Regenerate the test certificates.

Regenerate the test certificates.

[Ryan Hamilton, 2016-01-04 18:34:06]

rch@chromium.org changed reviewers:
+ rsleevi@chromium.org

[Ryan Hamilton, 2016-01-04 18:34:07]

Hi Ryan,

Mostly this was straightforward, but there are a few test failures that I don't
seem to know how to fix.

For CertVerifyProcTest.NameConstraintsFailure, it looks like the certs in
question are root_ca_cert.pem and name_constraint_bad.pem, but I don't see any
obvious changes.

For the PKP tests, I'm sure I need to change
net/data/url_request_unittest/hpkp-headers.html.mock-http-headers to reflect the
new sha256 hash, but I'm not sure how to generate that value. What's the OpenSSL
incantation I need to run?

[ RUN      ] URLRequestTestHTTP.ProcessSTSAndPKP2
../../net/url_request/url_request_unittest.cc:6090: Failure
Value of: security_state->GetDynamicPKPState(test_server_hostname, &pkp_state)
  Actual: false
Expected: true
../../net/url_request/url_request_unittest.cc:6096: Failure
Value of: pkp_state.HasPublicKeyPins()
  Actual: false
Expected: true
[  FAILED  ] URLRequestTestHTTP.ProcessSTSAndPKP2 (189 ms)
[15271/15274] URLRequestTestHTTP.ProcessSTSAndPKP2 (189 ms)
[ RUN      ] URLRequestTestHTTP.ProcessSTSAndPKP
../../net/url_request/url_request_unittest.cc:6047: Failure
Value of: security_state->GetDynamicPKPState(test_server_hostname, &pkp_state)
  Actual: false
Expected: true
../../net/url_request/url_request_unittest.cc:6053: Failure
Value of: pkp_state.HasPublicKeyPins()
  Actual: false
Expected: true
[  FAILED  ] URLRequestTestHTTP.ProcessSTSAndPKP (173 ms)
[15272/15274] URLRequestTestHTTP.ProcessSTSAndPKP (173 ms)
[ RUN      ] URLRequestTestHTTP.ProcessPKP
../../net/url_request/url_request_unittest.cc:5781: Failure
Value of: security_state->GetDynamicPKPState(test_server_hostname, &pkp_state)
  Actual: false
Expected: true
../../net/url_request/url_request_unittest.cc:5786: Failure
Value of: pkp_state.HasPublicKeyPins()
  Actual: false
Expected: true
../../net/url_request/url_request_unittest.cc:5787: Failure
Value of: pkp_state.report_uri
  Actual: 
Expected: report_uri
Which is: https://hpkp-report.test/
../../net/url_request/url_request_unittest.cc:5788: Failure
Expected: (sts_state.expiry) != (pkp_state.expiry), actual: 1601-01-01
00:00:00.000 UTC vs 1601-01-01 00:00:00.000 UTC
[  FAILED  ] URLRequestTestHTTP.ProcessPKP (155 ms)
[15273/15274] URLRequestTestHTTP.ProcessPKP (155 ms)
[ RUN      ] CertVerifyProcTest.NameConstraintsFailure
../../net/cert/cert_verify_proc_unittest.cc:620: Failure
Value of: error
  Actual: 0
Expected: ERR_CERT_NAME_CONSTRAINT_VIOLATION
Which is: -212
../../net/cert/cert_verify_proc_unittest.cc:622: Failure
Value of: verify_result.cert_status & CERT_STATUS_NAME_CONSTRAINT_VIOLATION
  Actual: 0
Expected: CERT_STATUS_NAME_CONSTRAINT_VIOLATION
Which is: 16384
[  FAILED  ] CertVerifyProcTest.NameConstraintsFailure (146 ms)
[15274/15274] CertVerifyProcTest.NameConstraintsFailure (146 ms)
4 tests failed:
    CertVerifyProcTest.NameConstraintsFailure
(../../net/cert/cert_verify_proc_unittest.cc:589)
    URLRequestTestHTTP.ProcessPKP
(../../net/url_request/url_request_unittest.cc:5758)
    URLRequestTestHTTP.ProcessSTSAndPKP
(../../net/url_request/url_request_unittest.cc:6022)
    URLRequestTestHTTP.ProcessSTSAndPKP2
(../../net/url_request/url_request_unittest.cc:6066)

https://codereview.chromium.org/1553903002/diff/20001/net/cert/x509_certifica...
File net/cert/x509_certificate_unittest.cc (right):

https://codereview.chromium.org/1553903002/diff/20001/net/cert/x509_certifica...
net/cert/x509_certificate_unittest.cc:507: EXPECT_EQ("localhost",
san_cert->subject().common_name);
If you look at the cert in question, it appears to have changed the SAN from
127.0.0.1 to localhost. I'm not sure if changing this test is OK, or if I should
change the cert script?