# test verification of the odd cert from GIP_CPS - it's an intermediate
# cert in which subjectName == issuerName. This specifically verifies
# Radar 3374978.
#
# This is suppoedly a CRL signing cert, and ideally we'd actually use
# it to verify a CRL but I haven't found any CRLs associated with this
# organization. FOr now we just make sure that the TPO can verify the cert
# with the associated root in system anchors. 
#
globals
allowUnverified = true
crlNetFetchEnable = false
certNetFetchEnable = false
useSystemAnchors = true
end
#
test = test1
echo Verify the GIP-CPS CRL signing cert
cert = gipCps0.cer
leafCertIsCA = true
verifyTime = 20061201000000
# verify leaf does NOT appear as a root (even though its subject and issuer 
# names are the same.... IS_IN_INPUT_CERTS only.
certstatus = 0:0x04
# ensure 2 certs come back and the second one is an anchor/root
# IS_IN_ANCHORS  IS_ROOT
certstatus = 1:0x18
end