Skip to content

Commit 8a60faa

Browse files
kamphuisemkamphuisem
authored
Update trust anchors (#475)
1 parent f65b2c2 commit 8a60faa

7 files changed

Lines changed: 77 additions & 111 deletions

File tree

‎eudi/credentials/sdjwtvc/verifier.go‎

Lines changed: 1 addition & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -148,36 +148,6 @@ func SplitSdJwtVc(sdjwtvc SdJwtVc) (IssuerSignedJwt, []EncodedDisclosure, *KeyBi
148148
return issuer, encdiscs, kbJwt, nil
149149
}
150150

151-
func CreateX509VerifyOptionsFromMultiplePemChains(pemChains [][]byte) (*x509.VerifyOptions, error) {
152-
rootPool := x509.NewCertPool()
153-
intermediatePool := x509.NewCertPool()
154-
155-
for i, pemChainData := range pemChains {
156-
certs, err := eudi.ParsePemCertificateChain(pemChainData)
157-
if err != nil {
158-
return nil, fmt.Errorf("failed to parse cert chain %d: %w", i, err)
159-
}
160-
161-
if len(certs) == 0 {
162-
return nil, fmt.Errorf("cert chain %d is empty", i)
163-
}
164-
165-
// First cert is assumed to be the root (or self-signed root CA)
166-
rootPool.AddCert(certs[0])
167-
168-
// Remaining certs are intermediates
169-
for _, cert := range certs[1:] {
170-
intermediatePool.AddCert(cert)
171-
}
172-
}
173-
174-
return &x509.VerifyOptions{
175-
Roots: rootPool,
176-
Intermediates: intermediatePool,
177-
KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageAny},
178-
}, nil
179-
}
180-
181151
// CreateX509VerifyOptionsFromCertChain creates x509.VerifyOptions that can be added
182152
// to the `VerificationContext` as the trusted certificate chain.
183153
func CreateX509VerifyOptionsFromCertChain(pemChainData []byte) (*x509.VerifyOptions, error) {
@@ -198,6 +168,7 @@ func CreateX509VerifyOptionsFromCertChain(pemChainData []byte) (*x509.VerifyOpti
198168
Roots: rootPool,
199169
Intermediates: intermediatePool,
200170
KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageAny},
171+
CurrentTime: time.Now().Add(-5 * time.Minute), // Adjust to account for skew
201172
}
202173

203174
return &certVerifyOpts, nil

‎eudi/trustanchors.go‎

Lines changed: 59 additions & 67 deletions
Original file line numberDiff line numberDiff line change
@@ -2,81 +2,73 @@ package eudi
22

