tests: Rename subdir gpgsm to cms and move sample dirs.

--

It does not make sense to have the cms stuff at the top level but the
openpgp at a dedicated directory.  This patch fixes that.

19 files changed, 529 insertions, 0 deletions

diff --git a/tests/cms/samplekeys/32100C27173EF6E9C4E9A25D3D69F86D37A4F939.key b/tests/cms/samplekeys/32100C27173EF6E9C4E9A25D3D69F86D37A4F939.key
new file mode 100644
index 000000000..cf0535ff7
--- /dev/null
+++ b/tests/cms/samplekeys/32100C27173EF6E9C4E9A25D3D69F86D37A4F939.key
@@ -0,0 +1,18 @@
+(private-key
+ (oid.1.2.840.113549.1.1.1
+  (n #00e0ce96f90b6c9e02f3922beada93fe50a875eac6bcc18bb9a9cf2e84965caa2d1ff95a7f542465c6c0c19d276e4526ce048868a7a914fd343cc3a87dd74291ffc565506d5bbb25cbac6a0e2dd1f8bcaab0d4a29c2f37c950f363484bf269f7891440464baf79827e03a36e70b814938eebdc63e964247be75dc58b014b7ea251#)
+  (e #010001#)
+  (d #046129F2489D71579BE0A75FE029BD6CDB574EBF57EA8A5B0FDA942CAB943B117D7BB95E5D28875E0F9FC5FCC06A72F6D502464DABDED78EF6B716177B83D5BDC543DC5D3FED932E59F5897E92E6F58A0F33424106A3B6FA2CBF877510E4AC21C3EE47851E97D12996222AC3566D4CCB0B83D164074ABF7DE655FC2446DA1781#)
+  (p #00e861b700e17e8afe6837e7512e35b6ca11d0ae47d8b85161c67baf64377213fe52d772f2035b3ca830af41d8a4120e1c1c70d12cc22f00d28d31dd48a8d424f1#)
+  (q #00f7a7ca5367c661f8e62df34f0d05c10c88e5492348dd7bddc942c9a8f369f935a07785d2db805215ed786e4285df1658eed3ce84f469b81b50d358407b4ad361#)
+  (u #304559a9ead56d2309d203811a641bb1a09626bc8eb36fffa23c968ec5bd891eebbafc73ae666e01ba7c8990bae06cc2bbe10b75e69fcacb353a6473079d8e9b#)
+ )
+)
+
+
+
+
+
+
+
+
diff --git a/tests/cms/samplekeys/68A638998DFABAC510EA645CE34F9686B2EDF7EA.key b/tests/cms/samplekeys/68A638998DFABAC510EA645CE34F9686B2EDF7EA.key
new file mode 100644
index 000000000..8236349a0
--- /dev/null
+++ b/tests/cms/samplekeys/68A638998DFABAC510EA645CE34F9686B2EDF7EA.key
@@ -0,0 +1,10 @@
+(private-key
+ (rsa
+  (n #0093687D92A7BCD1E6FC11263B50657A8FA4B9CEE3F90E23384D62778CA1B6CBE0F60B20354A5F74899EB3C8DDF3081D32475C71869BB0C5DAF0051A2F44596E7406F1DCC7B29D88735E49341F09F4DFCAB5A08B76614C37220CF7E2CDB8A38E79644F3A250FFAE5D0BBA6917C67523D2812FDE8D3BEA9947F6A55402B1600C12F#)
+  (e #010001#)
+  (d #11BAAE926B54482C04EDE1C59E877B5F382114F8D1BAAE926B54482C04EDE1C59E877B5F382114F8D1BAAE926B54482C04EDE1C59E877B5F382114F8D1BAAE905D3988DFC39FEF462A0655AC906CBC12F6D322795D3988DFC39FEF462A0655AC906CBC12F6D322795D3988DFC39FEF462A0655AC906CBC12F6D322795D3983C1#)
+  (p "\x00�BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBA�")
+  (q "\x00�BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB�")
+  (u #00B28879D8EEE03F5546A5BBAD0C2213728879D8EEE03F5546A5BBAD0C2213728879D8EEE03F5546A5BBAD0C2213728879D8EEE03F5546A5BBAD0C221372887A30#)
