net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem - Issue 1414393008: Add scripts to generate simple test data for certificate verification.

Unified Diff: net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem

Issue 1414393008: Add scripts to generate simple test data for certificate verification. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages

Patch Set: Created 5 years, 2 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

« net/data/verify_certificate_chain_unittest/openssl_conf.py ('K') | « net/data/verify_certificate_chain_unittest/target-not-end-entity.pem ('k') | net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem

diff --git a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem

new file mode 100644

index 0000000000000000000000000000000000000000..b9ad8774577394510d97f9af0c7feffff63612f6

--- /dev/null

+++ b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem

@@ -0,0 +1,247 @@

+[Created by: generate-target-signed-by-512bit-rsa.py]

+Certificate chain with 1 intermediary. The target certificate

+is signed using a weak RSA key (512-bit modulus)

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Intermediary

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Target

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:c8:5b:ad:84:e3:ed:c5:df:f8:56:3a:f8:be:5b:

+ 73:75:85:77:d6:56:ab:32:0d:39:ce:cc:5e:c8:7c:

+ df:8e:b0:ec:f6:d9:4e:c8:f4:3c:65:e8:4b:12:c8:

+ 8f:9e:c3:3a:76:b8:e2:b1:fb:fa:14:8c:2a:ab:14:

+ 53:ea:36:73:d2:3f:a1:a9:d1:8d:bf:9a:f1:cf:a8:

+ 9a:0b:2b:e8:7c:90:a1:07:77:a1:55:49:8d:ba:1e:

+ 0a:f5:a1:35:eb:bd:5a:79:88:03:95:90:64:7a:63:

+ a4:f4:59:60:76:8e:b9:51:55:91:06:99:8f:92:03:

+ 6a:3e:7f:c3:6b:79:62:86:ed:12:3c:4a:bd:5e:e7:

+ 13:66:7b:a8:8d:bf:24:ed:64:1e:e5:bf:15:30:e7:

+ 10:41:3d:a8:3c:e1:f9:64:68:c1:d2:cf:6d:71:29:

+ 96:29:6b:b5:01:d4:eb:c2:61:9e:b1:53:3a:0f:a2:

+ f1:41:ea:85:14:2f:bb:d1:2e:d3:8d:6f:ea:c6:ee:

+ 6d:6f:0f:31:78:a8:b6:1a:52:41:c4:dc:05:f5:b5:

+ 77:5d:f6:67:36:bd:a8:14:87:4d:64:55:b6:6a:c3:

+ 14:22:bf:96:89:6a:d4:e6:47:e4:c1:4c:d3:ce:a8:

+ 18:1d:c9:fb:f3:61:74:df:ba:af:55:1f:3d:93:66:

+ 59:db

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 15:CF:99:16:65:4E:52:DD:B5:A1:77:C5:E0:87:47:6D:BE:14:67:78

+ X509v3 Authority Key Identifier:

+ keyid:65:CB:CE:36:6B:AC:32:D4:75:C8:A9:27:70:3C:48:98:FD:50:4B:17

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Intermediary.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Intermediary.crl

+ X509v3 Key Usage: critical

+ Digital Signature, Key Encipherment

+ X509v3 Extended Key Usage:

+ TLS Web Server Authentication, TLS Web Client Authentication

+ Signature Algorithm: sha256WithRSAEncryption

+ b1:c0:9a:79:94:0d:3d:4a:2a:24:ed:72:ef:f9:5a:5b:eb:e3:

+ 03:d8:10:25:76:59:95:de:ca:04:9c:25:56:ba:cc:b3:40:28:

+ 82:e4:56:20:31:de:de:a8:85:4a:a4:23:bc:5d:73:d8:44:2b:

+ 07:b0:ce:99:59:15:d9:18:69:56

+-----BEGIN CERTIFICATE-----

+MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl

+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD

+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIW62E

+4+3F3/hWOvi+W3N1hXfWVqsyDTnOzF7IfN+OsOz22U7I9Dxl6EsSyI+ewzp2uOKx

++/oUjCqrFFPqNnPSP6Gp0Y2/mvHPqJoLK+h8kKEHd6FVSY26Hgr1oTXrvVp5iAOV

+kGR6Y6T0WWB2jrlRVZEGmY+SA2o+f8NreWKG7RI8Sr1e5xNme6iNvyTtZB7lvxUw

+5xBBPag84flkaMHSz21xKZYpa7UB1OvCYZ6xUzoPovFB6oUUL7vRLtONb+rG7m1v

+DzF4qLYaUkHE3AX1tXdd9mc2vagUh01kVbZqwxQiv5aJatTmR+TBTNPOqBgdyfvz

+YXTfuq9VHz2TZlnbAgMBAAGjgekwgeYwHQYDVR0OBBYEFBXPmRZlTlLdtaF3xeCH

+R22+FGd4MB8GA1UdIwQYMBaAFGXLzjZrrDLUdcipJ3A8SJj9UEsXMD8GCCsGAQUF

+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk

+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu

+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF

+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBALHAmnmUDT1KKiTtcu/5Wlvr

+4wPYECV2WZXeygScJVa6zLNAKILkViAx3t6ohUqkI7xdc9hEKwewzplZFdkYaVY=

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 2 (0x2)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Intermediary

