Add aes256_anon test, expand readme certificate section

Create test configs for SignAndEncrypt / Aes256_Sha256_RsaPss with
anonymous auth. Expand the readme certificate section with an identity
table and clearer trust store explanation.

4 files changed, 44 insertions, 0 deletions

diff --git a/tests/aes256_anon/client.conf b/tests/aes256_anon/client.conf
new file mode 100644
index 0000000..2818355
--- /dev/null
+++ b/tests/aes256_anon/client.conf
@@ -0,0 +1,9 @@
+# Client — test: aes256_anon
+
+applicationUri = urn:localhost:bobink:ClientFindServers
+certificate = certs/ClientFindServers_cert.der
+privateKey = certs/ClientFindServers_key.der
+securityMode = SignAndEncrypt
+securityPolicy = Aes256_Sha256_RsaPss
+authMode = anonymous
+trustStore = certs/trust/client
diff --git a/tests/aes256_anon/server_lds.conf b/tests/aes256_anon/server_lds.conf
new file mode 100644
index 0000000..587820f
--- /dev/null
+++ b/tests/aes256_anon/server_lds.conf
@@ -0,0 +1,11 @@
+# ServerLDS — test: aes256_anon
+
+port = 14840
+applicationUri = urn:localhost:bobink:ServerLDS
+certificate = certs/ServerLDS_cert.der
+privateKey = certs/ServerLDS_key.der
+cleanupTimeout = 60
+
+authMode = anonymous
+
+trustStore = certs/trust/server_lds
diff --git a/tests/aes256_anon/server_register.conf b/tests/aes256_anon/server_register.conf
new file mode 100644
index 0000000..a2ce852
--- /dev/null
+++ b/tests/aes256_anon/server_register.conf
@@ -0,0 +1,12 @@
+# ServerRegister server config — test: aes256_anon
+
+port = 14841
+applicationUri = urn:localhost:bobink:ServerRegister
+certificate = certs/ServerRegister_cert.der
+privateKey = certs/ServerRegister_key.der
+
+registerInterval = 10
+
+authMode = anonymous
+
+trustStore = certs/trust/server_register
diff --git a/tests/aes256_anon/server_register_client.conf b/tests/aes256_anon/server_register_client.conf
new file mode 100644
index 0000000..46e8659
--- /dev/null
+++ b/tests/aes256_anon/server_register_client.conf
@@ -0,0 +1,12 @@
+# ServerRegister client config — test: aes256_anon
+
+applicationUri = urn:localhost:bobink:ServerRegister
+certificate = certs/ServerRegisterClient_cert.der
+privateKey = certs/ServerRegisterClient_key.der
+
+securityMode = SignAndEncrypt
+securityPolicy = Aes256_Sha256_RsaPss
+
+authMode = anonymous
+
+trustStore = certs/trust/server_register_client