The branch master has been updated
via b6f0f050fd6e40286eb33fcdf28507b0f9b79b26 (commit)
from 5771017d06be0ba9d82203de0e5ff45b0c616d66 (commit)
- Log -----------------------------------------------------------------
commit b6f0f050fd6e40286eb33fcdf28507b0f9b79b26
Author: Dr. David von Oheimb <david.von.ohe...@siemens.com>
Date: Fri May 21 09:24:10 2021 +0200
80-test_cmp_http: Invert and correct the logic of success vs. failure exit
This makes the logic more intuitive and corrects the interpretation for
NonStop.
Fixes #15386
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15402)
-----------------------------------------------------------------------
Summary of changes:
test/recipes/80-test_cmp_http.t | 16 +-
.../80-test_cmp_http_data/test_commands.csv | 96 ++++-----
.../80-test_cmp_http_data/test_connection.csv | 74 +++----
.../80-test_cmp_http_data/test_credentials.csv | 76 ++++----
.../80-test_cmp_http_data/test_enrollment.csv | 214 ++++++++++-----------
.../80-test_cmp_http_data/test_verification.csv | 96 ++++-----
6 files changed, 286 insertions(+), 286 deletions(-)
diff --git a/test/recipes/80-test_cmp_http.t b/test/recipes/80-test_cmp_http.t
index 8bd9eacde9..c74a5faf03 100644
--- a/test/recipes/80-test_cmp_http.t
+++ b/test/recipes/80-test_cmp_http.t
@@ -128,19 +128,19 @@ sub test_cmp_http {
my $i = shift;
my $title = shift;
my $params = shift;
- my $expected_exit = shift;
+ my $expected_result = shift;
my $path_app = bldtop_dir($app);
$params = [ '-server', "127.0.0.1:$server_port", @$params ]
unless grep { $_ eq '-server' } @$params;
with({ exit_checker => sub {
- my $actual_exit = shift;
- my $OK = $actual_exit == $expected_exit;
+ my $actual_result = shift == 0;
+ my $OK = $actual_result == $expected_result;
if ($faillog && !$OK) {
my $quote_spc_empty = sub { $_ eq "" ? '""' : $_ =~ m/ / ?
'"'.$_.'"' : $_ };
my $invocation = "$path_app ".join(' ', map
$quote_spc_empty->($_), @$params);
print $faillog "$server_name $aspect \"$title\" ($i/$n)".
- " expected=$expected_exit actual=$actual_exit\n";
+ " expected=$expected_result actual=$actual_result\n";
print $faillog "$invocation\n\n";
}
return $OK; } },
@@ -255,13 +255,13 @@ sub load_tests {
s/^\s+// for (@fields); # remove leading whitespace from elements
s/\s+$// for (@fields); # remove trailing whitespace from elements
s/^\"(\".*?\")\"$/$1/ for (@fields); # remove escaping from quotation
marks from elements
- my $expected_exit = $fields[$column];
+ my $expected_result = $fields[$column];
my $description = 1;
my $title = $fields[$description];
- next LOOP if (!defined($expected_exit)
- || ($expected_exit ne 0 && $expected_exit ne 1));
+ next LOOP if (!defined($expected_result)
+ || ($expected_result ne 0 && $expected_result ne 1));
@fields = grep {$_ ne 'BLANK'} @fields[$description + 1 .. @fields -
1];
- push @result, [$title, \@fields, $expected_exit];
+ push @result, [$title, \@fields, $expected_result];
}
close($data);
return \@result;
diff --git a/test/recipes/80-test_cmp_http_data/test_commands.csv
b/test/recipes/80-test_cmp_http_data/test_commands.csv
index ae9514db97..2384f05f44 100644
--- a/test/recipes/80-test_cmp_http_data/test_commands.csv
+++ b/test/recipes/80-test_cmp_http_data/test_commands.csv
@@ -1,56 +1,56 @@
expected,description, -section,val, -cmd,val,val2, -cacertsout,val,val2,
-infotype,val,, -oldcert,val, -revreason,int, -geninfo,val
,,,,,Generic,message options:,,,,,,,,Misc,request options:,,
,,,,,,,,,,,,,,,,,
-0,minimum options, -section,, -cmd,ir,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,minimum options, -section,, -cmd,ir,,BLANK,,,BLANK,,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,
-1,no cmd, -section,,BLANK,,,BLANK,,,BLANK,,,BLANK,,BLANK,
-1,cmd missing arg, -section,, -cmd,,,BLANK,,,BLANK,,,BLANK,,BLANK,
-1,cmd undefined , -section,, -cmd,abc,,BLANK,,,BLANK,,,BLANK,,BLANK,
-1,cmd incomplete, -section,, -cmd,i,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,no cmd, -section,,BLANK,,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,cmd missing arg, -section,, -cmd,,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,cmd undefined , -section,, -cmd,abc,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,cmd incomplete, -section,, -cmd,i,,BLANK,,,BLANK,,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,
-0,no cacertsout, -section,, -cmd,ir,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,cacertsout given, -section,, -cmd,ir,,
-cacertsout,_RESULT_DIR/test.cacerts.pem,,BLANK,,,BLANK,,BLANK,
-1,cacertsout missing arg, -section,, -cmd,ir,,
-cacertsout,,,BLANK,,,BLANK,,BLANK,
+1,no cacertsout, -section,, -cmd,ir,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,cacertsout given, -section,, -cmd,ir,,
-cacertsout,_RESULT_DIR/test.cacerts.pem,,BLANK,,,BLANK,,BLANK,
+0,cacertsout missing arg, -section,, -cmd,ir,,
-cacertsout,,,BLANK,,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason unspecified, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,0
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason keyCompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,1
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason CACompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,2
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason affiliationChanged, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,3
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason superseded, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,4
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason cessationOfOperation, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,5
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason certificateHold, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,6
-0,revreason removeFromCRL, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,8
-1,revreason 7 (invalid), -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,7
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason priviligeWithdrawn, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,9
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0,revreason AACompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,10
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-0, --- use csr for revocation ----, -section,,
-cmd,rr,,BLANK,,,BLANK,,,BLANK,,BLANK, -revreason,0, -csr,csr.pem
-0, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-1,without oldcert, -section,, -cmd,rr,,BLANK,,,BLANK,,,BLANK,,BLANK,
-1,oldcert is directory, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,dir/,BLANK,
-1,oldcert file nonexistent, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,idontexist,BLANK,
-1,empty oldcert file, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,empty.txt,BLANK,
-1,oldcert and key do not match, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,trusted.crt, -revreason,0
-1,revreason 11 (invalid), -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,11
-1,revreason string, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,abc
-1,revreason out of integer range, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,010000000000000000000
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason unspecified, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,0
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason keyCompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,1
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason CACompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,2
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason affiliationChanged, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,3
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason superseded, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,4
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason cessationOfOperation, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,5
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason certificateHold, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,6
+1,revreason removeFromCRL, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,8
+0,revreason 7 (invalid), -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,7
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason priviligeWithdrawn, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,9
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1,revreason AACompromise, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,10
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+1, --- use csr for revocation ----, -section,,
-cmd,rr,,BLANK,,,BLANK,,,BLANK,,BLANK, -revreason,0, -csr,csr.pem
+1, --- get certificate for revocation ----, -section,,
-cmd,cr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,without oldcert, -section,, -cmd,rr,,BLANK,,,BLANK,,,BLANK,,BLANK,
