Index: net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem |
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem |
new file mode 100644 |
index 0000000000000000000000000000000000000000..cafef8bc17f960bd2c6fa30a372edbc726b8226e |
--- /dev/null |
+++ b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem |
@@ -0,0 +1,252 @@ |
+[Created by: generate-target-signed-using-ecdsa.py] |
+ |
+Simple certificate where the intermediary has an EC key, but |
+the root and target contain RSA keys. |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 1 (0x1) |
+ Signature Algorithm: ecdsa-with-SHA256 |
+ Issuer: CN=Intermediary |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2016 GMT |
+ Subject: CN=Target |
+ Subject Public Key Info: |
+ Public Key Algorithm: rsaEncryption |
+ Public-Key: (2048 bit) |
+ Modulus: |
+ 00:c7:a5:97:73:19:8e:39:d8:c1:a5:34:30:08:81: |
+ c0:12:bc:5a:1d:42:cf:63:6a:10:68:94:50:43:7e: |
+ 1c:e5:62:a8:3d:77:7d:5a:30:e2:7c:dd:21:68:b0: |
+ c2:c6:ef:b4:0f:e3:88:ad:0b:2b:28:6b:1f:40:8c: |
+ ae:d1:a7:06:8b:f3:b3:d5:0e:48:f3:84:af:9d:e4: |
+ bd:0b:59:56:7b:16:40:be:c5:48:59:58:38:94:3d: |
+ 78:ac:eb:50:53:cc:22:56:ca:1b:c6:50:31:11:78: |
+ 33:3f:d3:62:b6:2c:90:36:16:a8:71:10:77:e4:6e: |
+ ba:86:1a:da:07:9b:47:92:e6:3a:ca:36:da:72:62: |
+ e3:19:70:b9:60:23:60:7e:7d:56:46:f3:49:b7:15: |
+ 85:29:a2:77:00:25:0e:d4:d6:29:31:fc:03:d4:43: |
+ e8:10:cf:51:b9:a2:68:63:8a:01:91:70:9c:29:a4: |
+ 0a:1a:b8:03:c4:1e:d5:bd:51:85:7e:9a:9a:e5:d2: |
+ 04:26:1a:02:11:f2:75:9f:60:b6:39:8b:46:9b:48: |
+ 15:52:d8:44:55:54:cc:82:d1:1f:f6:eb:63:ab:90: |
+ ae:a0:5a:87:61:31:8b:83:7f:7d:bd:90:fa:fb:0d: |
+ ec:f3:8f:63:47:c1:4e:06:3e:05:f8:76:11:b2:a6: |
+ 59:55 |
+ Exponent: 65537 (0x10001) |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ 49:35:CD:0D:2E:4B:B7:13:BB:1C:4F:AB:B5:59:CA:96:E5:6B:78:CF |
+ X509v3 Authority Key Identifier: |
+ keyid:C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:AB |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Intermediary.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Intermediary.crl |
+ |
+ X509v3 Key Usage: critical |
+ Digital Signature, Key Encipherment |
+ X509v3 Extended Key Usage: |
+ TLS Web Server Authentication, TLS Web Client Authentication |
+ Signature Algorithm: ecdsa-with-SHA256 |
+ 30:65:02:31:00:a2:15:ec:4d:14:a0:4e:de:22:fc:41:3b:67: |
+ c5:f6:dc:1d:d9:4f:0a:b2:7b:39:be:90:a8:f9:52:3f:8a:24: |
+ 4d:18:51:3e:1f:0f:ca:64:9f:c9:6b:24:07:0f:a7:99:f2:02: |
+ 30:54:33:12:c0:a3:92:f2:04:e5:71:20:74:52:e4:20:74:61: |
+ f0:20:4c:a8:f4:26:cb:fa:c5:e2:56:1f:93:20:53:0c:3c:cd: |
+ 6f:21:4c:90:6f:e1:34:9c:30:0c:a1:05:23 |
