Added week9

pki/agent/MOK.priv

+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

pki/agent/agent.crt

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4096 (0x1000)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=IN, ST=Maharashtra, L=Mumbai, O=Albert, OU=Secret, CN=Albert/emailAddress=albert@fake.com
+        Validity
+            Not Before: Nov 17 08:41:11 2019 GMT
+            Not After : Nov 16 08:41:11 2020 GMT
+        Subject: C=IN, ST=Maharashtra, O=Albert, OU=secret, CN=no/emailAddress=bb@gmail.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:e3:46:2c:bb:7a:75:98:b3:98:88:98:9f:7f:85:
+                    3b:f5:83:be:25:53:65:48:6b:e0:aa:c0:58:ed:41:
+                    ec:a6:e8:5e:8a:03:e3:a1:4d:18:7f:dd:73:20:f7:
+                    0f:3e:9f:6a:f0:66:ac:4b:f2:5c:03:be:ca:b9:b4:
+                    8f:ec:00:51:0d:80:29:57:74:f2:31:98:74:10:86:
+                    c6:6e:b0:e1:a3:eb:69:65:14:a8:c1:ca:f6:57:67:
+                    57:10:3c:9c:28:b8:93:b5:aa:3f:7e:c9:e8:d2:0e:
+                    e2:9f:3d:00:01:8c:f2:50:3e:7e:77:49:be:2c:01:
+                    b4:a2:c8:37:4f:e4:c2:18:17:d7:d4:8c:98:94:fe:
+                    24:6f:49:1b:15:8d:db:3b:d2:36:0b:83:b6:75:3f:
+                    e5:2d:7f:9d:80:00:9d:90:26:33:71:b3:27:5a:eb:
+                    c7:b4:9c:b3:82:4a:88:8d:35:d8:a1:19:2e:40:ef:
+                    c2:e5:10:4f:85:2c:6f:19:98:e6:92:4e:e8:c2:9d:
+                    99:0d:84:2e:49:85:d0:f2:5a:87:81:90:6c:f6:b0:
+                    90:5b:13:a2:cd:35:b8:07:f3:62:58:76:eb:93:3b:
+                    6b:36:9c:a0:df:43:74:7b:42:f1:19:82:9e:50:d3:
+                    00:2f:d6:bc:41:c7:42:33:81:c2:77:75:e5:cb:40:
+                    e8:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                C8:70:26:B2:E8:58:35:B4:A2:53:E6:A7:09:58:67:0C:5A:D3:1E:37
+            X509v3 Authority Key Identifier: 
+                keyid:23:52:79:DC:26:37:92:B7:E7:56:62:85:43:31:49:D7:A2:74:7D:63
+
+    Signature Algorithm: sha256WithRSAEncryption
+         85:6d:7a:24:9f:00:b9:26:e3:c1:02:bc:9c:0d:00:97:ba:5d:
+         2c:84:0f:ba:dc:d9:e3:2a:7f:e5:1e:f9:4c:7d:e6:3d:17:65:
+         17:78:9f:07:dc:72:c7:4d:40:ae:58:f3:10:41:b3:e3:4d:ea:
+         9f:f3:43:55:03:c2:98:be:60:af:0b:0d:75:07:68:67:18:8c:
+         29:dc:51:be:d1:ae:77:0f:4b:aa:da:83:a1:6f:39:9b:94:f6:
+         b5:98:4b:f2:59:60:88:2f:4a:26:f2:21:9f:48:75:88:a9:9d:
+         48:20:7b:35:f7:24:1c:ea:55:5d:8a:9f:fd:c6:d1:7a:cb:96:
+         e1:0e:b3:1f:84:dd:d7:40:a9:b8:9f:20:0c:39:99:61:70:81:
+         4c:57:65:fa:67:87:e4:e4:8b:c8:16:bb:52:c5:a1:ca:70:84:
+         50:96:1a:74:d6:7b:07:70:ee:0f:27:5a:d1:1b:27:48:40:e4:
+         67:b3:69:62:db:db:fc:0f:d8:59:b8:70:1e:6a:f2:bc:6b:a8:
+         39:a4:6d:d4:e4:4c:41:26:40:04:2d:ff:5a:3f:62:f8:a8:26:
+         6c:55:bb:36:b2:1d:ad:20:69:f4:81:57:48:e5:1a:1f:b7:39:
+         c0:58:35:10:88:a0:14:54:9b:89:dd:72:da:10:cd:85:70:4b:
+         72:dc:68:bf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

pki/agent/agent.csr

+-----BEGIN CERTIFICATE REQUEST-----
+MIIC+DCCAeACAQAwgYAxCzAJBgNVBAYTAklOMRQwEgYDVQQIDAtNYWhhcmFzaHRy
+YTEPMA0GA1UEBwwGTXVtYmFpMQ8wDQYDVQQKDAZBbGJlcnQxDzANBgNVBAsMBnNl
+Y3JldDELMAkGA1UEAwwCbm8xGzAZBgkqhkiG9w0BCQEWDGJiQGdtYWlsLmNvbTCC
+ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONGLLt6dZizmIiYn3+FO/WD
+viVTZUhr4KrAWO1B7KboXooD46FNGH/dcyD3Dz6favBmrEvyXAO+yrm0j+wAUQ2A
+KVd08jGYdBCGxm6w4aPraWUUqMHK9ldnVxA8nCi4k7WqP37J6NIO4p89AAGM8lA+
+fndJviwBtKLIN0/kwhgX19SMmJT+JG9JGxWN2zvSNguDtnU/5S1/nYAAnZAmM3Gz
+J1rrx7Scs4JKiI012KEZLkDvwuUQT4UsbxmY5pJO6MKdmQ2ELkmF0PJah4GQbPaw
+kFsTos01uAfzYlh265M7azacoN9DdHtC8RmCnlDTAC/WvEHHQjOBwnd15ctA6KsC
+AwEAAaAyMBUGCSqGSIb3DQEJAjEIDAZhbGJlcnQwGQYJKoZIhvcNAQkHMQwMCmhl
+bGxvd29ybGQwDQYJKoZIhvcNAQELBQADggEBAMfI/lqz8bTSIpGto7r0l17e47oL
+kiZtz/Ua1Whw/E4A7HS0AFOBQv0mIEaTbYQ2FfRJ9vyNoROTZUyqUtOgV98tWsdX
+cpFQ51zkp0Ej/M2xyPETa4BGJ1lJHAyay//1+0sxLtG6BEW6XvlVRAHrb19UDt+E
+9ANb48Ilr6Dr40MM1sHFboAs3XFxUmsPVY+GaFXYJMI3Oexs9AQ/TuDVCScljxD2
+QnQzVRizY0KLJcsIrzPwi3vyG1vvUxVD0MppWIL6E+u5fryS7fd9lPQ6S73swRJX
+vu3WaXQ8wWwRlPV+vNiMsQxzcJ/qxA9vnPvhr6tgr9FLZX5jzmiPCEW+HX8=
+-----END CERTIFICATE REQUEST-----