+0,oldcert is directory, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,dir/,BLANK,
+0,oldcert file nonexistent, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,idontexist,BLANK,
+0,empty oldcert file, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,empty.txt,BLANK,
+0,oldcert and key do not match, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,trusted.crt, -revreason,0
+0,revreason 11 (invalid), -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,11
+0,revreason string, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,abc
+0,revreason out of integer range, -section,, -cmd,rr,,BLANK,,,BLANK,,,
-oldcert,_RESULT_DIR/test.cert.pem, -revreason,010000000000000000000
,,,,,,,,,,,,,,,,,
-0,ir + infotype, -section,, -cmd,ir,,BLANK,,,
-infotype,signKeyPairTypes,,BLANK,,BLANK,
-1,genm with missing infotype value, -section,, -cmd,genm,,BLANK,,,
-infotype,,,BLANK,,BLANK,
-1,genm with invalid infotype value, -section,, -cmd,genm,,BLANK,,,
-infotype,asdf,,BLANK,,BLANK,
+1,ir + infotype, -section,, -cmd,ir,,BLANK,,,
-infotype,signKeyPairTypes,,BLANK,,BLANK,
+0,genm with missing infotype value, -section,, -cmd,genm,,BLANK,,,
-infotype,,,BLANK,,BLANK,
+0,genm with invalid infotype value, -section,, -cmd,genm,,BLANK,,,
-infotype,asdf,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-0,geninfo, -section,, -cmd,cr,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,, -geninfo,1.2.3:int:987,BLANK,,BLANK,
-1,geninfo missing argument, -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,,,,,
-1,geninfo bad syntax: leading '.', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,
-geninfo,.1.2.3:int:987,BLANK,,BLANK,
-1,geninfo bad syntax: missing ':', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3:int987,,,,
-1,geninfo bad syntax: double ':', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3:int::987,,,,
-1,geninfo bad syntax: missing ':int', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3,,,,
+1,geninfo, -section,, -cmd,cr,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,, -geninfo,1.2.3:int:987,BLANK,,BLANK,
+0,geninfo missing argument, -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,,,,,
+0,geninfo bad syntax: leading '.', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,
-geninfo,.1.2.3:int:987,BLANK,,BLANK,
+0,geninfo bad syntax: missing ':', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3:int987,,,,
+0,geninfo bad syntax: double ':', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3:int::987,,,,
+0,geninfo bad syntax: missing ':int', -section,, -cmd,cr,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,, -geninfo,1.2.3,,,,
diff --git a/test/recipes/80-test_cmp_http_data/test_connection.csv
b/test/recipes/80-test_cmp_http_data/test_connection.csv
index b3290e0e73..55670cf446 100644
--- a/test/recipes/80-test_cmp_http_data/test_connection.csv
+++ b/test/recipes/80-test_cmp_http_data/test_connection.csv
@@ -1,49 +1,49 @@
expected,description, -section,val, -server,val, -proxy,val, -no_proxy,val,
-tls_used,noarg, -path,val, -msg_timeout,int, -total_timeout,int,
-keep_alive,val
,Message transfer options:,,,,,,,,,,,,,,,,,,
,,,,,,,,,,,,,,,,,,,
-0,default config, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+1,default config, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
TBD,Domain name, -section,, -server,_SERVER_CN:_SERVER_PORT,,,,,,,,,,,,,,
TBD,IP address, -section,, -server,_SERVER_IP:_SERVER_PORT,,,,,,,,,,,,,,
,,,,,,,,,,,,,,,,,,,
-1,wrong server, -section,, -server,example.com:_SERVER_PORT,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
-1,wrong server port, -section,, -server,_SERVER_HOST:99,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
-1,server default port, -section,, -server,_SERVER_HOST,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
-1,server port out of range, -section,,
-server,_SERVER_HOST:65536,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server port negative, -section,,
-server,_SERVER_HOST:-10,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server missing argument, -section,,
-server,,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server with default port, -section,,
-server,_SERVER_HOST,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server port bad syntax: leading garbage, -section,,
-server,_SERVER_HOST:x/+80,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server port bad synatx: trailing garbage, -section,,
-server,_SERVER_HOST:_SERVER_PORT+/x.,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
-1,server with wrong port, -section,,
-server,_SERVER_HOST:999,,,,,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
+0,wrong server, -section,, -server,example.com:_SERVER_PORT,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
+0,wrong server port, -section,, -server,_SERVER_HOST:99,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
+0,server default port, -section,, -server,_SERVER_HOST,,,,,BLANK,,,,
-msg_timeout,1,BLANK,,BLANK,
+0,server port out of range, -section,,
-server,_SERVER_HOST:65536,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server port negative, -section,,
-server,_SERVER_HOST:-10,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server missing argument, -section,,
-server,,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server with default port, -section,,
-server,_SERVER_HOST,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server port bad syntax: leading garbage, -section,,
-server,_SERVER_HOST:x/+80,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server port bad synatx: trailing garbage, -section,,
-server,_SERVER_HOST:_SERVER_PORT+/x.,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,server with wrong port, -section,,
-server,_SERVER_HOST:999,,,,,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
TBD,server IP address with TLS port, -section,,
-server,_SERVER_IP:_SERVER_TLS,,,,,BLANK,,,,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,
-1,proxy port bad syntax: leading garbage, -section,,
-server,_SERVER_HOST:_SERVER_PORT, -proxy,127.0.0.1:x*/8888,
-no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
-1,proxy port out of range, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,127.0.0.1:65536,
-no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
-1,proxy default port, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,127.0.0.1, -no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
-1,proxy missing argument, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,, -no_proxy,nonmatch.com,BLANK,,,,BLANK,,BLANK,,BLANK,
+0,proxy port bad syntax: leading garbage, -section,,
-server,_SERVER_HOST:_SERVER_PORT, -proxy,127.0.0.1:x*/8888,
-no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
+0,proxy port out of range, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,127.0.0.1:65536,
-no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
+0,proxy default port, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,127.0.0.1, -no_proxy,nonmatch.com,BLANK,,,,-msg_timeout,1,BLANK,,BLANK,
+0,proxy missing argument, -section,, -server,_SERVER_HOST:_SERVER_PORT,
-proxy,, -no_proxy,nonmatch.com,BLANK,,,,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,
-0,path explicit, -section,, -server,_SERVER_HOST:_SERVER_PORT,,,,,BLANK,,
-path,_SERVER_PATH,BLANK,,BLANK,,BLANK,
-0,path overrides -server path, -section,,
-server,_SERVER_HOST:_SERVER_PORT/ignored,,,,,BLANK,,
-path,_SERVER_PATH,BLANK,,BLANK,,BLANK,
-0,path default -server path, -section,,
-server,_SERVER_HOST:_SERVER_PORT/_SERVER_PATH,,,,,BLANK,,
-path,"""",BLANK,,BLANK,,BLANK,
-1,path missing argument, -section,,,,,,,,BLANK,, -path,,BLANK,,BLANK,,BLANK,
-1,path wrong, -section,,,,,,,,BLANK,,
-path,/publicweb/cmp/example,BLANK,,BLANK,,BLANK,
-0,path with additional '/'s fine according to RFC 3986,
-section,,,,,,,,BLANK,, -path,/_SERVER_PATH////,BLANK,,BLANK,,BLANK,
-1,path mixed case, -section,,,,,,,,BLANK,, -path,pKiX/,BLANK,,BLANK,,BLANK,
-1,path upper case, -section,,,,,,,,BLANK,, -path,PKIX/,BLANK,,BLANK,,BLANK,
+1,path explicit, -section,, -server,_SERVER_HOST:_SERVER_PORT,,,,,BLANK,,
-path,_SERVER_PATH,BLANK,,BLANK,,BLANK,
+1,path overrides -server path, -section,,
-server,_SERVER_HOST:_SERVER_PORT/ignored,,,,,BLANK,,
-path,_SERVER_PATH,BLANK,,BLANK,,BLANK,
+1,path default -server path, -section,,
-server,_SERVER_HOST:_SERVER_PORT/_SERVER_PATH,,,,,BLANK,,
-path,"""",BLANK,,BLANK,,BLANK,
+0,path missing argument, -section,,,,,,,,BLANK,, -path,,BLANK,,BLANK,,BLANK,
+0,path wrong, -section,,,,,,,,BLANK,,
-path,/publicweb/cmp/example,BLANK,,BLANK,,BLANK,
+1,path with additional '/'s fine according to RFC 3986,
-section,,,,,,,,BLANK,, -path,/_SERVER_PATH////,BLANK,,BLANK,,BLANK,
+0,path mixed case, -section,,,,,,,,BLANK,, -path,pKiX/,BLANK,,BLANK,,BLANK,
+0,path upper case, -section,,,,,,,,BLANK,, -path,PKIX/,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,