+-----BEGIN CERTIFICATE----- |
+MIIC7DCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l |
+ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD |
+DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpZdzGY45 |
+2MGlNDAIgcASvFodQs9jahBolFBDfhzlYqg9d31aMOJ83SFosMLG77QP44itCyso |
+ax9AjK7RpwaL87PVDkjzhK+d5L0LWVZ7FkC+xUhZWDiUPXis61BTzCJWyhvGUDER |
+eDM/02K2LJA2FqhxEHfkbrqGGtoHm0eS5jrKNtpyYuMZcLlgI2B+fVZG80m3FYUp |
+oncAJQ7U1ikx/APUQ+gQz1G5omhjigGRcJwppAoauAPEHtW9UYV+mprl0gQmGgIR |
+8nWfYLY5i0abSBVS2ERVVMyC0R/262OrkK6gWodhMYuDf329kPr7Dezzj2NHwU4G |
+PgX4dhGypllVAgMBAAGjgekwgeYwHQYDVR0OBBYEFEk1zQ0uS7cTuxxPq7VZypbl |
+a3jPMB8GA1UdIwQYMBaAFMQFoUmlNlYL/Kh2m1AqcPu1xeirMD8GCCsGAQUFBwEB |
+BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy |
+eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy |
+bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB |
+BggrBgEFBQcDAjAKBggqhkjOPQQDAgNoADBlAjEAohXsTRSgTt4i/EE7Z8X23B3Z |
+Twqyezm+kKj5Uj+KJE0YUT4fD8pkn8lrJAcPp5nyAjBUMxLAo5LyBOVxIHRS5CB0 |
+YfAgTKj0Jsv6xeJWH5MgUww8zW8hTJBv4TScMAyhBSM= |
+-----END CERTIFICATE----- |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 2 (0x2) |
+ Signature Algorithm: sha256WithRSAEncryption |
+ Issuer: CN=Root |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2016 GMT |
+ Subject: CN=Intermediary |
+ Subject Public Key Info: |
+ Public Key Algorithm: id-ecPublicKey |
+ Public-Key: (384 bit) |
+ pub: |
+ 04:4b:29:88:21:da:e7:c0:8d:7b:8d:cf:69:2f:82: |
+ 6d:0a:e5:c3:63:6a:66:c6:16:13:ac:2f:10:b5:8b: |
+ 57:e8:26:d4:49:91:36:10:7c:dc:26:1b:1f:ec:85: |
+ 37:95:a2:9b:3f:63:d4:ff:1f:0f:27:ed:fa:2d:d2: |
+ 8f:5c:0c:87:11:2a:22:b7:d7:65:81:3b:f4:48:73: |
+ 64:dc:6c:30:34:a0:9c:2f:3d:f4:18:b1:40:39:08: |
+ e9:5f:df:41:ed:96:fc |
+ ASN1 OID: secp384r1 |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:AB |
+ X509v3 Authority Key Identifier: |
+ keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04 |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Root.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Root.crl |
+ |
+ X509v3 Key Usage: critical |
+ Certificate Sign, CRL Sign |
+ X509v3 Basic Constraints: critical |
+ CA:TRUE |
+ Signature Algorithm: sha256WithRSAEncryption |
+ 97:e3:d3:a7:ba:58:f3:2c:bb:91:8c:1f:47:7a:9d:ba:a3:9b: |
+ 2b:d5:16:64:7d:a6:0a:ab:2a:db:6b:fe:19:18:92:30:c2:3a: |
+ 97:17:c9:71:be:a7:e7:d3:6c:14:68:2d:06:5d:e4:85:a7:f2: |
+ 21:e1:33:1e:90:2e:da:f4:be:27:a7:c6:84:46:b0:4d:98:f3: |
+ de:cc:bf:68:31:56:c8:40:e2:b3:11:39:ef:65:d8:3f:47:a1: |
+ 69:87:2d:2c:4f:c8:46:0e:7e:7e:a6:23:23:73:4d:1b:d0:b2: |
+ 2a:50:bb:e5:fb:1a:58:a0:be:81:37:0b:a7:c4:86:45:ce:ef: |
