MTC test certs

This directory contains the following certs:

• mtc-leaf.pem
  • signatureless MTC issued by an MTC CA
• mtc-ica.pem
  • signatureless MTC issued by the same MTC CA
  • its BasicConstraints has cA=TRUE
• leaf.pem
  • classical ECDSA cert (SPKI) with ECDSA signatureAlgorithm
  • issued by mtc-ica.pem

(Re)generating test certs

Generating these certs is done in two steps.

The first step is to generate a keypair for the ICA and use the private key to sign the leaf cert:

1. Run go run generate_leaf.go
2. Copy the certificate PEM to leaf.pem
3. Copy the ICA SPKI base64 to the first PublicKey entry in mtc-config.json

The next step is to generate the MTC representation of the ICA:

1. Run go run github.com/davidben/merkle-tree-certs/demo@92282dba2bf361c486dda5fe7606ef77abd2a1a0 -config=mtc-config.json -out=.
2. Move cert_1_0.pem to mtc-ica.pem
3. Move cert_2_0.pem to mtc-leaf.pem
4. Copy the subtree and hash from the command output into PathBuilderMTCTest::SetUp.
5. Remove other artifacts created by the merkle-tree-certs/demo tool (e.g. rm checkpoint && rm -r tile).