Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(230)

Unified Diff: net/data/ssl/scripts/generate-test-certs.sh

Issue 2436233002: Record UMA metrics for Must-Staple certificates on private roots (Closed)
Patch Set: ... and to README Created 4 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « net/data/ssl/scripts/ee.cnf ('k') | net/net.gypi » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: net/data/ssl/scripts/generate-test-certs.sh
diff --git a/net/data/ssl/scripts/generate-test-certs.sh b/net/data/ssl/scripts/generate-test-certs.sh
index a3e04e000d2cd2463cf5e74267ccae819f2de351..55c54bb3ff6dbff40e8cbd4e97fac193f7538514 100755
--- a/net/data/ssl/scripts/generate-test-certs.sh
+++ b/net/data/ssl/scripts/generate-test-certs.sh
@@ -371,6 +371,14 @@ CA_COMMON_NAME="Test Root CA" \
-out ../certificates/post_june_2016.pem \
-config ca.cnf
+# Includes the TLS feature extension
+try openssl req -x509 -newkey rsa:2048 \
+ -keyout out/tls_feature_extension.key \
+ -out ../certificates/tls_feature_extension.pem \
+ -days 365 \
+ -extensions req_extensions_with_tls_feature \
+ -nodes -config ee.cnf
+
# Regenerate CRLSets
## Block a leaf cert directly by SPKI
« no previous file with comments | « net/data/ssl/scripts/ee.cnf ('k') | net/net.gypi » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698