Windows self-signed certs

README.md

Reproduction steps

• Start test-server.escript in one terminal
• In another, run the following command:

  openssl s_client -CAfile ./root-cert.pem
  

• Note malformed_handshake_data error due to USA (3 byte) country code.

OpenSSL

Show certificate subject

$ openssl x509 -noout -in ./server-cert.pem -subject
subject=CN = P2SChildCertWeb, C = USA

Run test OpenSSL server

openssl s_server -CAfile ./root-cert.pem -key ./server-cert.key -cert ./server-cert.pem -debug

Run test OpenSSL client

openssl s_client -CAfile ./root-cert.pem

Password

All certs have the following password if prompted:

test1234

root-cert.key

Bag Attributes
    localKeyID: 01 00 00 00 
    friendlyName: te-3a9119ba-fc27-42fc-8846-9f165b4365ac
    Microsoft CSP Name: Microsoft Strong Cryptographic Provider
Key Attributes
    X509v3 Key Usage: 80 
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

root-cert.pem

Bag Attributes
    localKeyID: 01 00 00 00 
subject=/CN=P2SRootCert/C=USA
issuer=/CN=P2SRootCert/C=USA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

root-cert.pfx

server-cert.key

Bag Attributes
    localKeyID: 01 00 00 00 
    friendlyName: te-f247c138-90c6-4c95-a1d8-1aef413d4385
    Microsoft CSP Name: Microsoft Software Key Storage Provider
Key Attributes
    X509v3 Key Usage: 90 
-----BEGIN PRIVATE KEY-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDBT45O6cNIgL9G
UV6baMGW/sl9clPzr1B6sZvVpNXNomxmDccYE5BEcqZs+YNGygUzD/uis4VgSZF0
HvSljl9eHHCNXcTZcy0dBWazYGmc36f9bmDITd+IN1EBiOSWtUFAOyR+3MoKcDQ5
1Vtjm1GGQHzPSLphjL1XRXQc1hTZzsPyFC3jOxam8GEyYZqQwDpY7I1L+rBB0GYI
Y3Y7xkVQwQmyLu4Hv7JrcGOWcx+mrGwFyaoBFiuR/GiBQtBab5Laa+RSn3batq0U
zR3CnVXRGirkwuwS4KXQdEFLG9g9cTK1wKygj6JyQGNAsTHcANGCaS/oacYlOa4W
7/tvgg4tAgMBAAECggEAAq8mHLZmPcV74nASzjmgJoaXKaTCwal3hpycu1S0m0xc
EPa0AwOSh0DISs8UIZGAjPr11YaEnZen62LapsnZTSc78NqSdyqAP9zpVihKjyET
5hL4SQ+7wNpzx3+tHOKba1bm5NQQAiEYuIzb3gA0G5cdpIsv+1bG8kVGnXfjhjqw
j0svetJptvyNlX4Z6w73CKRMF6AAIKiKu6VcmciIMOEVCsS9iOJPhb5ZgvLVDHsS
jfgVBaIAcgXvncLo2KQbwbMhiNRyEzPZMHvtOS4gwyYzGBczMJ4n8915Np3RRp+N
QA+tMuL4O3+LM0wxq8xZiFZC1BiOeCjrlPXcRzrrCQKBgQDw36mUZ8NRTAAzvszz
9pi+vph5dX2rwlaoLlOfTzQpUgLUMZO5JXZGpVqNcpEaLoJCXBcXCPJF1CAH45SR
i1NaMVKITTEqkpkRdn/HYJPmO2lPB+lps8kGvFQS9hJQquQvrngQnMXNQv0LV2jE
RW8aoRC/Ig7s9PibmJxUpeQhfwKBgQDNc0L/UUzcB5eu2GGd1hukOS4snaLIrExW
1hjFuQ1VjLtq/rLAhg7K2CAsa83EZZBFgHInlfQNHob1PMJUUM+XPNKuvWs68F2j
ZtmENTVWeCnB5lTt4u7zd9+8p3R2Abhe2OL68SyKyO0QODj237TJQQ1IKh1cpORP
SriT6enOUwKBgB2EWwSLnpy0woWUyQrQWjFtq8OeiTLmErZzTt4D17GEkkIsfRzA
IXlQxAL3Wh6qOl4laNLyzrWN5ArzcX5QY3t29dUsGG1OH6HLMqddB2K8PxBnOMwy
Mt03cNoN+3qVJndNWvs2KusXXWjpYjZDB/VsbV/urYOOFXUDw4x/86/DAoGAKFe6
zzHius4O3fmFaZ3yfZPw2jf2EButPdv6r1DAKo1g/AiZhy6L1w8Lek2M8UTUSKGJ
SPasHqtg6uUMb8wSh2sdH8z4MnGioYR/r/NWzuz3niihgrjuHQbr+zqSpt19m7pR
D9+t1G7SBj5UCT4yXNaWShZi/58tadiNWBY1oBsCgYBeU8DAuGC01Q+5iUNyoY47
Ed1OJg4pXTkEmKjpIJuzV9kUZvz51PYQDTnrdy+2yRxyyVxjc84v7DpwgJzPc44U
ueYWHFMBDg6LWH1JBls/q5z0SgMt00Y5xuWFzb3RucDUWHnEZao4vG0M0aelqONZ
ekf/qbfdLOUWOt0k5empxw==
-----END PRIVATE KEY-----