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (512 bit)

+ Modulus:

+ 00:de:29:ae:77:48:9c:90:70:78:54:da:89:3b:1a:

+ 39:af:f1:51:da:e4:5f:14:79:d1:a7:ae:5a:37:4e:

+ e7:88:8a:b7:f5:77:ed:38:b0:54:11:7c:31:72:6b:

+ c0:da:64:41:b5:fa:b6:67:0d:78:eb:54:72:90:25:

+ 53:c3:b2:9c:99

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 65:CB:CE:36:6B:AC:32:D4:75:C8:A9:27:70:3C:48:98:FD:50:4B:17

+ X509v3 Authority Key Identifier:

+ keyid:18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:18

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 69:d5:65:ff:bb:a9:1b:af:5b:37:c4:aa:6c:f4:8a:77:a6:7a:

+ b3:f2:6d:7d:b0:19:8e:ff:72:fc:31:fe:5e:96:ab:e3:14:96:

+ 81:02:cc:ee:c6:34:6e:a7:31:47:18:fb:92:b1:2b:14:ea:1b:

+ 95:2a:fe:8f:2a:ae:41:52:23:18:56:b2:bd:bc:17:93:31:0f:

+ e7:41:b0:27:30:99:f1:2c:89:45:0c:37:d3:6d:ee:6e:50:d7:

+ 7d:52:a2:af:ac:24:28:aa:1a:93:9f:52:3f:3c:e1:44:b1:8b:

+ 09:99:51:45:87:91:57:ae:71:f2:03:a1:07:9f:90:a3:e9:75:

+ 64:4b:dc:7f:34:26:89:8d:8e:f0:c3:21:de:5e:f1:3a:9e:ab:

+ b1:c6:3d:77:9f:50:ea:0d:80:59:27:8f:64:4c:1b:d5:75:01:

+ 29:a8:f7:e0:62:33:f3:c0:14:38:62:e4:29:0d:c6:4a:3c:f6:

+ 93:16:79:7f:99:7b:50:ff:1f:dc:38:a5:4a:ac:4c:9b:5c:16:

+ ed:90:37:87:3e:0d:b3:79:df:77:67:00:b7:9b:8b:9d:c4:41:

+ 37:f9:dd:fb:5d:d8:74:89:90:6c:7c:c9:80:44:1e:e8:f7:97:

+ 4b:85:b6:7f:73:b7:f0:75:2b:73:6b:78:b7:e5:02:dd:01:23:

+ 27:58:25:84

+-----BEGIN CERTIFICATE-----

+MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50

+ZXJtZWRpYXJ5MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN4prndInJBweFTaiTsa

+Oa/xUdrkXxR50aeuWjdO54iKt/V37TiwVBF8MXJrwNpkQbX6tmcNeOtUcpAlU8Oy

+nJkCAwEAAaOByzCByDAdBgNVHQ4EFgQUZcvONmusMtR1yKkncDxImP1QSxcwHwYD

+VR0jBBgwFoAUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwNwYIKwYBBQUHAQEEKzApMCcG

+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw

+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE

+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBp1WX/u6kb

+r1s3xKps9Ip3pnqz8m19sBmO/3L8Mf5elqvjFJaBAszuxjRupzFHGPuSsSsU6huV

+Kv6PKq5BUiMYVrK9vBeTMQ/nQbAnMJnxLIlFDDfTbe5uUNd9UqKvrCQoqhqTn1I/

+POFEsYsJmVFFh5FXrnHyA6EHn5Cj6XVkS9x/NCaJjY7wwyHeXvE6nquxxj13n1Dq

+DYBZJ49kTBvVdQEpqPfgYjPzwBQ4YuQpDcZKPPaTFnl/mXtQ/x/cOKVKrEybXBbt

+kDeHPg2zed93ZwC3m4udxEE3+d37Xdh0iZBsfMmARB7o95dLhbZ/c7fwdStza3i3

+5QLdASMnWCWE

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Root

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:c0:09:f4:9e:79:58:3e:c7:95:2b:65:8d:20:eb:

+ b0:28:e0:66:b9:87:5a:24:85:a0:e5:29:08:6d:07:

+ 41:1e:44:61:3f:95:24:83:71:14:6b:55:e1:9f:fd:

+ a0:b5:ee:63:d5:95:70:fe:6d:ad:dd:de:bb:88:3d:

+ 36:d4:41:6d:04:20:48:fb:15:1a:7d:82:4e:f3:ad:

+ 5f:80:45:b8:41:c0:79:e6:3d:e9:7c:ba:ca:14:3d:

+ f4:bf:81:c1:6e:95:f4:fe:2d:6d:05:22:d3:76:7a:

+ 91:74:06:aa:f0:1e:68:d2:b4:d8:33:9f:07:e6:d9:

+ af:94:9b:7a:8d:2a:cf:5f:ca:86:6a:73:38:62:3d:

+ 52:13:f9:03:f8:26:f3:71:96:8f:72:19:90:a9:58:

+ 25:bc:3d:b0:b2:95:81:db:2c:d6:8e:14:e8:7a:27:

+ 23:43:23:74:17:23:41:e3:59:9e:98:df:6a:eb:3a:

+ 6d:b7:cc:ec:3a:91:88:35:f8:cb:37:3b:4f:2c:a8:

+ 48:69:d4:94:7d:f3:e3:cc:ba:58:82:fb:92:b5:f6:

+ b0:b4:07:cf:65:58:7a:9c:31:e1:f0:2f:86:ff:63:

+ 59:35:be:3f:01:8f:92:25:ba:b9:0d:3b:96:4b:02:

+ 0f:8a:e3:1c:95:54:7e:a5:60:21:a0:10:37:21:e5:

+ ae:07

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:18

+ X509v3 Authority Key Identifier:

+ keyid:18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:18

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 49:ab:73:fe:09:f0:15:b7:5d:33:06:1f:f0:bd:30:b7:33:e9:

+ 9c:14:33:45:53:88:da:88:8b:47:ca:a2:a1:2b:48:87:b0:9c:

+ 0d:ab:9f:4a:39:86:4c:11:2f:3a:f3:c6:9f:8c:56:ba:fd:4e:

+ 51:31:22:9a:56:7a:01:9d:12:a8:f0:ee:8c:5e:ea:48:02:4f:

+ d6:18:84:e4:c8:8f:f3:f1:e5:c6:b1:bf:88:0b:26:0b:cc:d9:

+ f7:d9:17:ff:79:43:df:a6:a9:07:95:93:ca:9b:cd:70:91:01:

+ 06:83:7e:2e:b7:ca:06:09:3c:da:ea:50:7c:6e:10:e1:23:c1:

+ b2:32:4d:87:9a:03:ee:59:89:cd:02:5a:30:57:0d:ad:c5:bf:

+ 01:f6:d3:92:ff:01:51:34:98:d4:ac:d5:4a:f2:73:09:58:f4:

+ f3:cf:7b:2b:cf:a5:ff:e5:c1:ad:e5:c5:a0:96:4b:d8:63:aa:

+ 6c:23:bb:ce:21:ac:80:18:3f:25:0c:7f:25:5d:dc:15:f6:41:

+ bc:e0:8f:23:17:0c:50:13:a9:1e:ca:23:4b:05:65:b6:0d:b7:

+ 5b:35:82:33:30:5b:f4:14:77:c3:9a:e9:6d:d5:57:ec:e9:96:

+ 73:3d:19:88:26:27:8c:24:af:4f:9e:88:cb:cb:78:13:a5:15:

+ 6f:ca:59:22

+-----BEGIN TRUSTED_CERTIFICATE-----

+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v

+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAJ9J55WD7HlStljSDr

+sCjgZrmHWiSFoOUpCG0HQR5EYT+VJINxFGtV4Z/9oLXuY9WVcP5trd3eu4g9NtRB

+bQQgSPsVGn2CTvOtX4BFuEHAeeY96Xy6yhQ99L+BwW6V9P4tbQUi03Z6kXQGqvAe

+aNK02DOfB+bZr5Sbeo0qz1/KhmpzOGI9UhP5A/gm83GWj3IZkKlYJbw9sLKVgdss

+1o4U6HonI0MjdBcjQeNZnpjfaus6bbfM7DqRiDX4yzc7TyyoSGnUlH3z48y6WIL7

+krX2sLQHz2VYepwx4fAvhv9jWTW+PwGPkiW6uQ07lksCD4rjHJVUfqVgIaAQNyHl

+rgcCAwEAAaOByzCByDAdBgNVHQ4EFgQUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwHwYD

+VR0jBBgwFoAUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwNwYIKwYBBQUHAQEEKzApMCcG

+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw

+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE

+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBJq3P+CfAV

+t10zBh/wvTC3M+mcFDNFU4jaiItHyqKhK0iHsJwNq59KOYZMES8688afjFa6/U5R

+MSKaVnoBnRKo8O6MXupIAk/WGITkyI/z8eXGsb+ICyYLzNn32Rf/eUPfpqkHlZPK

+m81wkQEGg34ut8oGCTza6lB8bhDhI8GyMk2HmgPuWYnNAlowVw2txb8B9tOS/wFR

+NJjUrNVK8nMJWPTzz3srz6X/5cGt5cWglkvYY6psI7vOIayAGD8lDH8lXdwV9kG8

+4I8jFwxQE6keyiNLBWW2DbdbNYIzMFv0FHfDmult1Vfs6ZZzPRmIJieMJK9PnojL

+y3gTpRVvylki

+-----END TRUSTED_CERTIFICATE-----

+-----BEGIN TIME-----

+MTUwMzAyMTIwMDAwWg==

+-----END TIME-----

+-----BEGIN VERIFY_RESULT-----

+RkFJTA==

+-----END VERIFY_RESULT-----