diff --git a/src/certificate/pki/intermediate/truststore-dfxagent-kdn.jks b/src/certificate/pki/intermediate/truststore-dfxagent-kdn.jks new file mode 100644 index 0000000..cb390a9 Binary files /dev/null and b/src/certificate/pki/intermediate/truststore-dfxagent-kdn.jks differ diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-leaf-ext.cnf b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-leaf-ext.cnf new file mode 100644 index 0000000..9c88ef7 --- /dev/null +++ b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-leaf-ext.cnf @@ -0,0 +1,16 @@ +[ v3_server ] +basicConstraints = critical, CA:false +keyUsage = critical, digitalSignature, keyEncipherment +extendedKeyUsage = serverAuth, clientAuth +subjectKeyIdentifier = hash +authorityKeyIdentifier = keyid,issuer +subjectAltName = @alt_names + +[ alt_names ] +DNS.1 = agent-tuf-a15-defree-oracle +IP.1 = 192.168.0.41 +IP.2 = 172.22.1.4 +IP.3 = 127.0.0.1 +IP.4 = ::1 +#도메인이 있는 경우에는 해당 도메인을 DNS.x에 기입 +#도메인이 없는 경우에는 사용할 IP를 hosts 파일에 기술하고 해당 hostname을 DNS.x에 기입 \ No newline at end of file diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-req.cnf b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-req.cnf new file mode 100644 index 0000000..61fadc4 --- /dev/null +++ b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-req.cnf @@ -0,0 +1,25 @@ +[ req ] +default_bits = 2048 +prompt = no +default_md = sha256 +distinguished_name = dn +req_extensions = req_ext + +[ dn ] +C = KR +O = KDN +OU = DFX +CN = agent-tuf-a15-defree-oracle +#CN에 해당하는 값은 settings.json의 myHostId 값 기재 (mTLS에 따른 클라이언트 검증의 확인 문자로 사용함) + +[ req_ext ] +subjectAltName = @alt_names + +[ alt_names ] +DNS.1 = agent-tuf-a15-defree-oracle +IP.1 = 192.168.0.41 +IP.2 = 172.22.1.4 +IP.3 = 127.0.0.1 +IP.4 = ::1 +#도메인이 있는 경우에는 해당 도메인을 DNS.x에 기입 +#도메인이 없는 경우에는 사용할 IP를 hosts 파일에 기술하고 해당 hostname을 DNS.x에 기입 \ No newline at end of file diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.crt b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.crt new file mode 100644 index 0000000..aeb0f67 --- /dev/null +++ b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.crt @@ -0,0 +1,29 @@ +-----BEGIN CERTIFICATE----- +MIIE3TCCAsWgAwIBAgIUdxabf8i0ErEOGJuXHDWwV95e5cgwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCS1IxEDAOBgNVBAoMB0JTTS1MQUIxJDAiBgNVBAMMG0JT +TS1MQUIgS0ROIEludGVybWVkaWF0ZSBDQTAeFw0yNjAxMDYwNDMwMDVaFw0yODA0 +MTAwNDMwMDVaME8xCzAJBgNVBAYTAktSMQwwCgYDVQQKDANLRE4xDDAKBgNVBAsM +A0RGWDEkMCIGA1UEAwwbYWdlbnQtdHVmLWExNS1kZWZyZWUtb3JhY2xlMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vwP9CeO0EWH8ks18v7K66iTYmoJ +HVhtkmtdtog1kXyyc7aeZleLA6JxDPLFMlvkUMkhuxo/9wmAx9OK34bm7heAEbR+ +rpFsH68ZwqT2Ijc3Vaye4k67Xtsmn5x3dC26FZUJ7LDwomLMnU57ff4OuRAyBQjP +XWVUhPplPGNCs7EJ/V+Io67vy45kjONUsTq9RoNSFoSoB+cW8psC5UadtC35zlMS +KlhSq/KFwQ+ep/4thppOdJhxRwih74iPQEq3g72fseKHDAfjdOf+NkJQwtw3lYyf +F5/wqFyRbh5oH2NRuDZRlxkokUoq9cmsvRQeO3NomdA39OEKIwgL79L9zwIDAQAB +o4G6MIG3MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG +CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUOO8kN+2wOmnrGqs/IQGvWZFw +B3AwHwYDVR0jBBgwFoAUPJGm63CYcyhCpjem8tfTQ/sICA8wOAYDVR0RBDEwL4IJ +bG9jYWxob3N0hwTAqAAphwSsFgEEhwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0G +CSqGSIb3DQEBCwUAA4ICAQCUMkrL3wv1e8bdutv0mSjkLJaII+xJ4I5v/x5W3Rza +KFlWZ6FPbjo+Qd0SIKoFOwJsIOgmlzDH6AMgnK/nkHFfOMulsblHNWRg1EHSQrfm +95QQfR1xuRwt4GpfZP/UpZYiHEzVD0uOlWwKI8t//bTkM3bHFqUrQ5lg17ofgU4V +DuALOYlvL1SgECfwmeMXA/0P2OotrSKBvp5QRegLtdUSBPI9mdMpqNco8aRyRiAz +1+x1tdcsOMJ1uN4a4F7dkVRJveAyviFNu34YRbmvpU1ZukXd5gMXag7smZB2byPK +2lsYIcIMtT3A+AuzLsB4aDN3iZdi+Ml4k6WLnSq2vAdNcS8w7OMq+4xha7fUkqng +uX6w5zNY/C1sWNPNz9qwR0aomm2iFHEpLPj/J/DIehnhRiWhNbdaDuCkjl2DHwdD +JMXrkzqV4CyK3s6V+WePGQEb+qjhZGD9fmhGxce9L7doLw/NWiRYfIj+9RoSqrU3 +x4WuimjSSU43PbKm1ckxbZZ405V3U27fDIB3hDIscoVXt0N65r7Mce897mSPVxGY +Hv8NxBb80+5gRNRGANzi+4CHRTqJKf1ASGYVTQd5mpWJ7YT8fW/n2Z6jclGZIOnW +uMySE/sKvK3M/RY0sEG7Cn+QQbIAcwGwUQdEIbvIcvyQB+cKIEb9iSu7GGaqKBZY +yg== +-----END CERTIFICATE----- diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.csr b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.csr new file mode 100644 index 0000000..e4c517a --- /dev/null +++ b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIC3zCCAccCAQAwTzELMAkGA1UEBhMCS1IxDDAKBgNVBAoMA0tETjEMMAoGA1UE +CwwDREZYMSQwIgYDVQQDDBthZ2VudC10dWYtYTE1LWRlZnJlZS1vcmFjbGUwggEi +MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/A/0J47QRYfySzXy/srrqJNi +agkdWG2Sa122iDWRfLJztp5mV4sDonEM8sUyW+RQySG7Gj/3CYDH04rfhubuF4AR +tH6ukWwfrxnCpPYiNzdVrJ7iTrte2yafnHd0LboVlQnssPCiYsydTnt9/g65EDIF +CM9dZVSE+mU8Y0KzsQn9X4ijru/LjmSM41SxOr1Gg1IWhKgH5xbymwLlRp20LfnO +UxIqWFKr8oXBD56n/i2Gmk50mHFHCKHviI9ASreDvZ+x4ocMB+N05/42QlDC3DeV +jJ8Xn/CoXJFuHmgfY1G4NlGXGSiRSir1yay9FB47c2iZ0Df04QojCAvv0v3PAgMB +AAGgSzBJBgkqhkiG9w0BCQ4xPDA6MDgGA1UdEQQxMC+CCWxvY2FsaG9zdIcEwKgA +KYcErBYBBIcEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0BAQsFAAOC +AQEAHwED1rGyStEz1H+SNqvBs73lAdHTK1teLVw5y6YHrPFFReH3pI5HdsmqjH3h +reqZA4uiHzpoC3vIcqDCCiF+44AbTU49fmWM+R7/p1YW2OcsIbg7P5xOJiaObZ0B +syIZQ4tDm5JfIj9fCdzxBkVrdQymL2VsqlI0qPRXgXoLBMqA0HJRstVk8GKrDK/X +vFf3SVi0J28NBzl5JjMSrmzbDNzoU13FLCv+Unbv1Mp/q3apXtjLV3Izwjc8IaES +tzQ0mhbbtXKF9orzk7lUEX35d0+EoTxvtloaWSHS7ob2jsNfyMcTLeNiI66LnQG5 +7pEfgeR1KCIbVG1za2oqj7Sj/w== +-----END CERTIFICATE REQUEST----- diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.key b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.key new file mode 100644 index 0000000..aad0e0b --- /dev/null +++ b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDW/A/0J47QRYfy +SzXy/srrqJNiagkdWG2Sa122iDWRfLJztp5mV4sDonEM8sUyW+RQySG7Gj/3CYDH +04rfhubuF4ARtH6ukWwfrxnCpPYiNzdVrJ7iTrte2yafnHd0LboVlQnssPCiYsyd +Tnt9/g65EDIFCM9dZVSE+mU8Y0KzsQn9X4ijru/LjmSM41SxOr1Gg1IWhKgH5xby +mwLlRp20LfnOUxIqWFKr8oXBD56n/i2Gmk50mHFHCKHviI9ASreDvZ+x4ocMB+N0 +5/42QlDC3DeVjJ8Xn/CoXJFuHmgfY1G4NlGXGSiRSir1yay9FB47c2iZ0Df04Qoj +CAvv0v3PAgMBAAECggEACnpJv+grpno1DOdeM/ZA5yAVz2DfwP2ZPYNlpcYiHaia +hjMR8tSHAG5GQYaDMgXEo/Xhh1S0rzt8sVvv84v1iJqr5ANMWZPZ1Yyf8Gz3DtzY +fTL0ofyKxIk8fSmrQrzIE1HqkfuEPbJk3Pocl64uOfF+MgXnZez1SIGT7Ia9EyIa +ywJKXOya5h3QNBSOv9LoLgTOiazH0dcJpl3p4sa5fs313PbZaDoYGFiJGhiFhXzC +spMkwczFMqUZgoBaudEA1Qb5a+3bqksFVYJIry0pk6JIEAMiHtUbkd+jcLEQfFsf +tbG23Zir6cOfSsU4oqS3R4bDflWGNLqojnqmXf0XmQKBgQD1SI15GDT7UDHmnj0l +WokqUjrO3AqgpgChKt4qRdaSFm0HUrLJJbUYFzUP4oL3qlVwDxl4+Rn7/+H8iX8L +Okw+G/ISrz+M+0onBBOBks6MNh8bznzjFxDJ0o/tYSO1fBd1MnU1+bumdNht5xaH +Fwl1hr1mHX11JejFTLxITJ79JwKBgQDgYJ+j8gjfuoNDjXWrLXTH94qzA/wKpETV +8upbIpeCGKRd1h6gcUvESWJhry1wHfcKs/zvNu+rBMCyPiyXUd1mrUg+OfH+5AyX +jwCQg0SIx/IJXCaMhFbgzF73gS7KoyT5AcdcQhiXWwmUvuBmAGL6NX0tVw78incU +uzNfDqazGQKBgQCfBq0Ch9lB3tqbhJhsMWig0bNjDnKteTMLSvnDOohFKtkBWHKl +yxbASbuTUu5KmFrQTlnbftWD9oCT9KkzpFZuJjwqNQjk5L9M0G29ImtbqHM+2f9K +VFgEIcpCwyodrhifWVl45zLsVvFDQAHxD9SIKBV/sTr3yt5BnOCtl0+1HQKBgFHf +sCD4rnhE7KT3t1oxCg31q+zKpWuUqXGQZCfBJZvZNhDvktlkvgrv5DBU5bWlmYGU +T9VSLH4xC8d+nHLS8oEG9feO2VjzCg07py8UVyu6Gf2EXKSlnbYFnRmfT92tTk52 +cbKeg66nD4XxaJyPw44deoHS5KsOM4mjDYnAJN/xAoGBAMmeZ0wLuC3MvJsH1Upw +Ziml9MGL9KJin7xQAyeFSo2kPF1Axa1f3isC2iTX9ZhMr/KepmzVYOtJIWFAWD0Q +OCfn4ZxdxSVy8HOig+K1KNtnxO9a2jakXMwrCJO27YFVefgIcrXmXYY71o2jYBlg +1MHas1N5Mc2+Vlkg0aHPG//n +-----END PRIVATE KEY----- diff --git a/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.p12 b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.p12 new file mode 100644 index 0000000..42a8a7c Binary files /dev/null and b/src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.p12 differ diff --git a/src/certificate/pki/root/rootca-kdn.srl b/src/certificate/pki/root/rootca-kdn.srl new file mode 100644 index 0000000..4a0185a --- /dev/null +++ b/src/certificate/pki/root/rootca-kdn.srl @@ -0,0 +1 @@ +2C186D8B20C08A0185D0DBBD740B7A480044E78A