33
// DefaultIssuerTrustAnchor_YiviStaging is the default issuer trust anchor for Yivi staging and will be replaced with the actual trust anchor for Yivi production (TODO)
44
const DefaultIssuerTrustAnchor_YiviStaging = `
5-
Subject: CN=Yivi Requestors RootCA,O=Yivi,C=NL
6-
Issuer: CN=Yivi Requestors RootCA,O=Yivi,C=NL
5+
Subject: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
6+
Issuer: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
77
-----BEGIN CERTIFICATE-----
8-
MIIBwTCCAWagAwIBAgIUYfwEDmHlGFzjk0ghWtAbVgPhdAswCgYIKoZIzj0EAwIw
9-
PTELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxHzAdBgNVBAMMFllpdmkgUmVx
10-
dWVzdG9ycyBSb290Q0EwIBcNMjUwNzE1MDg0ODM1WhgPMjA1NTA3MDgwODQ4MzRa
11-
MD0xCzAJBgNVBAYTAk5MMQ0wCwYDVQQKDARZaXZpMR8wHQYDVQQDDBZZaXZpIFJl
12-
cXVlc3RvcnMgUm9vdENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+Z+lxTy+
13-
1xYXBT4kuyGBlbnbpcQFNgUaulP19mAqjme7Uv998RND8jgwxfwbEswk1m/xA323
14-
mAPMYJD4GM38EKNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU6h4COg3Q
15-
DNkqZnZib7FOlaKlOSEwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA0kAMEYC
16-
IQDqXBwGeGI9q1kqc3t4PEXJASETzL5WBycnNH6052GNFAIhAKAkzL/N+7IoDHVq
17-
zLVVVuKy/Xcv9t+0zLgxXD3ia4hM
8+
MIIB8jCCAZmgAwIBAgIUd8FwrZvzZ0+08+A0VNFgX5f/eIwwCgYIKoZIzj0EAwQw
9+
RjELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxKDAmBgNVBAMMH1lpdmkgU3Rh
10+
Z2luZyBSZXF1ZXN0b3JzIFJvb3QgQ0EwIBcNMjUwODA4MTAwMDUzWhgPMjA1NTA4
11+
MDExMDAwNTJaMEYxCzAJBgNVBAYTAk5MMQ0wCwYDVQQKDARZaXZpMSgwJgYDVQQD
12+
DB9ZaXZpIFN0YWdpbmcgUmVxdWVzdG9ycyBSb290IENBMFkwEwYHKoZIzj0CAQYI
13+
KoZIzj0DAQcDQgAECTtfysVgEPFVKrVL8FM/Jx3E64qquuKSfG2ZqEucIkH6QHGL
14+
eJPEEhA1RUyGtPTLIZTjY5rHwR6foTSVThGrraNjMGEwDwYDVR0TAQH/BAUwAwEB
15+
/zAfBgNVHSMEGDAWgBRjtHvVs5rhDnC0L2AUi+7ncyXe1jAdBgNVHQ4EFgQUY7R7
16+
1bOa4Q5wtC9gFIvu53Ml3tYwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMEA0cA
17+
MEQCIDCSNbPoyhDZ5A3SWupsyPj/tDF4xNoHYnE0WFIs2pz8AiA9mhXswiJPFbVR
18+
9dYSupOhXkuQRk8CgJuN++OnESd8uw==
1819
-----END CERTIFICATE-----
19-
Subject: CN=Yivi Attestation Providers CA,O=Yivi,C=NL
20-
Issuer: CN=Yivi Requestors RootCA,O=Yivi,C=NL
20+
Subject: CN=Yivi Staging Attestation Providers CA,O=Yivi,C=NL
21+
Issuer: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
2122
-----BEGIN CERTIFICATE-----
22-
MIIDdTCCAxugAwIBAgIUN66rLur/gwVXKSWEDCFCmG/cXZQwCgYIKoZIzj0EAwIw
