This directory contains keys and certificates that are used in the
python-pskc test suite for checking XML signatures.

The CA key and certificate were generated with:

openssl req \
  -x509 -newkey rsa:2048 -nodes \
  -keyout ca-key.pem -out ca-certificate.pem \
  -days 3650 -subj '/C=NL/O=python-pskc/CN=Test CA' \
  -addext 'keyUsage = critical, cRLSign, digitalSignature, keyCertSign'

The key used for signing the PSKC files and corresponding self-signed
certificate were generated with:

openssl req \
  -x509 -newkey rsa:2048 -nodes \
  -keyout key.pem -out ss-certificate.pem \
  -days 3650 -subj '/C=NL/O=python-pskc/CN=Test signing'

The certificate signed by the CA key was generated with:

openssl req \
  -new \
  -key key.pem -out request.pem \
  -subj '/C=NL/O=python-pskc/CN=Test signing' \
  -addext 'subjectAltName = email:test-signing@example.com'

openssl x509 \
  -req \
  -in request.pem -CA ca-certificate.pem -CAkey ca-key.pem -out certificate.pem \
  -days 3650 -set_serial 42 \
  -copy_extensions copy