Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(643)

Unified Diff: net/tools/quic/certs/ca.cnf

Issue 1366693003: Remove name constraints from QUIC test leaf cert. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | net/tools/quic/certs/leaf.cnf » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: net/tools/quic/certs/ca.cnf
diff --git a/net/tools/quic/certs/ca.cnf b/net/tools/quic/certs/ca.cnf
index da0e416af5c6e4a6dd3d32c4586c48f2f9cf3ad0..b9ac53a34a1abe1f49cf0616e2b846cf81d28c79 100644
--- a/net/tools/quic/certs/ca.cnf
+++ b/net/tools/quic/certs/ca.cnf
@@ -36,23 +36,11 @@ subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
extendedKeyUsage = serverAuth,clientAuth
-[name_constraint_bad]
-# A leaf cert that will violate the root's imposed name constraints
-basicConstraints = critical, CA:false
-subjectKeyIdentifier = hash
-authorityKeyIdentifier = keyid:always
-extendedKeyUsage = serverAuth,clientAuth
-subjectAltName = @san_name_constraint_bad
-
[ca_cert]
# Extensions to add when signing a request for an intermediate/CA cert
basicConstraints = critical, CA:true
subjectKeyIdentifier = hash
-#authorityKeyIdentifier = keyid:always
keyUsage = critical, keyCertSign, cRLSign
-nameConstraints = permitted;DNS:mail.example.com
-nameConstraints = permitted;DNS:mail.example.org
-nameConstraints = permitted;DNS:www.example.com
[crl_extensions]
# Extensions to add when signing a CRL
« no previous file with comments | « no previous file | net/tools/quic/certs/leaf.cnf » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698