TestCopyProperties_ios.plist   [plain text]

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>UnknownCriticalExtension</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>InvalidUnknownCriticalCertificateExtensionTest2EE</string>
		<key>Anchors</key>
		<string>TrustAnchorRootCertificate</string>
		<key>VerifyDate</key>
		<date>2011-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more unsupported critical extensions found.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>UnknownCriticalExtension</string>
		<key>MinorTestName</key>
		<string>TwoFailures</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>InvalidUnknownCriticalCertificateExtensionTest2EE</string>
		<key>Anchors</key>
		<string>TrustAnchorRootCertificate</string>
		<key>VerifyDate</key>
		<date>2001-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more unsupported critical extensions found.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>PolicyFail</string>
		<key>MinorTestName</key>
		<string>NegativeTest</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.42</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>bbasile-test.scv.apple.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>generic_apple_server</string>
		<key>Intermediates</key>
		<string>AppleServerAuthentication</string>
		<key>Anchors</key>
		<string>AppleRootCA</string>
		<key>VerifyDate</key>
		<date>2019-04-18T19:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Policy requirements not met.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>HostnameMistmatch</string>
		<key>MinorTestName</key>
		<string>PolicyFail</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.42</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>idiagnostics.apple.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>generic_apple_server</string>
		<key>Intermediates</key>
		<string>AppleServerAuthentication</string>
		<key>Anchors</key>
		<string>AppleRootCA</string>
		<key>VerifyDate</key>
		<date>2019-04-18T19:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Hostname mismatch.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Policy requirements not met.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>PassingTrust</string>
		<key>MinorTestName</key>
		<string>PositiveTest</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>content.googleapis.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2019-11-14T20:00:00Z</date>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>BridgeOSDisable</key>
		<true/>
		<key>MajorTestName</key>
		<string>AnchorTrusted</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>content.googleapis.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>AppleRootCA</string>
		<key>VerifyDate</key>
		<date>2019-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Root certificate is not trusted.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>BridgeOSDisable</key>
		<true/>
		<key>MajorTestName</key>
		<string>AnchorTrusted</string>
		<key>MinorTestName</key>
		<string>HostnameMismatch</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>www.google.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>AppleRootCA</string>
		<key>VerifyDate</key>
		<date>2019-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Root certificate is not trusted.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Hostname mismatch.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>HostnameMismatch</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>www.google.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2019-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Hostname mismatch.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>Expired</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>content.googleapis.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2018-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates have expired or are not valid yet.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>Expired</string>
		<key>MinorTestName</key>
		<string>HostnameMismatch</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>www.google.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Intermediates</key>
		<string>GoogleTrustServicesCA101</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2018-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Hostname mismatch.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates have expired or are not valid yet.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>MissingIntermediate</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2019-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Unable to build chain to root certificate.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>MissingIntermediate</string>
		<key>MinorTestName</key>
		<string>Expired</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>googleapis</string>
		<key>Anchors</key>
		<string>GlobalSignRootCAR2</string>
		<key>VerifyDate</key>
		<date>2018-11-14T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Unable to build chain to root certificate.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates have expired or are not valid yet.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>BridgeOSDisable</key>
		<true/>
		<key>MajorTestName</key>
		<string>AnchorApple</string>
		<key>MinorTestName</key>
		<string>PolicyFail</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.68</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>identity.ess.apple.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>ids_ist_identity</string>
		<key>Intermediates</key>
		<string>AppleISTCA2G1</string>
		<key>Anchors</key>
		<string>GeoTrustGlobalCA</string>
		<key>VerifyDate</key>
		<date>2017-02-08T21:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Root certificate is not trusted.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Policy requirements not met.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>si-20-sectrust-policies-data</string>
		<key>MajorTestName</key>
		<string>AnchorSHA256</string>
		<key>MinorTestName</key>
		<string>PositiveTest</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.74</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>caldav.icloud.com</string>
				<key>SecPolicyPolicyName</key>
				<string>no-system-pinning-rules</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>caldav</string>
		<key>Intermediates</key>
		<array>
			<string>AppleISTCA2G1-Baltimore</string>
			<string>AppleISTCA2G1</string>
		</array>
		<key>Anchors</key>
		<string>BaltimoreCyberTrustRoot</string>
		<key>VerifyDate</key>
		<date>2019-10-04T19:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Root certificate is not trusted.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>WeakKey</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>leaf512</string>
		<key>Intermediates</key>
		<string>int2048B</string>
		<key>Anchors</key>
		<string>root2048</string>
		<key>VerifyDate</key>
		<date>2016-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak key size.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>KeySize</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>example.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>leaf1024</string>
		<key>Anchors</key>
		<string>rootSSL</string>
		<key>VerifyDate</key>
		<date>2020-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak key size.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>KeySize</string>
		<key>MinorTestName</key>
		<string>Expired</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>example.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>leaf1024</string>
		<key>Anchors</key>
		<string>rootSSL</string>
		<key>VerifyDate</key>
		<date>2019-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates have expired or are not valid yet.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak key size.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>WeakSignature</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.2</string>
		</dict>
		<key>Leaf</key>
		<string>leafMD5</string>
		<key>Anchors</key>
		<string>rootSHA256</string>
		<key>VerifyDate</key>
		<date>2019-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak signature algorithm.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>BridgeOSDisable</key>
		<true/>
		<key>MajorTestName</key>
		<string>SystemTrustedWeakHash</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>www.badssl.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>leafSHA1</string>
		<key>Intermediates</key>
		<string>intSHA1</string>
		<key>VerifyDate</key>
		<date>2016-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak signature algorithm.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>SignatureHashAlgorithms</string>
		<key>MinorTestName</key>
		<string>OnlyFailure</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>www.badssl.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>leafSHA1</string>
		<key>Intermediates</key>
		<string>intSHA1</string>
		<key>Anchors</key>
		<string>systemRoot</string>
		<key>VerifyDate</key>
		<date>2016-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak signature algorithm.</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>CertDirectory</key>
		<string>TestCopyProperties_ios-data</string>
		<key>MajorTestName</key>
		<string>SignatureHashAlgorithms</string>
		<key>MinorTestName</key>
		<string>HostnameMismatch</string>
		<key>Policies</key>
		<dict>
			<key>PolicyIdentifier</key>
			<string>1.2.840.113635.100.1.3</string>
			<key>Properties</key>
			<dict>
				<key>SecPolicyName</key>
				<string>example.com</string>
			</dict>
		</dict>
		<key>Leaf</key>
		<string>leafSHA1</string>
		<key>Intermediates</key>
		<string>intSHA1</string>
		<key>Anchors</key>
		<string>systemRoot</string>
		<key>VerifyDate</key>
		<date>2016-01-01T20:00:00Z</date>
		<key>ExpectedProperties</key>
		<array>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>Hostname mismatch.</string>
			</dict>
			<dict>
				<key>type</key>
				<string>error</string>
				<key>value</key>
				<string>One or more certificates is using a weak signature algorithm.</string>
			</dict>
		</array>
	</dict>
</array>
</plist>