Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(361)

Issue 2567523003: Fix P-521 client cert mapping and test all curves. (Closed)

Created:
4 years ago by davidben
Modified:
4 years ago
Reviewers:
svaldez, emaxx
CC:
chromium-reviews, cbentzel+watch_chromium.org
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Fix P-521 client cert mapping and test all curves. I messed up the mapping. As penance, add tests for everything and make the Android tests less of a mess. The failure mode here is P-521 client certificates won't quite work right in TLS 1.3. I believe TLS 1.2 and below would not have been affected. BUG=672972 Committed: https://crrev.com/b9b243bd7562a54a6cc4f80f1b23ebc9b8c37d9b Cr-Commit-Position: refs/heads/master@{#437963}

Patch Set 1 #

Patch Set 2 : fix tests #

Patch Set 3 : fix tests #

Patch Set 4 : workaround platform_keys' misbehavior #

Patch Set 5 : rebase #

Patch Set 6 : reupload with hack to depot_tools #

Unified diffs Side-by-side diffs Delta from patch set Stats (+948 lines, -694 lines) Patch
M chrome/test/data/extensions/api_test/platform_keys/basic.js View 1 2 3 1 chunk +13 lines, -14 lines 0 comments Download
M chrome/test/data/extensions/api_test/platform_keys/client_1.der View 1 2 3 Binary file 0 comments Download
M chrome/test/data/extensions/api_test/platform_keys/client_1_spki.der View 1 2 3 Binary file 0 comments Download
M chrome/test/data/extensions/api_test/platform_keys/client_2.der View 1 2 3 Binary file 0 comments Download
A chrome/test/data/extensions/api_test/platform_keys/create_net_cert_data.sh View 1 2 3 1 chunk +30 lines, -0 lines 0 comments Download
M chrome/test/data/extensions/api_test/platform_keys/signature_nohash_pkcs View 1 2 3 Binary file 0 comments Download
M chrome/test/data/extensions/api_test/platform_keys/signature_sha1_pkcs View 1 2 3 4 5 Binary file 0 comments Download
M net/data/ssl/certificates/README View 2 chunks +12 lines, -0 lines 0 comments Download
M net/data/ssl/certificates/client_1.key View 1 chunk +25 lines, -25 lines 0 comments Download
M net/data/ssl/certificates/client_1.pem View 2 chunks +50 lines, -50 lines 0 comments Download
M net/data/ssl/certificates/client_1.pk8 View Binary file 0 comments Download
M net/data/ssl/certificates/client_1_ca.pem View 2 chunks +49 lines, -49 lines 0 comments Download
M net/data/ssl/certificates/client_2.key View 1 chunk +25 lines, -25 lines 0 comments Download
M net/data/ssl/certificates/client_2.pem View 2 chunks +50 lines, -50 lines 0 comments Download
M net/data/ssl/certificates/client_2.pk8 View Binary file 0 comments Download
M net/data/ssl/certificates/client_2_ca.pem View 2 chunks +49 lines, -49 lines 0 comments Download
M net/data/ssl/certificates/client_3.key View 1 chunk +25 lines, -25 lines 0 comments Download
M net/data/ssl/certificates/client_3.pem View 1 chunk +49 lines, -49 lines 0 comments Download
M net/data/ssl/certificates/client_3.pk8 View Binary file 0 comments Download
M net/data/ssl/certificates/client_3_ca.pem View 2 chunks +49 lines, -49 lines 0 comments Download
M net/data/ssl/certificates/client_4.key View 1 chunk +3 lines, -3 lines 0 comments Download
M net/data/ssl/certificates/client_4.pem View 2 chunks +32 lines, -32 lines 0 comments Download
M net/data/ssl/certificates/client_4.pk8 View Binary file 0 comments Download
M net/data/ssl/certificates/client_4_ca.pem View 2 chunks +49 lines, -49 lines 0 comments Download
A net/data/ssl/certificates/client_5.key View 1 chunk +6 lines, -0 lines 0 comments Download
A net/data/ssl/certificates/client_5.pem View 1 chunk +57 lines, -0 lines 0 comments Download
A net/data/ssl/certificates/client_5.pk8 View Binary file 0 comments Download
A net/data/ssl/certificates/client_5_ca.pem View 1 chunk +71 lines, -0 lines 0 comments Download
A net/data/ssl/certificates/client_6.key View 1 chunk +7 lines, -0 lines 0 comments Download
A net/data/ssl/certificates/client_6.pem View 1 chunk +60 lines, -0 lines 0 comments Download
A net/data/ssl/certificates/client_6.pk8 View Binary file 0 comments Download
A net/data/ssl/certificates/client_6_ca.pem View 1 chunk +71 lines, -0 lines 0 comments Download
M net/data/ssl/certificates/client_root_ca.pem View 1 chunk +15 lines, -15 lines 0 comments Download
M net/data/ssl/scripts/generate-client-certificates.sh View 6 chunks +51 lines, -1 line 0 comments Download
M net/net.gypi View 1 2 3 4 1 chunk +8 lines, -0 lines 0 comments Download
M net/ssl/ssl_platform_key_android_unittest.cc View 1 2 4 chunks +78 lines, -207 lines 0 comments Download
M net/ssl/ssl_platform_key_util.cc View 1 2 3 4 1 chunk +1 line, -1 line 0 comments Download
M net/ssl/ssl_platform_key_util_unittest.cc View 2 chunks +13 lines, -1 line 0 comments Download

