From a0ee80e0879e96fc086675805f216081d7a18c6e Mon Sep 17 00:00:00 2001 From: PIKACHUIM Date: Fri, 22 Nov 2024 20:54:53 +0800 Subject: [PATCH] Updated20241122205453 --- .gitignore | 2 + README.html | 1648 --------------------------------------------------- README.md | 19 +- Server.py | 40 +- index.html | 16 +- 5 files changed, 52 insertions(+), 1673 deletions(-) create mode 100644 .gitignore delete mode 100644 README.html diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..8bf1ab1 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +cache/ +cache/* \ No newline at end of file diff --git a/README.html b/README.html deleted file mode 100644 index 202a375..0000000 --- a/README.html +++ /dev/null @@ -1,1648 +0,0 @@ - - - - - -README - -
-

皮卡丘公共服务测试根证书 RSA在线验证服务

Pikachu Public Test Root RSA Online Service

 

网站服务介绍 / Service Information

皮卡丘公共服务测试根证书 RSA提供公共自签名代码签名、时间戳服务、UEFI固件认证签名、Windows驱动签名以及驱动签名策略自定义服务

Pikachu Public Service Test Root Certificate RSA provides public self signed code signature, timestamp service, UEFI firmware authentication signature, Windows driver signature, and driver signature policy customization service.

重要信息提示 / Significant Notices

  • 此CA机构签出的时间戳和证书不会校验真实性和申请来源身份，任何人均可以随意生成任意时间戳和未经验证的证书！！！

  • 此CA机构签出的时间戳和证书仅用于测试用途，不应用于重要场合或者生产环境，未经验证的证书不应在实践中使用！！！

  • The timestamps and certificates signed out by this CA institution will not be verify. Anyone can generate any timestamp and unverified certificate at will.

  • The timestamp and certificate issued by this CA organization are only for testing purposes and should not be used in important occasions or production environments.

根CA证书列表 / Root CA Information

通用名称(CN)/名称(Name)组织（O）组织机构（OU）描述（Description）证书策略（CPS）OCSP服务
(OCSP)		吊销列表
(CRL List)		下载证书
(Download)
皮卡丘公共测试根RSA
Pikachu Public Test Root RSA		皮卡丘信任网络CA
Pikachu Trust Network CA		皮卡丘证书颁发机构
Pikachu Certification Authority		皮卡丘公共服务测试根证书 RSA
Pikachu Public Test Root RSA		PDF：中文 English
TXT：中文 English		OCSP2025 - 2050CER / CRT / DER / P7B

中级证书列表 / Intermediate Sub CA

通用名称(CN)/名称(Name)描述（Description）吊销列表
(Revocation List)		证书下载
Pikachu Time Sub CA皮卡丘时间戳签署中间子证书CA (Pikachu Time Signning Sub CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B
Pikachu UEFI Sub CA皮卡丘UEFI密钥交换证书中间CA (Pikachu UEFI Key Exchange CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B
Pikachu Code Sub CA皮卡丘公共测试代码证书中间CA (Pikachu Code Signning Sub CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B

申请个人证书 / Apply New Certificate

CA机构
Certificate Authority 		有效时间
Valid Time		证书名称
Cert Name		国家
Country		省份
State		城市
Location		组织
Organization		组织单元
Org Unit		描述信息
Description		提交申请
Submit

备注：证书主体名称(Common Name)无法自定义。Certificate’s Common Name cannot be customized.

 

 