pki/agent/ca.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

pki/agent/openssl.cnf

+#
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# Note that you can include other files from the main configuration
+# file using the .include directive.
+#.include filename
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+RANDFILE		= $ENV::HOME/.rnd
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		= 
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= ./	# Where everything is kept
+certs		= $dir/certs		# Where the issued certs are kept
+crl_dir		= $dir/crl		# Where the issued crl are kept
+database	= $dir/index.txt	# database index file.
+#unique_subject	= no			# Set to 'no' to allow creation of
+					# several certs with same subject.
+new_certs_dir	= $dir/newcerts		# default place for new certs.
+
+certificate	= $dir/cacert.pem 	# The CA certificate
+serial		= $dir/serial 		# The current serial number
+crlnumber	= $dir/crlnumber	# the current crl number
+					# must be commented out to leave a V1 CRL
+crl		= $dir/crl.pem 		# The current CRL
+private_key	= $dir/private/cakey.pem# The private key
+RANDFILE	= $dir/private/.rand	# private random number file
+
+x509_extensions	= usr_cert		# The extensions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt 	= ca_default		# Subject Name options
+cert_opt 	= ca_default		# Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 365			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= default		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= 2048
+default_keyfile 	= privkey.pem
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extensions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options. 
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= AU
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= Some-State
+
+localityName			= Locality Name (eg, city)
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (e.g. server FQDN or YOUR name)
+commonName_max			= 64
+
+emailAddress			= Email Address
+emailAddress_max		= 64
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1	# the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir		= ./demoCA		# TSA root directory
+serial		= $dir/tsaserial	# The current serial number (mandatory)
+crypto_device	= builtin		# OpenSSL engine to use for signing
+signer_cert	= $dir/tsacert.pem 	# The TSA signing certificate
+					# (optional)
+certs		= $dir/cacert.pem	# Certificate chain to include in reply
+					# (optional)
+signer_key	= $dir/private/tsakey.pem # The TSA private key (optional)
+signer_digest  = sha256			# Signing digest to use. (Optional)
+default_policy	= tsa_policy1		# Policy if request did not specify it
+					# (optional)
+other_policies	= tsa_policy2, tsa_policy3	# acceptable policies (optional)
+digests     = sha1, sha256, sha384, sha512  # Acceptable message digests (mandatory)
+accuracy	= secs:1, millisecs:500, microsecs:100	# (optional)
+clock_precision_digits  = 0	# number of digits after dot. (optional)
+ordering		= yes	# Is ordering defined for timestamps?
+				# (optional, default: no)
+tsa_name		= yes	# Must the TSA name be included in the reply?
+				# (optional, default: no)
+ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
+				# (optional, default: no)
+ess_cert_id_alg		= sha1	# algorithm to compute certificate
+				# identifier (optional, default: sha1)

pki/agent/private-key2048.pem

+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

pki/agent/public-key.pem

+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40Ysu3p1mLOYiJiff4U7
+9YO+JVNlSGvgqsBY7UHspuheigPjoU0Yf91zIPcPPp9q8GasS/JcA77KubSP7ABR
+DYApV3TyMZh0EIbGbrDho+tpZRSowcr2V2dXEDycKLiTtao/fsno0g7inz0AAYzy
+UD5+d0m+LAG0osg3T+TCGBfX1IyYlP4kb0kbFY3bO9I2C4O2dT/lLX+dgACdkCYz
+cbMnWuvHtJyzgkqIjTXYoRkuQO/C5RBPhSxvGZjmkk7owp2ZDYQuSYXQ8lqHgZBs
+9rCQWxOizTW4B/NiWHbrkztrNpyg30N0e0LxGYKeUNMAL9a8QcdCM4HCd3Xly0Do
+qwIDAQAB
+-----END PUBLIC KEY-----