+ a5:ab:73:69:cc:d4:ef:d0:91:45:e1:4d:67:03:3d:0d:79:5c: |
+ 60:6b:8c:ce:a4:b3:c5:e4:45:51:68:fc:54:f7:9f:00:b8:8c: |
+ fb:30:c3:f7:9f:3a:92:16:53:ef:f5:24:12:f3:08:06:22:97: |
+ 5f:f8:3e:ff:6b:ac:d4:d4:e5:49:c4:2b:a3:56:30:7e:d7:87: |
+ 0d:b3:53:39:7e:50:0e:6d:38:8a:0b:31:b2:1b:10:73:df:d5: |
+ 67:70:55:6c:f5:ec:22:91:7a:0c:ba:66:cd:0d:2c:24:35:da: |
+ a0:06:c3:dc:d6:0f:0f:6e:ea:63:bf:c9:ba:ae:98:46:04:d6: |
+ 0f:cc:3e:0e |
+-----BEGIN CERTIFICATE----- |
+MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
+ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAESymIIdrnwI17jc9pL4Jt |
+CuXDY2pmxhYTrC8QtYtX6CbUSZE2EHzcJhsf7IU3laKbP2PU/x8PJ+36LdKPXAyH |
+ESoit9dlgTv0SHNk3GwwNKCcLz30GLFAOQjpX99B7Zb8o4HLMIHIMB0GA1UdDgQW |
+BBTEBaFJpTZWC/yodptQKnD7tcXoqzAfBgNVHSMEGDAWgBSM2N5laFB/OJ6VuWk4 |
+KAjHa4FqBDA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt |
+Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv |
+ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w |
+DQYJKoZIhvcNAQELBQADggEBAJfj06e6WPMsu5GMH0d6nbqjmyvVFmR9pgqrKttr |
+/hkYkjDCOpcXyXG+p+fTbBRoLQZd5IWn8iHhMx6QLtr0vienxoRGsE2Y897Mv2gx |
+VshA4rMROe9l2D9HoWmHLSxPyEYOfn6mIyNzTRvQsipQu+X7GligvoE3C6fEhkXO |
+76Wrc2nM1O/QkUXhTWcDPQ15XGBrjM6ks8XkRVFo/FT3nwC4jPsww/efOpIWU+/1 |
+JBLzCAYil1/4Pv9rrNTU5UnEK6NWMH7Xhw2zUzl+UA5tOIoLMbIbEHPf1WdwVWz1 |
+7CKRegy6Zs0NLCQ12qAGw9zWDw9u6mO/ybqumEYE1g/MPg4= |
+-----END CERTIFICATE----- |
+ |
+Certificate: |
+ Data: |
+ Version: 3 (0x2) |
+ Serial Number: 1 (0x1) |
+ Signature Algorithm: sha256WithRSAEncryption |
+ Issuer: CN=Root |
+ Validity |
+ Not Before: Jan 1 12:00:00 2015 GMT |
+ Not After : Jan 1 12:00:00 2016 GMT |
+ Subject: CN=Root |
+ Subject Public Key Info: |
+ Public Key Algorithm: rsaEncryption |
+ Public-Key: (2048 bit) |
+ Modulus: |
+ 00:ce:54:ae:89:0b:94:ed:af:85:32:d3:25:71:d4: |
+ 9b:f0:54:e5:4e:47:4d:90:91:77:f1:16:ba:e6:a1: |
+ c3:e2:55:83:d4:8c:c7:d3:a5:74:77:d8:3e:8e:c0: |
+ 4d:54:a7:87:fc:ea:82:2f:a0:07:72:c8:9f:5b:d8: |
+ fd:c7:94:6e:16:64:f9:92:4e:08:30:70:11:83:61: |
+ 65:55:a7:94:3b:a2:09:c8:c8:49:c5:4d:d2:f7:bf: |
+ 75:e5:b2:6b:b0:e1:40:79:0f:af:14:90:67:38:f0: |
+ 3d:47:dd:cd:f9:7b:57:c3:d3:03:9d:67:1d:2f:1e: |
+ 22:54:07:9e:71:2f:a6:9f:05:d8:8c:63:2d:9a:4f: |
+ 97:6d:12:35:9f:d4:c8:ba:88:ff:3c:f4:7f:5b:1d: |
+ 0f:81:c0:a0:21:98:8b:4f:08:af:84:2a:a6:ee:e7: |
+ 85:e1:f7:12:f7:23:c8:fd:2c:43:f4:0a:5f:d7:e1: |
+ 47:1c:4e:65:e4:13:c6:0f:37:5d:62:78:f7:cd:41: |
+ b5:67:65:77:4a:9c:de:da:e3:4c:57:0a:a1:2f:2d: |
+ 37:6e:41:05:a0:60:bf:57:b8:13:69:51:98:f1:a7: |
+ 5f:90:e6:57:c9:74:11:cc:b8:70:75:25:15:11:d2: |
+ 0f:31:28:44:d0:14:37:9b:a7:c4:4b:07:8c:95:4d: |
+ 26:45 |
