Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1013)

Side by Side Diff: net/data/verify_certificate_chain_unittest/target-lacks-eku.pem

Issue 2800993002: Add a key purpose parameter to Certificate PathBuilder. (Closed)
Patch Set: More cast comments Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 [Created by: generate-target-lacks-eku.py]
2
3 Certificate chain with 1 intermediate and a trusted root. The target has no
4 Extended Key Usage extension (meaning it is unrestricted). Verification is
5 expected to succeed.
6
7 Certificate:
8 Data:
9 Version: 3 (0x2)
10 Serial Number: 1 (0x1)
11 Signature Algorithm: sha256WithRSAEncryption
12 Issuer: CN=Intermediate
13 Validity
14 Not Before: Jan 1 12:00:00 2015 GMT
15 Not After : Jan 1 12:00:00 2016 GMT
16 Subject: CN=Target
17 Subject Public Key Info:
18 Public Key Algorithm: rsaEncryption
19 Public-Key: (2048 bit)
20 Modulus:
21 00:df:a4:d7:5c:5e:b2:1b:0e:ab:71:a6:54:ea:63:
22 b9:1b:c6:f0:ba:d4:a0:22:fd:f9:31:14:98:ad:d2:
23 79:a4:a1:75:9f:ae:82:65:21:d8:06:05:8c:91:f6:
24 b8:6f:f2:ed:5b:a6:a7:63:64:1c:9b:13:9e:0b:42:
25 16:01:dd:da:3e:dc:34:56:2a:c3:35:e8:79:e7:e8:
26 30:51:d9:64:f9:5c:24:ef:57:1d:1c:2f:42:1b:29:
27 59:d3:da:c3:b2:30:66:5e:07:b0:44:d9:60:bd:21:
28 c8:c4:e5:45:8a:ad:3a:e4:7f:11:c8:de:30:b1:07:
29 b8:9d:c8:d7:c1:ca:9b:40:a3:31:9e:22:be:de:87:
30 82:2f:be:76:1b:06:aa:7a:29:e4:cb:a6:d6:a6:cb:
31 ee:6d:a9:52:98:be:17:d8:c8:9a:bf:16:3c:ee:eb:
32 8c:d6:e7:31:ea:43:82:f8:f1:f4:6e:5d:7e:49:38:
33 04:cb:03:e4:b2:eb:5c:f2:c2:2b:87:ca:5c:a0:78:
34 6b:23:a6:44:6d:c9:57:a2:1e:63:92:d5:23:44:83:
35 61:ab:b1:7d:99:37:1e:97:eb:74:be:94:29:29:9b:
36 d7:50:3f:13:e5:a0:d9:9d:af:8f:90:9b:c3:e0:de:
37 17:ea:8c:8d:53:66:90:70:30:43:14:78:7d:ad:00:
38 0c:07
39 Exponent: 65537 (0x10001)
40 X509v3 extensions:
41 X509v3 Subject Key Identifier:
42 A5:17:52:10:3A:55:F0:92:E0:FF:D3:12:F7:D2:D1:11:CD:C9:4C:FE
43 X509v3 Authority Key Identifier:
44 keyid:D9:E3:8F:73:75:80:95:5E:3F:0E:E5:B7:A5:44:AE:0B:69:B5:29:1 C
45
46 Authority Information Access:
47 CA Issuers - URI:http://url-for-aia/Intermediate.cer
48
49 X509v3 CRL Distribution Points:
50
51 Full Name:
52 URI:http://url-for-crl/Intermediate.crl
53
54 X509v3 Key Usage: critical
55 Digital Signature, Key Encipherment
56 Signature Algorithm: sha256WithRSAEncryption
57 16:ee:c5:75:39:a0:9b:31:db:4d:31:a5:87:c6:11:8e:c1:02:
58 c8:7d:52:ae:0c:74:d4:ab:ee:f7:55:3e:c4:49:e0:44:76:55:
59 f1:f4:fc:42:99:8c:d1:82:94:b9:8c:1b:47:1b:8f:13:b3:b3:
60 af:ae:a3:e5:0e:a4:9c:b3:b9:50:34:99:d9:f7:46:53:38:6e:
61 62:1c:11:e1:71:d0:65:c0:df:ba:6c:b6:c2:b0:ff:b0:0a:ff:
62 f7:6f:35:c8:d7:e7:a2:7f:b4:f9:5b:3c:31:b2:7c:6c:4e:6f:
63 b5:89:e2:11:91:78:73:95:f2:55:c2:fa:f1:46:75:f0:8b:e0:
64 b9:9b:ac:75:65:73:c0:e4:b3:5e:41:40:dd:73:43:76:ac:49:
65 7b:90:b3:a6:52:f6:7e:38:c7:73:e9:33:67:e6:d4:5f:6e:2e:
66 d8:5a:2b:f9:0b:80:81:4f:d9:a2:91:7f:14:1d:4a:0c:04:73:
67 a2:30:1b:56:38:75:f9:a4:00:b2:e2:b3:b6:ee:39:f4:53:1a:
68 7b:3c:17:61:79:04:60:84:4c:a5:1a:a2:4a:60:09:b4:45:0d:
69 06:d4:c9:18:ab:90:9c:0d:29:6f:ee:ae:10:66:09:e1:e1:f9:
70 5a:54:5b:19:d5:e9:d8:ce:95:58:e5:04:c1:86:d3:98:da:4d:
71 b8:03:74:59
72 -----BEGIN CERTIFICATE-----
73 MIIDbjCCAlagAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
74 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
75 VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpNdc
76 XrIbDqtxplTqY7kbxvC61KAi/fkxFJit0nmkoXWfroJlIdgGBYyR9rhv8u1bpqdj
77 ZBybE54LQhYB3do+3DRWKsM16Hnn6DBR2WT5XCTvVx0cL0IbKVnT2sOyMGZeB7BE
78 2WC9IcjE5UWKrTrkfxHI3jCxB7idyNfByptAozGeIr7eh4IvvnYbBqp6KeTLptam
79 y+5tqVKYvhfYyJq/Fjzu64zW5zHqQ4L48fRuXX5JOATLA+Sy61zywiuHylygeGsj
80 pkRtyVeiHmOS1SNEg2GrsX2ZNx6X63S+lCkpm9dQPxPloNmdr4+Qm8Pg3hfqjI1T
81 ZpBwMEMUeH2tAAwHAgMBAAGjgcowgccwHQYDVR0OBBYEFKUXUhA6VfCS4P/TEvfS
82 0RHNyUz+MB8GA1UdIwQYMBaAFNnjj3N1gJVePw7lt6VErgtptSkcMD8GCCsGAQUF
83 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
84 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
85 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMA0GCSqGSIb3DQEBCwUAA4IB
86 AQAW7sV1OaCbMdtNMaWHxhGOwQLIfVKuDHTUq+73VT7ESeBEdlXx9PxCmYzRgpS5
87 jBtHG48Ts7OvrqPlDqScs7lQNJnZ90ZTOG5iHBHhcdBlwN+6bLbCsP+wCv/3bzXI
88 1+eif7T5WzwxsnxsTm+1ieIRkXhzlfJVwvrxRnXwi+C5m6x1ZXPA5LNeQUDdc0N2
89 rEl7kLOmUvZ+OMdz6TNn5tRfbi7YWiv5C4CBT9mikX8UHUoMBHOiMBtWOHX5pACy
90 4rO27jn0Uxp7PBdheQRghEylGqJKYAm0RQ0G1MkYq5CcDSlv7q4QZgnh4flaVFsZ
91 1enYzpVY5QTBhtOY2k24A3RZ
92 -----END CERTIFICATE-----
93
94 Certificate:
95 Data:
96 Version: 3 (0x2)
97 Serial Number: 2 (0x2)
98 Signature Algorithm: sha256WithRSAEncryption
99 Issuer: CN=Root
100 Validity