Messages

Total messages: 45 (31 generated)
davidben
4 years ago (2016-12-09 21:45:01 UTC) #9
svaldez
lgtm
4 years ago (2016-12-09 21:54:23 UTC) #10
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2567523003/40001
4 years ago (2016-12-09 22:58:04 UTC) #13
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_chromeos_rel_ng on master.tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_chromeos_rel_ng/builds/330660)
4 years ago (2016-12-10 01:12:20 UTC) #15
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2567523003/40001
4 years ago (2016-12-10 01:21:43 UTC) #17
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_chromeos_rel_ng on master.tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_chromeos_rel_ng/builds/330813)
4 years ago (2016-12-10 04:18:36 UTC) #19
davidben
On 2016/12/10 04:18:36, commit-bot: I haz the power wrote: > Try jobs failed on following ...
4 years ago (2016-12-10 04:39:52 UTC) #20
davidben
emaxx: Please review chrome/test/data/extensions/api_test/platform_keys. I added a script so at least updating it will be ...
4 years ago (2016-12-12 19:47:54 UTC) #22
emaxx
LGTM Sorry for these hardcoded values in the platform_keys API tests. This issue was filed ...
4 years ago (2016-12-12 20:03:19 UTC) #27
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2567523003/80001
4 years ago (2016-12-12 20:06:47 UTC) #35
commit-bot: I haz the power
Try jobs failed on following builders: android_arm64_dbg_recipe on master.tryserver.chromium.android (JOB_FAILED, https://build.chromium.org/p/tryserver.chromium.android/builders/android_arm64_dbg_recipe/builds/179095) android_cronet on master.tryserver.chromium.android (JOB_FAILED, ...
4 years ago (2016-12-12 20:11:07 UTC) #37
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/2567523003/100001
4 years ago (2016-12-12 20:45:35 UTC) #40
commit-bot: I haz the power
Committed patchset #6 (id:100001)
4 years ago (2016-12-12 23:57:24 UTC) #43
commit-bot: I haz the power
4 years ago (2016-12-13 00:01:08 UTC) #45
Message was sent while issue was closed.
Patchset 6 (id:??) landed as
https://crrev.com/b9b243bd7562a54a6cc4f80f1b23ebc9b8c37d9b
Cr-Commit-Position: refs/heads/master@{#437963}

Powered by Google App Engine
This is Rietveld 408576698