| Index: net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
|
| diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py b/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
|
| new file mode 100755
|
| index 0000000000000000000000000000000000000000..284354fd6eb24c7c78e06f6b2a5a102163090f08
|
| --- /dev/null
|
| +++ b/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
|
| @@ -0,0 +1,28 @@
|
| +#!/usr/bin/python
|
| +# Copyright (c) 2015 The Chromium Authors. All rights reserved.
|
| +# Use of this source code is governed by a BSD-style license that can be
|
| +# found in the LICENSE file.
|
| +
|
| +"""Certificate chain with 1 intermediary and a trusted root. The intermediary
|
| +has a basic constraints extension but does not mark it as critical.
|
| +Verification is expected to succeed, since although not critical, the
|
| +basicConstraints indicates CA=true as expected."""
|
| +
|
| +import common
|
| +
|
| +# Self-signed root certificate (part of trust store).
|
| +root = common.create_self_signed_root_certificate('Root')
|
| +
|
| +# Intermediary with non-critical basic constarints.
|
| +intermediary = common.create_intermediary_certificate('Intermediary', root)
|
| +intermediary.get_extensions().set_property('basicConstraints', 'CA:true')
|
| +
|
| +# Target certificate.
|
| +target = common.create_end_entity_certificate('Target', intermediary)
|
| +
|
| +chain = [target, intermediary]
|
| +trusted = [root]
|
| +time = common.DEFAULT_TIME
|
| +verify_result = True
|
| +
|
| +common.write_test_file(__doc__, chain, trusted, time, verify_result)
|
|
|