23-
PTELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxHzAdBgNVBAMMFllpdmkgUmVx
24-
dWVzdG9ycyBSb290Q0EwHhcNMjUwNzE1MDk0NzAxWhcNMzkwNzEyMDk1MzAwWjBE
25-
MQswCQYDVQQGEwJOTDENMAsGA1UECgwEWWl2aTEmMCQGA1UEAwwdWWl2aSBBdHRl
26-
c3RhdGlvbiBQcm92aWRlcnMgQ0EwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQZ
27-
Zfj0UgMD/K9zScgMsO6J8z9UGr4KKUbarTgzU8b7+1JvX/rQ7JwyKK17RAuLIjg4
28-
qETJKpepQWXsdbmTbWg7o4IB8DCCAewwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNV
29-
HSMEGDAWgBTqHgI6DdAM2SpmdmJvsU6VoqU5ITCBywYIKwYBBQUHAQEEgb4wgbsw
30-
dAYIKwYBBQUHMAKGaGh0dHBzOi8vY2Euc3RhZ2luZy55aXZpLmFwcC9lamJjYS9w
31-
dWJsaWN3ZWIvY2VydGlmaWNhdGVzL3NlYXJjaC5jZ2k/c0tJREhhc2g9Nmg0Q09n
32-
M1FETmtxWm5aaWI3Rk9sYUtsT1NFMEMGCCsGAQUFBzABhjdodHRwczovL2NhLnN0
33-
YWdpbmcueWl2aS5hcHAvZWpiY2EvcHVibGljd2ViL3N0YXR1cy9vY3NwMIG3BgNV
34-
HR8Ega8wgawwgamgZKBihmBodHRwczovL2NhLnN0YWdpbmcueWl2aS5hcHAvZWpi
35-
Y2EvcHVibGljd2ViL2NybHMvc2VhcmNoLmNnaT9zS0lESGFzaD02aDRDT2czUURO
36-
a3FablppYjdGT2xhS2xPU0WiQaQ/MD0xHzAdBgNVBAMMFllpdmkgUmVxdWVzdG9y
37-
cyBSb290Q0ExDTALBgNVBAoMBFlpdmkxCzAJBgNVBAYTAk5MMB0GA1UdDgQWBBTb
38-
73uxigF5vYzKQAyWIJB+4ng2kTAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwID
39-
SAAwRQIhAOGr5oI72XKrw51MxGf60Z6fBJskxvnBKDtBOAyqGF3IAiA7RHnTMnM+
40-
HlY1fmz1gEdQ5OQhwWn9AsMlhMvSDlZKBg==
41-
-----END CERTIFICATE-----`
23+
MIICbTCCAhSgAwIBAgIUX8STjkv3TRF5UBstXlp4ILHy2h0wCgYIKoZIzj0EAwQw
24+
RjELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxKDAmBgNVBAMMH1lpdmkgU3Rh
25+
Z2luZyBSZXF1ZXN0b3JzIFJvb3QgQ0EwHhcNMjUwODEyMTUwODA1WhcNNDAwODA4
26+
MTUwODA0WjBMMQswCQYDVQQGEwJOTDENMAsGA1UECgwEWWl2aTEuMCwGA1UEAwwl
27+
WWl2aSBTdGFnaW5nIEF0dGVzdGF0aW9uIFByb3ZpZGVycyBDQTBZMBMGByqGSM49
28+
AgEGCCqGSM49AwEHA0IABMDTwj6APykJnBdr0sCO8LpkULpbXFOBWV47hKKsJHsa
29+
CVMarjLCYU3CV57UdklHSlMrtm7vfoDpYn4BvUv00UqjgdkwgdYwEgYDVR0TAQH/
30+
BAgwBgEB/wIBADAfBgNVHSMEGDAWgBRjtHvVs5rhDnC0L2AUi+7ncyXe1jBwBgNV
31+
HR8EaTBnMGWgY6Bhhl9odHRwczovL2NhLnN0YWdpbmcueWl2aS5hcHAvZWpiY2Ev
32+
cHVibGljd2ViL2NybHMvc2VhcmNoLmNnaT9pSGFzaD1rRkNPdDhOTGhKOGcwV3FN
33+
QW5sJTJCdm9OMlJ1WTAdBgNVHQ4EFgQUEjcBLRMmQGBJO0h04IL5Jwha1rEwDgYD
34+
VR0PAQH/BAQDAgGGMAoGCCqGSM49BAMEA0cAMEQCIDEaWIs4uSm8KVQe+fy0EndE
35+
Taj1ayt6dUgKQY/xZBO3AiAPYGwRlZMzbeCTFQ2ORLJiSowRtXzbmXpNDSyvtn7e
36+
Dw==
37+
-----END CERTIFICATE-----
38+
`
4239

