net/data/verify_certificate_chain_unittest/unknown-root.pem - Issue 1414393008: Add scripts to generate simple test data for certificate verification.

Unified Diff: net/data/verify_certificate_chain_unittest/unknown-root.pem

Issue 1414393008: Add scripts to generate simple test data for certificate verification. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages

Patch Set: Created 5 years, 2 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

« net/data/verify_certificate_chain_unittest/openssl_conf.py ('K') | « net/data/verify_certificate_chain_unittest/target-wrong-signature.pem ('k') | net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/verify_certificate_chain_unittest/unknown-root.pem

diff --git a/net/data/verify_certificate_chain_unittest/unknown-root.pem b/net/data/verify_certificate_chain_unittest/unknown-root.pem

new file mode 100644

index 0000000000000000000000000000000000000000..59d3308f95f10f9dd8c53f2088096da2dcacc657

--- /dev/null

+++ b/net/data/verify_certificate_chain_unittest/unknown-root.pem

@@ -0,0 +1,191 @@

+[Created by: generate-unknown-root.py]

+Simple certificate chain with 1 intermediary, but the root is

+not in trust store

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Intermediary

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Target

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:a7:a7:9f:7d:20:e6:23:62:f2:bf:27:09:09:ae:

+ 11:78:c7:1d:f2:ed:e2:fa:4d:55:b1:c8:ca:60:82:

+ 42:fd:5e:8e:4c:48:e2:0e:8e:27:36:c9:2b:4f:2b:

+ 30:94:51:6c:a0:01:55:b3:38:4b:aa:73:f0:9c:90:

+ f2:a9:8f:5e:fa:ca:d9:07:4b:86:56:7c:9d:7d:43:

+ 30:a0:92:e1:6c:19:e8:5e:68:57:b6:f9:5c:53:f8:

+ ed:4e:6a:22:a1:c9:be:8c:f1:03:6f:05:bf:1b:01:

+ 64:26:fd:6c:c0:0d:dc:55:e4:fc:0e:48:c8:29:b3:

+ be:8e:3c:00:ca:69:1b:22:7e:2d:da:72:e6:f3:64:

+ 78:99:6c:a2:38:06:62:4e:2e:1f:ee:df:64:cc:4a:

+ 77:86:10:d3:84:63:1f:a0:3c:a5:76:bf:c7:56:22:

+ 27:ff:b5:6c:93:1c:8a:4d:6c:e0:3e:1b:f0:5a:39:

+ 94:ca:28:27:bc:70:48:f4:13:d6:df:d6:b1:11:6f:

+ 40:ae:b3:98:19:78:e5:f8:7e:79:7b:2c:95:f1:f1:

+ f5:d6:8b:66:03:40:3c:d5:cf:35:65:1d:14:0e:ac:

+ bb:a5:b4:dd:0c:0f:6e:a1:6a:69:f8:54:e8:46:ea:

+ 5f:98:ab:1a:b5:aa:52:56:9f:ad:02:8c:20:e5:a4:

+ d7:15

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 67:54:57:46:B5:AD:7A:5C:A7:B3:AB:C1:B0:AD:FA:B5:F0:02:DC:6C

+ X509v3 Authority Key Identifier:

+ keyid:75:6C:7D:98:64:46:F7:F6:0D:55:A9:3E:38:3A:5B:C9:DB:DA:DA:6F

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Intermediary.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Intermediary.crl

+ X509v3 Key Usage: critical

+ Digital Signature, Key Encipherment

+ X509v3 Extended Key Usage:

+ TLS Web Server Authentication, TLS Web Client Authentication

+ Signature Algorithm: sha256WithRSAEncryption

+ 46:20:0f:59:ab:0c:68:97:ab:d8:ea:b9:30:db:ef:83:71:07:

+ dc:3b:15:a7:00:8e:f5:f7:31:1d:4b:e9:ed:cc:63:ea:d6:4f:

+ 85:22:de:be:c2:8f:7a:2c:98:20:55:c3:46:a0:5e:f0:67:66:

+ b4:dd:40:a4:02:73:48:13:23:e7:89:4c:b3:bb:71:64:c6:04:

+ 15:35:e0:eb:99:91:b4:30:55:c4:77:93:9e:ab:ec:68:f1:20:

+ 6a:1b:a8:b9:90:41:69:aa:86:72:cf:9e:0b:4f:2f:b0:44:73:

+ b5:f0:4f:62:77:aa:dc:c4:fb:97:8e:57:10:a4:20:d8:cf:25:

+ 0b:c7:68:f4:c0:da:9b:21:75:83:95:9b:f5:b5:c1:ea:85:cd:

+ ed:f8:59:51:19:7e:d0:0c:b8:1f:d7:56:a2:b8:18:d7:b6:c2:

+ 90:3f:a6:7a:62:76:e0:aa:f7:48:8e:c1:1b:5a:1d:ec:a1:36:

+ 30:26:de:ac:39:fc:67:1b:47:9f:ac:e8:d0:a6:47:15:7e:e0:

+ 74:22:84:65:6d:a7:fe:c5:84:73:aa:f1:43:47:93:e0:16:13:

+ e6:b6:c8:6d:8f:11:25:bc:d7:45:29:0b:c3:12:e6:e5:05:b6:

+ 4f:eb:21:c3:fc:27:a5:41:d5:7b:55:99:2c:d5:61:a1:16:38:

+ e7:3c:f2:c9

+-----BEGIN CERTIFICATE-----

+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl

+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD

+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp599

+IOYjYvK/JwkJrhF4xx3y7eL6TVWxyMpggkL9Xo5MSOIOjic2yStPKzCUUWygAVWz

+OEuqc/CckPKpj176ytkHS4ZWfJ19QzCgkuFsGeheaFe2+VxT+O1OaiKhyb6M8QNv

+Bb8bAWQm/WzADdxV5PwOSMgps76OPADKaRsifi3acubzZHiZbKI4BmJOLh/u32TM

+SneGENOEYx+gPKV2v8dWIif/tWyTHIpNbOA+G/BaOZTKKCe8cEj0E9bf1rERb0Cu

+s5gZeOX4fnl7LJXx8fXWi2YDQDzVzzVlHRQOrLultN0MD26hamn4VOhG6l+Yqxq1

+qlJWn60CjCDlpNcVAgMBAAGjgekwgeYwHQYDVR0OBBYEFGdUV0a1rXpcp7OrwbCt

++rXwAtxsMB8GA1UdIwQYMBaAFHVsfZhkRvf2DVWpPjg6W8nb2tpvMD8GCCsGAQUF

+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk

+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu

+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF

+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEARiAPWasMaJer2Oq5MNvv

+g3EH3DsVpwCO9fcxHUvp7cxj6tZPhSLevsKPeiyYIFXDRqBe8GdmtN1ApAJzSBMj

+54lMs7txZMYEFTXg65mRtDBVxHeTnqvsaPEgahuouZBBaaqGcs+eC08vsERztfBP

+Yneq3MT7l45XEKQg2M8lC8do9MDamyF1g5Wb9bXB6oXN7fhZURl+0Ay4H9dWorgY

+17bCkD+memJ24Kr3SI7BG1od7KE2MCberDn8ZxtHn6zo0KZHFX7gdCKEZW2n/sWE

+c6rxQ0eT4BYT5rbIbY8RJbzXRSkLwxLm5QW2T+shw/wnpUHVe1WZLNVhoRY45zzy

+yQ==

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 2 (0x2)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Intermediary

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:c0:e7:ef:17:ad:a9:ad:1c:4e:0a:fb:d2:47:d7:

+ 18:d4:d6:28:9a:68:7e:47:d5:b2:dc:a3:22:8b:d3:

+ f4:23:67:7b:59:20:f9:76:4c:be:95:29:ef:fd:ef:

+ a1:ba:72:1b:52:8a:85:b5:5a:64:59:d2:fb:50:7c:

+ b6:7d:00:79:f3:26:3a:fa:f9:d9:8f:cf:4d:ce:ef:

+ 2e:ce:43:0f:4e:5b:74:42:fb:41:d2:21:5f:db:3e:

+ ac:6f:2f:99:1d:d8:38:fe:ca:d2:4e:55:69:73:41:

+ 07:82:93:5e:25:4e:fd:87:cb:2e:06:4b:20:02:dd:

+ 76:2a:6a:d7:a7:9f:9a:fe:d0:fe:39:a9:33:d5:90:

+ 9b:36:37:23:d4:d3:11:ee:1f:16:1c:a4:1c:1d:fc:

+ db:09:6f:0b:58:f5:d4:d4:f6:4f:9f:c8:16:54:ee:

+ 61:07:b2:64:f8:b9:91:62:12:93:ab:d1:23:1b:c4:

+ 25:9d:b0:a4:72:34:df:9e:a9:4d:71:28:44:94:be:

+ 36:31:ab:59:0a:ac:3d:6f:b3:3c:d7:d0:25:8f:be:

+ 14:fc:31:2d:4a:44:cc:87:39:7b:a2:58:a9:fe:d5:

+ 8d:70:40:58:7f:f7:eb:f0:11:3c:91:31:dd:94:06:

+ d1:37:27:f9:50:85:31:1d:cf:0f:64:d6:b1:f0:df:

+ 07:ad

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 75:6C:7D:98:64:46:F7:F6:0D:55:A9:3E:38:3A:5B:C9:DB:DA:DA:6F

+ X509v3 Authority Key Identifier:

+ keyid:1F:C3:67:60:53:E1:07:52:B5:92:8E:46:41:E5:3C:43:88:ED:20:3A

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 56:b1:93:87:27:f4:8a:38:6b:9a:1a:68:d3:ce:9b:ad:0f:d2:

+ 78:1e:46:c4:18:ab:39:01:c4:73:f5:c3:ab:8b:61:98:76:9a:

+ 34:a2:62:8b:16:e0:a6:48:fe:4b:a1:b4:c1:bd:e9:0f:bb:d5:

+ 3b:25:73:62:f2:9f:69:5b:23:5b:d0:72:71:ad:63:bb:41:9e:

+ 65:ef:98:b5:e6:85:ed:2c:d7:cc:6c:b5:b0:e1:bd:57:1f:5b:

+ 25:e1:27:e3:74:3e:70:9e:5c:e1:12:53:83:73:40:1a:fb:71:

+ eb:29:79:b0:d6:be:0d:0e:f0:ee:11:2d:39:db:8c:b6:bb:b7:

+ 7b:36:0f:5b:77:6b:2a:7a:ab:f1:15:91:bf:e6:34:31:f2:d1:

+ ce:de:46:1c:19:fc:59:69:aa:3e:76:6c:98:21:95:9d:c1:f3:

+ ca:31:0b:7f:94:08:a2:a4:90:2d:a2:26:72:75:63:db:43:cc:

+ 0e:22:4a:70:9d:fb:54:13:9a:10:76:31:bc:99:24:dc:6e:da:

+ fd:f0:84:3e:3c:22:50:2f:7e:c3:02:78:90:f2:02:53:db:2a:

+ 1f:3a:3f:92:cd:44:e3:0a:87:60:15:89:eb:55:58:9f:1f:78:

+ b5:06:5c:ce:c0:8a:99:d1:71:11:f7:88:ce:e4:7d:6a:25:d7:

+ 07:74:06:3e

+-----BEGIN CERTIFICATE-----

+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50

+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOfvF62p

+rRxOCvvSR9cY1NYommh+R9Wy3KMii9P0I2d7WSD5dky+lSnv/e+hunIbUoqFtVpk

+WdL7UHy2fQB58yY6+vnZj89Nzu8uzkMPTlt0QvtB0iFf2z6sby+ZHdg4/srSTlVp

+c0EHgpNeJU79h8suBksgAt12KmrXp5+a/tD+Oakz1ZCbNjcj1NMR7h8WHKQcHfzb

+CW8LWPXU1PZPn8gWVO5hB7Jk+LmRYhKTq9EjG8QlnbCkcjTfnqlNcShElL42MatZ

+Cqw9b7M819Alj74U/DEtSkTMhzl7olip/tWNcEBYf/fr8BE8kTHdlAbRNyf5UIUx

+Hc8PZNax8N8HrQIDAQABo4HLMIHIMB0GA1UdDgQWBBR1bH2YZEb39g1VqT44OlvJ

+29rabzAfBgNVHSMEGDAWgBQfw2dgU+EHUrWSjkZB5TxDiO0gOjA3BggrBgEFBQcB

+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs

+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD

+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB

+AFaxk4cn9Io4a5oaaNPOm60P0ngeRsQYqzkBxHP1w6uLYZh2mjSiYosW4KZI/kuh

+tMG96Q+71Tslc2Lyn2lbI1vQcnGtY7tBnmXvmLXmhe0s18xstbDhvVcfWyXhJ+N0

+PnCeXOESU4NzQBr7cespebDWvg0O8O4RLTnbjLa7t3s2D1t3ayp6q/EVkb/mNDHy

+0c7eRhwZ/Flpqj52bJghlZ3B88oxC3+UCKKkkC2iJnJ1Y9tDzA4iSnCd+1QTmhB2

+MbyZJNxu2v3whD48IlAvfsMCeJDyAlPbKh86P5LNROMKh2AVietVWJ8feLUGXM7A

+ipnRcRH3iM7kfWol1wd0Bj4=

+-----END CERTIFICATE-----

+-----BEGIN TIME-----

+MTUwMzAyMTIwMDAwWg==

+-----END TIME-----

+-----BEGIN VERIFY_RESULT-----

+RkFJTA==

+-----END VERIFY_RESULT-----