+ Exponent: 65537 (0x10001) |
+ X509v3 extensions: |
+ X509v3 Subject Key Identifier: |
+ 8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04 |
+ X509v3 Authority Key Identifier: |
+ keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04 |
+ |
+ Authority Information Access: |
+ CA Issuers - URI:http://url-for-aia/Root.cer |
+ |
+ X509v3 CRL Distribution Points: |
+ |
+ Full Name: |
+ URI:http://url-for-crl/Root.crl |
+ |
+ X509v3 Key Usage: critical |
+ Certificate Sign, CRL Sign |
+ X509v3 Basic Constraints: critical |
+ CA:TRUE |
+ Signature Algorithm: sha256WithRSAEncryption |
+ 0a:fe:e1:09:d2:48:71:2c:48:23:41:a9:43:00:98:b0:29:6f: |
+ 1f:fc:7a:60:ee:16:b4:90:34:2c:de:89:19:5a:9f:ec:65:1a: |
+ 9f:e6:f3:73:de:50:3f:50:97:0b:55:d7:4d:80:98:64:39:b9: |
+ a5:83:d5:0f:5f:28:79:52:30:f9:ab:3b:1b:c7:bd:8e:ed:de: |
+ 03:ea:fc:7b:c2:3f:35:24:1c:82:b1:9e:cb:ac:9c:cb:7d:38: |
+ 4d:38:18:01:86:6c:57:77:a1:a9:af:62:95:bb:86:46:ca:17: |
+ 66:6e:29:a1:0a:c5:fe:22:1f:43:71:5e:ed:f3:3c:5e:a8:b0: |
+ 41:cb:b2:56:5e:cb:15:5f:4d:3d:2e:31:89:7d:51:7a:bd:61: |
+ 30:1f:17:49:a4:e3:5e:6c:af:1c:a7:18:63:bb:6f:14:5f:29: |
+ 94:77:50:45:5d:9c:24:ee:bd:a9:6a:b9:b5:b6:82:ee:d3:d7: |
+ 00:06:9c:dd:7c:f3:26:fa:b2:34:00:65:1b:e9:c7:83:d7:f1: |
+ d8:cb:77:fe:c9:d8:79:81:93:d7:81:56:16:86:32:f7:2e:77: |
+ 10:24:05:4d:e3:52:a2:3d:65:77:1a:19:4e:92:1c:24:dd:da: |
+ 7d:5c:fb:0d:b0:94:79:c7:58:f4:f1:2c:7e:d6:02:69:3f:63: |
+ c1:d2:ae:df |
+-----BEGIN TRUSTED_CERTIFICATE----- |
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5UrokLlO2vhTLTJXHU |
+m/BU5U5HTZCRd/EWuuahw+JVg9SMx9OldHfYPo7ATVSnh/zqgi+gB3LIn1vY/ceU |
+bhZk+ZJOCDBwEYNhZVWnlDuiCcjIScVN0ve/deWya7DhQHkPrxSQZzjwPUfdzfl7 |
+V8PTA51nHS8eIlQHnnEvpp8F2IxjLZpPl20SNZ/UyLqI/zz0f1sdD4HAoCGYi08I |
+r4Qqpu7nheH3EvcjyP0sQ/QKX9fhRxxOZeQTxg83XWJ4981BtWdld0qc3trjTFcK |
+oS8tN25BBaBgv1e4E2lRmPGnX5DmV8l0Ecy4cHUlFRHSDzEoRNAUN5unxEsHjJVN |
+JkUCAwEAAaOByzCByDAdBgNVHQ4EFgQUjNjeZWhQfzielblpOCgIx2uBagQwHwYD |
+VR0jBBgwFoAUjNjeZWhQfzielblpOCgIx2uBagQwNwYIKwYBBQUHAQEEKzApMCcG |
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAK/uEJ0khx |
+LEgjQalDAJiwKW8f/Hpg7ha0kDQs3okZWp/sZRqf5vNz3lA/UJcLVddNgJhkObml |
+g9UPXyh5UjD5qzsbx72O7d4D6vx7wj81JByCsZ7LrJzLfThNOBgBhmxXd6Gpr2KV |
+u4ZGyhdmbimhCsX+Ih9DcV7t8zxeqLBBy7JWXssVX009LjGJfVF6vWEwHxdJpONe |
+bK8cpxhju28UXymUd1BFXZwk7r2parm1toLu09cABpzdfPMm+rI0AGUb6ceD1/HY |
+y3f+ydh5gZPXgVYWhjL3LncQJAVN41KiPWV3GhlOkhwk3dp9XPsNsJR5x1j08Sx+ |
+1gJpP2PB0q7f |
+-----END TRUSTED_CERTIFICATE----- |
+ |
+-----BEGIN TIME----- |
+MTUwMzAyMTIwMDAwWg== |
+-----END TIME----- |
+ |
+-----BEGIN VERIFY_RESULT----- |
+U1VDQ0VTUw== |
+-----END VERIFY_RESULT----- |