4340
// DefaultVerifierTrustAnchor_YiviStaging is the default issuer trust anchor for Yivi staging and will be replaced with the actual trust anchor for Yivi production (TODO)
4441
const DefaultVerifierTrustAnchor_YiviStaging = `
45-
Subject: CN=Yivi Requestors RootCA,O=Yivi,C=NL
46-
Issuer: CN=Yivi Requestors RootCA,O=Yivi,C=NL
42+
Subject: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
43+
Issuer: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
4744
-----BEGIN CERTIFICATE-----
48-
MIIBwTCCAWagAwIBAgIUYfwEDmHlGFzjk0ghWtAbVgPhdAswCgYIKoZIzj0EAwIw
49-
PTELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxHzAdBgNVBAMMFllpdmkgUmVx
50-
dWVzdG9ycyBSb290Q0EwIBcNMjUwNzE1MDg0ODM1WhgPMjA1NTA3MDgwODQ4MzRa
51-
MD0xCzAJBgNVBAYTAk5MMQ0wCwYDVQQKDARZaXZpMR8wHQYDVQQDDBZZaXZpIFJl
52-
cXVlc3RvcnMgUm9vdENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+Z+lxTy+
53-
1xYXBT4kuyGBlbnbpcQFNgUaulP19mAqjme7Uv998RND8jgwxfwbEswk1m/xA323
54-
mAPMYJD4GM38EKNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU6h4COg3Q
55-
DNkqZnZib7FOlaKlOSEwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA0kAMEYC
56-
IQDqXBwGeGI9q1kqc3t4PEXJASETzL5WBycnNH6052GNFAIhAKAkzL/N+7IoDHVq
57-
zLVVVuKy/Xcv9t+0zLgxXD3ia4hM
45+
MIIB8jCCAZmgAwIBAgIUd8FwrZvzZ0+08+A0VNFgX5f/eIwwCgYIKoZIzj0EAwQw
46+
RjELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxKDAmBgNVBAMMH1lpdmkgU3Rh
47+
Z2luZyBSZXF1ZXN0b3JzIFJvb3QgQ0EwIBcNMjUwODA4MTAwMDUzWhgPMjA1NTA4
48+
MDExMDAwNTJaMEYxCzAJBgNVBAYTAk5MMQ0wCwYDVQQKDARZaXZpMSgwJgYDVQQD
49+
DB9ZaXZpIFN0YWdpbmcgUmVxdWVzdG9ycyBSb290IENBMFkwEwYHKoZIzj0CAQYI
50+
KoZIzj0DAQcDQgAECTtfysVgEPFVKrVL8FM/Jx3E64qquuKSfG2ZqEucIkH6QHGL
51+
eJPEEhA1RUyGtPTLIZTjY5rHwR6foTSVThGrraNjMGEwDwYDVR0TAQH/BAUwAwEB
52+
/zAfBgNVHSMEGDAWgBRjtHvVs5rhDnC0L2AUi+7ncyXe1jAdBgNVHQ4EFgQUY7R7
53+
1bOa4Q5wtC9gFIvu53Ml3tYwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMEA0cA
54+
MEQCIDCSNbPoyhDZ5A3SWupsyPj/tDF4xNoHYnE0WFIs2pz8AiA9mhXswiJPFbVR
55+
9dYSupOhXkuQRk8CgJuN++OnESd8uw==
5856
-----END CERTIFICATE-----
59-
Subject: CN=Yivi Relying Parties CA,O=Yivi,C=NL
60-
Issuer: CN=Yivi Requestors RootCA,O=Yivi,C=NL
57+
Subject: CN=Yivi Staging Relying Parties CA,O=Yivi,C=NL
58+
Issuer: CN=Yivi Staging Requestors Root CA,O=Yivi,C=NL
6159
-----BEGIN CERTIFICATE-----
62-
