net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem - Issue 2329593002: Add optional context for certificate errors.

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem

Issue 2329593002: Add optional context for certificate errors. (Closed)

Patch Set: Created 4 years, 3 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« net/data/verify_certificate_chain_unittest/expired-intermediate.pem ('K') | « net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem ('k') | net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 [Created by: generate-target-has-keycertsign-but-not-ca.py]	1 [Created by: generate-target-has-keycertsign-but-not-ca.py]

2	2

3 Certificate chain with 1 intermediate, a trusted root, and a target	3 Certificate chain with 1 intermediate, a trusted root, and a target

4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification	4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification

5 is expected to fail, since keyCertSign should only be asserted when CA is	5 is expected to fail, since keyCertSign should only be asserted when CA is

6 true.	6 true.

7	7

8 Certificate:	8 Certificate:

9 Data:	9 Data:

10 Version: 3 (0x2)	10 Version: 3 (0x2)

(...skipping 265 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
276 150302120000Z	276 150302120000Z

277 -----BEGIN TIME-----	277 -----BEGIN TIME-----

278 MTUwMzAyMTIwMDAwWg==	278 MTUwMzAyMTIwMDAwWg==

279 -----END TIME-----	279 -----END TIME-----

280	280

281 FAIL	281 FAIL

282 -----BEGIN VERIFY_RESULT-----	282 -----BEGIN VERIFY_RESULT-----

283 RkFJTA==	283 RkFJTA==

284 -----END VERIFY_RESULT-----	284 -----END VERIFY_RESULT-----

285	285

286 Target certificate looks like a CA but does not set all CA properties	286 [Context] Processing Certificate

	287 index: 1

	288 [Error] Target certificate looks like a CA but does not set all CA propert ies

	289

287 -----BEGIN ERRORS-----	290 -----BEGIN ERRORS-----

288 VGFyZ2V0IGNlcnRpZmljYXRlIGxvb2tzIGxpa2UgYSBDQSBidXQgZG9lcyBub3Qgc2V0IGFsbCBDQSBw cm9wZXJ0aWVz	291 W0NvbnRleHRdIFByb2Nlc3NpbmcgQ2VydGlmaWNhdGUKICBpbmRleDogMQogICAgICBbRXJyb3JdIFRh cmdldCBjZXJ0aWZpY2F0ZSBsb29rcyBsaWtlIGEgQ0EgYnV0IGRvZXMgbm90IHNldCBhbGwgQ0EgcHJv cGVydGllcwo=

289 -----END ERRORS-----	292 -----END ERRORS-----

OLD	NEW