pki/boss/agent.crt

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4096 (0x1000)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=IN, ST=Maharashtra, L=Mumbai, O=Albert, OU=Secret, CN=Albert/emailAddress=albert@fake.com
+        Validity
+            Not Before: Nov 17 08:41:11 2019 GMT
+            Not After : Nov 16 08:41:11 2020 GMT
+        Subject: C=IN, ST=Maharashtra, O=Albert, OU=secret, CN=no/emailAddress=bb@gmail.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:e3:46:2c:bb:7a:75:98:b3:98:88:98:9f:7f:85:
+                    3b:f5:83:be:25:53:65:48:6b:e0:aa:c0:58:ed:41:
+                    ec:a6:e8:5e:8a:03:e3:a1:4d:18:7f:dd:73:20:f7:
+                    0f:3e:9f:6a:f0:66:ac:4b:f2:5c:03:be:ca:b9:b4:
+                    8f:ec:00:51:0d:80:29:57:74:f2:31:98:74:10:86:
+                    c6:6e:b0:e1:a3:eb:69:65:14:a8:c1:ca:f6:57:67:
+                    57:10:3c:9c:28:b8:93:b5:aa:3f:7e:c9:e8:d2:0e:
+                    e2:9f:3d:00:01:8c:f2:50:3e:7e:77:49:be:2c:01:
+                    b4:a2:c8:37:4f:e4:c2:18:17:d7:d4:8c:98:94:fe:
+                    24:6f:49:1b:15:8d:db:3b:d2:36:0b:83:b6:75:3f:
+                    e5:2d:7f:9d:80:00:9d:90:26:33:71:b3:27:5a:eb:
+                    c7:b4:9c:b3:82:4a:88:8d:35:d8:a1:19:2e:40:ef:
+                    c2:e5:10:4f:85:2c:6f:19:98:e6:92:4e:e8:c2:9d:
+                    99:0d:84:2e:49:85:d0:f2:5a:87:81:90:6c:f6:b0:
+                    90:5b:13:a2:cd:35:b8:07:f3:62:58:76:eb:93:3b:
+                    6b:36:9c:a0:df:43:74:7b:42:f1:19:82:9e:50:d3:
+                    00:2f:d6:bc:41:c7:42:33:81:c2:77:75:e5:cb:40:
+                    e8:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                C8:70:26:B2:E8:58:35:B4:A2:53:E6:A7:09:58:67:0C:5A:D3:1E:37
+            X509v3 Authority Key Identifier: 
+                keyid:23:52:79:DC:26:37:92:B7:E7:56:62:85:43:31:49:D7:A2:74:7D:63
+
+    Signature Algorithm: sha256WithRSAEncryption
+         85:6d:7a:24:9f:00:b9:26:e3:c1:02:bc:9c:0d:00:97:ba:5d:
+         2c:84:0f:ba:dc:d9:e3:2a:7f:e5:1e:f9:4c:7d:e6:3d:17:65:
+         17:78:9f:07:dc:72:c7:4d:40:ae:58:f3:10:41:b3:e3:4d:ea:
+         9f:f3:43:55:03:c2:98:be:60:af:0b:0d:75:07:68:67:18:8c:
+         29:dc:51:be:d1:ae:77:0f:4b:aa:da:83:a1:6f:39:9b:94:f6:
+         b5:98:4b:f2:59:60:88:2f:4a:26:f2:21:9f:48:75:88:a9:9d:
+         48:20:7b:35:f7:24:1c:ea:55:5d:8a:9f:fd:c6:d1:7a:cb:96:
+         e1:0e:b3:1f:84:dd:d7:40:a9:b8:9f:20:0c:39:99:61:70:81:
+         4c:57:65:fa:67:87:e4:e4:8b:c8:16:bb:52:c5:a1:ca:70:84:
+         50:96:1a:74:d6:7b:07:70:ee:0f:27:5a:d1:1b:27:48:40:e4:
+         67:b3:69:62:db:db:fc:0f:d8:59:b8:70:1e:6a:f2:bc:6b:a8:
+         39:a4:6d:d4:e4:4c:41:26:40:04:2d:ff:5a:3f:62:f8:a8:26:
+         6c:55:bb:36:b2:1d:ad:20:69:f4:81:57:48:e5:1a:1f:b7:39:
+         c0:58:35:10:88:a0:14:54:9b:89:dd:72:da:10:cd:85:70:4b:
+         72:dc:68:bf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

pki/boss/agent.csr

+-----BEGIN CERTIFICATE REQUEST-----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=
+-----END CERTIFICATE REQUEST-----

pki/boss/ca.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

pki/boss/ca.key

+-----BEGIN ENCRYPTED PRIVATE KEY-----
+MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIO+luhXDLPvcCAggA
+MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECBS+X9Bs2lBNBIIEyBnm1eFKSvTL
+K7rnvfFzirAykbSxt55Mtzj3lDKxNi/80eaIxtS+x3fs7B5GQ3XHzTjk2TA/bwRD
+rUyCvlkZtyHW8qc0B0QOlTOTi4aeg0T0vhaDG69XmgkIIYqBpnN5wqVTgeV7jI2I
+1NYYb5zTRI8bQvkb7G4kt2Y6vvCtDKAKVJMppYGF4+HSKOfT2apWZOTVt+yS8+Rh
+I5JFrVx4B23F6N1ArqJZs9fuH5aD64J1hEtaNkNdNSJECS3ORibFsZZXML7Txn6i
+Qp9Vqe2BeFWL43TL8FWXle2VSVqH6Aj01IyD3uPl3ed1CARRb8V6tqSPbdsLh1V5
+1MT22sLxePmZUqGOt0z/1ZsJfCMFiRAWvfF8LFI7Uu5MvIVWAfJQrQKW1mxmHtE5
+68Pul/UyO+wNcoTcD1u6ze51p7BkTLGctQjE9aefNduVCrEo+nlFxLyAC3Fu6lQl
+0qiJN+chBnO+2mz++MwjWSiFgyx/xrCv+mZQiOIll9ToLVx1+Ieb4CriNoMcDbzY
+uCOjXeqpoTc16rjsYuzAVVk/sQBfTV+5qVY7lULtyRtCiQSWqkONwnQBeH07b/OG
+LawYF56j91/4b2ihcm4xGC8C8lnFN8U20iblm7r0nVN6dPfEcCBYHQO5o0NbL4J9
+A8JxAfQCceaPzVyGLFBNhd51HclgnDXRMCKcVZwdHD5RJ/Mifv82V7L7zd8+aKGg
+hEel2dVx1qRCaAXNOvZxwPVkjBGRUeegQQFfpgu0K3NRAF3ogz+6gNOCbp3oqNVR
+l0DSNxkuBmw5g6mT4Pd/Kj1CKGD/OwQJzxH1vOkwKdQKmBALLedydus4z9AffbFp
+a61LbjQslczztVsDjS9cuDpuQi0kEE1YtiT9WkAiitoNj0/KNEvwFU/AN3yDc14y
+zwh54u7x5/XNLrTWxJtOS/qpLPWqCUz1KFZa1c4TcfaJE/prNm/e7Qmm8DLhZk/g
+qUmfB+QYgfzNN8/15vxztbbBhPQqoW4oifbvujEyAGytdkxJwd4hOndQmmTa/gYO
+xFQXwcGicSaljrYURGSOpGdzKxONiarHmWkYuT3Z6yRh1kJ47n+RVW94RPB4w2UF
+tbIOzSGEKczGaezVnezHv3FPbf6YHXNRgGrgjyTm4toVMyKFLGUvPER2sgUYG24s
+paHTIFBMQm5j5zuzbuVQg2FUEVHsaWqcxIvsdF16esrlXz2yjZ42ixYhtyrHqtYa
+U7RMeFusaVjzpzH6A0LvySo8ftTANF1yMmqkx/iUqhkqVw/+JspJPRqFzEiVlK2n
+oSWnphzPCIB0PU4rDbUiAWJgJneuQ4ysidAKORddm85nPDLoitoX4ZG7IUOjNJI6
+DJ6M3AUaqAZimSOFxhm/f7H46FPWEjTQqKQoxh7dY/VLuO/WLX2Qk8EGE2a60Aub
+fEghaJ+0/dW37uNvTEgOp9+CvUV/uYOPitaZlqiolxvi0q+o8kaJDBkyl0VJsBmg
+3O95/G3aLlEHpV/ZDHVlG+hIUtOyw5FfoEygoD02ZH9/V696uAGDP2EDmJ56aG0H
+dvouY7lwnK91AvKlGdbthpGF/lH5mQSjvkNfdiDUffKKY/GEGU5lXZ7vMyW/byLR
+LC7ZMr7YqOv75Orl84t/DQ==
+-----END ENCRYPTED PRIVATE KEY-----

