Index: net/data/parse_ocsp_unittest/ocsp_extra_certs.pem |
diff --git a/net/data/parse_ocsp_unittest/ocsp_extra_certs.pem b/net/data/parse_ocsp_unittest/ocsp_extra_certs.pem |
new file mode 100644 |
index 0000000000000000000000000000000000000000..9933051a2db1eac5dacce0dc99f27567799aed6e |
--- /dev/null |
+++ b/net/data/parse_ocsp_unittest/ocsp_extra_certs.pem |
@@ -0,0 +1,207 @@ |
+Includes extra certs |
+$ openssl asn1parse -i < [OCSP RESPONSE] |
+ 0:d=0 hl=4 l=1170 cons: SEQUENCE |
+ 4:d=1 hl=2 l= 1 prim: ENUMERATED :00 |
+ 7:d=1 hl=4 l=1163 cons: cont [ 0 ] |
+ 11:d=2 hl=4 l=1159 cons: SEQUENCE |
+ 15:d=3 hl=2 l= 9 prim: OBJECT :Basic OCSP Response |
+ 26:d=3 hl=4 l=1144 prim: OCTET STRING |
+ 0:d=0 hl=4 l=1140 cons: SEQUENCE |
+ 4:d=1 hl=2 l= 125 cons: SEQUENCE |
+ 6:d=2 hl=2 l= 3 cons: cont [ 0 ] |
+ 8:d=3 hl=2 l= 1 prim: INTEGER :01 |
+ 11:d=2 hl=2 l= 20 cons: cont [ 1 ] |
+ 13:d=3 hl=2 l= 18 cons: SEQUENCE |
+ 15:d=4 hl=2 l= 16 cons: SET |
+ 17:d=5 hl=2 l= 14 cons: SEQUENCE |
+ 19:d=6 hl=2 l= 3 prim: OBJECT :commonName |
+ 24:d=6 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 33:d=2 hl=2 l= 15 prim: GENERALIZEDTIME :20160219101141Z |
+ 50:d=2 hl=2 l= 79 cons: SEQUENCE |
+ 52:d=3 hl=2 l= 77 cons: SEQUENCE |
+ 54:d=4 hl=2 l= 56 cons: SEQUENCE |
+ 56:d=5 hl=2 l= 7 cons: SEQUENCE |
+ 58:d=6 hl=2 l= 5 prim: OBJECT :sha1 |
+ 65:d=5 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:02FF75DA24DE8ADD150FAB689DCCE6E6636D0901 |
+ 87:d=5 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:1B04E2BF36FE4817B269A01CE3AF3DE29643E574 |
+ 109:d=5 hl=2 l= 1 prim: INTEGER :03 |
+ 112:d=4 hl=2 l= 0 prim: cont [ 0 ] |
+ 114:d=4 hl=2 l= 15 prim: GENERALIZEDTIME :20160219101141Z |
+ 131:d=1 hl=2 l= 13 cons: SEQUENCE |
+ 133:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 144:d=2 hl=2 l= 0 prim: NULL |
+ 146:d=1 hl=3 l= 129 prim: BIT STRING |
+ 278:d=1 hl=4 l= 862 cons: cont [ 0 ] |
+ 282:d=2 hl=4 l= 858 cons: SEQUENCE |
+ 286:d=3 hl=4 l= 408 cons: SEQUENCE |
+ 290:d=4 hl=4 l= 257 cons: SEQUENCE |
+ 294:d=5 hl=2 l= 3 cons: cont [ 0 ] |
+ 296:d=6 hl=2 l= 1 prim: INTEGER :02 |
+ 299:d=5 hl=2 l= 1 prim: INTEGER :00 |
+ 302:d=5 hl=2 l= 13 cons: SEQUENCE |
+ 304:d=6 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 315:d=6 hl=2 l= 0 prim: NULL |
+ 317:d=5 hl=2 l= 18 cons: SEQUENCE |
+ 319:d=6 hl=2 l= 16 cons: SET |
+ 321:d=7 hl=2 l= 14 cons: SEQUENCE |
+ 323:d=8 hl=2 l= 3 prim: OBJECT :commonName |
+ 328:d=8 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 337:d=5 hl=2 l= 30 cons: SEQUENCE |
+ 339:d=6 hl=2 l= 13 prim: UTCTIME :160219151140Z |
