# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

scenario CRLDP

entity Root
  type Root

entity CA0
  type Intermediate
  issuer Root

entity CA1
  type Intermediate
  crldp CA0
  issuer CA0
  serial 10
    aia CA0:Root

entity EE11
  type EE
  crldp CA0
  issuer CA1

entity CA2
  type Intermediate
  crldp CA0
  issuer CA0
  serial 20
    aia CA0:Root

entity EE21
  type EE
  issuer CA2

entity EE1
  type EE
  crldp CA0
  issuer CA0
  serial 30
    aia CA0:Root

entity EE2
  type EE
  crldp CA0
  issuer CA0
  serial 40
    aia CA0:Root

crl Root
crl CA0
crl CA1
crl CA2

revoke CA0
  serial 20

revoke CA0
  serial 40

copycrl CA0

db All

import Root::CTu,CTu,CTu

# intermediate CA - OK, EE - OK
verify EE11:CA1
  cert CA1:CA0
  trust Root:
  fetch
  rev_type chain
  rev_flags requireFreshInfo
  rev_mtype crl
  result pass

# intermediate CA - revoked, EE - OK
verify EE21:CA2
  cert CA2:CA0
  trust Root:
  fetch
  rev_type chain
  rev_flags requireFreshInfo
  rev_mtype crl
  result fail

# direct EE - OK 
verify EE1:CA0
  trust Root:
  fetch
  rev_type leaf
  rev_flags requireFreshInfo
  rev_mtype crl
  result pass

# direct EE - revoked
verify EE2:CA0
  trust Root:
  fetch
  rev_type leaf
  rev_flags requireFreshInfo
  rev_mtype crl
  result fail