pki/boss/index.txt

+V	201116084111Z		1000	unknown	/C=IN/ST=Maharashtra/O=Albert/OU=secret/CN=no/emailAddress=bb@gmail.com

pki/boss/index.txt.attr

+unique_subject = yes

pki/boss/newcerts/1000.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4096 (0x1000)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=IN, ST=Maharashtra, L=Mumbai, O=Albert, OU=Secret, CN=Albert/emailAddress=albert@fake.com
+        Validity
+            Not Before: Nov 17 08:41:11 2019 GMT
+            Not After : Nov 16 08:41:11 2020 GMT
+        Subject: C=IN, ST=Maharashtra, O=Albert, OU=secret, CN=no/emailAddress=bb@gmail.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:e3:46:2c:bb:7a:75:98:b3:98:88:98:9f:7f:85:
+                    3b:f5:83:be:25:53:65:48:6b:e0:aa:c0:58:ed:41:
+                    ec:a6:e8:5e:8a:03:e3:a1:4d:18:7f:dd:73:20:f7:
+                    0f:3e:9f:6a:f0:66:ac:4b:f2:5c:03:be:ca:b9:b4:
+                    8f:ec:00:51:0d:80:29:57:74:f2:31:98:74:10:86:
+                    c6:6e:b0:e1:a3:eb:69:65:14:a8:c1:ca:f6:57:67:
+                    57:10:3c:9c:28:b8:93:b5:aa:3f:7e:c9:e8:d2:0e:
+                    e2:9f:3d:00:01:8c:f2:50:3e:7e:77:49:be:2c:01:
+                    b4:a2:c8:37:4f:e4:c2:18:17:d7:d4:8c:98:94:fe:
+                    24:6f:49:1b:15:8d:db:3b:d2:36:0b:83:b6:75:3f:
+                    e5:2d:7f:9d:80:00:9d:90:26:33:71:b3:27:5a:eb:
+                    c7:b4:9c:b3:82:4a:88:8d:35:d8:a1:19:2e:40:ef:
+                    c2:e5:10:4f:85:2c:6f:19:98:e6:92:4e:e8:c2:9d:
+                    99:0d:84:2e:49:85:d0:f2:5a:87:81:90:6c:f6:b0:
+                    90:5b:13:a2:cd:35:b8:07:f3:62:58:76:eb:93:3b:
+                    6b:36:9c:a0:df:43:74:7b:42:f1:19:82:9e:50:d3:
+                    00:2f:d6:bc:41:c7:42:33:81:c2:77:75:e5:cb:40:
+                    e8:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                C8:70:26:B2:E8:58:35:B4:A2:53:E6:A7:09:58:67:0C:5A:D3:1E:37
+            X509v3 Authority Key Identifier: 
+                keyid:23:52:79:DC:26:37:92:B7:E7:56:62:85:43:31:49:D7:A2:74:7D:63
+
+    Signature Algorithm: sha256WithRSAEncryption
+         85:6d:7a:24:9f:00:b9:26:e3:c1:02:bc:9c:0d:00:97:ba:5d:
+         2c:84:0f:ba:dc:d9:e3:2a:7f:e5:1e:f9:4c:7d:e6:3d:17:65:
+         17:78:9f:07:dc:72:c7:4d:40:ae:58:f3:10:41:b3:e3:4d:ea:
+         9f:f3:43:55:03:c2:98:be:60:af:0b:0d:75:07:68:67:18:8c:
+         29:dc:51:be:d1:ae:77:0f:4b:aa:da:83:a1:6f:39:9b:94:f6:
+         b5:98:4b:f2:59:60:88:2f:4a:26:f2:21:9f:48:75:88:a9:9d:
+         48:20:7b:35:f7:24:1c:ea:55:5d:8a:9f:fd:c6:d1:7a:cb:96:
+         e1:0e:b3:1f:84:dd:d7:40:a9:b8:9f:20:0c:39:99:61:70:81:
+         4c:57:65:fa:67:87:e4:e4:8b:c8:16:bb:52:c5:a1:ca:70:84:
+         50:96:1a:74:d6:7b:07:70:ee:0f:27:5a:d1:1b:27:48:40:e4:
+         67:b3:69:62:db:db:fc:0f:d8:59:b8:70:1e:6a:f2:bc:6b:a8:
+         39:a4:6d:d4:e4:4c:41:26:40:04:2d:ff:5a:3f:62:f8:a8:26:
+         6c:55:bb:36:b2:1d:ad:20:69:f4:81:57:48:e5:1a:1f:b7:39:
+         c0:58:35:10:88:a0:14:54:9b:89:dd:72:da:10:cd:85:70:4b:
+         72:dc:68:bf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

