SSLC:RootCertChainAddDefaultCert

Revision as of 16:30, 9 December 2015 by Yellows8 (talk | contribs) (→‎CertIDs)

Request

Index Word Description
0 Header code [0x00060080]
1 SSL RootCertChain context handle
2 Cert ID

Response

Index Word Description
0 Header code
1 Result code
2 Cert context handle.

CertIDs

ID Cert parsing output Notes
0x0 and >=0xC Invalid certID, error 0xd8e0b839 is returned for these.
0x1
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 0 (0x0)
   Signature Algorithm: sha1WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America Inc, OU=NOA, CN=Nintendo CA/emailAddress=ca@noa.nintendo.com
       Validity
           Not Before: Aug 10 07:02:22 2005 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America Inc, OU=NOA, CN=Nintendo CA/emailAddress=ca@noa.nintendo.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (1024 bit)
               Modulus:
                   00:b3:cd:79:97:77:5d:8a:af:86:a8:e8:d7:73:1c:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               7B:57:53:3F:31:AC:77:71:F1:FD:4A:E6:0F:43:B0:D5:55:41:9F:D2
       ...
0x2
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
   Signature Algorithm: sha1WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America Inc., OU=IS, CN=Nintendo CA - G2/emailAddress=ca@noa.nintendo.com
       Validity
           Not Before: Jun  4 17:39:49 2008 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America Inc., OU=IS, CN=Nintendo CA - G2/emailAddress=ca@noa.nintendo.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (2048 bit)
               Modulus:
                   00:9d:69:36:28:b4:83:62:5e:f4:b4:fe:40:ef:dc:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               96:A7:A1:9F:81:5C:73:C9:64:10:83:7F:B6:1E:1E:87:B7:E1:33:11
       ...
0x3
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
   Signature Algorithm: sha256WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America Inc., OU=IS, CN=Nintendo CA - G3
       Validity
           Not Before: Jan 28 17:16:11 2010 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America Inc., OU=IS, CN=Nintendo CA - G3
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (2048 bit)
               Modulus:
                   00:af:22:74:54:15:57:28:f6:6f:e1:ca:f4:a7:91:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               04:D3:DE:D3:FD:F0:C8:EB:C2:59:92:87:FB:1F:D7:3E:72:F8:ED:F9
       ...
"NINTENDO_CA_G3"
0x4
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
   Signature Algorithm: sha1WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America Inc., OU=NOA, CN=Nintendo Class 2 CA/emailAddress=ca@noa.nintendo.com
       Validity
           Not Before: Jun 15 19:34:33 2007 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America Inc., OU=NOA, CN=Nintendo Class 2 CA/emailAddress=ca@noa.nintendo.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (1024 bit)
               Modulus:
                   00:b4:a8:0f:e3:80:02:a7:ad:fb:59:9d:e1:92:9d:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               CB:40:16:7C:B1:37:2B:26:5A:35:DE:BE:F1:5B:50:8A:8D:0C:D4:BD
       ...
0x5
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
   Signature Algorithm: sha1WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America, Inc., OU=IS, CN=Nintendo Class 2 CA - G2/emailAddress=ca@noa.nintendo.com
       Validity
           Not Before: Apr 29 15:31:36 2010 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America, Inc., OU=IS, CN=Nintendo Class 2 CA - G2/emailAddress=ca@noa.nintendo.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (2048 bit)
               Modulus:
                   00:b6:0f:a0:4a:95:ec:ad:f7:75:09:7a:e5:aa:81:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               94:72:FA:4D:B3:DA:66:4A:B9:37:7B:AD:64:9E:9C:89:90:DA:D3:33
       ...
0x6
Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
   Signature Algorithm: sha256WithRSAEncryption
       Issuer: C=US, ST=Washington, O=Nintendo of America, Inc., OU=IS, CN=Nintendo Class 2 CA - G3/emailAddress=ca@noa.nintendo.com
       Validity
           Not Before: Apr 29 15:59:18 2010 GMT
           Not After : Dec 28 12:00:00 2049 GMT
       Subject: C=US, ST=Washington, O=Nintendo of America, Inc., OU=IS, CN=Nintendo Class 2 CA - G3/emailAddress=ca@noa.nintendo.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
               Public-Key: (2048 bit)
               Modulus:
                   00:d1:d0:99:4b:b9:36:9b:88:a5:15:79:a5:b5:ce:
                   ...
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Subject Key Identifier: 
               F7:C6:0A:7C:72:7C:2C:C4:BC:93:28:41:E4:EE:70:F0:03:A0:BB:B7
       ...
"NINTENDO_CLASS2_CA_G3"
0x7
0x8
0x9
0xA
0xB

Description

This adds the specified builtin root CA to the specified root-CA chain. When it's not already loaded, the DER cert is loaded from SSL module .data. Otherwise, already-loaded cert data is used for adding to the RootCertChain.