net/data/cert_issuer_source_aia_unittest/target_one_aia.pem - Issue 2735733003: Disable commonName matching for certificates

Unified Diff: net/data/cert_issuer_source_aia_unittest/target_one_aia.pem

Issue 2735733003: Disable commonName matching for certificates (Closed)

Patch Set: Created 3 years, 9 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

« no previous file with comments | « net/data/cert_issuer_source_aia_unittest/target_no_aia.pem ('k') | net/data/cert_issuer_source_aia_unittest/target_six_aia.pem » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/data/cert_issuer_source_aia_unittest/target_one_aia.pem

diff --git a/net/data/cert_issuer_source_aia_unittest/target_one_aia.pem b/net/data/cert_issuer_source_aia_unittest/target_one_aia.pem

index c89862f780ad7a7ba63b900dc4c18df15d01b18b..32c465552de1a3786725a9f82af2c26ece20eaf6 100644

--- a/net/data/cert_issuer_source_aia_unittest/target_one_aia.pem

+++ b/net/data/cert_issuer_source_aia_unittest/target_one_aia.pem

@@ -12,30 +12,30 @@ Certificate:

Public Key Algorithm: rsaEncryption

Public-Key: (2048 bit)

Modulus:

- 00:ba:f4:30:40:ee:e8:c3:44:66:c1:07:f4:27:30:

- bc:76:aa:df:c1:f9:84:f8:2d:60:d8:a3:96:8c:9e:

- e6:9d:ea:d9:98:dc:64:01:3e:ae:9f:82:23:52:64:

- 60:75:98:9c:2d:ea:55:a3:80:42:be:31:9d:51:49:

- a6:ea:e3:9d:a8:cc:89:93:36:3a:a3:33:5c:56:e9:

- 4b:f0:cf:81:bd:5e:52:05:44:34:ad:25:af:61:b5:

- da:d5:30:e9:18:e0:23:64:1c:08:d2:8f:43:8f:84:

- 3b:62:7e:2e:e8:71:8a:0b:9a:4d:0e:20:90:14:77:

- 40:83:39:92:93:66:44:7f:c9:94:e0:ba:7b:82:95:

- 4d:bf:3a:72:8f:00:4c:62:dc:72:a7:43:43:53:0b:

- bb:52:b5:3f:42:5b:3b:6a:89:a2:ed:c9:27:0b:49:

- 74:51:da:0e:53:72:87:7c:4c:30:26:a4:ca:53:59:

- 8e:4f:75:b7:c8:1e:7b:77:35:d8:5e:f7:9f:f4:1b:

- 77:31:19:4f:4b:f9:1f:e6:c0:84:9c:21:b0:5f:1d:

- 5e:24:14:35:ee:80:98:8d:eb:77:06:6f:27:61:fc:

- ac:3b:99:f5:d9:86:85:ee:e1:79:90:62:05:b6:58:

- a2:9e:31:34:d7:b9:38:39:3b:91:92:37:de:68:e0:

- 4b:85

+ 00:e6:20:5f:6c:8f:17:bb:ad:da:b9:19:22:1e:19:

+ dc:04:47:cd:0b:e9:72:33:6f:5e:c6:91:aa:7e:6e:

+ 8b:9a:9d:6a:41:47:3f:67:8e:da:bf:ec:76:d9:e7:

+ 91:58:9a:9a:ab:b5:47:5f:90:c1:c3:31:de:ae:17:

+ 09:b4:6a:b9:07:1a:82:a1:0a:76:df:69:91:5a:01:

+ ed:ec:bd:1f:cc:9e:c5:27:54:1d:48:f5:16:e0:11:

+ 3d:f0:8c:a6:91:ec:41:35:c0:ea:5f:61:d8:14:a5:

+ b5:48:7a:fd:fd:f8:9e:30:50:bb:73:70:4b:bb:52:

+ a8:73:18:90:75:3a:1d:42:7b:d7:0c:26:fd:83:26:

+ 43:47:f6:a8:2e:46:6d:01:96:2d:12:5a:d7:ec:cb:

+ 46:fe:22:c1:3c:a0:8b:43:d6:92:be:ba:0c:05:01:

+ 59:0d:ea:32:ee:d2:fe:63:76:17:f4:a4:c3:74:85:

+ 1e:2f:15:fe:01:b8:1a:27:4f:96:20:55:c2:6e:a4:

+ b0:3e:ef:ac:07:b9:2f:e3:55:1b:1f:ab:2d:5d:aa:

+ fc:95:85:9f:ee:e3:25:ee:df:b3:3a:2f:69:04:bb:

+ e7:37:54:56:3a:02:d2:12:79:05:56:a5:03:3c:47:

+ f0:12:56:3d:3b:ff:f3:28:8f:73:96:93:38:21:5f:

+ 98:3b

Exponent: 65537 (0x10001)

X509v3 extensions:

X509v3 Subject Key Identifier:

- F4:04:58:42:C7:F3:33:C8:D7:AE:12:EC:87:E9:98:48:2D:E9:33:1E

+ EF:EB:BB:51:07:08:E2:B1:D5:35:CC:96:47:4C:E6:3E:00:0D:8C:AE

X509v3 Authority Key Identifier:

- keyid:40:91:28:21:9D:93:F3:9C:18:1B:FF:00:9C:B2:08:A0:A3:81:7D:2A

+ keyid:84:BA:05:06:4E:33:9D:11:AA:7A:F1:77:1F:A4:69:7E:4C:2D:D4:3F

Authority Information Access:

CA Issuers - URI:http://url-for-aia/I.cer

@@ -49,40 +49,42 @@ Certificate:

Digital Signature, Key Encipherment

X509v3 Extended Key Usage:

TLS Web Server Authentication, TLS Web Client Authentication

+ X509v3 Subject Alternative Name:

+ DNS:target

Signature Algorithm: sha256WithRSAEncryption

- 0f:eb:81:92:ea:ac:d4:ac:84:d7:a2:b0:b0:55:78:47:37:af:

- e5:0d:97:a6:ff:67:ff:e7:3b:71:8b:0d:67:84:b5:d2:4f:8f:

- 5f:2b:26:f7:92:66:1d:8a:5d:b6:25:24:6f:84:2f:bc:ea:30:

- 1d:f8:34:84:12:ea:69:05:76:d5:61:dd:eb:d3:70:3b:68:58:

- 87:f9:c6:cf:04:6e:8a:e5:02:94:39:9d:a1:45:50:92:00:20:

- 98:d6:6f:a4:45:08:83:f8:3a:f0:67:aa:67:01:79:c9:bc:89:

- 8e:77:68:15:20:00:d0:3d:80:d4:c4:e1:7a:73:cd:16:18:bd:

- 7c:a4:5c:2f:5c:c9:d7:2e:63:e8:38:63:b5:f4:6a:11:c9:1f:

- 8e:3b:44:9a:51:d0:d8:8d:a6:33:ab:12:4c:76:27:36:67:ec:

- 15:2e:93:79:e5:33:b5:7a:74:c6:ac:c2:82:79:4f:cf:96:79:

- 20:81:4f:aa:12:25:03:9c:0c:45:83:65:5e:45:e1:01:00:a2:

- b7:a4:27:00:4f:ad:c1:2a:e6:66:46:16:44:0e:9d:c4:32:73:

- 72:ae:f9:2b:d9:71:0a:d6:ca:56:a8:9b:8b:c2:44:b5:fe:48:

- 54:c9:b8:60:d8:5d:c2:2f:2c:34:73:66:54:5c:c3:c9:8d:c6:

- c7:a8:76:d8

+ 91:15:64:f2:07:45:63:3c:8b:07:28:31:76:22:df:a1:1e:cd:

+ a0:a1:8f:9c:62:99:f2:22:f6:22:fb:e4:74:ef:77:17:50:16:

+ 05:99:46:c5:79:66:19:62:ea:57:38:0c:f2:0d:55:2a:95:7e:

+ 10:4f:b4:a9:3a:c7:61:af:37:cd:b5:70:85:c0:9e:db:3a:ca:

+ 70:96:ca:2c:7f:e6:c4:47:f3:42:ae:c3:64:14:31:23:4e:7d:

+ 24:9b:23:6d:87:69:02:b9:1f:1c:e0:b6:8d:e5:ad:5c:13:f4:

+ 9f:a3:d8:3b:08:48:24:e5:df:bf:15:03:a4:5a:c7:8d:39:1c:

+ 6d:1c:45:db:3c:ac:63:39:71:fd:33:4c:b7:3c:ec:5c:de:c8:

+ a5:41:d9:75:52:c9:45:cc:b7:fa:14:9f:ba:d1:04:aa:9d:ea:

+ 23:93:e2:c6:35:33:e8:f8:2e:6a:13:e5:ce:f0:ed:8a:b0:5b:

+ 31:1a:56:91:15:2a:d8:e6:d4:bb:70:91:9d:8d:37:53:09:9a:

+ af:af:84:67:2c:59:c3:2e:da:56:a6:1f:9b:75:c6:80:b0:f4:

+ 95:a7:78:15:e3:b5:e9:06:f9:01:63:5b:bf:2f:dd:ff:65:b9:

+ cc:9b:90:a6:de:90:e3:32:f7:48:bf:3b:fa:a0:c3:98:15:58:

+ 53:ad:ad:28

-----BEGIN CERTIFICATE-----

-MIIDbDCCAlSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAMMQowCAYDVQQDDAFJMB4X

