net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem - Issue 1414393008: Add scripts to generate simple test data for certificate verification.

Unified Diff: net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem

Issue 1414393008: Add scripts to generate simple test data for certificate verification. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages

Patch Set: add moar test Created 5 years ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

« no previous file with comments | « net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem ('k') | net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem

diff --git a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem

new file mode 100644

index 0000000000000000000000000000000000000000..6109796debbe77ab27ca22692f4039bfaf1855eb

--- /dev/null

+++ b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem

@@ -0,0 +1,252 @@

+[Created by: generate-target-signed-using-ecdsa.py]

+Certificate chain with a trusted root using RSA, and intermediary using EC,

+and a target certificate using RSA. Verification is expected to succeed.

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: ecdsa-with-SHA256

+ Issuer: CN=Intermediary

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Target

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:f5:15:82:5b:5b:ef:98:fd:63:b3:5b:08:9c:21:

+ 8b:be:10:f1:3a:ab:17:e8:f2:9c:37:24:80:41:6a:

+ 87:71:1d:9a:ea:c3:a6:f7:25:e3:09:03:3f:92:2e:

+ e1:bc:9e:fd:70:65:e9:29:21:4f:46:01:12:20:e2:

+ 08:d9:bd:86:40:5d:3d:b9:6a:c5:ad:3f:dc:82:00:

+ 75:7b:da:26:a1:c9:49:f2:b5:30:6c:40:07:94:c6:

+ f4:41:1f:88:3a:d7:89:ab:86:79:50:cc:85:8e:f6:

+ a4:fc:7b:03:70:74:1e:6e:09:98:ff:b4:8a:ea:c0:

+ c1:e3:07:ff:8d:f8:e8:bc:f5:fd:6e:aa:db:fc:26:

+ 2e:44:bd:52:e3:66:f5:58:6d:ea:0c:30:19:ed:8f:

+ db:cd:1f:40:20:2f:36:35:d7:63:b5:d7:2c:e8:4b:

+ d3:e2:90:82:2f:27:4d:22:8a:94:e3:fb:c7:40:77:

+ e2:e0:56:c7:70:b6:ae:9b:e9:7c:fa:b5:d0:40:34:

+ dd:0b:59:96:0d:ba:84:47:87:62:c1:3e:1f:21:5b:

+ 3b:15:56:3a:8b:e8:4e:6c:02:c8:da:dc:b3:2b:a3:

+ b9:7e:c6:dc:06:94:9b:0c:ea:fc:7e:02:d3:3f:d2:

+ 87:30:da:c4:41:1a:5f:1f:89:c9:6f:39:96:e5:fd:

+ 3a:c9

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 0A:36:4B:AA:5E:42:C2:6B:CE:3C:58:0C:33:53:9B:ED:09:42:89:B9

+ X509v3 Authority Key Identifier:

+ keyid:A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Intermediary.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Intermediary.crl

+ X509v3 Key Usage: critical

+ Digital Signature, Key Encipherment

+ X509v3 Extended Key Usage:

+ TLS Web Server Authentication, TLS Web Client Authentication

+ Signature Algorithm: ecdsa-with-SHA256

+ 30:64:02:30:3b:0e:cc:c2:70:77:25:fe:01:46:fb:e7:fe:ee:

+ 68:07:50:f1:14:b8:9a:6f:53:bb:1f:4f:7f:ba:62:d2:76:06:

+ 4b:d4:93:8a:1b:f6:3c:96:91:8c:57:90:a2:99:5d:0b:02:30:

+ 3e:98:92:c5:01:13:f9:d4:21:bc:44:14:a6:9b:b9:8e:f0:86:

+ ec:67:c8:12:07:74:41:8c:f0:f3:e8:b7:cc:e3:23:a0:a1:05:

+ 2f:66:73:be:62:9b:1c:ce:70:fe:eb:09

+-----BEGIN CERTIFICATE-----

+MIIC6zCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l

+ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD

+DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FYJbW++Y

+/WOzWwicIYu+EPE6qxfo8pw3JIBBaodxHZrqw6b3JeMJAz+SLuG8nv1wZekpIU9G

+ARIg4gjZvYZAXT25asWtP9yCAHV72iahyUnytTBsQAeUxvRBH4g614mrhnlQzIWO

+9qT8ewNwdB5uCZj/tIrqwMHjB/+N+Oi89f1uqtv8Ji5EvVLjZvVYbeoMMBntj9vN

+H0AgLzY112O11yzoS9PikIIvJ00iipTj+8dAd+LgVsdwtq6b6Xz6tdBANN0LWZYN

+uoRHh2LBPh8hWzsVVjqL6E5sAsja3LMro7l+xtwGlJsM6vx+AtM/0ocw2sRBGl8f

+iclvOZbl/TrJAgMBAAGjgekwgeYwHQYDVR0OBBYEFAo2S6peQsJrzjxYDDNTm+0J

+Qom5MB8GA1UdIwQYMBaAFKShARyPlGLDERk2dgTcqa9vthGcMD8GCCsGAQUFBwEB

+BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy

+eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy

+bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB

+BggrBgEFBQcDAjAKBggqhkjOPQQDAgNnADBkAjA7DszCcHcl/gFG++f+7mgHUPEU

+uJpvU7sfT3+6YtJ2BkvUk4ob9jyWkYxXkKKZXQsCMD6YksUBE/nUIbxEFKabuY7w

+huxnyBIHdEGM8PPot8zjI6ChBS9mc75imxzOcP7rCQ==

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 2 (0x2)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Intermediary

+ Subject Public Key Info:

+ Public Key Algorithm: id-ecPublicKey

+ Public-Key: (384 bit)

+ pub:

+ 04:ca:bc:6c:d5:4b:51:ef:d3:7d:8a:46:12:ab:5f:

+ d4:f3:3c:7d:eb:40:8b:de:0f:79:6d:6f:a4:40:0f:

+ 96:51:8a:00:20:48:7a:d3:d4:30:2e:5b:1d:9f:e1:

+ 00:3e:54:cb:93:62:21:7c:09:57:2e:43:38:08:77:

+ 5c:1c:8b:aa:17:c1:22:c0:db:01:bf:c0:80:0a:24:

+ 68:0d:2d:ce:51:e4:a3:2a:c9:42:0b:7c:57:82:31:

+ 94:2f:b7:a8:42:9c:4e

+ ASN1 OID: secp384r1

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C

+ X509v3 Authority Key Identifier:

+ keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 22:50:e8:71:34:bf:8b:44:c5:4e:82:31:fd:50:48:f4:fa:3a:

+ 01:4a:f9:71:a6:a9:a2:d0:1e:bc:d3:1d:dc:ac:8f:4e:db:58:

+ 8a:6b:a2:64:29:6e:f5:1b:0b:87:2e:f5:bd:dd:92:7a:5f:4e:

+ a6:aa:1d:b4:7c:f2:eb:5a:2b:17:83:99:29:1f:2b:12:45:9b:

+ 1a:cd:d3:b1:71:a3:d9:7d:cf:78:f4:64:ce:03:a5:0b:c7:98:

+ e8:73:58:e2:26:47:5c:c0:ed:ac:c0:11:b8:39:11:19:39:fc:

+ 01:b6:4c:a2:f5:4a:ae:a3:9e:3c:82:73:3e:b5:2c:28:63:ec:

+ 14:a2:9f:a7:d7:4b:3e:f3:56:50:f6:9e:87:9b:d1:38:fa:78:

+ 2e:7f:29:fe:4a:a8:d6:43:c4:05:d6:d6:67:7f:52:90:36:53:

+ ff:a6:78:1f:7f:f7:ad:66:65:7d:4b:57:3c:d6:b3:19:9d:08:

+ af:d2:5b:1a:76:42:ff:b2:6b:2c:0d:d1:1d:05:c0:d8:28:02:

+ 9b:cb:f6:1d:7a:35:93:b9:c9:76:2d:d3:ef:f4:07:bf:d6:8b:

+ 33:2a:83:69:8a:68:63:0a:b9:45:f6:e4:12:38:37:87:d6:53:

+ 46:33:ae:f8:72:d3:e5:e9:93:bb:ba:db:8d:73:01:b1:79:0f:

+ d8:1c:a0:d0

+-----BEGIN CERTIFICATE-----

+MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50

+ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEyrxs1UtR79N9ikYSq1/U

+8zx960CL3g95bW+kQA+WUYoAIEh609QwLlsdn+EAPlTLk2IhfAlXLkM4CHdcHIuq

+F8EiwNsBv8CACiRoDS3OUeSjKslCC3xXgjGUL7eoQpxOo4HLMIHIMB0GA1UdDgQW

+BBSkoQEcj5RiwxEZNnYE3Kmvb7YRnDAfBgNVHSMEGDAWgBTprHMJtobNlUIpXeXs

+x5kpEpGMUzA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt

+Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv

+ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w

+DQYJKoZIhvcNAQELBQADggEBACJQ6HE0v4tExU6CMf1QSPT6OgFK+XGmqaLQHrzT

+Hdysj07bWIpromQpbvUbC4cu9b3dknpfTqaqHbR88utaKxeDmSkfKxJFmxrN07Fx

+o9l9z3j0ZM4DpQvHmOhzWOImR1zA7azAEbg5ERk5/AG2TKL1Sq6jnjyCcz61LChj

+7BSin6fXSz7zVlD2noeb0Tj6eC5/Kf5KqNZDxAXW1md/UpA2U/+meB9/961mZX1L

+VzzWsxmdCK/SWxp2Qv+yaywN0R0FwNgoApvL9h16NZO5yXYt0+/0B7/WizMqg2mK

+aGMKuUX25BI4N4fWU0Yzrvhy0+Xpk7u6241zAbF5D9gcoNA=

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Root

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:b8:3c:af:88:6d:5e:96:7e:58:90:09:5d:40:54:

+ 11:4f:55:ff:bb:e7:94:1b:ba:d7:df:b9:47:c3:ff:

+ 84:71:22:da:a8:89:e6:98:71:4b:ae:d8:c1:19:df:

+ 4f:69:bf:c2:3d:da:0a:a8:65:08:a8:c3:2c:aa:34:

+ c7:a2:b9:00:45:6f:2e:69:6e:90:ee:9b:a2:f6:20:

+ 0d:75:17:c2:33:e0:59:2c:7d:d6:3d:23:34:0e:e6:

+ e0:49:74:3b:21:04:9f:6b:25:92:1a:2e:0f:e5:4a:

+ 0a:96:85:0d:69:dc:ab:31:23:19:b7:d0:54:e6:18:

+ c6:a1:ef:c6:e1:8b:da:a4:c2:78:7a:61:19:d7:83:

+ 5f:81:34:37:3e:1a:e2:b4:56:64:eb:db:af:7c:83:

+ c7:67:58:f1:69:c4:02:3a:05:1c:d9:56:5c:32:32:

+ bd:a7:e9:5f:82:b3:bb:1e:a6:e8:9c:86:86:ee:de:

+ 9b:19:d7:19:4f:89:cf:98:76:81:6d:dc:10:7d:d3:

+ 92:b8:7b:0d:c8:2f:2d:fc:ee:d7:68:fb:d5:87:7e:

+ 64:9a:32:73:57:58:5b:31:fc:da:d3:2c:2c:22:1d:

+ d6:db:71:a6:58:0b:84:0d:28:de:82:ad:d1:4e:2c:

+ 4b:b4:df:1d:78:34:59:52:a3:16:bd:0b:77:26:4d:

+ 4b:6f

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53

+ X509v3 Authority Key Identifier:

+ keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 76:62:2d:4c:94:4e:63:cb:7f:35:52:08:e2:8a:f3:d1:03:55:

+ 31:f4:e8:e0:79:68:23:f0:19:d5:7f:b2:dd:27:0a:a2:bb:6c:

+ f3:85:ae:48:83:3c:37:7e:62:69:e9:af:e0:4d:60:f0:8b:bf:

+ 1b:2c:da:90:10:fc:8c:83:b1:55:46:a6:fe:d1:d1:21:6f:91:

+ e1:cc:d6:c6:8c:1e:b1:03:e5:d7:5b:5f:3c:a7:2d:16:a1:71:

+ 54:e1:8a:4b:62:61:18:42:b1:f4:ec:6e:33:5a:3b:52:2a:8e:

+ 1a:60:75:73:89:78:72:86:9f:42:82:e5:d7:0e:5c:ce:36:a7:

+ 2d:8e:78:0a:e9:95:2d:72:d2:42:6f:b6:7c:7e:28:29:2d:85:

+ 3c:46:ab:6f:04:a8:f4:a2:ec:c4:24:7e:7a:a9:96:ec:b3:49:

+ 8b:ec:2a:00:88:c0:a6:50:01:a5:f0:df:ef:1c:6c:f8:bf:8e:

+ 64:ab:ff:43:bf:05:ce:82:b6:d4:cc:30:47:d8:74:7f:4e:4c:

+ dc:cc:a6:92:e3:96:37:97:b1:03:27:93:38:62:4d:b7:ae:fe:

+ a2:2b:61:05:32:27:28:27:c3:1f:e9:50:91:0a:4a:4b:ca:a3:

+ b0:8e:d4:56:30:ad:e8:76:49:e4:0e:36:83:15:22:8a:bc:59:

+ 27:1c:62:f3

+-----BEGIN TRUSTED_CERTIFICATE-----

+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v

+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALg8r4htXpZ+WJAJXUBU

+EU9V/7vnlBu619+5R8P/hHEi2qiJ5phxS67YwRnfT2m/wj3aCqhlCKjDLKo0x6K5

+AEVvLmlukO6bovYgDXUXwjPgWSx91j0jNA7m4El0OyEEn2slkhouD+VKCpaFDWnc

+qzEjGbfQVOYYxqHvxuGL2qTCeHphGdeDX4E0Nz4a4rRWZOvbr3yDx2dY8WnEAjoF

+HNlWXDIyvafpX4Kzux6m6JyGhu7emxnXGU+Jz5h2gW3cEH3Tkrh7DcgvLfzu12j7

+1Yd+ZJoyc1dYWzH82tMsLCId1ttxplgLhA0o3oKt0U4sS7TfHXg0WVKjFr0LdyZN

+S28CAwEAAaOByzCByDAdBgNVHQ4EFgQU6axzCbaGzZVCKV3l7MeZKRKRjFMwHwYD

+VR0jBBgwFoAU6axzCbaGzZVCKV3l7MeZKRKRjFMwNwYIKwYBBQUHAQEEKzApMCcG

+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw

+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE

+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB2Yi1MlE5j

+y381UgjiivPRA1Ux9OjgeWgj8BnVf7LdJwqiu2zzha5Igzw3fmJp6a/gTWDwi78b

+LNqQEPyMg7FVRqb+0dEhb5HhzNbGjB6xA+XXW188py0WoXFU4YpLYmEYQrH07G4z

+WjtSKo4aYHVziXhyhp9CguXXDlzONqctjngK6ZUtctJCb7Z8figpLYU8RqtvBKj0

+ouzEJH56qZbss0mL7CoAiMCmUAGl8N/vHGz4v45kq/9DvwXOgrbUzDBH2HR/Tkzc

+zKaS45Y3l7EDJ5M4Yk23rv6iK2EFMicoJ8Mf6VCRCkpLyqOwjtRWMK3odknkDjaD

+FSKKvFknHGLz

+-----END TRUSTED_CERTIFICATE-----

+-----BEGIN TIME-----

+MTUwMzAyMTIwMDAwWg==

+-----END TIME-----

+-----BEGIN VERIFY_RESULT-----

+U1VDQ0VTUw==

+-----END VERIFY_RESULT-----