MIIDbzCCAxWgAwIBAgIUX1VHxaun5d4JgoXFLkEqK2LBXIYwCgYIKoZIzj0EAwIw
63-
PTELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxHzAdBgNVBAMMFllpdmkgUmVx
64-
dWVzdG9ycyBSb290Q0EwHhcNMjUwNzE1MDk0MjIyWhcNMzkwNzEyMDk0ODIxWjA+
65-
MQswCQYDVQQGEwJOTDENMAsGA1UECgwEWWl2aTEgMB4GA1UEAwwXWWl2aSBSZWx5
66-
aW5nIFBhcnRpZXMgQ0EwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQZZfj0UgMD
67-
/K9zScgMsO6J8z9UGr4KKUbarTgzU8b7+1JvX/rQ7JwyKK17RAuLIjg4qETJKpep
68-
QWXsdbmTbWg7o4IB8DCCAewwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAW
69-
gBTqHgI6DdAM2SpmdmJvsU6VoqU5ITCBywYIKwYBBQUHAQEEgb4wgbswdAYIKwYB
70-
BQUHMAKGaGh0dHBzOi8vY2Euc3RhZ2luZy55aXZpLmFwcC9lamJjYS9wdWJsaWN3
71-
ZWIvY2VydGlmaWNhdGVzL3NlYXJjaC5jZ2k/c0tJREhhc2g9Nmg0Q09nM1FETmtx
72-
Wm5aaWI3Rk9sYUtsT1NFMEMGCCsGAQUFBzABhjdodHRwczovL2NhLnN0YWdpbmcu
73-
eWl2aS5hcHAvZWpiY2EvcHVibGljd2ViL3N0YXR1cy9vY3NwMIG3BgNVHR8Ega8w
74-
gawwgamgZKBihmBodHRwczovL2NhLnN0YWdpbmcueWl2aS5hcHAvZWpiY2EvcHVi
75-
bGljd2ViL2NybHMvc2VhcmNoLmNnaT9zS0lESGFzaD02aDRDT2czUUROa3Fablpp
76-
YjdGT2xhS2xPU0WiQaQ/MD0xHzAdBgNVBAMMFllpdmkgUmVxdWVzdG9ycyBSb290
77-
Q0ExDTALBgNVBAoMBFlpdmkxCzAJBgNVBAYTAk5MMB0GA1UdDgQWBBTb73uxigF5
78-
vYzKQAyWIJB+4ng2kTAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwIDSAAwRQIh
79-
AJ345PijWRJZ2kztubVPfDWY+F8ipBFQ4NFrv2BgDESAAiB8I/dol3DCLBYtRIwr
80-
1j+O4+RgM6cvGWwb5pGToMVmxw==
60+
MIICaDCCAg6gAwIBAgIUVbrz0YgTTgjJE/qHcwLtn6lT4pEwCgYIKoZIzj0EAwQw
61+
RjELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxKDAmBgNVBAMMH1lpdmkgU3Rh
62+
Z2luZyBSZXF1ZXN0b3JzIFJvb3QgQ0EwHhcNMjUwODA4MTEzMDUxWhcNNDAwODA0
63+
MTEzMDUwWjBGMQswCQYDVQQGEwJOTDENMAsGA1UECgwEWWl2aTEoMCYGA1UEAwwf
64+
WWl2aSBTdGFnaW5nIFJlbHlpbmcgUGFydGllcyBDQTBZMBMGByqGSM49AgEGCCqG
65+
SM49AwEHA0IABD6/Jx9e/BIjRZQNSMcyvb6jcv9jtE9DEnQUgdkR4ZbMsEqAa6Kj
66+
SF358k8N8DrV3nRvi2jbcnXP2gWXc3yTpZujgdkwgdYwEgYDVR0TAQH/BAgwBgEB
67+
/wIBADAfBgNVHSMEGDAWgBRjtHvVs5rhDnC0L2AUi+7ncyXe1jBwBgNVHR8EaTBn
68+
MGWgY6Bhhl9odHRwczovL2NhLnN0YWdpbmcueWl2aS5hcHAvZWpiY2EvcHVibGlj
69+
d2ViL2NybHMvc2VhcmNoLmNnaT9pSGFzaD1rRkNPdDhOTGhKOGcwV3FNQW5sJTJC
70+
dm9OMlJ1WTAdBgNVHQ4EFgQUn+JmQGo29ozmYyzmKGG5lYN5maEwDgYDVR0PAQH/
71+
BAQDAgGGMAoGCCqGSM49BAMEA0gAMEUCIQDs40VU7/tHrBsHdwVj2kc+ZqpvLoOf
72+
EtyHWcNN5HZpUAIgI3qf4KxHuFXdzEakHYb4aOpiQI9O7Sk8TUxJT7jymXM=
8173
-----END CERTIFICATE-----
8274
`

