Skip to content

Updated my script for Qualified Subordination testing

, 1 min read

This post is from 2012. Some details, links, and recommendations may be out of date.

I did some testing with ECC and SHA2 today and as such decided to update my script for testing Qualified Subordination to make it easy to get certificates that use these algorithms.

There are now several configurable variables in makepki.bat:

  • key = possible values include RSA or ECC
  • rsasize = possible values include 1024,2048,4096
  • eccsize= possible values include secp256r1,secp384r1,secp521r1
  • hash = possible values include sha1,sha256,sha384,sha512

With these its very easy to get chains to do testing with that include these algorithms, have fun.

Ryan

PKI & CertificatesEngineering & Code#OpenSSL#Qualified Subordination#X509

Use and to move through the timeline.

1 page linked here