server-cert.pem

Bag Attributes
    localKeyID: 01 00 00 00 
subject=/CN=P2SChildCertWeb/C=USA
issuer=/CN=P2SRootCert/C=USA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Bag Attributes: <Empty Attributes>
subject=/CN=P2SRootCert/C=USA
issuer=/CN=P2SRootCert/C=USA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

server-cert.pfx

test-gen.ps1

$root_cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-Subject "C=USA,CN=P2SRootCert" `
-KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 4096 `
-CertStoreLocation "Cert:\CurrentUser\My" `
-KeyUsageProperty Sign `
-KeyUsage CertSign `
-NotAfter (Get-Date).AddYears(5)

$client_cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-Subject "C=USA,CN=P2SChildCert" -KeyExportPolicy Exportable `
-HashAlgorithm sha256 -KeyLength 2048 `
-NotAfter (Get-Date).AddMonths(24) `
-CertStoreLocation "Cert:\CurrentUser\My" `
-Signer $root_cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")

$server_cert = New-SelfSignedCertificate -Type Custom `
-Subject "C=USA,CN=P2SChildCertWeb" -KeyExportPolicy Exportable `
-DnsName "sub.domain.com","www.domain.com","192.168.1.1" `
-HashAlgorithm sha256 -KeyLength 2048 `
-KeyUsage "KeyEncipherment", "DigitalSignature" `
-NotAfter (Get-Date).AddMonths(24) `
-CertStoreLocation "Cert:\CurrentUser\My" `
-Signer $root_cert

test-server.escript

#!/usr/bin/env escript
%% -*- erlang -*-
%%! -smp enable -sname test_server

-mode(compile).

main(_) ->
    try
        ssl:start(),
        SslOpts = [
            {cacertfile, "root-cert.pem"},
            {certfile, "server-cert.pem"},
            {keyfile, "server-cert.key"}
        ],
        {ok, ListenSocket} = ssl:listen(4433, SslOpts),
        {ok, TLSTransportSocket} = ssl:transport_accept(ListenSocket),
        ok = ssl:handshake(TLSTransportSocket)
    catch
        Err:Reason ->
            io:format(standard_error, "[ERROR]: ~p Reason: ~p~n", [Err, Reason]),
            usage()
    end.

usage() ->
    io:format("usage: test-server [client_count]~n"),
    halt(1).