-1,msg_timeout missing argument, -section,,,,,,,,BLANK,,,,
-msg_timeout,,BLANK,,BLANK,
-1,msg_timeout negative, -section,,,,,,,,BLANK,,,, -msg_timeout,-5,BLANK,,BLANK,
-0,msg_timeout 5, -section,,,,,,,,BLANK,,,, -msg_timeout,5,BLANK,,BLANK,
-0,msg_timeout 0, -section,,,,,,,,BLANK,,,, -msg_timeout,0,BLANK,,BLANK,
+0,msg_timeout missing argument, -section,,,,,,,,BLANK,,,,
-msg_timeout,,BLANK,,BLANK,
+0,msg_timeout negative, -section,,,,,,,,BLANK,,,, -msg_timeout,-5,BLANK,,BLANK,
+1,msg_timeout 5, -section,,,,,,,,BLANK,,,, -msg_timeout,5,BLANK,,BLANK,
+1,msg_timeout 0, -section,,,,,,,,BLANK,,,, -msg_timeout,0,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,
-1,total_timeout missing argument, -section,,,,,,,,BLANK,,,,BLANK,,
-total_timeout,,BLANK,
-1,total_timeout negative, -section,,,,,,,,BLANK,,,,BLANK,,
-total_timeout,-5,BLANK,
-0,total_timeout 10, -section,,,,,,,,BLANK,,,,BLANK,, -total_timeout,10,BLANK,
-0,total_timeout 0, -section,,,,,,,,BLANK,,,,BLANK,, -total_timeout,0,BLANK,
+0,total_timeout missing argument, -section,,,,,,,,BLANK,,,,BLANK,,
-total_timeout,,BLANK,
+0,total_timeout negative, -section,,,,,,,,BLANK,,,,BLANK,,
-total_timeout,-5,BLANK,
+1,total_timeout 10, -section,,,,,,,,BLANK,,,,BLANK,, -total_timeout,10,BLANK,
+1,total_timeout 0, -section,,,,,,,,BLANK,,,,BLANK,, -total_timeout,0,BLANK,
,,,,,,,,,,,,,,,,,,,
-1,keep_alive missing argument, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,,
-keep_alive,
-1,keep_alive negative, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,-1
-0,keep_alive 0, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,0
-0,keep_alive 1, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,1
-0,keep_alive 2, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,2
-1,keep_alive 3, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,3
+0,keep_alive missing argument, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,,
-keep_alive,
+0,keep_alive negative, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,-1
+1,keep_alive 0, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,0
+1,keep_alive 1, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,1
+1,keep_alive 2, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,2
+0,keep_alive 3, -section,,,,,,,,BLANK,,,,BLANK,,BLANK,, -keep_alive,3
diff --git a/test/recipes/80-test_cmp_http_data/test_credentials.csv
b/test/recipes/80-test_cmp_http_data/test_credentials.csv
index bc759567a8..ce508a101d 100644
--- a/test/recipes/80-test_cmp_http_data/test_credentials.csv
+++ b/test/recipes/80-test_cmp_http_data/test_credentials.csv
@@ -1,46 +1,46 @@
expected,description, -section,val, -ref,val, -secret,val, -cert,val,
-key,val, -keypass,val, -extracerts,val, BLANK, BLANK, -digest,val,
-unprotected_requests,noarg
,,,,,,,,,,,,,,,,,,,,,,
-0,valid secret - wrong cert/key ignored, -section,, -ref,_PBM_REF,
-secret,_PBM_SECRET, -cert,root.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,-server,_SERVER_HOST:_PBM_PORT,-expect_sender,""""
-1,secret missing arg, -section,,BLANK,,
-secret,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
-1,wrong secret without ref, -section,,BLANK,,
-secret,pass:wrong,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
-1,wrong secret - correct cert, -section,,BLANK,, -secret,pass:wrong,
-cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,-server,_SERVER_HOST:_PBM_PORT,-expect_sender,""""
+1,valid secret - wrong cert/key ignored, -section,, -ref,_PBM_REF,
-secret,_PBM_SECRET, -cert,root.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,-server,_SERVER_HOST:_PBM_PORT,-expect_sender,""""
+0,secret missing arg, -section,,BLANK,,
-secret,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
+0,wrong secret without ref, -section,,BLANK,,
-secret,pass:wrong,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
+0,wrong secret - correct cert, -section,,BLANK,, -secret,pass:wrong,
-cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,-server,_SERVER_HOST:_PBM_PORT,-expect_sender,""""
,,,,,,,,,,,,,,,,,,,,,,
-1,ref missing arg, -section,,
-ref,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
-0,empty ref but correct cert, -section,, -ref,"""",BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-0,wrong ref but correct cert, -section,, -ref,wrong,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,ref missing arg, -section,,
-ref,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
+1,empty ref but correct cert, -section,, -ref,"""",BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+1,wrong ref but correct cert, -section,, -ref,wrong,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-0,valid cert and key and keypass, -section,,BLANK,,-secret,"""",
-cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,cert missing arg, -section,,BLANK,,BLANK,, -cert,, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,key missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,keypass missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,,BLANK,,BLANK,,BLANK,,BLANK,
-1,keypass empty string, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:,BLANK,,BLANK,,BLANK,,BLANK,
-0,keypass no prefix, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,keypass prefix wrong, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,wrong keypass, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:123456,BLANK,,BLANK,,BLANK,,BLANK,
+1,valid cert and key and keypass, -section,,BLANK,,-secret,"""",
-cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,cert missing arg, -section,,BLANK,,BLANK,, -cert,, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,key missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,keypass missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,,BLANK,,BLANK,,BLANK,,BLANK,
+0,keypass empty string, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:,BLANK,,BLANK,,BLANK,,BLANK,
+1,keypass no prefix, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,keypass prefix wrong, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,wrong keypass, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:123456,BLANK,,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-1,no cert, -section,,BLANK,,BLANK,,BLANK,, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,no key, -section,,BLANK,,BLANK,, -cert,signer.crt,BLANK,,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,no keypass, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
-1,wrong cert, -section,,BLANK,,BLANK,, -cert,trusted.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,cert file does not exist, -section,,BLANK,,BLANK,, -cert,idontexist,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,cert file random content, -section,,BLANK,,BLANK,, -cert,random.bin,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,empty cert file, -section,,BLANK,,BLANK,, -cert,empty.txt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,key file random content, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,random.bin, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-1,random keypass file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,file:random.bin,BLANK,,BLANK,,BLANK,,BLANK,
+0,no cert, -section,,BLANK,,BLANK,,BLANK,, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,no key, -section,,BLANK,,BLANK,, -cert,signer.crt,BLANK,,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,no keypass, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,
+0,wrong cert, -section,,BLANK,,BLANK,, -cert,trusted.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,cert file does not exist, -section,,BLANK,,BLANK,, -cert,idontexist,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,cert file random content, -section,,BLANK,,BLANK,, -cert,random.bin,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,empty cert file, -section,,BLANK,,BLANK,, -cert,empty.txt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,key file random content, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,random.bin, -keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+0,random keypass file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,file:random.bin,BLANK,,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-0,correct extraCerts, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,issuing.crt,BLANK,,BLANK,,BLANK,
-0,extracerts big file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,big_issuing.crt,BLANK,,BLANK,,BLANK,
-1,extracerts missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345, -extracerts,,BLANK,,BLANK,,BLANK,
-1,extracerts empty file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345, -extracerts,empty.txt,BLANK,,BLANK,,BLANK,
-1,extracerts random content, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,random.bin,BLANK,,BLANK,,BLANK,