pki/boss/openssl.cnf

+#
+# OpenSSL example configuration file.
+# This is mostly being used for generation of certificate requests.
+#
+
+# Note that you can include other files from the main configuration
+# file using the .include directive.
+#.include filename
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME			= .
+RANDFILE		= $ENV::HOME/.rnd
+
+# Extra OBJECT IDENTIFIER info:
+#oid_file		= $ENV::HOME/.oid
+oid_section		= new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions		= 
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+####################################################################
+[ ca ]
+default_ca	= CA_default		# The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir		= ./	# Where everything is kept
+certs		= $dir/certs		# Where the issued certs are kept
+crl_dir		= $dir/crl		# Where the issued crl are kept
+database	= $dir/index.txt	# database index file.
+#unique_subject	= no			# Set to 'no' to allow creation of
+					# several certs with same subject.
+new_certs_dir	= $dir/newcerts		# default place for new certs.
+
+certificate	= $dir/cacert.pem 	# The CA certificate
+serial		= $dir/serial 		# The current serial number
+crlnumber	= $dir/crlnumber	# the current crl number
+					# must be commented out to leave a V1 CRL
+crl		= $dir/crl.pem 		# The current CRL
+private_key	= $dir/private/cakey.pem# The private key
+RANDFILE	= $dir/private/.rand	# private random number file
+
+x509_extensions	= usr_cert		# The extensions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt 	= ca_default		# Subject Name options
+cert_opt 	= ca_default		# Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions	= crl_ext
+
+default_days	= 365			# how long to certify for
+default_crl_days= 30			# how long before next CRL
+default_md	= default		# use public key default MD
+preserve	= no			# keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy		= policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName		= match
+stateOrProvinceName	= match
+organizationName	= match
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName		= optional
+stateOrProvinceName	= optional
+localityName		= optional
+organizationName	= optional
+organizationalUnitName	= optional
+commonName		= supplied
+emailAddress		= optional
+
+####################################################################
+[ req ]
+default_bits		= 2048
+default_keyfile 	= privkey.pem
+distinguished_name	= req_distinguished_name
+attributes		= req_attributes
+x509_extensions	= v3_ca	# The extensions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options. 
+# default: PrintableString, T61String, BMPString.
+# pkix	 : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= AU
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= Some-State
+
+localityName			= Locality Name (eg, city)
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+#organizationalUnitName_default	=
+
+commonName			= Common Name (e.g. server FQDN or YOUR name)
+commonName_max			= 64
+
+emailAddress			= Email Address
+emailAddress_max		= 64
+
+# SET-ex3			= SET extension number 3
+
+[ req_attributes ]
+challengePassword		= A challenge password
+challengePassword_min		= 4
+challengePassword_max		= 20
+
+unstructuredName		= An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Some might want this also
+# nsCertType = sslCA, emailCA
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# Here are some examples of the usage of nsCertType. If it is omitted
+# the certificate can be used for anything *except* object signing.
+
+# This is OK for an SSL server.
+# nsCertType			= server
+
+# For an object signing certificate this would be used.
+# nsCertType = objsign
+
+# For normal client use this is typical
+# nsCertType = client, email
+
+# and for everything including object signing:
+# nsCertType = client, email, objsign
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+#nsCaRevocationUrl		= http://www.domain.dom/ca-crl.pem
+#nsBaseUrl
+#nsRevocationUrl
+#nsRenewalUrl
+#nsCaPolicyUrl
+#nsSslServerName
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1	# the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir		= ./demoCA		# TSA root directory
+serial		= $dir/tsaserial	# The current serial number (mandatory)
+crypto_device	= builtin		# OpenSSL engine to use for signing
+signer_cert	= $dir/tsacert.pem 	# The TSA signing certificate
+					# (optional)
+certs		= $dir/cacert.pem	# Certificate chain to include in reply
+					# (optional)
+signer_key	= $dir/private/tsakey.pem # The TSA private key (optional)
+signer_digest  = sha256			# Signing digest to use. (Optional)
+default_policy	= tsa_policy1		# Policy if request did not specify it
+					# (optional)
+other_policies	= tsa_policy2, tsa_policy3	# acceptable policies (optional)
+digests     = sha1, sha256, sha384, sha512  # Acceptable message digests (mandatory)
+accuracy	= secs:1, millisecs:500, microsecs:100	# (optional)
+clock_precision_digits  = 0	# number of digits after dot. (optional)
+ordering		= yes	# Is ordering defined for timestamps?
+				# (optional, default: no)
+tsa_name		= yes	# Must the TSA name be included in the reply?
+				# (optional, default: no)
+ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
+				# (optional, default: no)
+ess_cert_id_alg		= sha1	# algorithm to compute certificate
+				# identifier (optional, default: sha1)

pki/boss/serial

+1001

pki/boss/serial.old

+1000

pki/commands.txt

+self-signed certificate for CA ---->
+openssl req -new -x509 -keyout ca.key -out ca.crt -config openssl.cnf
+
+Get information about key --- >
+openssl rsa -in ca.key -text -pubin(optional for public key)
+
+Get information about certificate ---> (useful to find version number of x509)
+openssl x509 -in ca.crt -text
+
+Get information about csr 
+openssl req -in agent.csr -textp
+
+---> Generate private key
+openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out private-key2048.pem 
+
+---> Generate Public key
+openssl pkey -in private-key2048.pem -out public-key.pem -pubout
+
+----> Crete new certificate signing request 
+openssl req -new -key private-key2048.pem -out agent.csr -config openssl.cnf
+
+"Above command is quite similar to the one we used in creating self-signed certificate
+for the CA. The main difference is the-x509 option. Without it, the command generates a 
+request; with it, the command generates a self-signed certificate."
+
+
+
+---> create certificate
+openssl ca -in agent.csr -out agent.crt -cert ca.crt -keyfile ca.key -config openssl.cnf
+
+----> verify certificate
+openssl verify -CAfile ca.crt agent.crt
\ No newline at end of file

