA63
393  cert CA65:CA64
394  cert CA66:CA65
395  cert CA67:CA66
396  trust RootCA:
397  policy OID.1.0
398  result fail
399
400