CryptoPkg/Test/UnitTest/Library/BaseCryptLib/TestEKUCerts/TestEKUParsingIssuingCA.ini

   1 [Version]
   2 Signature="$Windows NT$
   3 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
   4 ; 2.5.29.19 == Basic Constraints for CA
   5 [Strings]
   6 szOID_BASIC_CONSTRAINTS2 = "2.5.29.19"
   7
   8 [EnhancedKeyUsageExtension]
   9 OID = 1.3.6.1.4.1.311.76.9.21.1
  10
  11 [NewRequest]
  12 Subject = "CN=TestEKUParsingIssuingCA"
  13 Exportable = true
  14 KeyLength = 256
  15 HashAlgorithm = sha256
  16 KeyUsage = "CERT_KEY_CERT_SIGN_KEY_USAGE"
  17 KeyUsageProperty = "NCRYPT_ALLOW_SIGNING_FLAG"
  18 MachineKeySet = True
  19 RequestType = cert
  20 ValidityPeriodUnits = 20
  21 ValidityPeriod = Years
  22 ProviderName = "Microsoft Software Key Storage Provider"
  23 KeyAlgorithm = "ECDSA_P256"
  24
  25
  26 [Extensions]
  27 %szOID_BASIC_CONSTRAINTS2% = "{text}"
  28     _continue_ = "ca=True"
  29
  30 Critical=%szOID_BASIC_CONSTRAINTS2%
  31
  32 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  33 ; This extension is so the this CA is only allowed to
  34 ; issue end-entity certs.
  35 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  36 [BasicConstraintsExtension]
  37 PathLength=0
  38
  39 ;
  40 ; Surface Firmware Signing EKU
  41 ;
  42 [Extensions]
  43     2.5.29.37 = "{text}"
  44     _continue_ = "1.3.6.1.4.1.311.76.9.21.1"
  45