Peter Bowen pzb
pzb
/ pkcs11_ex.rb
Created
September 30, 2015 17:51
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env ruby | |
| module PKCS11 | |
| module CStruct_Flags | |
| def find_const(prefix, sym) | |
| if sym.is_a? Symbol | |
| begin | |
| if PKCS11.const_defined? sym | |
| return PKCS11.const_get(sym) | |
| end |
pzb
/ nameconstrained.txt
Created
October 16, 2015 19:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Certificate: | |
| Data: | |
| Version: 3 (0x2) | |
| Serial Number: | |
| 5c:22:c4:1a:00:00:00:00:00:19 | |
| Signature Algorithm: sha1WithRSAEncryption | |
| Issuer: C=CH, O=WISeKey, OU=Copyright (c) 2005 WISeKey SA, OU=International, CN=WISeKey CertifyID Advanced G1 CA | |
| Validity | |
| Not Before: Nov 30 19:01:16 2009 GMT | |
| Not After : Dec 11 18:00:47 2020 GMT |
pzb
/ pkey_ecdsa.rb
Created
October 25, 2015 04:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/ruby | |
| # vim: set sts=2 ts=2 sw=2 et: | |
| require 'openssl' | |
| module OpenSSL | |
| module PKey | |
| class ECDSA < OpenSSL::PKey::EC | |
| def self.generate(arg) | |
| if (arg.kind_of? String) || (arg.kind_of? Symbol) | |
| curve_name = arg.to_s |
pzb
/ asn1stuff.patch
Created
October 29, 2015 02:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff -urNa /dev/shm/asn1c.patch build-x509helper/asn1c.patch | |
| --- /dev/shm/asn1c.patch 1969-12-31 16:00:00.000000000 -0800 | |
| +++ build-x509helper/asn1c.patch 2015-05-10 17:06:46.000000000 -0700 | |
| @@ -0,0 +1,40 @@ | |
| +diff --git a/configure.ac b/configure.ac | |
| +index cdfe49a..8f3acfe 100644 | |
| +--- a/configure.ac | |
| ++++ b/configure.ac | |
| +@@ -7,17 +7,19 @@ AC_CONFIG_MACRO_DIR([m4]) | |
| + |
pzb
/ cert-to-tai.rb
Created
November 24, 2015 04:46
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/ruby | |
| require 'openssl' | |
| require 'base64' | |
| require 'optparse' | |
| options = { | |
| :outform => "PEM" | |
| } | |
| OptionParser.new do |opts| | |
| opts.on("-n", "--name NAME", "Trust Anchor Name") do |v| |
pzb
/ amazon.jsonld
Created
November 27, 2015 15:32
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "@context": "https://commonanchor.example", | |
| "@type": "TrustAnchorList", | |
| "anchors": [ | |
| { | |
| "@type": "RootTrustAnchor", | |
| "certificate": "AmazonRootCA1.cer", | |
| "name": "Amazon", | |
| "serviceprovider": { | |
| "@type": "ServiceProviderOrganization", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://www.cert.fnmt.es/crlsacap/CRL100.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL101.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL102.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL103.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL106.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL108.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL109.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL110.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL112.crl | |
| http://www.cert.fnmt.es/crlsacap/CRL113.crl |
pzb
/ amazon.jsonld
Created
November 28, 2015 22:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "@context": "context.jsonld", | |
| "@type": "TrustAnchorList", | |
| "anchors": [ | |
| { | |
| "@type": "RootTrustAnchor", | |
| "certificate": "AmazonRootCA1.cer", | |
| "name": "Amazon", | |
| "serviceProvider": { | |
| "@type": "ServiceProviderOrganization", |
pzb
/ annotate-issuers.rb
Created
December 6, 2015 03:33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/ruby | |
| require 'pp' | |
| require 'csv' | |
| COMODO_LIST_FILE = 'comodo-subordinates.txt' | |
| SYMANTEC_FILE = 'symantec-CAs.txt' | |
| #ISSUER_COUNTS = 'issuer-counts.txt' | |
| ISSUER_COUNTS = 'issuer-types.txt' | |
| known_cas = {} |
pzb
/ parse-comodo.rb
Created
December 6, 2015 03:34
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/ruby | |
| require 'nokogiri' | |
| require 'curb' | |
| require 'openssl' | |
| doc = File.open("publiclyDisclosedSubCACerts"){|f| Nokogiri::HTML(f)} | |
| certurls = {} | |
| # The page as almost no metadata, so we are doing this by index |