net/data/ssl/certificates/README - Issue 2101303005: CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop.

Side by Side Diff: net/data/ssl/certificates/README

Issue 2101303005: CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: review changes and url_request_unittest fixes Created 4 years, 5 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« net/cert/cert_verify_proc_unittest.cc ('K') | « net/cert/test_keychain_search_list_mac.cc ('k') | net/data/ssl/certificates/multi-root-BFE.keychain » ('j') | net/data/ssl/certificates/tripadvisor-verisign-chain.pem » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 This directory contains various certificates for use with SSL-related	1 This directory contains various certificates for use with SSL-related

2 unit tests.	2 unit tests.

3	3

4 ===== Real-world certificates that need manual updating	4 ===== Real-world certificates that need manual updating

5 - google.binary.p7b	5 - google.binary.p7b

6 - google.chain.pem	6 - google.chain.pem

7 - google.pem_cert.p7b	7 - google.pem_cert.p7b

8 - google.pem_pkcs7.p7b	8 - google.pem_pkcs7.p7b

9 - google.pkcs7.p7b	9 - google.pkcs7.p7b

10 - google.single.der	10 - google.single.der

(...skipping 40 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
51 embedded SCTs, followed by the issuer certificates chain.	51 embedded SCTs, followed by the issuer certificates chain.

52 All files are from the src/test/testdada directory in	52 All files are from the src/test/testdada directory in

53 https://code.google.com/p/certificate-transparency/	53 https://code.google.com/p/certificate-transparency/

54	54

55 - comodo.chain.pem : A certificate chain for www.comodo.com which should be	55 - comodo.chain.pem : A certificate chain for www.comodo.com which should be

56 recognised as EV. Expires Jun 20 2015.	56 recognised as EV. Expires Jun 20 2015.

57	57

58 - twitter-chain.pem : A certificate chain for twitter.com which should be	58 - twitter-chain.pem : A certificate chain for twitter.com which should be

59 valid. Expires May 9 2016.	59 valid. Expires May 9 2016.

60	60

	61 - tripadvisor-verisign-chain.pem: A certificate chain for www.tripadvisor.com

	62 issued by VeriSign Class 3 Public Primary Certification Authority - G5.

	63 Expires Apr 2 2018.

	64 - verisign_class3_g5_crosssigned-trusted.keychain: An OSX Keychain set to

	65 Always Trust the SHA1 cross-signed version of VeriSign Class 3 Public Primary

	66 Certification Authority - G5

	67

	68 - multi-root-BFE.keychain: An OSX Keychain containing the generated

	69 certificates "multi-root-B-by-F.pem" and "multi-root-F-by-E.pem".
	Ryan Sleevi 2016/08/12 19:50:17 This is in the wrong section; it's not a 'real' ce This is in the wrong section; it's not a 'real' cert. mattm 2016/08/16 01:41:34 Done. Show quoted text On 2016/08/12 19:50:17, Ryan Sleevi (slow) wrote: > This is in the wrong section; it's not a 'real' cert. Done.
	70

61 ===== Manually generated certificates	71 ===== Manually generated certificates

62 - client.p12 : A PKCS #12 file containing a client certificate and a private	72 - client.p12 : A PKCS #12 file containing a client certificate and a private

63 key created for testing. The password is "12345".	73 key created for testing. The password is "12345".

64	74

65 - client-nokey.p12 : A PKCS #12 file containing a client certificate (the same	75 - client-nokey.p12 : A PKCS #12 file containing a client certificate (the same

66 as the one in client.p12) but no private key. The password is "12345".	76 as the one in client.p12) but no private key. The password is "12345".

67	77

68 - unittest.selfsigned.der : A self-signed certificate generated using private	78 - unittest.selfsigned.der : A self-signed certificate generated using private

69 key in unittest.key.bin. The common name is "unittest".	79 key in unittest.key.bin. The common name is "unittest".

70	80

(...skipping 207 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
278 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL	288 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL

279 containing the intermediate, which can be served via a URLRequestFilter.	289 containing the intermediate, which can be served via a URLRequestFilter.

280 aia-intermediate.der is stored in DER form for convenience, since that is	290 aia-intermediate.der is stored in DER form for convenience, since that is

281 the form expected of certificates discovered via AIA.	291 the form expected of certificates discovered via AIA.

282	292

283 ===== From net/data/ssl/scripts/generate-self-signed-certs.sh	293 ===== From net/data/ssl/scripts/generate-self-signed-certs.sh

284 - self-signed-invalid-name.pem	294 - self-signed-invalid-name.pem

285 - self-signed-invalid-sig.pem	295 - self-signed-invalid-sig.pem

286 Two "self-signed" certificates with mismatched names or an invalid	296 Two "self-signed" certificates with mismatched names or an invalid

287 signature, respectively.	297 signature, respectively.

OLD	NEW