X.509 Certificate Generation Tests

This page contains a set of tests which are designed to test the ability of the X.509 code to generate self-signed certificates using the supported signature algorithms.

The certificates are self-signed, hence the ability to generate non-signing certificates (e.g. for Diffie-Hellman keys, used by SKIP) is not directly tested here.

Some more features that are not currently tested, and which are of interest, are:

  1. Generating of certificate chains, e.g. like a certificate authority (CA) generates.
  2. Generating certificate chains where algorithm parameters (D-H, or DSA) are stored only in the CA's certificate.

This test is supposed to pass, with the result "TBS". It generates an RSA key pair, wraps it up in a certificate, signs it with the "MD5 with RSA" certificate signing algorithm, and then parses and verifies the resulting data.
titleMD5withRSA_gen
nameMD5withRSA_gen
Description:
sourceCertGen.java
executeClasssun.security.x509.tests.CertGen
executeArgsMD5withRSA

This test is supposed to pass, with the result "TBS". It generates an RSA key pair, wraps it up in a certificate, signs it with the "MD2 with RSA" certificate signing algorithm, and then parses and verifies the resulting data.
titleMD2withRSA_gen
nameMD2withRSA_gen
Description:
sourceCertGen.java
executeClasssun.security.x509.tests.CertGen
executeArgsMD2withRSA

This test is supposed to pass, with the result "TBS". It generates a DSS/DSA key pair, wraps it up in a certificate, signs it with the "SHA1 with DSA" certificate signing algorithm, and then parses and verifies the resulting data.
titleDSS_gen
nameDSS_gen
Description:
sourceCertGen.java
executeClasssun.security.x509.tests.CertGen
executeArgsSHA1WithDSA