+  )
+ )
diff --git a/tests/cms/samplekeys/8D6D17B4B94BBE8304926C016D2C5C7805EB6705.key b/tests/cms/samplekeys/8D6D17B4B94BBE8304926C016D2C5C7805EB6705.key
new file mode 100644
index 000000000..2063610dc
--- /dev/null
+++ b/tests/cms/samplekeys/8D6D17B4B94BBE8304926C016D2C5C7805EB6705.key
@@ -0,0 +1,10 @@
+(private-key 
+ (rsa 
+  (n #00DB26862FD7EAF7AC9A52BA22473E28C8DF4637B0A048230772F6D5CD96EEF905D7D650A84957CBD3CCCD720A9C941EB430FE5088E6A8DDD0D5770506A314DDB4F579A2696FB53E98E7A8750F400016A9885D1C1F5D19AC90D186186DF4B354F3BDCA978BCBFB1810DFE5AB68AFE4B2B09D1F8223265514AFECDF596628F8C58F#)
+  (e #010001#)
+  (d #674F76ECB0FE0CBA2A9A1B3333A0A2FB66FE241CB8C2A8F8C70283F202582FBEC86C38E3CC877E081FC12E24C081B723BD00F698431C924CF384C332C8C87A67080A88A0700DC36D671ECB4D7AE0EE9C645AF932B9B55BD3E16C043E9D972202399F021374C358E8B77CA37CFAC642637CFF31E6E5839A89CBD3E32B9BEF9A01#)
+  (p #00EB664011AD44EFEDE2B40A3F753373F7CE39E2CF4A5E7812ABF5B957AFA8C9F9FEE1EE9D8F2FF7369B553749EADD0C605A581111A4D532ECC3ED3DC46DB1A501#)
+  (q #00EE543E10FD86829889682BC4BECA1230924B7B4A19823566FA056C9033937B97F29665CF21F6F097F9BAB24D6F596C93EE348568FAA59BB325EA66DFBE7B9A8F#)
+  (u #008BD460358A993D2B442BC7DC3F1E6EF9470F17E3E3BD85A496690A50D564BB585B66A3BF841B8FF9513293EA02C784C6142008A79948020FFF03440D9591C7D7#)
+  )
+ )
diff --git a/tests/cms/samplekeys/README b/tests/cms/samplekeys/README
new file mode 100644
index 000000000..65255cb61
--- /dev/null
+++ b/tests/cms/samplekeys/README
@@ -0,0 +1,24 @@
+This is a collection of keys we use with the regression tests.
+
+opensc-tests.p12   PKCS#12 key and certificates taken from OpenSC.
+		   Passphrase is "password"
+
+ov-user.p12        Private tests keys from www.openvalidation.org.
+ov-server.p12      Passphrase for both is "start"
+
+ossl-rentec-user.pem  An OpenSSL generated user certificate using a
+                      bunch of attributes and DC RDNs.
+
+webderoot.der      trust.web.de Root CA certificate [2004-02-17]
+webdeca.der        trust.web.de CA certificate [2004-02-17]
+
+
+gte.pem            GTE CyberTrust Global Root
+
+cert-with-117-akas.pem  A certificate with 117 subjectAltNames.
+
+steed-self-signing-nonthority.pem
+                   The STEED Self-Signing Nonthority.
+68A638998DFABAC510EA645CE34F9686B2EDF7EA.key
+                   The private Key of The STEED Self-Signing Nonthority.
+
diff --git a/tests/cms/samplekeys/cert-with-117-akas.pem b/tests/cms/samplekeys/cert-with-117-akas.pem
new file mode 100644
index 000000000..bd0a7ea9d
--- /dev/null
+++ b/tests/cms/samplekeys/cert-with-117-akas.pem
@@ -0,0 +1,214 @@
+Issuer ...: /CN=DigiCert High Assurance CA-3/OU=www.digicert.com/O=DigiCert Inc/C=US
