Re: [lamps] LAMPS sample keys and certificates

[Carl Wallace <[e-mail]>]

FWIW, there are a pile of sample artifacts here: https://github.com/GSA/ficam-scvp-testing/tree/master/artifacts. The MFPKI (Mock Federal PKI) was generated by cloning a pile of certs with names obfuscated. Many of these are likely expired by now though. Something like this could offer some diversity to the certification paths (in support of sample S/MIME, etc).

On 11/18/19, 5:52 PM, "Spasm on behalf of Daniel Kahn Gillmor" <[e-mail] on behalf of [e-mail]> wrote:

    Hi all--
    
    I've just published:
    
       https://www.ietf.org/id/draft-dkg-lamps-samples-00.html
    
    This draft contains sample X.509v3 certificates, and corresponding
    secret keys for a sample CA, and for two e-mail users, Alice and Bob.
    It provides the certificates and keys in PEM-encoded form and (for Alice
    and Bob) in PKCS#12 bundles, so they should be relatively easy to
    import.
    
    My hope is that they are useful for generating and interpreting sample
    S/MIME (CMS) messages, and part of a larger plan to generate test
    vectors that will be useful in demonstrating protected header behavior
    on existing clients.
    
    I'd appreciate any feedback or suggestions on the draft and the sample
    keys and certificates and PKCS#12 files.
    
    I'm currently building the draft from the git repo at
    https://gitlab.com/dkg/lamps-samples -- editorial patches, issues, etc
    are welcome at the gitlab interface, though i would prefer if any
    substantive issues are also addressed to the list here.
    
       --dkg
    _______________________________________________
    Spasm mailing list
    [e-mail]
    https://www.ietf.org/mailman/listinfo/spasm