net/data/verify_certificate_chain_unittest/unknown-root.pem - Issue 1414393008: Add scripts to generate simple test data for certificate verification.

Unified Diff: net/data/verify_certificate_chain_unittest/unknown-root.pem

Issue 1414393008: Add scripts to generate simple test data for certificate verification. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages

Patch Set: add moar test Created 5 years ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

« no previous file with comments | « net/data/verify_certificate_chain_unittest/target-wrong-signature.pem ('k') | net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/verify_certificate_chain_unittest/unknown-root.pem

diff --git a/net/data/verify_certificate_chain_unittest/unknown-root.pem b/net/data/verify_certificate_chain_unittest/unknown-root.pem

new file mode 100644

index 0000000000000000000000000000000000000000..a3ee2f7d83f6bac6cf399c704a404e4a1b3c7567

--- /dev/null

+++ b/net/data/verify_certificate_chain_unittest/unknown-root.pem

@@ -0,0 +1,192 @@

+[Created by: generate-unknown-root.py]

+Certificate chain with 1 intermediary, but the root is not in trust store.

+Verification is expected to fail because the final intermediary (Intermediary)

+does not chain to a known root.

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 1 (0x1)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Intermediary

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Target

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:f3:f6:f4:c5:f5:4f:a3:17:ee:19:45:0e:97:90:

+ 31:60:2a:a5:31:0d:e4:c7:f4:fa:4d:e4:99:f5:3c:

+ db:ad:6b:2d:f2:8d:07:4f:dc:c1:e3:3f:53:b6:48:

+ 31:8e:8e:a6:b3:d6:a4:3c:fb:21:00:01:a6:35:79:

+ 50:a6:d0:43:10:8d:13:1b:6f:a9:4b:a3:9b:77:11:

+ af:0f:7c:f9:f0:e6:03:c5:b5:b4:49:7a:9d:8f:a1:

+ 42:89:a5:41:5d:c7:e1:7d:4a:e5:af:8f:66:ad:93:

+ b0:f6:60:52:f4:0c:2d:d1:60:ca:a4:4c:fa:0d:55:

+ 0d:46:60:69:10:a7:8e:06:bd:ad:28:65:63:a5:63:

+ 36:d8:eb:8e:e1:cc:fd:53:76:80:d3:1d:e2:b8:46:

+ f9:24:e7:3a:86:30:f9:14:34:a2:42:81:b7:2b:a4:

+ 41:14:7a:9c:77:83:51:cb:b9:08:31:29:a2:b0:25:

+ 92:1e:7f:43:90:1c:6a:43:ca:64:04:37:c8:26:b7:

+ 7b:ae:cb:8b:2e:e7:6f:09:c4:3e:87:0d:b1:ef:70:

+ 58:cd:b5:d7:c7:6b:dd:7b:3c:46:0c:4d:5f:21:1d:

+ 78:b9:cf:46:5e:f8:35:48:7d:14:0b:3e:a4:2a:1c:

+ 4e:78:6d:27:76:61:e5:c5:74:16:fb:f1:77:9c:f3:

+ 51:7f

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ F8:48:56:E7:65:49:C4:48:98:8E:F0:F5:EA:01:C4:01:C8:4D:56:D9

+ X509v3 Authority Key Identifier:

+ keyid:41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Intermediary.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Intermediary.crl

+ X509v3 Key Usage: critical

+ Digital Signature, Key Encipherment

+ X509v3 Extended Key Usage:

+ TLS Web Server Authentication, TLS Web Client Authentication

+ Signature Algorithm: sha256WithRSAEncryption

+ 48:65:f4:55:86:82:85:93:a0:4d:b0:ce:b8:b2:21:f5:bf:56:

+ 66:ef:e3:f5:24:52:da:a5:15:21:f7:b4:a1:7c:2f:69:de:1e:

+ 6a:90:8d:98:e9:38:29:b8:51:44:7b:43:68:92:95:e4:50:7c:

+ 32:94:72:6c:96:4a:77:07:ce:0c:55:df:19:50:29:e5:ee:ff:

+ c4:54:c9:75:2d:c2:fd:f1:41:5c:c4:28:3c:15:df:1a:12:73:

+ aa:a6:af:2a:3e:f5:a6:17:68:5b:80:d8:6d:fa:6d:37:26:a1:

+ 01:0e:0a:c1:a8:ed:ef:2b:65:1c:43:4d:dd:aa:7b:e1:6d:a6:

+ a6:23:66:11:58:73:f0:e2:98:d2:ba:db:94:ed:c9:fc:41:6f:

+ 4b:99:7c:be:2e:e9:57:e2:c6:26:24:db:2a:02:4e:3c:7e:8b:

+ d8:96:27:43:7b:b4:1e:25:2f:19:c0:e4:05:b9:5e:0e:57:29:

+ 9e:81:9c:1e:d8:48:4b:d0:c8:ff:1a:a7:7f:71:4a:9f:51:0d:

+ 8a:11:6e:74:86:8e:89:d8:fd:a4:69:bb:67:78:2d:2d:44:75:

+ 9b:63:31:ef:b1:3e:38:11:ce:01:ae:b0:fa:a4:3f:b0:df:be:

+ 13:9a:5e:11:f6:bb:eb:8e:3a:7d:09:be:76:9b:e5:d4:91:f3:

+ dc:e5:23:df

+-----BEGIN CERTIFICATE-----

+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl

+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD

+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz9vTF

+9U+jF+4ZRQ6XkDFgKqUxDeTH9PpN5Jn1PNutay3yjQdP3MHjP1O2SDGOjqaz1qQ8

++yEAAaY1eVCm0EMQjRMbb6lLo5t3Ea8PfPnw5gPFtbRJep2PoUKJpUFdx+F9SuWv

+j2atk7D2YFL0DC3RYMqkTPoNVQ1GYGkQp44Gva0oZWOlYzbY647hzP1TdoDTHeK4

+Rvkk5zqGMPkUNKJCgbcrpEEUepx3g1HLuQgxKaKwJZIef0OQHGpDymQEN8gmt3uu

+y4su528JxD6HDbHvcFjNtdfHa917PEYMTV8hHXi5z0Ze+DVIfRQLPqQqHE54bSd2

+YeXFdBb78Xec81F/AgMBAAGjgekwgeYwHQYDVR0OBBYEFPhIVudlScRImI7w9eoB

+xAHITVbZMB8GA1UdIwQYMBaAFEHTvhAv7kO2JbAETjnPePkO7eGdMD8GCCsGAQUF

+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk

+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu

+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF

+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEASGX0VYaChZOgTbDOuLIh

+9b9WZu/j9SRS2qUVIfe0oXwvad4eapCNmOk4KbhRRHtDaJKV5FB8MpRybJZKdwfO

+DFXfGVAp5e7/xFTJdS3C/fFBXMQoPBXfGhJzqqavKj71phdoW4DYbfptNyahAQ4K

+wajt7ytlHENN3ap74W2mpiNmEVhz8OKY0rrblO3J/EFvS5l8vi7pV+LGJiTbKgJO

+PH6L2JYnQ3u0HiUvGcDkBbleDlcpnoGcHthIS9DI/xqnf3FKn1ENihFudIaOidj9

+pGm7Z3gtLUR1m2Mx77E+OBHOAa6w+qQ/sN++E5peEfa76446fQm+dpvl1JHz3OUj

+3w==

+-----END CERTIFICATE-----

+Certificate:

+ Data:

+ Version: 3 (0x2)

+ Serial Number: 2 (0x2)

+ Signature Algorithm: sha256WithRSAEncryption

+ Issuer: CN=Root

+ Validity

+ Not Before: Jan 1 12:00:00 2015 GMT

+ Not After : Jan 1 12:00:00 2016 GMT

+ Subject: CN=Intermediary

+ Subject Public Key Info:

+ Public Key Algorithm: rsaEncryption

+ Public-Key: (2048 bit)

+ Modulus:

+ 00:cd:6f:e8:b3:ea:d4:9e:d9:23:03:8a:4a:f3:6c:

+ 84:cd:0c:28:7c:c2:07:60:89:c5:9a:9f:74:b8:d0:

+ ac:e4:30:f1:4b:1c:c5:7f:9d:d2:0f:4e:e0:e5:45:

+ 4a:cc:93:70:a0:df:3c:4c:fc:0c:a5:d5:c9:86:fd:

+ ba:4e:67:c0:af:c3:04:98:cb:bb:f6:25:a6:af:7f:

+ 7b:a3:29:b9:86:60:87:80:67:90:ab:e7:64:86:ec:

+ e6:30:f6:dd:5b:3a:69:4f:b1:58:f8:4b:15:ae:13:

+ c8:84:24:bf:9a:a0:6c:8a:b3:36:31:84:2f:a4:3e:

+ 4a:f2:9f:07:91:a4:8b:dc:fa:5b:65:3c:4e:93:19:

+ 02:a5:3a:78:5d:f2:51:bd:d7:96:16:6e:c5:8b:17:

+ d0:21:77:2f:96:4a:44:c8:17:2d:73:d5:da:24:40:

+ d1:a4:b7:f2:c4:b2:e2:16:6a:19:9b:72:cb:58:62:

+ eb:30:2f:2f:c5:35:1c:74:2f:ba:e6:93:7e:dc:78:

+ bc:ad:e3:89:c9:72:9a:f5:01:95:61:02:9f:82:40:

+ f9:c1:c8:6e:36:b7:14:4a:13:36:bb:d0:1b:25:bd:

+ d6:5e:11:e7:d9:ea:a7:db:6d:d3:92:98:b1:2a:c1:

+ cf:00:52:c1:78:c9:0a:30:41:30:09:c8:90:0a:04:

+ 8f:0d

+ Exponent: 65537 (0x10001)

+ X509v3 extensions:

+ X509v3 Subject Key Identifier:

+ 41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D

+ X509v3 Authority Key Identifier:

+ keyid:A7:80:43:01:58:B0:DD:7A:AD:7C:38:10:73:02:DE:2C:E6:E4:9E:A9

+ Authority Information Access:

+ CA Issuers - URI:http://url-for-aia/Root.cer

+ X509v3 CRL Distribution Points:

+ Full Name:

+ URI:http://url-for-crl/Root.crl

+ X509v3 Key Usage: critical

+ Certificate Sign, CRL Sign

+ X509v3 Basic Constraints: critical

+ CA:TRUE

+ Signature Algorithm: sha256WithRSAEncryption

+ 90:b6:a5:85:fe:d4:51:b9:f7:92:ae:60:80:ab:54:09:3d:63:

+ 43:fd:ce:e0:ea:e3:f2:c0:db:f5:1b:a7:db:f1:b3:21:d0:e4:

+ 7f:63:c1:75:13:ca:3d:6b:70:76:55:23:cc:c8:74:80:b8:82:

+ c0:cd:63:41:77:4c:27:8a:32:34:f7:9d:8d:0e:9f:15:ee:22:

+ 4f:ed:d7:32:f2:c9:95:bd:35:87:d8:c5:58:19:ba:06:58:a4:

+ 96:bc:2d:4e:1b:ed:2f:23:ac:b1:2f:b7:e0:88:a9:fc:68:c0:

+ 8d:8a:41:e6:d3:ba:b9:88:77:54:37:5a:e5:a9:b3:f2:85:7b:

+ b4:7d:69:83:37:81:12:54:21:4c:d1:69:98:a2:fd:ef:a3:65:

+ e9:32:f6:63:1e:54:ce:a9:75:74:53:61:b4:f0:78:72:c4:f0:

+ 04:f0:f3:a8:70:93:f6:35:89:0f:6f:49:7a:0e:57:e0:af:33:

+ 35:89:b6:cd:ef:81:aa:8c:10:11:e9:57:a1:66:4c:30:9c:11:

+ 6a:c6:85:4b:d1:94:88:6e:aa:5f:8e:fb:d2:31:3d:ee:19:19:

+ 01:3c:4a:05:72:9c:aa:ae:ef:af:b0:f1:9f:e0:ae:d6:8e:09:

+ d1:05:ee:6b:77:08:11:52:8c:91:a0:2f:9b:ac:88:98:14:14:

+ a4:08:b5:7d

+-----BEGIN CERTIFICATE-----

+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50

+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW/os+rU

+ntkjA4pK82yEzQwofMIHYInFmp90uNCs5DDxSxzFf53SD07g5UVKzJNwoN88TPwM

+pdXJhv26TmfAr8MEmMu79iWmr397oym5hmCHgGeQq+dkhuzmMPbdWzppT7FY+EsV

+rhPIhCS/mqBsirM2MYQvpD5K8p8HkaSL3PpbZTxOkxkCpTp4XfJRvdeWFm7FixfQ

+IXcvlkpEyBctc9XaJEDRpLfyxLLiFmoZm3LLWGLrMC8vxTUcdC+65pN+3Hi8reOJ

+yXKa9QGVYQKfgkD5wchuNrcUShM2u9AbJb3WXhHn2eqn223TkpixKsHPAFLBeMkK

+MEEwCciQCgSPDQIDAQABo4HLMIHIMB0GA1UdDgQWBBRB074QL+5DtiWwBE45z3j5

+Du3hnTAfBgNVHSMEGDAWgBSngEMBWLDdeq18OBBzAt4s5uSeqTA3BggrBgEFBQcB

+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs

+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD

+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB

+AJC2pYX+1FG595KuYICrVAk9Y0P9zuDq4/LA2/Ubp9vxsyHQ5H9jwXUTyj1rcHZV

+I8zIdIC4gsDNY0F3TCeKMjT3nY0OnxXuIk/t1zLyyZW9NYfYxVgZugZYpJa8LU4b

+7S8jrLEvt+CIqfxowI2KQebTurmId1Q3WuWps/KFe7R9aYM3gRJUIUzRaZii/e+j

+Zeky9mMeVM6pdXRTYbTweHLE8ATw86hwk/Y1iQ9vSXoOV+CvMzWJts3vgaqMEBHp

+V6FmTDCcEWrGhUvRlIhuql+O+9IxPe4ZGQE8SgVynKqu76+w8Z/grtaOCdEF7mt3

+CBFSjJGgL5usiJgUFKQItX0=

+-----END CERTIFICATE-----

+-----BEGIN TIME-----

+MTUwMzAyMTIwMDAwWg==

+-----END TIME-----

+-----BEGIN VERIFY_RESULT-----

+RkFJTA==

+-----END VERIFY_RESULT-----