-1,extracerts file does not exist, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,idontexist,BLANK,,BLANK,,BLANK,
+1,correct extraCerts, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,issuing.crt,BLANK,,BLANK,,BLANK,
+1,extracerts big file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,big_issuing.crt,BLANK,,BLANK,,BLANK,
+0,extracerts missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345, -extracerts,,BLANK,,BLANK,,BLANK,
+0,extracerts empty file, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345, -extracerts,empty.txt,BLANK,,BLANK,,BLANK,
+0,extracerts random content, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,random.bin,BLANK,,BLANK,,BLANK,
+0,extracerts file does not exist, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,
-extracerts,idontexist,BLANK,,BLANK,,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-0,default sha256, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
-0,digest sha256, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,sha256,BLANK,
-0,digest sha512, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,sha512,BLANK,
-1,digest missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,,BLANK,
-1,digest non-existing, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,idontexist,BLANK,
-1,digest obsolete, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,md2,BLANK,
-1,multiple digests, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,sha256 sha512,BLANK,
+1,default sha256, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,,BLANK,,BLANK,
+1,digest sha256, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,sha256,BLANK,
+1,digest sha512, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,sha512,BLANK,
+0,digest missing arg, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,,BLANK,
+0,digest non-existing, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,idontexist,BLANK,
+0,digest obsolete, -section,,BLANK,,BLANK,, -cert,signer.crt, -key,signer.p12,
-keypass,pass:12345,BLANK,,BLANK,, -digest,md2,BLANK,
+0,multiple digests, -section,,BLANK,,BLANK,, -cert,signer.crt,
-key,signer.p12, -keypass,pass:12345,BLANK,,BLANK,, -digest,sha256 sha512,BLANK,
,,,,,,,,,,,,,,,,,,,,,,
-1,unprotected request, -section,,BLANK,,BLANK,, -cert,"""", -key,"""",
-keypass,"""",BLANK,,BLANK,,BLANK,, -unprotected_requests,
+0,unprotected request, -section,,BLANK,,BLANK,, -cert,"""", -key,"""",
-keypass,"""",BLANK,,BLANK,,BLANK,, -unprotected_requests,
diff --git a/test/recipes/80-test_cmp_http_data/test_enrollment.csv
b/test/recipes/80-test_cmp_http_data/test_enrollment.csv
index 146fb0c1e1..d46a56daeb 100644
--- a/test/recipes/80-test_cmp_http_data/test_enrollment.csv
+++ b/test/recipes/80-test_cmp_http_data/test_enrollment.csv
@@ -1,112 +1,112 @@
expected,description, -section,val, -cmd,val, -newkey,val,val,
-newkeypass,val, -subject,val, -issuer,val, -days,int, -reqexts,val,
-sans,spec, -san_nodefault,noarg, -popo,int, -implicit_confirm,noarg,
-disable_confirm,noarg, -certout,val,val2, -out_trusted,val,val2, -oldcert,val,
-csr,val, -revreason,val
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,Misc,request options:,,,,
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,newkey, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkey missing arg, -section,, -cmd,ir, -newkey,,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkey is directory, -section,, -cmd,ir, -newkey,dir/,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkey too many parameters, -section,, -cmd,ir, -newkey,abc,def,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkey is an RSA key, -section,, -cmd,ir, -newkey,test.RSA2048.pem,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,newkeypass, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass:12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,read newkeypass from file, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,file:12345.txt,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_file.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,newkeypass no prefix, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_no_prefix.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,no newkeypass, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,BLANK,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,missing newkeypass parameter, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,
-newkeypass,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,colon missing and no passwd, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,
-newkeypass,pass,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkeypass double colon, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass::12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkeypass double passwd, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass:12345:12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass5.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkeypass wrongfile, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,file:random.bin,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass6.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,wrong password for encrypted pem, -section,, -cmd,ir, -newkey,cmp --help ,,
-newkeypass,pass:wrong,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass7.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,newkeypass ignored, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,abcdefghijklmnop,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_ignored.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,newkeypass invalid, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,fp:4,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass8.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-1,subject argument missing, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,
-subject,BLANK,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_subject1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,issuer, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,
-issuer,_CA_DN,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_issuer.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,issuer missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,, -issuer,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_issuer1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,days 1, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,
-days,1,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,days 0, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,
-days,0,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days_zero.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,days 365*100 beyond 2038, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,36500,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days_far_future.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,days missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,, -days,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,days negative, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,-10,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,days no not integer, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,1.5,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,days out of range, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,0x10000000000000000,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,reqexts, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,,,
-reqexts,reqexts,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,reqexts missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,reqexts non-exisitng section, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,invalid,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,reqexts malformed section, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,reqexts_invalidkey,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,reqexts and sans, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,, -reqexts,reqexts,
-sans,localhost,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,sans 1 dns, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,localhost,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans 1 dns critical, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
critical,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns_critical.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans critical, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,critical,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_critical.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans 2 dns, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
test,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_two_dns.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans 1 dns 1 ip, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
