Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(128)

Unified Diff: net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem

Issue 1414393008: Add scripts to generate simple test data for certificate verification. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages
Patch Set: Created 5 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
new file mode 100644
index 0000000000000000000000000000000000000000..cafef8bc17f960bd2c6fa30a372edbc726b8226e
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
@@ -0,0 +1,252 @@
+[Created by: generate-target-signed-using-ecdsa.py]
+
+Simple certificate where the intermediary has an EC key, but
+the root and target contain RSA keys.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: ecdsa-with-SHA256
+ Issuer: CN=Intermediary
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c7:a5:97:73:19:8e:39:d8:c1:a5:34:30:08:81:
+ c0:12:bc:5a:1d:42:cf:63:6a:10:68:94:50:43:7e:
+ 1c:e5:62:a8:3d:77:7d:5a:30:e2:7c:dd:21:68:b0:
+ c2:c6:ef:b4:0f:e3:88:ad:0b:2b:28:6b:1f:40:8c:
+ ae:d1:a7:06:8b:f3:b3:d5:0e:48:f3:84:af:9d:e4:
+ bd:0b:59:56:7b:16:40:be:c5:48:59:58:38:94:3d:
+ 78:ac:eb:50:53:cc:22:56:ca:1b:c6:50:31:11:78:
+ 33:3f:d3:62:b6:2c:90:36:16:a8:71:10:77:e4:6e:
+ ba:86:1a:da:07:9b:47:92:e6:3a:ca:36:da:72:62:
+ e3:19:70:b9:60:23:60:7e:7d:56:46:f3:49:b7:15:
+ 85:29:a2:77:00:25:0e:d4:d6:29:31:fc:03:d4:43:
+ e8:10:cf:51:b9:a2:68:63:8a:01:91:70:9c:29:a4:
+ 0a:1a:b8:03:c4:1e:d5:bd:51:85:7e:9a:9a:e5:d2:
+ 04:26:1a:02:11:f2:75:9f:60:b6:39:8b:46:9b:48:
+ 15:52:d8:44:55:54:cc:82:d1:1f:f6:eb:63:ab:90:
+ ae:a0:5a:87:61:31:8b:83:7f:7d:bd:90:fa:fb:0d:
+ ec:f3:8f:63:47:c1:4e:06:3e:05:f8:76:11:b2:a6:
+ 59:55
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 49:35:CD:0D:2E:4B:B7:13:BB:1C:4F:AB:B5:59:CA:96:E5:6B:78:CF
+ X509v3 Authority Key Identifier:
+ keyid:C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:AB
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediary.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: ecdsa-with-SHA256
+ 30:65:02:31:00:a2:15:ec:4d:14:a0:4e:de:22:fc:41:3b:67:
+ c5:f6:dc:1d:d9:4f:0a:b2:7b:39:be:90:a8:f9:52:3f:8a:24:
+ 4d:18:51:3e:1f:0f:ca:64:9f:c9:6b:24:07:0f:a7:99:f2:02:
+ 30:54:33:12:c0:a3:92:f2:04:e5:71:20:74:52:e4:20:74:61:
+ f0:20:4c:a8:f4:26:cb:fa:c5:e2:56:1f:93:20:53:0c:3c:cd:
+ 6f:21:4c:90:6f:e1:34:9c:30:0c:a1:05:23
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediary
+ Subject Public Key Info:
+ Public Key Algorithm: id-ecPublicKey
+ Public-Key: (384 bit)
+ pub:
+ 04:4b:29:88:21:da:e7:c0:8d:7b:8d:cf:69:2f:82:
+ 6d:0a:e5:c3:63:6a:66:c6:16:13:ac:2f:10:b5:8b:
+ 57:e8:26:d4:49:91:36:10:7c:dc:26:1b:1f:ec:85:
+ 37:95:a2:9b:3f:63:d4:ff:1f:0f:27:ed:fa:2d:d2:
+ 8f:5c:0c:87:11:2a:22:b7:d7:65:81:3b:f4:48:73:
+ 64:dc:6c:30:34:a0:9c:2f:3d:f4:18:b1:40:39:08:
+ e9:5f:df:41:ed:96:fc
+ ASN1 OID: secp384r1
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:AB
