Index: net/data/ssl/certificates/README |
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README |
index d5f53878397dcb6b7ea8be15643f1789f453b082..8230adebaa55b4ac679a90f1787f3f8a2bdc9b5f 100644 |
--- a/net/data/ssl/certificates/README |
+++ b/net/data/ssl/certificates/README |
@@ -171,3 +171,12 @@ unit tests. |
present). Since codeSigning is not valid for web server auth, the checks |
should fail. |
+- aia-cert.pem |
+- aia-intermediate.der |
+- aia-root.pem |
+ A certificate chain which we use to ensure AIA fetching works correctly |
+ when using NSS to verify certificates (which uses our HTTP stack). |
+ aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL |
+ containing the intermediate, which can be served via a URLRequestFilter. |
+ aia-intermediate.der is stored in DER form for convenience, since that is |
+ the form expected of certificates discovered via AIA. |