127.0.0.1,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns_ip.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans 2 ip, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1
1.2.3.4,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_two_ip.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,sans 1 uri, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,https://www.sample.com,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_uri.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,san_nodefault, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1 1.2.3.4,
-san_nodefault,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_nodefault.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-0,san default, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1
1.2.3.4,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_default.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,popo SIGNATURE, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,1,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo RAVERIFIED, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,0,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo too large, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,3,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo too small, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,-3,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo NONE, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,-1,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo5.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,popo KEYENC not supported, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,2,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo6.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,implicit_confirm, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-implicit_confirm,,BLANK,, -certout,_RESULT_DIR/test.certout_implicit.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,implicit_confirm with parameter, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-implicit_confirm,abc,BLANK,, -certout,_RESULT_DIR/test.certout_implicit1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,disable_confirm, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-disable_confirm,, -certout,_RESULT_DIR/test.certout_disable.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,disable_confirm with parameter, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-disable_confirm,abc, -certout,_RESULT_DIR/test.certout_disable1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-1,no certout, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,"""",, -out_trusted,root.crt,,BLANK,,BLANK,,,
-1,certout missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,,, -out_trusted,root.crt,,BLANK,,BLANK,,,
-1,certout is directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,dir/,, -out_trusted,root.crt,,BLANK,,BLANK,,,
-1,certout too many parameters, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,abc,def, -out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,no out_trusted, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted.pem,,BLANK,,,BLANK,,BLANK,,,
-0,out_trusted bigcert, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted_big.pem,,
-out_trusted,big_root.crt,,BLANK,,BLANK,,,
-1,out_trusted missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted1.pem,,
-out_trusted,,,BLANK,,BLANK,,,
-1,out_trusted is directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted2.pem,,
-out_trusted,dir/,,BLANK,,BLANK,,,
-1,out_trusted too many parameters, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted3.pem,,
-out_trusted,abc,def,BLANK,,BLANK,,,
-1,out_trusted empty certificate file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted4.pem,,
-out_trusted,empty.txt,,BLANK,,BLANK,,,
-1,out_trusted expired ca certificate, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted5.pem,,
-out_trusted,root_expired.crt,,BLANK,,BLANK,,,
-1,out_trusted wrong ca, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted6.pem,,
-out_trusted,signer.crt,,BLANK,,BLANK,,,
-1,out_trusted random input, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted7.pem,,
-out_trusted,random.bin,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,oldcert ignored, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,
-1,oldcert missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert1.pem,, -out_trusted,root.crt,,
-oldcert,,BLANK,,,
-1,oldcert directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert2.pem,, -out_trusted,root.crt,,
-oldcert,dir/,BLANK,,,
-1,oldcert non existing file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert3.pem,, -out_trusted,root.crt,,
-oldcert,idontexist,BLANK,,,
-1,oldcert empty file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert4.pem,, -out_trusted,root.crt,,
-oldcert,empty.txt,BLANK,,,
-1,oldcert random contents, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert5.pem,, -out_trusted,root.crt,,
-oldcert,random.bin,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,csr used in ir, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_csr.pem,, -out_trusted,root.crt,,BLANK,,
-csr,csr.pem,,
-0,p10cr csr present, -section,, -cmd,p10cr,BLANK,,,
BLANK,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr.pem,, -out_trusted,root.crt,,BLANK,,
-csr,csr.pem,,
-1,p10cr csr missing, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-1,p10cr csr missing arg, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr1.pem,, -out_trusted,root.crt,,BLANK,,
-csr,,,
-1,p10cr csr directory, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr2.pem,, -out_trusted,root.crt,,BLANK,,
-csr,dir/,,
-1,p10cr csr non-existing file, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr3.pem,, -out_trusted,root.crt,,BLANK,,
-csr,idontexist,,
-1,p10cr csr empty file, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr4.pem,, -out_trusted,root.crt,,BLANK,,
-csr,empty.txt,,
+1,newkey, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkey missing arg, -section,, -cmd,ir, -newkey,,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkey is directory, -section,, -cmd,ir, -newkey,dir/,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkey too many parameters, -section,, -cmd,ir, -newkey,abc,def,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkey is an RSA key, -section,, -cmd,ir, -newkey,test.RSA2048.pem,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkey4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,newkeypass, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass:12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,read newkeypass from file, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,file:12345.txt,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_file.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,newkeypass no prefix, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_no_prefix.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,no newkeypass, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,BLANK,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,missing newkeypass parameter, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,
-newkeypass,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,colon missing and no passwd, -section,, -cmd,ir,
-newkey,new_pass_12345.key,,
-newkeypass,pass,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkeypass double colon, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass::12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkeypass double passwd, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,pass:12345:12345,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass5.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkeypass wrongfile, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,file:random.bin,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass6.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,wrong password for encrypted pem, -section,, -cmd,ir, -newkey,cmp --help ,,
-newkeypass,pass:wrong,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass7.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,newkeypass ignored, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,abcdefghijklmnop,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass_ignored.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,newkeypass invalid, -section,, -cmd,ir, -newkey,new_pass_12345.key,,
-newkeypass,fp:4,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_newkeypass8.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+0,subject argument missing, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,
-subject,BLANK,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_subject1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,issuer, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,
