Qt Cryptographic Architecture (QCA)
Description
QCA is a library that provides an easy API for a range of cryptographic features, including SSL/TLS, X.509 certificates, SASL, OpenPGP, smartcards, and much more.

SEE ALSO: README

This directory holds PKITS (PKI Test Suite).
The certificates and CRLs used for the tests are made by the NIST (csrc.nist.gov/groups/ST/crypto_apps_infra/pki/pkitesting.html">http://csrc.nist.gov/groups/ST/crypto_apps_infra/pki/pkitesting.html), if the certificates are expired (for i.e.: This lib is still used after 10 years again), you can download the certificates on the NIST's website.
- PKITS v1.0.1, posted on 2011.

These are the tools used to generate test certificates for unit testing in QCA.
You need to have openssl installed.
Do not try to generate certificates blindly. You always need to read and understand the openssl.cnf options to make any kind of sensible certificate.
The PEM passphrase is always "start".

This test is intended to verify the subject hostname indication extension (see RFC3546 Section 3.1).
It requires network access, and contacts a public test server (sni.velox.ch).
Note that this test requires a suitable backend (plugin). If you are running this test with OpenSSL 0.9.8 or earlier, then you can expect it to fail.