net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem - Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Unified Diff: net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem

Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: checkpoint Created 4 years, 4 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

« net/cert/internal/verify_certificate_chain.cc ('K') | « net/data/verify_certificate_chain_unittest/expired-root.pem ('k') | net/data/verify_certificate_chain_unittest/generate-constrained-non-self-signed-root.py » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem

diff --git a/net/data/verify_certificate_chain_unittest/expired-root.pem b/net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem

similarity index 99%

rename from net/data/verify_certificate_chain_unittest/expired-root.pem

rename to net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem

index d765cfabdaabda8fa06222d2e2e809ddb42492a3..d1e4cac321a20d597859386bc8bc26e7d61fea81 100644

--- a/net/data/verify_certificate_chain_unittest/expired-root.pem

+++ b/net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem

@@ -1,8 +1,9 @@

-[Created by: generate-expired-root.py]

+[Created by: generate-expired-unconstrained-root.py]

Certificate chain with 1 intermediate, where the root certificate is expired

(violates validity.notAfter). Verification is expected to succeed as

-constraints on trust anchors are not enforced..

+the trust anchor has no constraints (so expiration of the certificate is not

+enforced.

Certificate:

Data: