Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(10)

Side by Side Diff: net/data/verify_certificate_chain_unittest/generate-key-rollover.py

Issue 2233233002: Refactor some certificate verification tests in preparation to adding (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@trust_anchor
Patch Set: moar Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 #!/usr/bin/python 1 #!/usr/bin/python
2 # Copyright (c) 2016 The Chromium Authors. All rights reserved. 2 # Copyright (c) 2016 The Chromium Authors. All rights reserved.
3 # Use of this source code is governed by a BSD-style license that can be 3 # Use of this source code is governed by a BSD-style license that can be
4 # found in the LICENSE file. 4 # found in the LICENSE file.
5 5
6 """A certificate tree with two self-signed root certificates(oldroot, newroot), 6 """A certificate tree with two self-signed root certificates(oldroot, newroot),
7 and a third root certificate (newrootrollover) which has the same key as newroot 7 and a third root certificate (newrootrollover) which has the same key as newroot
8 but is signed by oldroot, all with the same subject and issuer. 8 but is signed by oldroot, all with the same subject and issuer.
9 There are two intermediates with the same key, subject and issuer 9 There are two intermediates with the same key, subject and issuer
10 (oldintermediate signed by oldroot, and newintermediate signed by newroot). 10 (oldintermediate signed by oldroot, and newintermediate signed by newroot).
(...skipping 51 matching lines...) Expand 10 before | Expand all | Expand 10 after
62 # Intermediate signed by newroot. Same key as oldintermediate. 62 # Intermediate signed by newroot. Same key as oldintermediate.
63 newintermediate = common.create_intermediate_certificate('Intermediate', 63 newintermediate = common.create_intermediate_certificate('Intermediate',
64 newroot) 64 newroot)
65 newintermediate.set_key_path(oldintermediate.get_key_path()) 65 newintermediate.set_key_path(oldintermediate.get_key_path())
66 newintermediate.set_validity_range(JANUARY_2_2015_UTC, 66 newintermediate.set_validity_range(JANUARY_2_2015_UTC,
67 common.JANUARY_1_2016_UTC) 67 common.JANUARY_1_2016_UTC)
68 68
69 # Target certificate. 69 # Target certificate.
70 target = common.create_end_entity_certificate('Target', oldintermediate) 70 target = common.create_end_entity_certificate('Target', oldintermediate)
71 71
72 oldchain = [target, oldintermediate] 72 oldtrusted = common.TrustAnchor(oldroot, constrained=False)
73 rolloverchain = [target, newintermediate, newrootrollover] 73 newtrusted = common.TrustAnchor(newroot, constrained=False)
74 longrolloverchain = [target, newintermediate, newroot, newrootrollover]
75 oldtrusted = [oldroot]
76 74
77 newchain = [target, newintermediate] 75 test = common.TestData()
78 newtrusted = [newroot] 76 test.description = __doc__
77 test.verify_result = True
78 test.utc_time = common.DEFAULT_TIME
79 79
80 time = common.DEFAULT_TIME 80 # Write out a test for oldchain.
81 verify_result = True 81 test.chain = [target, oldintermediate]
82 test.trust_anchor = oldtrusted
83 test.write_to_file("key-rollover-oldchain.pem")
82 84
83 common.write_test_file(__doc__, oldchain, oldtrusted, time, verify_result, 85 # Write out a test for rolloverchain.
84 out_pem="key-rollover-oldchain.pem") 86 test.chain = [target, newintermediate, newrootrollover]
85 common.write_test_file(__doc__, rolloverchain, oldtrusted, time, verify_result, 87 test.trust_anchor = oldtrusted
86 out_pem="key-rollover-rolloverchain.pem") 88 test.write_to_file("key-rollover-rolloverchain.pem")
87 common.write_test_file(__doc__, longrolloverchain, oldtrusted, time,
88 verify_result,
89 out_pem="key-rollover-longrolloverchain.pem")
90 common.write_test_file(__doc__, newchain, newtrusted, time, verify_result,
91 out_pem="key-rollover-newchain.pem")
92 89
90 # Write out a test for longrolloverchain.
91 test.chain = [target, newintermediate, newroot, newrootrollover]
92 test.trust_anchor = oldtrusted
93 test.write_to_file("key-rollover-longrolloverchain.pem")
94
95 # Write out a test for newchain.
96 test.chain = [target, newintermediate]
97 test.trust_anchor = newtrusted
98 test.write_to_file("key-rollover-newchain.pem")
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698