week10/for-stduents/sniff.py

+from scapy.all import *
+
+def print_pkt(pkt):
+	pkt.show()
+
+sniff(filter='icmp', prn=print_pkt)

week10/for-stduents/spoof.py

+from scapy.all import *
+a = IP()
+a.dst = '10.0.2.5' # victim
+b = ICMP()
+p = a/b
+send(p)

week6/commands5.txt

@@ -13,6 +13,7 @@ openssl pkey -in public-key.pem -pubin -text
 ---> using genrsa
 openssl genrsa -out key.pem 1024
 
+
 openssl rsa -in key.pem -text -noout
 
 openssl rsa -in key.pem -pubout -out pub-key.pem

week6/mess_dec.txt

+sdfkjsdlfjsdlfksdjflksdjflksdjflksdfjsdlkfjsdlkfjsdlkfjsdlfksj dflksdjflksdjflskdf sldkfjsdlfjsdlkfjsdlkfjsdlkfjsldkfjslkdfj

week6/mess_enc.txt

+d?وs0hh:2
+K?
YclZC"(,]h`@H{h
nbߡ;jp^Dj
p8<%fo7_Tm_=`95C)54mm{ky[]+9EB7q'%JՓ@8
Dɼ>$$᫲39.SSc<m
+xʹƱjTiO2JY}F(Z>d؂
\ No newline at end of file

week6/message.txt

-Hello world. Thi
\ No newline at end of file
+sdfkjsdlfjsdlfksdjflksdjflksdjflksdfjsdlkfjsdlkfjsdlkfjsdlfksj dflksdjflksdjflskdf sldkfjsdlfjsdlkfjsdlkfjsdlkfjsldkfjslkdfj

week6/private_enc.pem

+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,6DBAD6BA25DDFE1B
+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-----END RSA PRIVATE KEY-----

week6/programmingExercises/making faster/test_encrypt/C1

-Nӽ34dBIȴ	"*ymOH)|9\#ܱ6bko,	y>
--sQѯ
o`K($&R7H>lu9 
\ No newline at end of file
+bO*.Qt,
+mV`>sB7``)vOD`*'V4cݺ^Sl(Q05ʼn-2Mѐ:U̪DDbv&Ѽ^
PhL&ohv{hH<܀H
kYk&ӄUw/j;%G,M\aI#.˨N&lxщ`bZ\PX#܆(c	zdWZX2&?VY!JxiG@z+`;5

\ No newline at end of file

week6/programmingExercises/making faster/test_encrypt/C2

-s*={r
-jsƁ*_K-8~_
-QUduP`8}D1AII}?
-a`[npQGywW$Kxi(].BbzW7kS
ʭ45q
mRUƣ=p`1vM*raO^Cbatx),A#_t簨j5Ta
-pzXs\QeuT'O^+rH6P~-NGc	zdWZX2&?VY!JxiG@z+`;5

\ No newline at end of file
+Nӽ34dBIȴ	"*ymOH)|9\#ܱ6bko,	y>
+-sQѯ
o`K($&R7H>lu9 
\ No newline at end of file

week6/programmingExercises/making faster/test_encrypt/IV

-gisQJ)ͺF0
\ No newline at end of file
+gisQJ)ͺF
\ No newline at end of file

week6/programmingExercises/making faster/test_encrypt/c1

+Hֺ#~
+r:1nܜ'+GICGF黀a==	:yrLD]U$ݻ:a_QsiDu1El~82mtqy'8Gmփ{L/	"#H]CM=8!Y#<@OpE8Wa
+/y?9H#uro)wEGa=xN^rX.<D1p(kdn1L^bYm	
+ix~c	zdWZX2&?VY!JxiG@z+`;5

\ No newline at end of file

week6/programmingExercises/making faster/test_encrypt/c2

+Nӽ34dBIȴ	"*ymOH)|9\#ܱ6bko,	y>
+-sQѯ
o`K($&R7H>lu9 
\ No newline at end of file

week6/programmingExercises/making faster/test_encrypt/hybrid_test_encrypt.c

@@ -165,9 +165,9 @@ void hybrid_encrypt(char * symmetric_key_file, char* message_file, char* public_
     int ciphertext_len = encryptAES (aes_input, strlen ((char *)aes_input), symmKey, iv,
                               enc_out);
     enc_out[ciphertext_len]='\0';
-    FILE *C1 = fopen("C1","w");
-    FILE *C2 = fopen("C2","w");
-    FILE *IV = fopen("IV","w");
+    FILE *C1 = fopen("c1","w");
+    FILE *C2 = fopen("c2","w");
+    FILE *IV = fopen("iv","w");
     fprintf(C1,"%s",encKey);
     fprintf(C2,"%s",enc_out);
     fprintf(IV,"%s",iv);
@@ -175,6 +175,7 @@ void hybrid_encrypt(char * symmetric_key_file, char* message_file, char* public_
     fclose(C2);
     fclose(IV);
     fclose(fp);
+    puts("Done encrypting");
 }
 
 int main(int argc, char *argv[]) {
@@ -187,7 +188,7 @@ int main(int argc, char *argv[]) {
     hybrid_encrypt(argv[4],argv[1], argv[3]);
     decrypt(argv[2], "decrypted_message.txt");
     
-    printf("output : %d\n",compare_files("message.txt","decrypted_message.txt"));
+    // printf("output : %d\n",compare_files("message.txt","decrypted_message.txt"));
 	return 0;
 
