[utilities COMMIT] in /xmlsectool/trunk/src/test/resources/manual: ecsign384.crt ecsign384.key ecsigner.crt ecsigner....

[noreply at shibboleth.net]

Author: iay
Date: Sat Mar  9 06:33:57 2013
New Revision: 344

URL: http://svn.shibboleth.net/view/utilities?rev=344&view=rev
Log:
[XSTJ-31] - add ECDSA elliptic curve signature support
Add some elliptic curve resources for testing.

Added:
    xmlsectool/trunk/src/test/resources/manual/ecsign384.crt
    xmlsectool/trunk/src/test/resources/manual/ecsign384.key
    xmlsectool/trunk/src/test/resources/manual/ecsigner.crt
    xmlsectool/trunk/src/test/resources/manual/ecsigner.jks   (with props)
    xmlsectool/trunk/src/test/resources/manual/secp384r1.pem
Modified:
    xmlsectool/trunk/src/test/resources/manual/readme.md

Modified: xmlsectool/trunk/src/test/resources/manual/readme.md
URL: http://svn.shibboleth.net/view/utilities/xmlsectool/trunk/src/test/resources/manual/readme.md?rev=344&r1=343&r2=344&view=diff
==============================================================================
--- xmlsectool/trunk/src/test/resources/manual/readme.md (original)
+++ xmlsectool/trunk/src/test/resources/manual/readme.md Sat Mar  9 06:33:57 2013
@@ -6,7 +6,32 @@
 Each JIRA case requiring a manual test is given its own subdirectory here.  Common resources,
 such as keys, used by many such tests are provided here.
 
+## RSA Resources
+
 `rsasign2k.key` and `rsasig2k.crt` were created as follows:
 
-    openssl req -newkey rsa:2048 -nodes -new -x509
+    openssl req -newkey rsa:2048 -nodes -new -x509 \
         -keyout rsasign2k.key -out rsasign2k.crt
+
+## ECDSA Resources
+
+`secp384r1.pem` was created as follows:
+
+    openssl ecparam -name secp384r1 -out secp384r1.pem
+    
+`ecsign384.key` and `ecsign384.crt` were created as follows:
+
+    openssl req -newkey ec:secp384r1.pem -nodes -new -x509 \
+        -keyout ecsign384.key -out ecsign384.crt
+        
+`ecsigner.jks` was created as follows:
+
+	keytool -genkeypair -keyalg ec -keystore ecsigner.jks
+
+The keystore password is `ecsigner`.  The entry is called `mykey`.
+
+`ecsigner.crt` was created as follows:
+
+    keytool -exportcert -keystore ecsigner.jks -file ecsigner.crt \
+        -storepass ecsigner -rfc
+