-issuer,_CA_DN,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_issuer.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,issuer missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,, -issuer,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_issuer1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,days 1, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,
-days,1,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,days 0, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,
-days,0,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days_zero.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,days 365*100 beyond 2038, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,36500,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days_far_future.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,days missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,, -days,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,days negative, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,-10,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,days no not integer, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,1.5,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,days out of range, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,
-days,0x10000000000000000,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_days4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,reqexts, -section,, -cmd,ir, -newkey,new.key,, -newkeypass,pass:,,,BLANK,,,,
-reqexts,reqexts,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,reqexts missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,reqexts non-exisitng section, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,invalid,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,reqexts malformed section, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,
-reqexts,reqexts_invalidkey,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,reqexts and sans, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,, -reqexts,reqexts,
-sans,localhost,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_reqexts4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,sans 1 dns, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,localhost,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans 1 dns critical, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
critical,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns_critical.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans critical, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,critical,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_critical.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans 2 dns, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
test,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_two_dns.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans 1 dns 1 ip, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,localhost
127.0.0.1,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_dns_ip.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans 2 ip, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1
1.2.3.4,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_two_ip.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,sans 1 uri, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,,
-sans,https://www.sample.com,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_uri.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,san_nodefault, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1 1.2.3.4,
-san_nodefault,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_nodefault.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+1,san default, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,,,BLANK,, -sans,127.0.0.1
1.2.3.4,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_sans_default.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,popo SIGNATURE, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,1,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo RAVERIFIED, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,0,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo2.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo too large, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,3,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo3.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo too small, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,-3,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo4.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo NONE, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,-1,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo5.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,popo KEYENC not supported, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,, -popo,2,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_popo6.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,implicit_confirm, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-implicit_confirm,,BLANK,, -certout,_RESULT_DIR/test.certout_implicit.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,implicit_confirm with parameter, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-implicit_confirm,abc,BLANK,, -certout,_RESULT_DIR/test.certout_implicit1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,disable_confirm, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-disable_confirm,, -certout,_RESULT_DIR/test.certout_disable.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,disable_confirm with parameter, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-disable_confirm,abc, -certout,_RESULT_DIR/test.certout_disable1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+0,no certout, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,"""",, -out_trusted,root.crt,,BLANK,,BLANK,,,
+0,certout missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,,, -out_trusted,root.crt,,BLANK,,BLANK,,,
+0,certout is directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,dir/,, -out_trusted,root.crt,,BLANK,,BLANK,,,
+0,certout too many parameters, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,abc,def, -out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,no out_trusted, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted.pem,,BLANK,,,BLANK,,BLANK,,,
+1,out_trusted bigcert, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted_big.pem,,
-out_trusted,big_root.crt,,BLANK,,BLANK,,,
+0,out_trusted missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted1.pem,,
-out_trusted,,,BLANK,,BLANK,,,
+0,out_trusted is directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted2.pem,,
-out_trusted,dir/,,BLANK,,BLANK,,,
+0,out_trusted too many parameters, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted3.pem,,
-out_trusted,abc,def,BLANK,,BLANK,,,
+0,out_trusted empty certificate file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted4.pem,,
-out_trusted,empty.txt,,BLANK,,BLANK,,,
+0,out_trusted expired ca certificate, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted5.pem,,
-out_trusted,root_expired.crt,,BLANK,,BLANK,,,
+0,out_trusted wrong ca, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted6.pem,,
-out_trusted,signer.crt,,BLANK,,BLANK,,,
+0,out_trusted random input, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_out_trusted7.pem,,
-out_trusted,random.bin,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,oldcert ignored, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,
+0,oldcert missing arg, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert1.pem,, -out_trusted,root.crt,,
-oldcert,,BLANK,,,
+0,oldcert directory, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert2.pem,, -out_trusted,root.crt,,
-oldcert,dir/,BLANK,,,
+0,oldcert non existing file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert3.pem,, -out_trusted,root.crt,,
-oldcert,idontexist,BLANK,,,
+0,oldcert empty file, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert4.pem,, -out_trusted,root.crt,,
-oldcert,empty.txt,BLANK,,,
+0,oldcert random contents, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_oldcert5.pem,, -out_trusted,root.crt,,
-oldcert,random.bin,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,csr used in ir, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_csr.pem,, -out_trusted,root.crt,,BLANK,,
-csr,csr.pem,,
+1,p10cr csr present, -section,, -cmd,p10cr,BLANK,,,
BLANK,,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr.pem,, -out_trusted,root.crt,,BLANK,,
-csr,csr.pem,,
+0,p10cr csr missing, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr1.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+0,p10cr csr missing arg, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr1.pem,, -out_trusted,root.crt,,BLANK,,
-csr,,,
+0,p10cr csr directory, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr2.pem,, -out_trusted,root.crt,,BLANK,,