+ 354:d=6 hl=2 l= 13 prim: UTCTIME :260216151140Z |
+ 369:d=5 hl=2 l= 18 cons: SEQUENCE |
+ 371:d=6 hl=2 l= 16 cons: SET |
+ 373:d=7 hl=2 l= 14 cons: SEQUENCE |
+ 375:d=8 hl=2 l= 3 prim: OBJECT :commonName |
+ 380:d=8 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 389:d=5 hl=3 l= 159 cons: SEQUENCE |
+ 392:d=6 hl=2 l= 13 cons: SEQUENCE |
+ 394:d=7 hl=2 l= 9 prim: OBJECT :rsaEncryption |
+ 405:d=7 hl=2 l= 0 prim: NULL |
+ 407:d=6 hl=3 l= 141 prim: BIT STRING |
+ 551:d=4 hl=2 l= 13 cons: SEQUENCE |
+ 553:d=5 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 564:d=5 hl=2 l= 0 prim: NULL |
+ 566:d=4 hl=3 l= 129 prim: BIT STRING |
+ 698:d=3 hl=4 l= 442 cons: SEQUENCE |
+ 702:d=4 hl=4 l= 291 cons: SEQUENCE |
+ 706:d=5 hl=2 l= 3 cons: cont [ 0 ] |
+ 708:d=6 hl=2 l= 1 prim: INTEGER :02 |
+ 711:d=5 hl=2 l= 1 prim: INTEGER :01 |
+ 714:d=5 hl=2 l= 13 cons: SEQUENCE |
+ 716:d=6 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 727:d=6 hl=2 l= 0 prim: NULL |
+ 729:d=5 hl=2 l= 18 cons: SEQUENCE |
+ 731:d=6 hl=2 l= 16 cons: SET |
+ 733:d=7 hl=2 l= 14 cons: SEQUENCE |
+ 735:d=8 hl=2 l= 3 prim: OBJECT :commonName |
+ 740:d=8 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 749:d=5 hl=2 l= 30 cons: SEQUENCE |
+ 751:d=6 hl=2 l= 13 prim: UTCTIME :160219151140Z |
+ 766:d=6 hl=2 l= 13 prim: UTCTIME :260216151140Z |
+ 781:d=5 hl=2 l= 27 cons: SEQUENCE |
+ 783:d=6 hl=2 l= 25 cons: SET |
+ 785:d=7 hl=2 l= 23 cons: SEQUENCE |
+ 787:d=8 hl=2 l= 3 prim: OBJECT :commonName |
+ 792:d=8 hl=2 l= 16 prim: PRINTABLESTRING :Test OCSP Signer |
+ 810:d=5 hl=3 l= 159 cons: SEQUENCE |
+ 813:d=6 hl=2 l= 13 cons: SEQUENCE |
+ 815:d=7 hl=2 l= 9 prim: OBJECT :rsaEncryption |
+ 826:d=7 hl=2 l= 0 prim: NULL |
+ 828:d=6 hl=3 l= 141 prim: BIT STRING |
+ 972:d=5 hl=2 l= 23 cons: cont [ 3 ] |
+ 974:d=6 hl=2 l= 21 cons: SEQUENCE |
+ 976:d=7 hl=2 l= 19 cons: SEQUENCE |
+ 978:d=8 hl=2 l= 3 prim: OBJECT :X509v3 Extended Key Usage |
+ 983:d=8 hl=2 l= 12 prim: OCTET STRING [HEX DUMP]:300A06082B06010505070309 |
+ 997:d=4 hl=2 l= 13 cons: SEQUENCE |
+ 999:d=5 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 1010:d=5 hl=2 l= 0 prim: NULL |
+ 1012:d=4 hl=3 l= 129 prim: BIT STRING |
+-----BEGIN OCSP RESPONSE----- |
+MIIEkgoBAKCCBIswggSHBgkrBgEFBQcwAQEEggR4MIIEdDB9oAMCAQGhFDASMRAwDgYDVQQDEwd |
+UZXN0IENBGA8yMDE2MDIxOTEwMTE0MVowTzBNMDgwBwYFKw4DAhoEFAL/ddok3ordFQ+raJ3M5u |
+ZjbQkBBBQbBOK/Nv5IF7JpoBzjrz3ilkPldAIBA4AAGA8yMDE2MDIxOTEwMTE0MVowDQYJKoZIh |
+vcNAQEFBQADgYEAHr7RVCp3n/Ib08FKsckO+8+HdCI5s4XpqyRlJ08zOkFzZ6n4YdOPrTQvZUZJ |
+ipMzE10sh06MR2MKhYIL57/sIzhe8rY5ApkEwDaOnNWy1wHEJcx2WQwWveMlHQ+lIe6SfVhGbSf |