- - \ No newline at end of file diff --git a/README.md b/README.md index 00888b8..8d5a2d2 100644 --- a/README.md +++ b/README.md @@ -35,9 +35,9 @@ ## 申请个人证书 / Apply New Certificate -| **CA机构
Certificate Authority ** | **有效时间
Valid Time** | **证书名称
Cert Name** | **国家
Country** | **省份
State** | **城市
Location** | **组织
Organization** | **组织单元
Org Unit** | **描述信息
Description** | **提交申请
Submit** | +| **CA机构
Certificate Authority ** | **有效时间
Valid Time** | **邮件地址
Email Address** | **国家
Country** | **省份
State** | **城市
Location** | **组织
Organization** | **组织单元
Org Unit** | **域名/IP
Domain/IP** | **提交申请
Submit** | | :----------------------------------------------------------: | :----------------------------------------------------------: | ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | :----------------------------------------------------------: | :----------------------------------------------------------: | -| | | | | | | | | | | +| | | | | | | | | | | **备注：证书主体名称(Common Name)无法自定义。Certificate’s Common Name cannot be customized.** @@ -53,7 +53,7 @@ function ca_post(parameters) { var in_subs_obj = document.getElementById("in_subs"); var in_orgs_obj = document.getElementById("in_orgs"); var in_orgu_obj = document.getElementById("in_orgu"); - var in_name_obj = document.getElementById("in_name"); + var in_mail_obj = document.getElementById("in_mail"); var ca_name_txt = ca_name_obj.value; var va_time_txt = va_time_obj.value; var in_data_txt = in_data_obj.value; @@ -62,7 +62,7 @@ function ca_post(parameters) { var in_subs_txt = in_subs_obj.value; var in_orgs_txt = in_orgs_obj.value; var in_orgu_txt = in_orgu_obj.value; - var in_name_txt = in_name_obj.value; + var in_mail_txt = in_mail_obj.value; if(ca_name_txt.length<=0){ window.alert("请选择颁发机构\nPlease select the Certificate Authority."); return False; @@ -71,8 +71,8 @@ function ca_post(parameters) { window.alert("请选择有效时间\nPlease select an Valid Time."); return False; } - if(in_name_txt.length<=0){ - window.alert("请填写证书名称\nPlease fill in the Cert Name."); + if(in_mail_txt.length<=0){ + window.alert("请填写邮件地址\nPlease fill in the Email Address."); return False; } if(in_main_txt.length<=0){ @@ -91,14 +91,11 @@ function ca_post(parameters) { window.alert("请填写您的部门\nPlease fill in your Organizational Unit."); return False; } - if(in_data_txt.length<=0){ - window.alert("请填写描述信息\nPlease fill in your Description."); - return False; - } if(/^[A-Z]{2}$/.test(in_code_txt)){ - window.location.href = "https://post.certs.us.kg/?ca_name="+ca_name_txt+"&va_time="+va_time_txt+"&in_data="+in_data_txt+"&in_code="+in_code_txt+"&in_main="+in_main_txt+"&in_subs="+in_subs_txt+"&in_orgs="+in_orgs_txt+"&in_orgu="+in_orgu_txt+"&in_name="+in_name_txt; + window.location.href = "https://post.certs.us.kg/?ca_name="+ca_name_txt+"&va_time="+va_time_txt+"&in_data="+in_data_txt+"&in_code="+in_code_txt+"&in_main="+in_main_txt+"&in_subs="+in_subs_txt+"&in_orgs="+in_orgs_txt+"&in_orgu="+in_orgu_txt+"&in_mail="+in_mail_txt; }else{ window.alert("国家字段必须是两位大写字母\nThe country must be two capital letters."); } } + diff --git a/Server.py b/Server.py index caa8f26..e52ea68 100644 --- a/Server.py +++ b/Server.py @@ -25,17 +25,49 @@ def issueCert(): cert.get_subject().O = "Organization" cert.get_subject().OU = "Organizational Unit" cert.get_subject().CN = "Common Name" - cert.get_subject().D = "Description" - cert.get_subject().N = "Name" + cert.get_subject().emailAddress = "Common Name" cert.set_serial_number(1000) cert.set_notBefore(b'20000101000000Z') cert.set_notAfter(b'20241231235959Z') cert.set_issuer(cert.get_subject()) cert.set_pubkey(key) + cert.add_extensions([ + crypto.X509Extension( + b"basicConstraints", + True, b"CA:TRUE"), + crypto.X509Extension( + b"keyUsage", True, + b"digitalSignature, keyCertSign"), + crypto.X509Extension( + b"extendedKeyUsage", True, + b"serverAuth,clientAuth"), + # crypto.X509Extension( + # b"subjectAltName", False, + # b"otherName:2.5.4.41;UTF8String:Name,otherName:2.5.4.13;UTF8String:Description"), + crypto.X509Extension( + b"subjectAltName", False, + b"DNS:Name,URI:Description"), + crypto.X509Extension( + b"crlDistributionPoints", False, + b"URI:https://pikachuim.github.io/testca/certs/codeca/codeca.crl,URI:https://test.certs.us.kg/certs/codeca/codeca.crl"), + crypto.X509Extension( + b"authorityInfoAccess", False, + b"OCSP;URI:https://test.ocsps.us.kg/, caIssuers;URI:https://test.certs.us.kg/certs/codeca/codeca.crt, caIssuers;URI:https://pikachuim.github.io/testca/certs/codeca/codeca.crt"), + # crypto.X509Extension( + # b"certificatePolicies", False, + # b"1.2.4.5, 1.3.6.1.4.1.37476.9000.173.0;URI:https://test.certs.us.kg/"), + # crypto.X509Extension( + # b"", False, + # b""), + # crypto.X509Extension( + # b"", False, + # b""), + ]) + cert.sign(key, 'sha256') - with open('certificate.crt', 'w', encoding='utf8') as f: + with open('cache/certificate.crt', 'w', encoding='utf8') as f: f.write(crypto.dump_certificate(crypto.FILETYPE_PEM, cert).decode('utf - 8')) - with open('private_key.pem', 'w') as f: + with open('cache/private_key.pem', 'w') as f: f.write(crypto.dump_privatekey(crypto.FILETYPE_PEM, key).decode('utf - 8')) @staticmethod diff --git a/index.html b/index.html index 1cc5f72..1d92d10 100644 --- a/index.html +++ b/index.html @@ -1585,7 +1585,7 @@ 皮卡丘公共服务测试根证书
-