-csr,dir/,,
+0,p10cr csr non-existing file, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr3.pem,, -out_trusted,root.crt,,BLANK,,
-csr,idontexist,,
+0,p10cr csr empty file, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr4.pem,, -out_trusted,root.crt,,BLANK,,
-csr,empty.txt,,
TODO,p10cr wrong csr, -section,, -cmd,p10cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_p10cr5.pem,, -out_trusted,root.crt,,BLANK,,
-csr,wrong_csr.pem,,
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,ir + ignored revocation, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,5
-1,ir + invalid revreason, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason1.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,11
-1,ir + revreason not an integer, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason2.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,abc
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,cr, -section,, -cmd,cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_cr.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
-0,kur explicit options, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT,
-cert,_RESULT_DIR/test.certout_newkey.pem, -key,new.key,
-extracerts,issuing.crt
-0,kur minimal options, -section,, -cmd,kur,BLANK,,BLANK,,
-subject,"""",BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur_minimal.pem,,BLANK,,,
-oldcert,"""",BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT,
-cert,_RESULT_DIR/test.certout_newkey.pem, -key,new.key,
-extracerts,issuing.crt, -secret,""""
-1,kur newkey value missing, -section,, -cmd,kur, -newkey,,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur1.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur newkey is directory, -section,, -cmd,kur, -newkey,dir/,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur2.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur newkey parameter count no match, -section,, -cmd,kur, -newkey,abc,def,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur3.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur newkey missing argument, -section,, -cmd,kur, -newkey,BLANK,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur4.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur oldcert is directory, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur5.pem,, -out_trusted,root.crt,,
-oldcert,dir/,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur oldcert not existing, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur6.pem,, -out_trusted,root.crt,,
-oldcert,idontexist,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur empty oldcert file, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur7.pem,, -out_trusted,root.crt,,
-oldcert,empty.txt,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
-1,kur without cert and oldcert, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur8.pem,, -out_trusted,root.crt,,
-cert,"""",BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+1,ir + ignored revocation, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,5
+0,ir + invalid revreason, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason1.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,11
+0,ir + revreason not an integer, -section,, -cmd,ir, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_revreason2.pem,,
-out_trusted,root.crt,,BLANK,,,, -revreason,abc
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,cr, -section,, -cmd,cr, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_cr.pem,,
-out_trusted,root.crt,,BLANK,,BLANK,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+1,kur explicit options, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT,
-cert,_RESULT_DIR/test.certout_newkey.pem, -key,new.key,
-extracerts,issuing.crt
+1,kur minimal options, -section,, -cmd,kur,BLANK,,BLANK,,
-subject,"""",BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur_minimal.pem,,BLANK,,,
-oldcert,"""",BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT,
-cert,_RESULT_DIR/test.certout_newkey.pem, -key,new.key,
-extracerts,issuing.crt, -secret,""""
+0,kur newkey value missing, -section,, -cmd,kur, -newkey,,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur1.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur newkey is directory, -section,, -cmd,kur, -newkey,dir/,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur2.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur newkey parameter count no match, -section,, -cmd,kur, -newkey,abc,def,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur3.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur newkey missing argument, -section,, -cmd,kur, -newkey,BLANK,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur4.pem,, -out_trusted,root.crt,,
-oldcert,_RESULT_DIR/test.certout_newkey.pem,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur oldcert is directory, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur5.pem,, -out_trusted,root.crt,,
-oldcert,dir/,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur oldcert not existing, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur6.pem,, -out_trusted,root.crt,,
-oldcert,idontexist,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur empty oldcert file, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur7.pem,, -out_trusted,root.crt,,
-oldcert,empty.txt,BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
+0,kur without cert and oldcert, -section,, -cmd,kur, -newkey,new.key,,
-newkeypass,pass:,,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,BLANK,,
-certout,_RESULT_DIR/test.certout_kur8.pem,, -out_trusted,root.crt,,
-cert,"""",BLANK,,,,,-server,_SERVER_HOST:_KUR_PORT
diff --git a/test/recipes/80-test_cmp_http_data/test_verification.csv
b/test/recipes/80-test_cmp_http_data/test_verification.csv
index 8ba0489bc2..c58215eebf 100644
--- a/test/recipes/80-test_cmp_http_data/test_verification.csv
+++ b/test/recipes/80-test_cmp_http_data/test_verification.csv
@@ -1,51 +1,51 @@
expected,description, -section,val, -recipient,val, -expect_sender,val,
-srvcert,val, -trusted,val, -untrusted,val, -ignore_keyusage,
-unprotected_errors, -extracertsout,val,val2, -opt1,arg1, -opt2,arg2, -opt3,arg3
,,,,,Recipient,options:,,,,,,,,,,,,,,,,,,,
,,,,,,,,,,,,,,,,,,,,,,,,,
-0,default test, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-1,recipient missing arg, -section,, -recipient,,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-0,unknown attribute in recipient name, -section,,
-recipient,_CA_DN/ABC=123,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,wrong syntax in recipient name: trailing double '/' after value, -section,,
-recipient,_CA_DN//,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,wrong syntax in recipient name: missing '=', -section,,
-recipient,/CDE,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,wrong syntax in recipient name: C too long, -section,, -recipient,/CN=ECC
Issuing CA v10/OU=For test purpose only/O=CMPforOpenSSL/C=DEE,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,config default with expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,expected sender missing arg, -section,, -recipient,_CA_DN,
-expect_sender,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,wrong expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=Sample Cert/OU=R&D/O=Company Ltd./L=Dublin 4/C=IE,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-0,unknown attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN/ABC=123,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,extra attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN/serialNumber=123,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,double attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=ECC Issuing CA v10_SERVER_DN,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,missing attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=ECC Issuing CA v10/OU=For test purpose only/C=DE,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,bad syntax in expected sender name: leading double '/', -section,,
-recipient,_CA_DN, -expect_sender,//_CA_DN,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,bad syntax in expected sender name: trailing double '/', -section,,
-recipient,_CA_DN, -expect_sender,_CA_DN//,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,bad syntax in expected sender name: missing '=', -section,,
-recipient,_CA_DN, -expect_sender,/C=DE/CN=ECC Issuing CA v10/OU=For test
purpose only/OCMPforOpenSSL,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,expected sender empty attributes, -section,, -recipient,_CA_DN,
-expect_sender,/CN=/OU=/O=/C=,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,explicit srvcert, -section,,,,BLANK,, -srvcert,_SERVER_CERT,
-trusted,"""",BLANK,,,, -unprotected_errors,BLANK,,,,,,,,