+Serial ...: 01CB9ACED2544126AD07590F62BCA367
+Subject ..: /CN=edgecastcdn.net/O=EdgeCast Networks Inc./L=SANTA MONICA/ST=California/C=US
+    aka ..: (dns-name edgecastcdn.net)
+    aka ..: (dns-name ne.edgecastcdn.net)
+    aka ..: (dns-name minitab.fileburst.com)
+    aka ..: (dns-name cdn.montimbrenligne.laposte.fr)
+    aka ..: (dns-name zeroknowledge.fileburst.com)
+    aka ..: (dns-name images.goldstarbeta.com)
+    aka ..: (dns-name radialpoint.fileburst.com)
+    aka ..: (dns-name wac.edgecastcdn.net)
+    aka ..: (dns-name ne.wac.edgecastcdn.net)
+    aka ..: (dns-name images.goldstar.com)
+    aka ..: (dns-name images.vrbo.com)
+    aka ..: (dns-name cdn.vrbo.com)
+    aka ..: (dns-name content.truste.com)
+    aka ..: (dns-name e1.boxcdn.net)
+    aka ..: (dns-name e2.boxcdn.net)
+    aka ..: (dns-name e3.boxcdn.net)
+    aka ..: (dns-name privacy-policy.truste.com)
+    aka ..: (dns-name www.sonos.com)
+    aka ..: (dns-name www.dickiesgirl.com)
+    aka ..: (dns-name static-cache.tp-global.net)
+    aka ..: (dns-name images.homeawayrealestate.com)
+    aka ..: (dns-name cdn.verint.com)
+    aka ..: (dns-name swf.mixpo.com)
+    aka ..: (dns-name cdn.traceregister.com)
+    aka ..: (dns-name s.tmocache.com)
+    aka ..: (dns-name s.my.tmocache.com)
+    aka ..: (dns-name ne1.wpc.edgecastcdn.net)
+    aka ..: (dns-name gp1.wpc.edgecastcdn.net)
+    aka ..: (dns-name gs1.wpc.edgecastcdn.net)
+    aka ..: (dns-name ne1.wac.edgecastcdn.net)
+    aka ..: (dns-name gp1.wac.edgecastcdn.net)
+    aka ..: (dns-name gs1.wac.edgecastcdn.net)
+    aka ..: (dns-name c1.socialcastcontent.com)
+    aka ..: (dns-name www.steepandcheap.com)
+    aka ..: (dns-name www.whiskeymilitia.com)
+    aka ..: (dns-name www.chainlove.com)
+    aka ..: (dns-name www.tramdock.com)
+    aka ..: (dns-name www.bonktown.com)
+    aka ..: (dns-name www.brociety.com)
+    aka ..: (dns-name www.mozilla.com)
+    aka ..: (dns-name resources.homeaway.com)
+    aka ..: (dns-name ssl-cdn.sometrics.com)
+    aka ..: (dns-name cache.vehicleassets.captivelead.com)
+    aka ..: (dns-name static.woopra.com)
+    aka ..: (dns-name images.cardstore.com)
+    aka ..: (dns-name images.ink2.com)
+    aka ..: (dns-name resources.homeawayrealestate.com)
+    aka ..: (dns-name cdn1.adadvisor.net)
+    aka ..: (dns-name www.pictureitpostage.com)
+    aka ..: (dns-name images.vacationrentals.com)
+    aka ..: (dns-name serviceportal.carestreamhealth.com)
+    aka ..: (dns-name assets-secure.razoo.com)
+    aka ..: (dns-name resources.vacationrentals.com)
+    aka ..: (dns-name download.entraction.com)
+    aka ..: (dns-name ec.pond5.com)
+    aka ..: (dns-name images.esellerpro.com)
+    aka ..: (dns-name use.typekit.com)
