net/data/verify_certificate_chain_unittest/generate-constrained-root-lacks-basic-constraints.py - Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: net/data/verify_certificate_chain_unittest/generate-constrained-root-lacks-basic-constraints.py

Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: update gypi Created 4 years, 4 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « net/data/verify_certificate_chain_unittest/generate-constrained-root-basic-constraints-ca-false.py ('k') | net/data/verify_certificate_chain_unittest/generate-expired-constrained-root.py » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 #!/usr/bin/python	1 #!/usr/bin/python

2 # Copyright (c) 2015 The Chromium Authors. All rights reserved.	2 # Copyright (c) 2015 The Chromium Authors. All rights reserved.

3 # Use of this source code is governed by a BSD-style license that can be	3 # Use of this source code is governed by a BSD-style license that can be

4 # found in the LICENSE file.	4 # found in the LICENSE file.

5	5

6 """Certificate chain with 1 intermediate and a trusted root. Verification is	6 """Certificate chain with 1 intermediate and a trust anchor. The trust anchor

7 expected to succeed."""	7 lacks the basic constraints extension, and is loaded with anchor constraints.

	8 This is not a problem and verification should succeed."""

8	9

9 import common	10 import common

10	11

11 # Self-signed root certificate (used as trust anchor).	12 # Self-signed root certificate (used as trust anchor).

12 root = common.create_self_signed_root_certificate('Root')	13 root = common.create_self_signed_root_certificate('Root')

	14 root.get_extensions().remove_property('basicConstraints')

13	15

14 # Intermediate certificate.	16 # Intermediate.

15 intermediate = common.create_intermediate_certificate('Intermediate', root)	17 intermediate = common.create_intermediate_certificate('Intermediate', root)

16	18

17 # Target certificate.	19 # Target certificate.

18 target = common.create_end_entity_certificate('Target', intermediate)	20 target = common.create_end_entity_certificate('Target', intermediate)

19	21

20 chain = [target, intermediate]	22 chain = [target, intermediate]

21 trusted = common.TrustAnchor(root, constrained=False)	23 trusted = common.TrustAnchor(root, constrained=True)

22 time = common.DEFAULT_TIME	24 time = common.DEFAULT_TIME

23 verify_result = True	25 verify_result = True

24	26

25 common.write_test_file(__doc__, chain, trusted, time, verify_result)	27 common.write_test_file(__doc__, chain, trusted, time, verify_result)

OLD	NEW