+ X509v3 Authority Key Identifier:
+ keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 97:e3:d3:a7:ba:58:f3:2c:bb:91:8c:1f:47:7a:9d:ba:a3:9b:
+ 2b:d5:16:64:7d:a6:0a:ab:2a:db:6b:fe:19:18:92:30:c2:3a:
+ 97:17:c9:71:be:a7:e7:d3:6c:14:68:2d:06:5d:e4:85:a7:f2:
+ 21:e1:33:1e:90:2e:da:f4:be:27:a7:c6:84:46:b0:4d:98:f3:
+ de:cc:bf:68:31:56:c8:40:e2:b3:11:39:ef:65:d8:3f:47:a1:
+ 69:87:2d:2c:4f:c8:46:0e:7e:7e:a6:23:23:73:4d:1b:d0:b2:
+ 2a:50:bb:e5:fb:1a:58:a0:be:81:37:0b:a7:c4:86:45:ce:ef:
+ a5:ab:73:69:cc:d4:ef:d0:91:45:e1:4d:67:03:3d:0d:79:5c:
+ 60:6b:8c:ce:a4:b3:c5:e4:45:51:68:fc:54:f7:9f:00:b8:8c:
+ fb:30:c3:f7:9f:3a:92:16:53:ef:f5:24:12:f3:08:06:22:97:
+ 5f:f8:3e:ff:6b:ac:d4:d4:e5:49:c4:2b:a3:56:30:7e:d7:87:
+ 0d:b3:53:39:7e:50:0e:6d:38:8a:0b:31:b2:1b:10:73:df:d5:
+ 67:70:55:6c:f5:ec:22:91:7a:0c:ba:66:cd:0d:2c:24:35:da:
+ a0:06:c3:dc:d6:0f:0f:6e:ea:63:bf:c9:ba:ae:98:46:04:d6:
+ 0f:cc:3e:0e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ce:54:ae:89:0b:94:ed:af:85:32:d3:25:71:d4:
+ 9b:f0:54:e5:4e:47:4d:90:91:77:f1:16:ba:e6:a1:
+ c3:e2:55:83:d4:8c:c7:d3:a5:74:77:d8:3e:8e:c0:
+ 4d:54:a7:87:fc:ea:82:2f:a0:07:72:c8:9f:5b:d8:
+ fd:c7:94:6e:16:64:f9:92:4e:08:30:70:11:83:61:
+ 65:55:a7:94:3b:a2:09:c8:c8:49:c5:4d:d2:f7:bf:
+ 75:e5:b2:6b:b0:e1:40:79:0f:af:14:90:67:38:f0:
+ 3d:47:dd:cd:f9:7b:57:c3:d3:03:9d:67:1d:2f:1e:
+ 22:54:07:9e:71:2f:a6:9f:05:d8:8c:63:2d:9a:4f:
+ 97:6d:12:35:9f:d4:c8:ba:88:ff:3c:f4:7f:5b:1d:
+ 0f:81:c0:a0:21:98:8b:4f:08:af:84:2a:a6:ee:e7:
+ 85:e1:f7:12:f7:23:c8:fd:2c:43:f4:0a:5f:d7:e1:
+ 47:1c:4e:65:e4:13:c6:0f:37:5d:62:78:f7:cd:41:
+ b5:67:65:77:4a:9c:de:da:e3:4c:57:0a:a1:2f:2d:
+ 37:6e:41:05:a0:60:bf:57:b8:13:69:51:98:f1:a7:
+ 5f:90:e6:57:c9:74:11:cc:b8:70:75:25:15:11:d2:
+ 0f:31:28:44:d0:14:37:9b:a7:c4:4b:07:8c:95:4d:
+ 26:45
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04
+ X509v3 Authority Key Identifier:
+ keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 0a:fe:e1:09:d2:48:71:2c:48:23:41:a9:43:00:98:b0:29:6f:
+ 1f:fc:7a:60:ee:16:b4:90:34:2c:de:89:19:5a:9f:ec:65:1a:
+ 9f:e6:f3:73:de:50:3f:50:97:0b:55:d7:4d:80:98:64:39:b9:
+ a5:83:d5:0f:5f:28:79:52:30:f9:ab:3b:1b:c7:bd:8e:ed:de:
+ 03:ea:fc:7b:c2:3f:35:24:1c:82:b1:9e:cb:ac:9c:cb:7d:38:
+ 4d:38:18:01:86:6c:57:77:a1:a9:af:62:95:bb:86:46:ca:17:
+ 66:6e:29:a1:0a:c5:fe:22:1f:43:71:5e:ed:f3:3c:5e:a8:b0:
+ 41:cb:b2:56:5e:cb:15:5f:4d:3d:2e:31:89:7d:51:7a:bd:61:
+ 30:1f:17:49:a4:e3:5e:6c:af:1c:a7:18:63:bb:6f:14:5f:29:
+ 94:77:50:45:5d:9c:24:ee:bd:a9:6a:b9:b5:b6:82:ee:d3:d7:
+ 00:06:9c:dd:7c:f3:26:fa:b2:34:00:65:1b:e9:c7:83:d7:f1:
+ d8:cb:77:fe:c9:d8:79:81:93:d7:81:56:16:86:32:f7:2e:77:
+ 10:24:05:4d:e3:52:a2:3d:65:77:1a:19:4e:92:1c:24:dd:da:
+ 7d:5c:fb:0d:b0:94:79:c7:58:f4:f1:2c:7e:d6:02:69:3f:63:
+ c1:d2:ae:df
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----

Powered by Google App Engine
This is Rietveld 408576698