| # MTC test certs | |
| This directory contains the following certs: | |
| - `mtc-leaf.pem` | |
| - signatureless MTC issued by an MTC CA | |
| - `mtc-ica.pem` | |
| - signatureless MTC issued by the same MTC CA | |
| - its BasicConstraints has `cA=TRUE` | |
| - `leaf.pem` | |
| - classical ECDSA cert (SPKI) with ECDSA `signatureAlgorithm` | |
| - issued by `mtc-ica.pem` | |
| ## (Re)generating test certs | |
| Generating these certs is done in two steps. | |
| The first step is to generate a keypair for the ICA and use the private key to | |
| sign the leaf cert: | |
| 1. Run `go run generate_leaf.go` | |
| 2. Copy the certificate PEM to `leaf.pem` | |
| 3. Copy the ICA SPKI base64 to the first `PublicKey` entry in `mtc-config.json` | |
| The next step is to generate the MTC representation of the ICA: | |
| 1. Run | |
| `go run github.com/davidben/merkle-tree-certs/demo@92282dba2bf361c486dda5fe7606ef77abd2a1a0 -config=mtc-config.json -out=.` | |
| 2. Move `cert_1_0.pem` to `mtc-ica.pem` | |
| 3. Move `cert_2_0.pem` to `mtc-leaf.pem` | |
| 3. Copy the subtree and hash from the command output into | |
| `PathBuilderMTCTest::SetUp`. | |
| 4. Remove other artifacts created by the merkle-tree-certs/demo tool (e.g. | |
| `rm checkpoint && rm -r tile`). |