Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(201)

Side by Side Diff: net/data/ssl/scripts/ee.cnf

Issue 2735733003: Disable commonName matching for certificates (Closed)
Patch Set: Created 3 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/data/ssl/scripts/aia-test.cnf ('k') | net/data/ssl/scripts/generate-aia-certs.sh » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 SUBJECT_NAME = req_dn 1 SUBJECT_NAME = req_dn
2 KEY_SIZE = 2048 2 KEY_SIZE = 2048
3 3
4 [req] 4 [req]
5 default_bits = ${ENV::KEY_SIZE} 5 default_bits = ${ENV::KEY_SIZE}
6 default_md = sha256 6 default_md = sha256
7 string_mask = utf8only 7 string_mask = utf8only
8 prompt = no 8 prompt = no
9 encrypt_key = no 9 encrypt_key = no
10 distinguished_name = ${ENV::SUBJECT_NAME} 10 distinguished_name = ${ENV::SUBJECT_NAME}
(...skipping 37 matching lines...) Expand 10 before | Expand all | Expand 10 after
48 L = Ann Arbor 48 L = Ann Arbor
49 O = Test Self-Signed 49 O = Test Self-Signed
50 CN = SS B 50 CN = SS B
51 51
52 [req_punycode_dn] 52 [req_punycode_dn]
53 CN = xn--wgv71a119e.com 53 CN = xn--wgv71a119e.com
54 54
55 [req_extensions] 55 [req_extensions]
56 subjectAltName = IP:127.0.0.1 56 subjectAltName = IP:127.0.0.1
57 57
58 [req_intranet_san]
59 subjectAltName = DNS:webmail
60
58 [req_extensions_with_tls_feature] 61 [req_extensions_with_tls_feature]
59 subjectAltName = IP:127.0.0.1 62 subjectAltName = IP:127.0.0.1
60 1.3.6.1.5.5.7.1.24=DER:30:03:02:01:05 63 1.3.6.1.5.5.7.1.24=DER:30:03:02:01:05
61 64
62 [req_localhost_san] 65 [req_localhost_san]
63 subjectAltName = DNS:localhost 66 subjectAltName = DNS:localhost
64 67
65 [req_punycode] 68 [req_punycode]
66 basicConstraints = critical, CA:true 69 basicConstraints = critical, CA:true
67 subjectAltName = @punycode_san 70 subjectAltName = @punycode_san
(...skipping 24 matching lines...) Expand all
92 DNS.2 = mail.example.org 95 DNS.2 = mail.example.org
93 DNS.3 = mail.example.com 96 DNS.3 = mail.example.com
94 97
95 [punycode_san] 98 [punycode_san]
96 DNS.1 = xn--wgv71a119e.com 99 DNS.1 = xn--wgv71a119e.com
97 DNS.2 = *.xn--wgv71a119e.com 100 DNS.2 = *.xn--wgv71a119e.com
98 DNS.3 = blahblahblahblah.com 101 DNS.3 = blahblahblahblah.com
99 102
100 [wildcard] 103 [wildcard]
101 DNS.1 = *.example.org 104 DNS.1 = *.example.org
OLDNEW
« no previous file with comments | « net/data/ssl/scripts/aia-test.cnf ('k') | net/data/ssl/scripts/generate-aia-certs.sh » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698