‎eudi/verifier_validator.go‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,15 @@ import (
88
"encoding/json"
99
"fmt"
1010
"strings"
11+
"time"
1112

1213
"github.com/go-errors/errors"
1314
"github.com/golang-jwt/jwt/v5"
1415
"github.com/privacybydesign/irmago/eudi/openid4vp"
1516
)
1617

1718
const SchemeExtensionOID = "2.1.123.1"
19+
const ClockSkew = 300 * time.Second
1820

1921
// VerifierValidator is an interface to be used to verify verifiers by parsing and verifying the
2022
// authorization request and returning the requestor info for the verifier.
@@ -106,8 +108,9 @@ func (v *RequestorCertificateStoreVerifierValidator) createAuthRequestVerifier()
106108
certVerifyOpts := x509.VerifyOptions{
107109
Roots: v.model.GetRootCerts(),
108110
Intermediates: v.model.GetIntermediateCerts(),
109-
KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
111+
KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
110112
DNSName: hostname,
113+
CurrentTime: time.Now().Add(-ClockSkew), // Adjust to account for skew
111114
}
112115

113116
parsedCert, err := getEndEntityCertFromX5cHeader(token)

‎testdata/eudi/verifier/chain.pem‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
-----BEGIN CERTIFICATE-----
2-
MIIbVTCCGvugAwIBAgIUaJZX+x6EoPXdaSmPDvV1+lwb4nkwCgYIKoZIzj0EAwIw
2+
MIIbVDCCGvugAwIBAgIUYJgzQsuejq3oRk+rDTkiJ2ppIM0wCgYIKoZIzj0EAwIw
33
RzELMAkGA1UEBhMCTkwxGTAXBgNVBAoMEERlbW8gVmVyaWZpZXIgQ0ExHTAbBgNV
4-
BAMMFERlbW8gUmVxdWVzdG9ycyBSb290MB4XDTI1MDgwNTA5NTAzMloXDTI3MTEw
5-
ODA5NTAzMlowPzELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxEjAQBgNVBAMM
4+
BAMMFERlbW8gUmVxdWVzdG9ycyBSb290MB4XDTI1MDgxMzA2NDgxNVoXDTI3MTEx
5+
NjA2NDgxNVowPzELMAkGA1UEBhMCTkwxDTALBgNVBAoMBFlpdmkxEjAQBgNVBAMM
66
CWxvY2FsaG9zdDENMAsGA1UEBRMEMTIzNDBZMBMGByqGSM49AgEGCCqGSM49AwEH
77
A0IABOuqqlgV4cdjZ8wRoe9SaKEfWrMxTY2A+cr95aEh7oDDxP/9D09lUIJ1MfBr
88
l9svmW5C18Olt7tE+x+rU5VDACujghnLMIIZxzAmBgNVHREEHzAdhhBodHRwOi8v
99
bG9jYWxob3N0gglsb2NhbGhvc3QwDAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCBaAw
10-
EwYDVR0lBAwwCgYIKwYBBQUHAwEwghkrBgNRewEEghkiDIIZHnsicmVnaXN0cmF0
10+
EwYDVR0lBAwwCgYIKwYBBQUHAwIwghkrBgNRewEEghkiDIIZHnsicmVnaXN0cmF0
1111
aW9uIjoiaHR0cHM6Ly9wb3J0YWwuZGV2L29yZ2FuaXphdGlvbnMveWl2aS8iLCJv
1212
cmdhbml6YXRpb24iOnsibG9nbyI6eyJtaW1lVHlwZSI6ImltYWdlL3BuZyIsImRh
1313
dGEiOiJpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBR1FBQUFCa0NBSUFBQUQvZ0FJ
@@ -143,8 +143,8 @@ cmVkZW50aWFsIjoicGJkZi5nZW1lZW50ZS5wZXJzb25hbERhdGEiLCJhdHRyaWJ1
143143
dGVzIjpbIm92ZXIxOCJdfV0sInB1cnBvc2UiOnsiZW4iOiJBZ2UgdmVyaWZpY2F0
144144
aW9uIiwibmwiOiJMZWVmdGlqZHN2ZXJpZmljYXRpZSJ9fX0wHQYDVR0OBBYEFHnL
145145
9P1C3+jruk4O5bBBxExmGL3uMB8GA1UdIwQYMBaAFDz3b3XVIzc6lHcdBjuEo5SA
146-
4pZ2MAoGCCqGSM49BAMCA0gAMEUCIFq1Dxgg0Yu3dTDxjWPckh5NkzqkrrONdLUP
147-
rJ1IYU80AiEAvGy1pGLDXQ6JF+wbo6AZq2FNse8JAftg9M1iaQbAT7U=
146+
4pZ2MAoGCCqGSM49BAMCA0cAMEQCICfdWtoKEIOO9r7XZO4iBoo7XZEuSdlwMpKn
147+
26XTaYJ9AiAjb0fPrJH6n3re7ht+QjX9+ilUfulWJFhrWlZxLIx+IQ==
148148
-----END CERTIFICATE-----
149149
-----BEGIN CERTIFICATE-----
150150
MIIB5DCCAYmgAwIBAgIUKp3l1e+X2zF9p49OH70NS4rA3VcwCgYIKoZIzj0EAwIw

‎testdata/eudi/verifier/end-entity.cfg‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ CN = localhost
1616
subjectAltName = @alt_names
1717
basicConstraints = critical,CA:false
1818
keyUsage = digitalSignature,keyEncipherment
19-
extendedKeyUsage = serverAuth
19+
extendedKeyUsage = clientAuth
2020
2.1.123.1 = ASN1:UTF8String:{\"registration\":\"https://portal.dev/organizations/yivi/\",\"organization\":{\"logo\":{\"mimeType\":\"image/png\",\"data\":\"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\"},\"legalName\":{\"en\":\"Yivi B.V.\",\"nl\":\"Yivi B.V.\"}},\"rp\":{\"authorized\":[{\"credential\":\"pbdf.gemeente.personalData\",\"attributes\":[\"over18\"]}],\"purpose\":{\"en\":\"Age verification\",\"nl\":\"Leeftijdsverificatie\"}}}
2121

2222
[ alt_names ]

‎testdata/eudi/verifier/keystore.p12‎

0 Bytes
Binary file not shown.

0 commit comments

Comments
 (0)