+    aka ..: (dns-name www.experian.co.za)
+    aka ..: (dns-name static.iseatz.com)
+    aka ..: (dns-name netstor.adbrite.com)
+    aka ..: (dns-name static.www.turnto.com)
+    aka ..: (dns-name cdn.static.viddler.com)
+    aka ..: (dns-name edgecast.onegrp.com)
+    aka ..: (dns-name cdn.psw.net)
+    aka ..: (dns-name cdn.media910.whipplehill.net)
+    aka ..: (dns-name cdn.gaggle.net)
+    aka ..: (dns-name cdn.selectica.com)
+    aka ..: (dns-name inpath-static.iseatz.com)
+    aka ..: (dns-name secure.newmediamanager.com)
+    aka ..: (dns-name secure.avelleassets.com)
+    aka ..: (dns-name secure-delivery.rovion.com)
+    aka ..: (dns-name cdn.media34.whipplehill.net)
+    aka ..: (dns-name cdn.media56.whipplehill.net)
+    aka ..: (dns-name cdn.media78.whipplehill.net)
+    aka ..: (dns-name secure1.mlspcdn.net)
+    aka ..: (dns-name secure01.mlspcdn.net)
+    aka ..: (dns-name static.dubli.com)
+    aka ..: (dns-name cdn.sightspeed.com)
+    aka ..: (dns-name cdn.sightspeed.ca)
+    aka ..: (dns-name cdn.sightspeed.biz)
+    aka ..: (dns-name cdn.sightspeed.net)
+    aka ..: (dns-name cdn.sightspeed.be)
+    aka ..: (dns-name www-cdn.cinamuse.com)
+    aka ..: (dns-name www-cdn.cineble.com)
+    aka ..: (dns-name www-cdn.cinemaden.com)
+    aka ..: (dns-name www-cdn.filmlush.com)
+    aka ..: (dns-name www-cdn.flixaddict.com)
+    aka ..: (dns-name www-cdn.itshd.com)
+    aka ..: (dns-name www-cdn.moviease.com)
+    aka ..: (dns-name www-cdn.movielush.com)
+    aka ..: (dns-name www-cdn.reelhd.com)
+    aka ..: (dns-name www-cdn.reelvidz.com)
+    aka ..: (dns-name www-cdn.pushplay.com)
+    aka ..: (dns-name cdn1.fishpond.co.nz)
+    aka ..: (dns-name cdn1.fishpond.com.au)
+    aka ..: (dns-name fast.fonts.com)
+    aka ..: (dns-name cdn.isaca.org)
+    aka ..: (dns-name www.isaca.org)
+    aka ..: (dns-name cdn.optimizely.com)
+    aka ..: (dns-name static.shoedazzle.com)
+    aka ..: (dns-name cluster.online.isheriff.com)
+    aka ..: (dns-name www.travelrepublic.co.uk)
+    aka ..: (dns-name cdn-thumbs.viddler.com)
+    aka ..: (dns-name Stage.treadmilldoctor.com)
+    aka ..: (dns-name beta.fileblaze.net)
+    aka ..: (dns-name cdn.nprove.com)
+    aka ..: (dns-name www.extremefitnessresults.com)
+    aka ..: (dns-name ec.xnglobalres.com)
+    aka ..: (dns-name images.affinitysolutions.com)
+    aka ..: (dns-name securedr.33across.com)
+    aka ..: (dns-name sslbest.booztx.com)
+    aka ..: (dns-name www.travelrepublic.com)
+    aka ..: (dns-name www.adbrite.com)
+    aka ..: (dns-name www.blacklabelads.com)
+    aka ..: (dns-name data.schwabenorthamerica.com)
+    aka ..: (dns-name media.schwabenorthamerica.com)
+    aka ..: (dns-name cdn.whois.com.au)
