net/data/ssl/certificates/README - Issue 2509613002: Distrust new WoSign/StartCom certificates

Side by Side Diff: net/data/ssl/certificates/README

Issue 2509613002: Distrust new WoSign/StartCom certificates (Closed)

Patch Set: Re-run net/data/update_net_gypi.py Created 4 years, 1 month ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
1 This directory contains various certificates for use with SSL-related	1 This directory contains various certificates for use with SSL-related

2 unit tests.	2 unit tests.

3	3

4 ===== Real-world certificates that need manual updating	4 ===== Real-world certificates that need manual updating

5 - google.binary.p7b	5 - google.binary.p7b

6 - google.chain.pem	6 - google.chain.pem

7 - google.pem_cert.p7b	7 - google.pem_cert.p7b

8 - google.pem_pkcs7.p7b	8 - google.pem_pkcs7.p7b

9 - google.pkcs7.p7b	9 - google.pkcs7.p7b

10 - google.single.der	10 - google.single.der

(...skipping 49 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
60	60

61 - tripadvisor-verisign-chain.pem: A certificate chain for www.tripadvisor.com	61 - tripadvisor-verisign-chain.pem: A certificate chain for www.tripadvisor.com

62 issued by VeriSign Class 3 Public Primary Certification Authority - G5.	62 issued by VeriSign Class 3 Public Primary Certification Authority - G5.

63 Expires Apr 2 2018.	63 Expires Apr 2 2018.

64 - verisign_class3_g5_crosssigned.pem: The SHA1 cross-signed version of	64 - verisign_class3_g5_crosssigned.pem: The SHA1 cross-signed version of

65 VeriSign Class 3 Public Primary Certification Authority - G5	65 VeriSign Class 3 Public Primary Certification Authority - G5

66 - verisign_class3_g5_crosssigned-trusted.keychain: OSX Keychain set to Always	66 - verisign_class3_g5_crosssigned-trusted.keychain: OSX Keychain set to Always

67 Trust the certificate in verisign_class3_g5_crosssigned.pem (Generated by	67 Trust the certificate in verisign_class3_g5_crosssigned.pem (Generated by

68 scripts/generate-verisign_class3_g5_crosssigned-trusted-keychain.sh)	68 scripts/generate-verisign_class3_g5_crosssigned-trusted-keychain.sh)

69	69

	70 - wosign_before_oct_21.pem

	71 - wosign_after_oct_21.pem

	72 Two certificates issued by WoSign CA Ltd, before and after the

	73 2016-10-21 00:00:00 UTC sunset for trust in this CA.

	74

70 ===== Manually generated certificates	75 ===== Manually generated certificates

71 - client.p12 : A PKCS #12 file containing a client certificate and a private	76 - client.p12 : A PKCS #12 file containing a client certificate and a private

72 key created for testing. The password is "12345".	77 key created for testing. The password is "12345".

73	78

74 - client-nokey.p12 : A PKCS #12 file containing a client certificate (the same	79 - client-nokey.p12 : A PKCS #12 file containing a client certificate (the same

75 as the one in client.p12) but no private key. The password is "12345".	80 as the one in client.p12) but no private key. The password is "12345".

76	81

77 - unittest.selfsigned.der : A self-signed certificate generated using private	82 - unittest.selfsigned.der : A self-signed certificate generated using private

78 key in unittest.key.bin. The common name is "unittest".	83 key in unittest.key.bin. The common name is "unittest".

79	84

(...skipping 216 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
296 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL	301 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL

297 containing the intermediate, which can be served via a URLRequestFilter.	302 containing the intermediate, which can be served via a URLRequestFilter.

298 aia-intermediate.der is stored in DER form for convenience, since that is	303 aia-intermediate.der is stored in DER form for convenience, since that is

299 the form expected of certificates discovered via AIA.	304 the form expected of certificates discovered via AIA.

300	305

301 ===== From net/data/ssl/scripts/generate-self-signed-certs.sh	306 ===== From net/data/ssl/scripts/generate-self-signed-certs.sh

302 - self-signed-invalid-name.pem	307 - self-signed-invalid-name.pem

303 - self-signed-invalid-sig.pem	308 - self-signed-invalid-sig.pem

304 Two "self-signed" certificates with mismatched names or an invalid	309 Two "self-signed" certificates with mismatched names or an invalid

305 signature, respectively.	310 signature, respectively.

OLD	NEW

« no previous file with comments | « net/cert/cert_verify_proc_whitelist_unittest.cc ('k') | net/data/ssl/certificates/wosign_after_oct_21.pem » ('j') | no next file with comments »