皮卡丘公共服务测试根证书 RSA在线验证服务

Pikachu Public Test Root RSA Online Service

 

网站服务介绍 / Service Information

皮卡丘公共服务测试根证书 RSA提供公共自签名代码签名、时间戳服务、UEFI固件认证签名、Windows驱动签名以及驱动签名策略自定义服务

Pikachu Public Service Test Root Certificate RSA provides public self signed code signature, timestamp service, UEFI firmware authentication signature, Windows driver signature, and driver signature policy customization service.

重要信息提示 / Significant Notices

  • 此CA机构签出的时间戳和证书不会校验真实性和申请来源身份，任何人均可以随意生成任意时间戳和未经验证的证书！！！

  • 此CA机构签出的时间戳和证书仅用于测试用途，不应用于重要场合或者生产环境，未经验证的证书不应在实践中使用！！！

  • The timestamps and certificates signed out by this CA institution will not be verify. Anyone can generate any timestamp and unverified certificate at will.

  • The timestamp and certificate issued by this CA organization are only for testing purposes and should not be used in important occasions or production environments.

根CA证书列表 / Root CA Information

通用名称(CN)/名称(Name)组织（O）组织机构（OU）描述（Description）证书策略（CPS）OCSP服务
(OCSP)		吊销列表
(CRL List)		下载证书
(Download)		导入证书
Setup CA
皮卡丘公共测试根RSA
Pikachu Public Test Root RSA		皮卡丘信任网络CA
Pikachu Trust Network CA		皮卡丘证书颁发机构
Pikachu Certification Authority		皮卡丘公共服务测试根证书 RSA
Pikachu Public Test Root RSA		PDF：中文 English
TXT：中文 English		OCSP2025-2050CER CRT DER P7BWindows

中级证书列表 / Intermediate Sub CA

通用名称(CN)/名称(Name)描述（Description）吊销列表
(Revocation List)		证书下载
Pikachu Time Sub CA皮卡丘时间戳签署中间子证书CA (Pikachu Time Signning Sub CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B
Pikachu UEFI Sub CA皮卡丘UEFI密钥交换证书中间CA (Pikachu UEFI Key Exchange CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B
Pikachu Code Sub CA皮卡丘公共测试代码证书中间CA (Pikachu Code Signning Sub CA)2025/01/01 - 2050/01/01CER / CRT / DER / P7B

申请个人证书 / Apply New Certificate

CA机构
Certificate Authority 		有效时间
Valid Time		证书名称
Cert Name		国家
Country		省份
State		城市
Location		组织
Organization		组织单元
Org Unit		描述信息
Description		提交申请
Submit

备注：证书主体名称(Common Name)无法自定义。Certificate’s Common Name cannot be customized.