 }

week6/programmingExercises/making faster/test_encrypt/iv

+gisQJ)ͺF,
\ No newline at end of file

week6/public_key.pem

+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOfjiQtxpYDpMy+rXqct
+wRc4mcLInKTYMmtPRGAAAKjm0RKiGaOp/2gklSxhrrZebxLhqnrWQUpCTsNXeiMe
+cPhKNVBlYFhmid6d/cmMcn3G+0F2K5T4H87Hzi9LhYcjPwVsfIZRwdlemGFn79cY
+2HC+oP8xYEqFri/Trk8U5gvJEkigfDhNGPpmUmGmWL/23MhxXlh/zHhrbwKkNfIp
+dN74p+hHh4XsOQNgWWLBDxEN34cCenjjMbszsMM98BZKV/l3fM48IQyEAF5UibtQ
+OcFWPLEVKZ2u87EEXgrsMTiR/tHQiGp2d2VfCgSRyYri3NDS325ehanE59ldU4rK
++wIDAQAB
+-----END PUBLIC KEY-----

week7-hash-mac-digsig/commands.txt

 openssl dgst <dgstType> <filename>
 
 dgstType : -md5 -sha1 -sha256
+
+
+to generate keyed hash "abcd.." is the key
+openssl dgst -md5 -hmac "abcdefg" filename
+
+
+----> sign 
+openssl dgst -sha256 -sign private-key.pem -out data.sig message.txt
+----> verify signature
+openssl dgst -sha256 -verify public-key.pem -signature data.sig message.txt
\ No newline at end of file

week7-hash-mac-digsig/dgst1.txt

-b1d98ede2dfed945f6e54a38bb05b84fc7ac8243e6358486a5ff52638786
-a93b
+b5ffb7cc30ee693eff50555a157919a8d728074c

week7-hash-mac-digsig/dgst2.txt

-b1d98ede2dfed945f6e54a38bb05b84fc7ac8243e6358486a5ff52638786
-a93b
+c818812381ded375b8b76a63171f2256019a535f

week7-hash-mac-digsig/message2.txt

+sdl;fksdlkfjsdlfkjsdlkfjlskdfjsdlfkjsdlkfjsdlf

week7-hash-mac-digsig/signed-hash/message.txt

+�dl;fksdlkfjsdlfkjsdlkfjlskdfjsdlfkjsdlkfjsdlf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjfl
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjflf
+dslkjf
\ No newline at end of file

week7-hash-mac-digsig/signed-hash/private-key.pem

+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

week7-hash-mac-digsig/signed-hash/public-key.pem

+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp97Jc1QjTV5eLwp64eAo
+SEhW5N4TIuiMUwEFraoOZDZD6QK70aD7L1bLXJ99/D2/uqFowJjOE/4yWacUAyWN
+ZUlasOy/G65ViSp4UF+jiu7nNN1ITIDS2vFvo0gQyw8dRqvtuRu2PzzbO70S6sqf
+l+jPj1m1jCd/OYRWsfmWvkIsmexuzNvEx09l4sNNWE9TLTMv8PN843VjIe9HfThv
+TfuUFnwYFO7xm4pEwpWCftbo9Q8suU0MIb0UWO5aaHEgp93V5pQdli+gFkh3TBNJ
++Y/1WuZ8gUyvInausU04BItIMVSO89C9b5q1HPKaU3ShrsCT/PaWIz8Y5lIT1/uT
+jQIDAQAB
+-----END PUBLIC KEY-----

week9 lab tls-ssl/for_students/albert-http/index.html

+<HTML>
+
+<HEAD>
+
+<TITLE>Unsecure site</TITLE>
+
+</HEAD>
+
+
+<BODY>
+
+<H1>Welcome Agent X </H1>
+
+<p> This is the unsecure version of this site. </p>
+
+<form method="post">
+  <div class="container">
+    <label for="uname"><b>Username</b></label>
+    <input type="text" placeholder="Enter Username" name="uname" required>
+
+    <label for="psw"><b>Password</b></label>
+    <input type="password" placeholder="Enter Password" name="psw" required>
+
+    <button type="submit">Login</button>
+    
+  </div>
+
+</form>
+
+</BODY>
+
+
+</HTML>
+
+ 

week9 lab tls-ssl/for_students/albert-https/index.html

+<HTML>
+
+<HEAD>
+
+<TITLE>Secure site</TITLE>
+
+</HEAD>
+
+
+<BODY>
+
+<H1>Welcome Agent X </H1>
+
+<p> This is the secure version of this site. </p>
+
+<form method="post">
+  <div class="container">
+    <label for="uname"><b>Username</b></label>
+    <input type="text" placeholder="Enter Username" name="uname" required>
+
+    <label for="psw"><b>Password</b></label>
+    <input type="password" placeholder="Enter Password" name="psw" required>
+
+    <button type="submit">Login</button>
+    
+  </div>
+
+</form>
+
+</BODY>
+
+
+</HTML>
+
+ 

week9 lab tls-ssl/for_students/albert.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