+sY6B2ah43k0RP5mBTeOJxyfeplXhuC6rYQQigggNeMIIDWjCCAZgwggEBoAMCAQICAQAwDQYJKo |
+ZIhvcNAQEFBQAwEjEQMA4GA1UEAxMHVGVzdCBDQTAeFw0xNjAyMTkxNTExNDBaFw0yNjAyMTYxN |
+TExNDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKqd |
+FkUKYwHtVo1VYRE5Z5arr8OeUA1cX4ns6GzsHKcXNaa62b0pizHAhiy8RP+tb3SXFW7Cirhmqm5 |
+iRFm8YXogNzDVhGxdfvF8DE8tJFTjq2sL+Ab3/YWCrZyCRVrMnvsjXDSvEwkDiF5SQSNWUWV2zf |
+QhRKy7krzPRD/TslfdAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAfMGmvWMOb1VsUDyZXxhYPXO7P |
+Hr50K61O/TtatyLKnxpfKQgsBhu0G/4e0UUh+8p+HKVWqGggaVekG9ZxO37jrtY+qiq9RkYrpJL |
+H2UnFcQ3jsSc3UtwQGndFszBkX213nereGppVdV6DMzwUMPF6mRJHH4r+ZzvUWm5t+7goAowggG |
+6MIIBI6ADAgECAgEBMA0GCSqGSIb3DQEBBQUAMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwHhcNMTYwMj |
+E5MTUxMTQwWhcNMjYwMjE2MTUxMTQwWjAbMRkwFwYDVQQDExBUZXN0IE9DU1AgU2lnbmVyMIGfM |
+A0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDhYGV4kXU5GNXa7kUGFxUtj61uAUpSKzU3G/ptFIjz |
+CeoJXqw+vF5l+Ne0AFPmF4T0RB1/NpfmEQFsYvE8NYd/seqm4riLlMf73rqbtNwCEeCrwDpgQQC |
+CfRLwOVknZuuvjhYLzY0Xn0UhTtAxVsEahEqJTuyX4mE6W8jMio5IdwIDAQABoxcwFTATBgNVHS |
+UEDDAKBggrBgEFBQcDCTANBgkqhkiG9w0BAQUFAAOBgQCQdaCxhjpXMUSJUbAtUvmuelD5y+hpY |
+58yBk+1dO2hMrfEaZcaiyMoUfTP/wOQVLmFs9MJxEG2IUPSQ9K0GvLaIjgNFLZT5z/LUkG6GRBh |
+zaZ49DMyFplwWaRVk28+iorN58aMEvlCoYa2CuQFP+VQeXaLrUyxNVWsSnUEcTZEBg== |
+-----END OCSP RESPONSE----- |
+ |
+$ openssl asn1parse -i < [CA CERTIFICATE] |
+ 0:d=0 hl=4 l= 408 cons: SEQUENCE |
+ 4:d=1 hl=4 l= 257 cons: SEQUENCE |
+ 8:d=2 hl=2 l= 3 cons: cont [ 0 ] |
+ 10:d=3 hl=2 l= 1 prim: INTEGER :02 |
+ 13:d=2 hl=2 l= 1 prim: INTEGER :00 |
+ 16:d=2 hl=2 l= 13 cons: SEQUENCE |
+ 18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 29:d=3 hl=2 l= 0 prim: NULL |
+ 31:d=2 hl=2 l= 18 cons: SEQUENCE |
+ 33:d=3 hl=2 l= 16 cons: SET |
+ 35:d=4 hl=2 l= 14 cons: SEQUENCE |
+ 37:d=5 hl=2 l= 3 prim: OBJECT :commonName |
+ 42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 51:d=2 hl=2 l= 30 cons: SEQUENCE |
+ 53:d=3 hl=2 l= 13 prim: UTCTIME :160219151140Z |
+ 68:d=3 hl=2 l= 13 prim: UTCTIME :260216151140Z |
+ 83:d=2 hl=2 l= 18 cons: SEQUENCE |
+ 85:d=3 hl=2 l= 16 cons: SET |
+ 87:d=4 hl=2 l= 14 cons: SEQUENCE |
+ 89:d=5 hl=2 l= 3 prim: OBJECT :commonName |
+ 94:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 103:d=2 hl=3 l= 159 cons: SEQUENCE |
+ 106:d=3 hl=2 l= 13 cons: SEQUENCE |
+ 108:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption |
+ 119:d=4 hl=2 l= 0 prim: NULL |
+ 121:d=3 hl=3 l= 141 prim: BIT STRING |
+ 265:d=1 hl=2 l= 13 cons: SEQUENCE |
+ 267:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 278:d=2 hl=2 l= 0 prim: NULL |
+ 280:d=1 hl=3 l= 129 prim: BIT STRING |