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cert_g10code_enconly_1.pem b/tests/cms/samplekeys/cert_g10code_enconly_1.pem
new file mode 100644
index 000000000..ef28b6924
--- /dev/null
+++ b/tests/cms/samplekeys/cert_g10code_enconly_1.pem
@@ -0,0 +1,26 @@
+Issuer ...: /CN=Root-Test-CA/OU=Test CA on Kerckhoffs/O=g10 Code GmbH/L=Düsseldorf/ST=NRW/C=de/[email protected]
+Serial ...: 03
+Subject ..: /CN=Encrypt Only Key 1/OU=Testlab/O=g10 code/C=de
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cert_g10code_pete1.pem b/tests/cms/samplekeys/cert_g10code_pete1.pem
new file mode 100644
index 000000000..c6f778a56
--- /dev/null
+++ b/tests/cms/samplekeys/cert_g10code_pete1.pem
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cert_g10code_test1.pem b/tests/cms/samplekeys/cert_g10code_test1.pem
new file mode 100644
index 000000000..61d1f9813
--- /dev/null
+++ b/tests/cms/samplekeys/cert_g10code_test1.pem
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cert_g10code_test_ca.pem b/tests/cms/samplekeys/cert_g10code_test_ca.pem
new file mode 100644
index 000000000..d65a84c52
--- /dev/null
+++ b/tests/cms/samplekeys/cert_g10code_test_ca.pem
@@ -0,0 +1,27 @@
+Issuer ...: /CN=Root-Test-CA/OU=Test CA on Kerckhoffs/O=g10 Code GmbH/L=Düsseldorf/ST=NRW/C=de/[email protected]
+Serial ...: 00
+Subject ..: /CN=Root-Test-CA/OU=Test CA on Kerckhoffs/O=g10 Code GmbH/L=Düsseldorf/ST=NRW/C=de/[email protected]
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cert_g10code_theo1.pem b/tests/cms/samplekeys/cert_g10code_theo1.pem
new file mode 100644
index 000000000..a7685c415
--- /dev/null
+++ b/tests/cms/samplekeys/cert_g10code_theo1.pem
@@ -0,0 +1,40 @@
+
+  <GnupgKeyblock>
+    <mainkey>
+      <keyid></keyid>
+      <fpr>E76B5D4BA2CF0B05BBBE425CDBF4E9DC4904941D</fpr>
+      <algo>0</algo>
+      <len>1024</len>
+      <created>1017250241</created>
+      <expire>1048786241</expire>
+    </mainkey>
+    <userid>
+      <raw>1.2.840.113549.1.9.1=#7468656F62616C642E7469676572406B6572636B686F6666732E673130636F64652E6465,CN=Theobald Tiger,OU=Kerckhoffs Testlab,O=g10 Code GmbH,L=Düsseldorf,ST=NRW,C=de</raw>
+    </userid>
+  </GnupgKeyblock>
+  
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/tests/cms/samplekeys/cryptlib-key.p12 b/tests/cms/samplekeys/cryptlib-key.p12
new file mode 100644
index 000000000..5c23e95a7
--- /dev/null
+++ b/tests/cms/samplekeys/cryptlib-key.p12
diff --git a/tests/cms/samplekeys/gte.pem b/tests/cms/samplekeys/gte.pem
new file mode 100644
index 000000000..fd6ae9f5f
--- /dev/null
+++ b/tests/cms/samplekeys/gte.pem
@@ -0,0 +1,19 @@
+Issuer ...: /CN=GTE CyberTrust Global Root/OU=GTE CyberTrust Solutions, Inc./O=GTE Corporation/C=US