week9 lab tls-ssl/for_students/website.crt

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4097 (0x1001)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=in, ST=MH, L=Mumbai, O=IIT, OU=CSE
+        Validity
+            Not Before: Oct  1 22:59:39 2019 GMT
+            Not After : Sep 30 22:59:39 2020 GMT
+        Subject: C=In, ST=Maharashtra, L=Mumbai, O=IITB, OU=CSE, CN=www.albert-secure.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b1:dc:e0:eb:eb:bf:fe:08:21:5b:4f:10:57:21:
+                    84:f4:88:0c:a0:5f:42:48:b2:32:b7:6b:7a:94:30:
+                    ea:ca:b7:98:21:54:e4:bd:37:cf:2d:de:e7:46:2e:
+                    d5:c0:09:7b:54:9a:9e:53:cf:25:ca:20:30:6c:51:
+                    61:0d:d7:be:b9:7c:26:25:1d:ae:93:87:7c:fb:ce:
+                    67:e8:6e:73:cf:06:9a:c5:50:38:b8:db:e0:23:01:
+                    95:6f:56:e0:d9:56:3e:34:ec:f1:bc:98:b4:55:17:
+                    59:e2:92:71:70:76:f1:8c:f7:3e:59:7c:ad:d0:da:
+                    06:be:a3:ba:e6:f5:0d:03:8d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                A7:F7:F9:CE:B0:2A:2E:8B:B0:EF:9E:1B:60:4F:89:16:0B:9C:89:1B
+            X509v3 Authority Key Identifier: 
+                keyid:B7:CB:17:E7:4B:C8:BE:F2:20:D6:57:51:56:79:25:54:80:59:E5:08
+
+    Signature Algorithm: sha256WithRSAEncryption
+         73:59:97:37:b3:ed:72:71:82:22:8b:35:9d:2a:0d:62:c9:99:
+         e5:05:b0:76:c4:f7:c4:53:63:3d:0a:8f:a7:de:18:6a:c7:fa:
+         9e:b5:a7:1a:64:a4:14:f2:50:37:36:db:e0:01:49:2d:46:d3:
+         39:43:dc:3f:3b:59:50:e7:29:e4:5b:30:c3:83:26:fe:16:e7:
+         12:4c:44:4b:70:d8:ee:6f:03:fa:8f:ca:d0:5f:f4:a1:54:b1:
+         48:b2:9f:b6:c2:9a:00:a0:56:38:68:4f:c1:57:05:bd:1c:2a:
+         65:93:96:95:c3:5d:72:be:26:db:a5:f6:bd:14:82:4a:6f:e9:
+         30:26:61:a0:e4:1d:28:4f:64:5c:61:09:44:1e:77:79:6a:31:
+         bc:5b:cf:01:ae:3b:6f:ba:0a:6a:6d:8f:41:c0:c2:63:22:66:
+         18:e2:0b:b5:84:7c:de:49:28:94:fb:46:a4:2e:15:db:e4:f8:
+         dc:9c:51:19:1a:ac:8a:4a:1f:45:dc:de:ef:cb:2e:29:90:83:
+         19:9f:6b:d0:69:02:38:91:ec:f3:9d:5b:5b:b2:b1:8e:0a:83:
+         8a:cb:b7:c1:a5:1e:1c:2c:09:4b:33:18:af:45:94:2a:c6:1f:
+         76:4d:a2:a3:dc:c9:3d:a8:da:dc:29:42:80:69:d4:76:e3:9d:
+         1f:fa:98:c7
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

week9 lab tls-ssl/for_students/website.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4097 (0x1001)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=in, ST=MH, L=Mumbai, O=IIT, OU=CSE
+        Validity
+            Not Before: Oct  1 22:59:39 2019 GMT
+            Not After : Sep 30 22:59:39 2020 GMT
+        Subject: C=In, ST=Maharashtra, L=Mumbai, O=IITB, OU=CSE, CN=www.albert-secure.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:b1:dc:e0:eb:eb:bf:fe:08:21:5b:4f:10:57:21:
+                    84:f4:88:0c:a0:5f:42:48:b2:32:b7:6b:7a:94:30:
+                    ea:ca:b7:98:21:54:e4:bd:37:cf:2d:de:e7:46:2e:
+                    d5:c0:09:7b:54:9a:9e:53:cf:25:ca:20:30:6c:51:
+                    61:0d:d7:be:b9:7c:26:25:1d:ae:93:87:7c:fb:ce:
+                    67:e8:6e:73:cf:06:9a:c5:50:38:b8:db:e0:23:01:
+                    95:6f:56:e0:d9:56:3e:34:ec:f1:bc:98:b4:55:17:
+                    59:e2:92:71:70:76:f1:8c:f7:3e:59:7c:ad:d0:da:
+                    06:be:a3:ba:e6:f5:0d:03:8d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                A7:F7:F9:CE:B0:2A:2E:8B:B0:EF:9E:1B:60:4F:89:16:0B:9C:89:1B
+            X509v3 Authority Key Identifier: 
+                keyid:B7:CB:17:E7:4B:C8:BE:F2:20:D6:57:51:56:79:25:54:80:59:E5:08
+
+    Signature Algorithm: sha256WithRSAEncryption
+         73:59:97:37:b3:ed:72:71:82:22:8b:35:9d:2a:0d:62:c9:99:
+         e5:05:b0:76:c4:f7:c4:53:63:3d:0a:8f:a7:de:18:6a:c7:fa:
+         9e:b5:a7:1a:64:a4:14:f2:50:37:36:db:e0:01:49:2d:46:d3:
+         39:43:dc:3f:3b:59:50:e7:29:e4:5b:30:c3:83:26:fe:16:e7:
+         12:4c:44:4b:70:d8:ee:6f:03:fa:8f:ca:d0:5f:f4:a1:54:b1:
+         48:b2:9f:b6:c2:9a:00:a0:56:38:68:4f:c1:57:05:bd:1c:2a:
+         65:93:96:95:c3:5d:72:be:26:db:a5:f6:bd:14:82:4a:6f:e9:
+         30:26:61:a0:e4:1d:28:4f:64:5c:61:09:44:1e:77:79:6a:31:
+         bc:5b:cf:01:ae:3b:6f:ba:0a:6a:6d:8f:41:c0:c2:63:22:66:
+         18:e2:0b:b5:84:7c:de:49:28:94:fb:46:a4:2e:15:db:e4:f8:
+         dc:9c:51:19:1a:ac:8a:4a:1f:45:dc:de:ef:cb:2e:29:90:83:
+         19:9f:6b:d0:69:02:38:91:ec:f3:9d:5b:5b:b2:b1:8e:0a:83:
+         8a:cb:b7:c1:a5:1e:1c:2c:09:4b:33:18:af:45:94:2a:c6:1f:
+         76:4d:a2:a3:dc:c9:3d:a8:da:dc:29:42:80:69:d4:76:e3:9d:
+         1f:fa:98:c7
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,B160DEE46DF95D5EA4CCD37C853D2418
+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-----END RSA PRIVATE KEY-----