net: update public key block for the correct Cyber CA certs.

net: update public key block for the correct Cyber CA certs.

Thanks to nahi on Twitter for pointing out that I had the wrong certificate for
DigiNotar's Cyber CA and thus blocked the wrong public key. According to the
audit report, this isn't panic-worthy as the misissued certs off this
intermediate have expired.

BUG=96252
TEST=net_unittests


Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=100852

[wtc, 2011-09-12 18:59:52]

LGTM.

Probably should also reference the original bug BUG=94673.

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate.cc
File net/base/x509_certificate.cc (right):

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate.cc#ne...
net/base/x509_certificate.cc:964: // Issuer: CN=Entrust.net x2 and self-signed
Do you have the certificate signed by Entrust.net x2?

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate_unitt...
File net/base/x509_certificate_unittest.cc (right):

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate_unitt...
net/base/x509_certificate_unittest.cc:538: static const char*
kDigiNotarFilenames[] = {
Nit: need one more 'const', after '*'.

[agl, 2011-09-12 22:34:28]

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate.cc
File net/base/x509_certificate.cc (right):

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate.cc#ne...
net/base/x509_certificate.cc:964: // Issuer: CN=Entrust.net x2 and self-signed
On 2011/09/12 18:59:53, wtc wrote:
> Do you have the certificate signed by http://Entrust.net x2?

Sadly not and I can't find it either. (I don't believe that I've seen it, but
the fact that it's the same public key came from a phone call with EnTrust.)

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate_unitt...
File net/base/x509_certificate_unittest.cc (right):

http://codereview.chromium.org/7865027/diff/1/net/base/x509_certificate_unitt...
net/base/x509_certificate_unittest.cc:538: static const char*
kDigiNotarFilenames[] = {
On 2011/09/12 18:59:53, wtc wrote:
> Nit: need one more 'const', after '*'.

Done.

[commit-bot: I haz the power, 2011-09-13 03:36:23]

Change committed as 100852