-1,srvcert missing arg, -section,, -recipient,"""",BLANK,, -srvcert,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,wrong srvcert, -section,, -recipient,"""",BLANK,, -srvcert,signer.crt,
-trusted,"""",BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,srvcert is empty file, -section,, -recipient,"""",BLANK,,
-srvcert,empty.txt, -trusted,"""",BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,srvcert random content, -section,, -recipient,"""",BLANK,,
-srvcert,random.bin, -trusted,"""",BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,no -trusted but srvcert, -section,, -recipient,_CA_DN,BLANK,,
-srvcert,_SERVER_CERT,BLANK,,BLANK,,, -unprotected_errors,BLANK,,,,,,,,
-1,trusted missing arg, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,wrong trusted cert, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,signer.crt,BLANK,,BLANK, -unprotected_errors,BLANK, -secret,"""",
-cert,signer.crt, -key,signer.p12, -keypass,pass:12345
-1,trusted empty file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,empty.txt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,trusted random file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,random.bin,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,trusted file does not exist, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,idontexist,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-1,untrusted missing arg, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,,BLANK, -unprotected_errors,BLANK,,,,,,,,
-1,untrusted empty file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,empty.txt,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,untrusted random file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,random.bin,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-1,untrusted file does not exist, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,idontexist,BLANK,
-unprotected_errors,BLANK,,,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,ignore key usage, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,, -ignore_keyusage, -unprotected_errors,BLANK,,,,,,,,
-1,ignorekeyusage with parameter, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,, -unprotected_errors,BLANK,
-ignore_keyusage,1,,,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,no unprotected errors - no errors, -section,,
-recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK,BLANK,BLANK,,,,,,,,
-1,unprotected_errors with parameter, -section,,
-recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK,BLANK,BLANK,,, -unprotected_errors,123,,,,
-,,,,,,,,,,,,,,,,,,,,,,,,,
-0,extracertsout, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,
-extracertsout,_RESULT_DIR/test.extracerts.pem,,,,,,,
-1,extracertsout no parameter, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors, -extracertsout,,,,,,,,
-1,extracertsout directory, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,
-extracertsout,directory/,,,,,,,
-1,extracertsout multiple arguments, -section,,
-recipient,_CA_DN,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors, -extracertsout,abc,def,,,,,,
+1,default test, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+0,recipient missing arg, -section,, -recipient,,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+1,unknown attribute in recipient name, -section,,
-recipient,_CA_DN/ABC=123,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,wrong syntax in recipient name: trailing double '/' after value, -section,,
-recipient,_CA_DN//,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,wrong syntax in recipient name: missing '=', -section,,
-recipient,/CDE,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,wrong syntax in recipient name: C too long, -section,, -recipient,/CN=ECC
Issuing CA v10/OU=For test purpose only/O=CMPforOpenSSL/C=DEE,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,config default with expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,expected sender missing arg, -section,, -recipient,_CA_DN,
-expect_sender,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,wrong expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=Sample Cert/OU=R&D/O=Company Ltd./L=Dublin 4/C=IE,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+1,unknown attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN/ABC=123,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,extra attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,_SERVER_DN/serialNumber=123,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,double attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=ECC Issuing CA v10_SERVER_DN,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,missing attribute in expected sender, -section,, -recipient,_CA_DN,
-expect_sender,/CN=ECC Issuing CA v10/OU=For test purpose only/C=DE,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,bad syntax in expected sender name: leading double '/', -section,,
-recipient,_CA_DN, -expect_sender,//_CA_DN,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,bad syntax in expected sender name: trailing double '/', -section,,
-recipient,_CA_DN, -expect_sender,_CA_DN//,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,bad syntax in expected sender name: missing '=', -section,,
-recipient,_CA_DN, -expect_sender,/C=DE/CN=ECC Issuing CA v10/OU=For test
purpose only/OCMPforOpenSSL,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,expected sender empty attributes, -section,, -recipient,_CA_DN,
-expect_sender,/CN=/OU=/O=/C=,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,explicit srvcert, -section,,,,BLANK,, -srvcert,_SERVER_CERT,
-trusted,"""",BLANK,,,, -unprotected_errors,BLANK,,,,,,,,
+0,srvcert missing arg, -section,, -recipient,"""",BLANK,, -srvcert,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,wrong srvcert, -section,, -recipient,"""",BLANK,, -srvcert,signer.crt,
-trusted,"""",BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,srvcert is empty file, -section,, -recipient,"""",BLANK,,
-srvcert,empty.txt, -trusted,"""",BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,srvcert random content, -section,, -recipient,"""",BLANK,,
-srvcert,random.bin, -trusted,"""",BLANK,,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,no -trusted but srvcert, -section,, -recipient,_CA_DN,BLANK,,
-srvcert,_SERVER_CERT,BLANK,,BLANK,,, -unprotected_errors,BLANK,,,,,,,,
+0,trusted missing arg, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,wrong trusted cert, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,signer.crt,BLANK,,BLANK, -unprotected_errors,BLANK, -secret,"""",
-cert,signer.crt, -key,signer.p12, -keypass,pass:12345
+0,trusted empty file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,empty.txt,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,trusted random file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,random.bin,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,trusted file does not exist, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,idontexist,BLANK,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+0,untrusted missing arg, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,,BLANK, -unprotected_errors,BLANK,,,,,,,,
+0,untrusted empty file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,empty.txt,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,untrusted random file, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,random.bin,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+0,untrusted file does not exist, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt, -untrusted,idontexist,BLANK,
-unprotected_errors,BLANK,,,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,ignore key usage, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,, -ignore_keyusage, -unprotected_errors,BLANK,,,,,,,,
+0,ignorekeyusage with parameter, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,, -unprotected_errors,BLANK,
-ignore_keyusage,1,,,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,no unprotected errors - no errors, -section,,
-recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK,BLANK,BLANK,,,,,,,,
+0,unprotected_errors with parameter, -section,,
-recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK,BLANK,BLANK,,, -unprotected_errors,123,,,,
+,,,,,,,,,,,,,,,,,,,,,,,,,
+1,extracertsout, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,
-extracertsout,_RESULT_DIR/test.extracerts.pem,,,,,,,
+0,extracertsout no parameter, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors, -extracertsout,,,,,,,,
+0,extracertsout directory, -section,, -recipient,_CA_DN,BLANK,,BLANK,,
-trusted,trusted.crt,BLANK,,BLANK, -unprotected_errors,
-extracertsout,directory/,,,,,,,
+0,extracertsout multiple arguments, -section,,
-recipient,_CA_DN,BLANK,,BLANK,, -trusted,trusted.crt,BLANK,,BLANK,
-unprotected_errors, -extracertsout,abc,def,,,,,,