+MIIDfzCCAmegAwIBAgIBATANBgkqhkiG9w0BAQsFADAMMQowCAYDVQQDDAFJMB4X

DTE1MDEwMTEyMDAwMFoXDTIxMDEwMTEyMDAwMFowETEPMA0GA1UEAwwGdGFyZ2V0

-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvQwQO7ow0RmwQf0JzC8

-dqrfwfmE+C1g2KOWjJ7mnerZmNxkAT6un4IjUmRgdZicLepVo4BCvjGdUUmm6uOd

-qMyJkzY6ozNcVulL8M+BvV5SBUQ0rSWvYbXa1TDpGOAjZBwI0o9Dj4Q7Yn4u6HGK

-C5pNDiCQFHdAgzmSk2ZEf8mU4Lp7gpVNvzpyjwBMYtxyp0NDUwu7UrU/Qls7aomi

-7cknC0l0UdoOU3KHfEwwJqTKU1mOT3W3yB57dzXYXvef9Bt3MRlPS/kf5sCEnCGw

-Xx1eJBQ17oCYjet3Bm8nYfysO5n12YaF7uF5kGIFtliinjE017k4OTuRkjfeaOBL

-hQIDAQABo4HTMIHQMB0GA1UdDgQWBBT0BFhCx/MzyNeuEuyH6ZhILekzHjAfBgNV

-HSMEGDAWgBRAkSghnZPznBgb/wCcsgigo4F9KjA0BggrBgEFBQcBAQQoMCYwJAYI

+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iBfbI8Xu63auRkiHhnc

+BEfNC+lyM29expGqfm6Lmp1qQUc/Z47av+x22eeRWJqaq7VHX5DBwzHerhcJtGq5

+BxqCoQp232mRWgHt7L0fzJ7FJ1QdSPUW4BE98IymkexBNcDqX2HYFKW1SHr9/fie

+MFC7c3BLu1KocxiQdTodQnvXDCb9gyZDR/aoLkZtAZYtElrX7MtG/iLBPKCLQ9aS

+vroMBQFZDeoy7tL+Y3YX9KTDdIUeLxX+AbgaJ0+WIFXCbqSwPu+sB7kv41UbH6st

+Xar8lYWf7uMl7t+zOi9pBLvnN1RWOgLSEnkFVqUDPEfwElY9O//zKI9zlpM4IV+Y

+OwIDAQABo4HmMIHjMB0GA1UdDgQWBBTv67tRBwjisdU1zJZHTOY+AA2MrjAfBgNV

+HSMEGDAWgBSEugUGTjOdEap68XcfpGl+TC3UPzA0BggrBgEFBQcBAQQoMCYwJAYI

KwYBBQUHMAKGGGh0dHA6Ly91cmwtZm9yLWFpYS9JLmNlcjApBgNVHR8EIjAgMB6g

HKAahhhodHRwOi8vdXJsLWZvci1jcmwvSS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0G

-A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEA

-D+uBkuqs1KyE16KwsFV4Rzev5Q2Xpv9n/+c7cYsNZ4S10k+PXysm95JmHYpdtiUk

-b4QvvOowHfg0hBLqaQV21WHd69NwO2hYh/nGzwRuiuUClDmdoUVQkgAgmNZvpEUI

-g/g68GeqZwF5ybyJjndoFSAA0D2A1MThenPNFhi9fKRcL1zJ1y5j6DhjtfRqEckf

-jjtEmlHQ2I2mM6sSTHYnNmfsFS6TeeUztXp0xqzCgnlPz5Z5IIFPqhIlA5wMRYNl

-XkXhAQCit6QnAE+twSrmZkYWRA6dxDJzcq75K9lxCtbKVqibi8JEtf5IVMm4YNhd

-wi8sNHNmVFzDyY3Gx6h22A==

+A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjARBgNVHREECjAIggZ0YXJnZXQw

+DQYJKoZIhvcNAQELBQADggEBAJEVZPIHRWM8iwcoMXYi36EezaChj5ximfIi9iL7

+5HTvdxdQFgWZRsV5Zhli6lc4DPINVSqVfhBPtKk6x2GvN821cIXAnts6ynCWyix/

+5sRH80Kuw2QUMSNOfSSbI22HaQK5Hxzgto3lrVwT9J+j2DsISCTl378VA6Rax405

+HG0cRds8rGM5cf0zTLc87FzeyKVB2XVSyUXMt/oUn7rRBKqd6iOT4sY1M+j4LmoT

+5c7w7YqwWzEaVpEVKtjm1LtwkZ2NN1MJmq+vhGcsWcMu2lamH5t1xoCw9JWneBXj

+tekG+QFjW78v3f9lucybkKbekOMy90i/O/qgw5gVWFOtrSg=

-----END CERTIFICATE-----