+-----BEGIN CA CERTIFICATE----- |
+MIIBmDCCAQGgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMB4XDTE |
+2MDIxOTE1MTE0MFoXDTI2MDIxNjE1MTE0MFowEjEQMA4GA1UEAxMHVGVzdCBDQTCBnzANBgkqhk |
+iG9w0BAQEFAAOBjQAwgYkCgYEAqp0WRQpjAe1WjVVhETlnlquvw55QDVxfiezobOwcpxc1prrZv |
+SmLMcCGLLxE/61vdJcVbsKKuGaqbmJEWbxheiA3MNWEbF1+8XwMTy0kVOOrawv4Bvf9hYKtnIJF |
+Wsye+yNcNK8TCQOIXlJBI1ZRZXbN9CFErLuSvM9EP9OyV90CAwEAATANBgkqhkiG9w0BAQUFAAO |
+BgQB8waa9Yw5vVWxQPJlfGFg9c7s8evnQrrU79O1q3IsqfGl8pCCwGG7Qb/h7RRSH7yn4cpVaoa |
+CBpV6Qb1nE7fuOu1j6qKr1GRiukksfZScVxDeOxJzdS3BAad0WzMGRfbXed6t4amlV1XoMzPBQw |
+8XqZEkcfiv5nO9Rabm37uCgCg== |
+-----END CA CERTIFICATE----- |
+ |
+$ openssl asn1parse -i < [CERTIFICATE] |
+ 0:d=0 hl=4 l= 410 cons: SEQUENCE |
+ 4:d=1 hl=4 l= 259 cons: SEQUENCE |
+ 8:d=2 hl=2 l= 3 cons: cont [ 0 ] |
+ 10:d=3 hl=2 l= 1 prim: INTEGER :02 |
+ 13:d=2 hl=2 l= 1 prim: INTEGER :03 |
+ 16:d=2 hl=2 l= 13 cons: SEQUENCE |
+ 18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 29:d=3 hl=2 l= 0 prim: NULL |
+ 31:d=2 hl=2 l= 18 cons: SEQUENCE |
+ 33:d=3 hl=2 l= 16 cons: SET |
+ 35:d=4 hl=2 l= 14 cons: SEQUENCE |
+ 37:d=5 hl=2 l= 3 prim: OBJECT :commonName |
+ 42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA |
+ 51:d=2 hl=2 l= 30 cons: SEQUENCE |
+ 53:d=3 hl=2 l= 13 prim: UTCTIME :160219151140Z |
+ 68:d=3 hl=2 l= 13 prim: UTCTIME :260216151140Z |
+ 83:d=2 hl=2 l= 20 cons: SEQUENCE |
+ 85:d=3 hl=2 l= 18 cons: SET |
+ 87:d=4 hl=2 l= 16 cons: SEQUENCE |
+ 89:d=5 hl=2 l= 3 prim: OBJECT :commonName |
+ 94:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert |
+ 105:d=2 hl=3 l= 159 cons: SEQUENCE |
+ 108:d=3 hl=2 l= 13 cons: SEQUENCE |
+ 110:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption |
+ 121:d=4 hl=2 l= 0 prim: NULL |
+ 123:d=3 hl=3 l= 141 prim: BIT STRING |
+ 267:d=1 hl=2 l= 13 cons: SEQUENCE |
+ 269:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption |
+ 280:d=2 hl=2 l= 0 prim: NULL |
+ 282:d=1 hl=3 l= 129 prim: BIT STRING |
+-----BEGIN CERTIFICATE----- |
+MIIBmjCCAQOgAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMB4XDTE |
+2MDIxOTE1MTE0MFoXDTI2MDIxNjE1MTE0MFowFDESMBAGA1UEAxMJVGVzdCBDZXJ0MIGfMA0GCS |
+qGSIb3DQEBAQUAA4GNADCBiQKBgQC43HTxzqrsQsyCBkYUZUYMR6MfeFEiIN5Fa+/ZwERplD+4w |
+qYaiVEeCkuL8e7jqYMm2B2t4dsfSRDTCjFYM+o49ahDJcD4b0h56s0ovP6085QVMJXWLWQ5RLB+ |
+URvaToRfYyh7Q1F0KAj6DUIX6vGahHcNZbDpJkkd4ghWFxV8PQIDAQABMA0GCSqGSIb3DQEBBQU |
+AA4GBADhaCL0Iy2bbEcb8h448n/PcWGLlhH0VRJIu7t/33uvtKXtNA45D9H5B4wMjAZLbplEWWD |
+cSzTU8FNbIoilfgL+9Jw1dsHxJEooiZlf7V4Y2G12iDgcGD8S6bH5EtJmrPDZ06/8iIU9nsGCrO |
+PKP4nsqbj6FOqG8TvNgm7Gk9CCY |
+-----END CERTIFICATE----- |