+Serial ...: 01A5

+Subject ..: /CN=GTE CyberTrust Global Root/OU=GTE CyberTrust Solutions, Inc./O=GTE Corporation/C=US

+

+-----BEGIN CERTIFICATE-----

+MIICWjCCAcMCAgGlMA0GCSqGSIb3DQEBBAUAMHUxCzAJBgNVBAYTAlVTMRgwFgYD

+VQQKEw9HVEUgQ29ycG9yYXRpb24xJzAlBgNVBAsTHkdURSBDeWJlclRydXN0IFNv

+bHV0aW9ucywgSW5jLjEjMCEGA1UEAxMaR1RFIEN5YmVyVHJ1c3QgR2xvYmFsIFJv

+b3QwHhcNOTgwODEzMDAyOTAwWhcNMTgwODEzMjM1OTAwWjB1MQswCQYDVQQGEwJV

+UzEYMBYGA1UEChMPR1RFIENvcnBvcmF0aW9uMScwJQYDVQQLEx5HVEUgQ3liZXJU

+cnVzdCBTb2x1dGlvbnMsIEluYy4xIzAhBgNVBAMTGkdURSBDeWJlclRydXN0IEds

+b2JhbCBSb290MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCVD6C28FCc6HrH

+iM3dFw4usJTQGz0O9pTAipTHBsiQl8i4ZBp6fmw8U+E3KHNgf7KXUwefU/ltWJTS

+r41tiGeA5u2ylc9yMcqlHHK6XALnZELn+aks1joNrI1CqiQBOeacPwGFVw1Yh0X4

+04Wqk2kmhXBIgD8SFcd5tB8FLztimQIDAQABMA0GCSqGSIb3DQEBBAUAA4GBAG3r

+GwnpXtlR22ciYaQqPEh346B8pt5zohQDhT37qw4wxYMWM4ETCJ57NE7fQMh017l9

+3PR2VX2bY1QY6fDq81yx2YtCHrnAlU66+tXifPVoYb+O7AWXX1uw16OFNMQkpw0P

+lZPvy5TYnh+dXIVtx6quTx8itc2VrbqnzPmrC3p/

+-----END CERTIFICATE-----

diff --git a/tests/cms/samplekeys/opensc-test.p12 b/tests/cms/samplekeys/opensc-test.p12
new file mode 100644
index 000000000..990b1279a
--- /dev/null
+++ b/tests/cms/samplekeys/opensc-test.p12
diff --git a/tests/cms/samplekeys/ossl-rentec-user.pem b/tests/cms/samplekeys/ossl-rentec-user.pem
new file mode 100644
index 000000000..290b0ef0d
--- /dev/null
+++ b/tests/cms/samplekeys/ossl-rentec-user.pem
@@ -0,0 +1,44 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
diff --git a/tests/cms/samplekeys/ov-server.p12 b/tests/cms/samplekeys/ov-server.p12
new file mode 100644
index 000000000..52f2d558d
--- /dev/null
+++ b/tests/cms/samplekeys/ov-server.p12
diff --git a/tests/cms/samplekeys/ov-user.p12 b/tests/cms/samplekeys/ov-user.p12
new file mode 100644
index 000000000..bb53a3d1a
--- /dev/null
+++ b/tests/cms/samplekeys/ov-user.p12
diff --git a/tests/cms/samplekeys/steed-self-signing-nonthority.pem b/tests/cms/samplekeys/steed-self-signing-nonthority.pem
new file mode 100644
index 000000000..c6a9c54e8
--- /dev/null
+++ b/tests/cms/samplekeys/steed-self-signing-nonthority.pem
@@ -0,0 +1,54 @@
+
+           ID: 0x72B0BD08
+          S/N: 01
+       Issuer: CN=The STEED Self-Signing Nonthority
+      Subject: CN=The STEED Self-Signing Nonthority
+     sha1_fpr: E6:99:39:A2:5F:5D:93:F2:06:71:5D:C9:FC:1A:25:DC:72:B0:BD:08
+      md5_fpr: C9:83:C8:13:91:53:5A:C2:9A:BA:AF:0E:9C:AF:93:0E
+       certid: BA9A5990A0E94A627D08D4D06FD15EC561FD15E8.01
+      keygrip: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
+    notBefore: 2011-11-11 00:00:00
+     notAfter: 2106-02-06 00:00:00
+     hashAlgo: 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
+      keyType: 1024 bit RSA
+    subjKeyId: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
+    authKeyId: [none]
+     keyUsage: certSign crlSign
+  extKeyUsage: [none]
+     policies: [none]
+  chainLength: 1
+        crlDP: [none]
+     authInfo: [none]
+     subjInfo: [none]
+         extn: 1.3.6.1.4.1.11591.2.2.2 (wellKnownPrivateKey)  [3 octets]
+
+
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Created using these parameters:
+
+  Key-Type: RSA
+  Key-Length: 1024
+  Key-Grip: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
+  Key-Usage: cert
+  Serial: 1
+  Name-DN: CN=The STEED Self-Signing Nonthority
+  Not-Before: 2011-11-11
+  Not-After: 2106-02-06
+  Subject-Key-Id: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
+  Extension: 2.5.29.19 c 30060101ff020101
+  Extension: 1.3.6.1.4.1.11591.2.2.2 n 0101ff
+  Signing-Key: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
diff --git a/tests/cms/samplekeys/webdeca.der b/tests/cms/samplekeys/webdeca.der
new file mode 100644
index 000000000..9532e3fa5
--- /dev/null
+++ b/tests/cms/samplekeys/webdeca.der
diff --git a/tests/cms/samplekeys/webderoot.der b/tests/cms/samplekeys/webderoot.der
new file mode 100644
index 000000000..3fedd9cd0
--- /dev/null
+++ b/tests/cms/samplekeys/webderoot.der