unplugged-system/external/openscreen/test/data/cast/common/certificate/certificates
2025-10-06 13:59:42 +00:00
..
audio_ref_dev_test_chain_3.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
cast_crl_test_root_ca.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
cast_root_ca.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
cast_test_root_ca.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
chromecast_audio.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
chromecast_gen1_reissue.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
chromecast_gen1.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
chromecast_gen2.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
expired_root.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
extensions.conf Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
fugu.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
mtk_audio_dev.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
nc_fail.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
nc.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_anypolicy_leaf_anypolicy.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_anypolicy_leaf_audioonly.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_anypolicy_leaf_foo.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_anypolicy_leaf_none.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_audioonly_leaf_anypolicy.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_audioonly_leaf_audioonly.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_audioonly_leaf_foo.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_audioonly_leaf_none.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_none_leaf_anypolicy.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_none_leaf_audioonly.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_none_leaf_foo.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
policies_ica_none_leaf_none.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
README.md Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
rsa1024_device_cert.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
rsa2048_device_cert.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
test_tls_cert.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
unchained.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
violates_root_pathlen_constraint.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00
vizio.pem Initial commit: AOSP 14 with modifications for Unplugged OS 2025-10-06 13:59:42 +00:00

Generating Certificates

Name Constraints Examples

The following commands were used along with extensions.conf to generate the certificates in nc.pem and nc_fail.pem.

# Once for each certificate.
$ openssl genrsa -out keyN.pem 2048
$ openssl req -new -key keyN.pem -out certN.csr

# <extension> will be v3_ca_nc for the intermediate and v3_req for the device.
$ openssl x509 -req -in certN.csr -CA certN-1.pem -CAkey keyN-1.pem
    -CAcreateserial -extensions <extension> -extfile extensions.conf -out
    certN.pem -days 365 -sha256

Note: it looks like openssl req also accepts extensions via -reqexts but there is a known bug in openssl where extensions are transferred between CSRs and X509 certs.