101 Not Before: Jan 1 12:00:00 2015 GMT
102 Not After : Jan 1 12:00:00 2016 GMT
103 Subject: CN=Intermediate
104 Subject Public Key Info:
105 Public Key Algorithm: rsaEncryption
106 Public-Key: (2048 bit)
107 Modulus:
108 00:a7:de:a6:a8:1e:3a:20:fb:41:7d:00:fa:b0:35:
109 67:68:49:76:d1:b5:be:69:81:44:a3:40:af:fa:de:
110 36:1c:5e:79:28:e4:fc:27:ab:e3:2b:83:9f:46:d8:
111 f2:1c:1b:f4:a8:21:b8:32:91:eb:a8:4a:c0:b0:d9:
112 8c:ba:c7:d3:94:25:53:59:0f:0b:d1:42:8c:82:93:
113 05:30:2a:b2:97:2d:ca:c1:27:70:1b:9f:b5:ee:87:
114 aa:c8:79:8d:73:f8:38:e9:a5:c1:06:23:2e:f3:7c:
115 c9:1c:0e:ff:83:69:0e:da:9a:6c:df:81:ed:c5:30:
116 5e:83:22:64:ff:87:2f:72:a6:1b:80:e6:26:92:7f:
117 78:ac:39:0d:b9:4a:e7:91:c7:1a:54:05:23:52:d1:
118 d5:d8:0d:4b:d5:06:8a:3d:04:6a:2e:89:05:d4:81:
119 60:09:6b:eb:75:78:dc:ee:e6:69:77:f6:73:43:6d:
120 94:f8:fa:1e:ef:76:95:79:3f:fb:1a:bb:d3:b7:13:
121 52:cd:4d:10:75:77:6a:68:cf:1f:cb:7c:bf:a5:79:
122 d2:d0:a7:d2:ee:6e:ce:fe:2f:83:f2:13:aa:42:f6:
123 b1:f3:75:14:01:c8:6b:78:40:99:b0:8e:af:a9:b6:
124 87:71:28:68:34:2d:e6:4f:81:65:c9:b9:ff:8c:ca:
125 cd:fb
126 Exponent: 65537 (0x10001)
127 X509v3 extensions:
128 X509v3 Subject Key Identifier:
129 D9:E3:8F:73:75:80:95:5E:3F:0E:E5:B7:A5:44:AE:0B:69:B5:29:1C
130 X509v3 Authority Key Identifier:
131 keyid:0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:E E
132
133 Authority Information Access:
134 CA Issuers - URI:http://url-for-aia/Root.cer
135
136 X509v3 CRL Distribution Points:
137
138 Full Name:
139 URI:http://url-for-crl/Root.crl
140
141 X509v3 Key Usage: critical
142 Certificate Sign, CRL Sign
143 X509v3 Basic Constraints: critical
144 CA:TRUE
145 Signature Algorithm: sha256WithRSAEncryption
146 6a:37:12:a0:a2:5a:9d:ba:65:35:10:9b:eb:da:20:f9:49:c1:
147 e0:66:63:b7:b4:4e:2f:52:d7:b4:a6:4d:ed:d6:5a:9e:a1:e1:
148 bf:d7:00:36:98:90:82:7c:a0:17:6f:20:f5:7a:44:2f:76:5e:
149 18:5a:e9:fa:43:09:5c:0e:b3:a5:a6:28:da:20:d4:ff:12:d8:
150 96:84:4c:7e:b6:88:e4:3f:4d:06:75:2a:c5:5a:01:a0:e5:c6:
151 6c:9e:34:e9:67:de:09:03:3c:bd:ff:74:5d:bb:6c:5b:cd:27:
152 cd:b8:66:59:84:b2:40:19:7b:1b:33:96:07:47:8b:4d:7e:61:
153 55:5e:1c:11:94:cc:39:b7:12:9a:04:c6:26:1c:80:b5:fd:a3:
154 54:5e:f7:f4:cf:4d:8c:3b:7b:77:cb:6c:31:8e:b0:c2:34:30:
155 e8:f0:30:70:26:74:f3:f1:a2:80:00:7a:72:33:12:e9:03:e4:
156 96:a9:f6:b8:17:f6:5f:30:ce:c3:a9:4a:1d:2a:3a:04:71:bf:
157 b2:ee:73:38:64:15:61:90:9d:ed:f5:f0:86:75:90:59:f9:22:
158 aa:6a:ad:be:ea:97:f2:52:92:8b:82:e7:0e:7f:bd:84:89:d5:
159 db:36:97:9c:aa:43:7c:5b:9a:44:41:33:dc:b9:a4:24:15:27:
160 16:19:e3:ed
161 -----BEGIN CERTIFICATE-----
162 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
163 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
164 ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96mqB46
165 IPtBfQD6sDVnaEl20bW+aYFEo0Cv+t42HF55KOT8J6vjK4OfRtjyHBv0qCG4MpHr
166 qErAsNmMusfTlCVTWQ8L0UKMgpMFMCqyly3KwSdwG5+17oeqyHmNc/g46aXBBiMu
167 83zJHA7/g2kO2pps34HtxTBegyJk/4cvcqYbgOYmkn94rDkNuUrnkccaVAUjUtHV
168 2A1L1QaKPQRqLokF1IFgCWvrdXjc7uZpd/ZzQ22U+Poe73aVeT/7GrvTtxNSzU0Q
169 dXdqaM8fy3y/pXnS0KfS7m7O/i+D8hOqQvax83UUAchreECZsI6vqbaHcShoNC3m
170 T4Flybn/jMrN+wIDAQABo4HLMIHIMB0GA1UdDgQWBBTZ449zdYCVXj8O5belRK4L
171 abUpHDAfBgNVHSMEGDAWgBQN1bCV9P5mhyIdFYiVWk5ica7H7jA3BggrBgEFBQcB
172 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
173 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
174 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
175 AGo3EqCiWp26ZTUQm+vaIPlJweBmY7e0Ti9S17SmTe3WWp6h4b/XADaYkIJ8oBdv
176 IPV6RC92Xhha6fpDCVwOs6WmKNog1P8S2JaETH62iOQ/TQZ1KsVaAaDlxmyeNOln
177 3gkDPL3/dF27bFvNJ824ZlmEskAZexszlgdHi01+YVVeHBGUzDm3EpoExiYcgLX9
178 o1Re9/TPTYw7e3fLbDGOsMI0MOjwMHAmdPPxooAAenIzEukD5Jap9rgX9l8wzsOp
179 Sh0qOgRxv7LuczhkFWGQne318IZ1kFn5Iqpqrb7ql/JSkouC5w5/vYSJ1ds2l5yq
180 Q3xbmkRBM9y5pCQVJxYZ4+0=
181 -----END CERTIFICATE-----
182
183 Certificate:
184 Data:
185 Version: 3 (0x2)
186 Serial Number: 1 (0x1)
187 Signature Algorithm: sha256WithRSAEncryption
188 Issuer: CN=Root
189 Validity
190 Not Before: Jan 1 12:00:00 2015 GMT
191 Not After : Jan 1 12:00:00 2016 GMT
192 Subject: CN=Root
193 Subject Public Key Info:
194 Public Key Algorithm: rsaEncryption
195 Public-Key: (2048 bit)
196 Modulus:
197 00:ce:87:b7:d1:e7:fc:87:30:97:91:7e:32:d7:a1:
198 90:b2:90:1b:66:30:55:55:9b:6f:85:98:32:59:29:
199 0b:aa:c9:17:79:96:72:74:85:6a:36:a0:84:5d:5b:
200 6b:f9:17:3b:90:e2:27:1f:34:ee:29:da:c4:d6:ba:
201 7b:e2:5b:22:a4:9e:d8:71:59:07:4c:ff:8b:54:20:
202 e1:98:12:37:a6:4d:c8:6b:7d:79:c8:fb:31:84:fb:
203 9f:71:3a:6c:36:f6:38:32:d3:83:22:67:f0:d9:9e:
204 33:57:12:a0:0c:c4:b6:fe:ff:17:87:94:63:ee:52:
205 b4:5f:1e:1f:d8:2f:28:dd:64:fe:ab:29:18:6f:68:
206 87:e9:96:75:b9:ef:1b:d3:ee:8e:96:23:fb:ef:cc:
207 3c:30:1a:01:73:10:d9:68:2b:f8:93:62:2f:a5:e1:
208 eb:75:3c:58:aa:10:0e:38:e1:f7:76:98:96:9f:be:
209 22:94:fd:7f:f6:bc:59:81:6e:c9:a4:0d:0b:fc:2d:
210 dd:75:1a:8a:fa:bc:ed:1d:f0:67:17:06:21:b4:3c:
211 94:56:b0:cb:be:81:6b:6f:a6:81:ed:e3:5c:1c:85:
212 ae:ec:e7:82:59:0e:85:ab:e8:44:73:34:3a:5d:41:
213 ef:81:03:9c:f4:2b:6e:cd:d4:8e:89:aa:75:fa:5b:
214 5c:d1
215 Exponent: 65537 (0x10001)
216 X509v3 extensions:
217 X509v3 Subject Key Identifier:
218 0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:EE
219 X509v3 Authority Key Identifier:
220 keyid:0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:E E
221
222 Authority Information Access:
223 CA Issuers - URI:http://url-for-aia/Root.cer
224
225 X509v3 CRL Distribution Points:
226
227 Full Name:
228 URI:http://url-for-crl/Root.crl
229
230 X509v3 Key Usage: critical
231 Certificate Sign, CRL Sign
232 X509v3 Basic Constraints: critical
233 CA:TRUE
234 Signature Algorithm: sha256WithRSAEncryption
235 1e:fa:dd:4d:c4:09:e1:b3:94:0d:de:e9:ad:f9:38:12:bc:38:
236 ab:0d:86:bf:4f:d1:d3:e8:61:ab:28:47:e6:b7:6b:b1:e2:ca:
237 cb:9f:cb:71:ef:cf:ab:38:19:18:af:27:9b:99:32:09:74:b4:
238 03:0e:b3:b7:f2:bb:46:ed:41:37:c5:b5:3b:2c:c5:d9:ab:65:
239 0e:fd:b9:f5:12:ee:59:d7:fc:5b:7a:9c:05:69:44:26:bf:da:
240 76:1c:94:3e:9a:a8:c6:0b:38:ff:ae:16:2f:43:fe:fb:2e:ab:
241 4e:86:97:64:0e:10:bb:02:70:37:2b:f3:4e:d6:1f:97:e1:1e:
242 67:f5:46:12:7f:8d:41:5f:1c:dc:5b:d6:ad:15:4e:5a:4e:35:
243 47:ef:12:21:18:cf:9b:91:9b:ef:8b:01:5b:57:6c:1a:11:cb:
244 42:e4:3c:ad:7d:2c:96:3b:27:92:67:04:30:0d:55:47:29:db:
245 a0:6e:03:b1:45:7b:49:d7:d6:84:46:4b:6b:e9:31:29:50:f9:
246 f7:eb:3d:71:10:c0:20:2b:12:42:4a:d5:38:83:ac:d4:40:1e:
247 35:eb:b1:08:e2:bf:45:c0:d1:e3:17:53:4a:07:81:b1:07:8d:
248 71:54:65:9f:7a:fd:6b:0c:4e:2a:a2:55:e1:8a:af:26:8b:2a:
249 9a:d3:39:f3
250 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
251 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
252 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
253 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6Ht9Hn/Icwl5F+Mteh
254 kLKQG2YwVVWbb4WYMlkpC6rJF3mWcnSFajaghF1ba/kXO5DiJx807inaxNa6e+Jb
255 IqSe2HFZB0z/i1Qg4ZgSN6ZNyGt9ecj7MYT7n3E6bDb2ODLTgyJn8NmeM1cSoAzE
256 tv7/F4eUY+5StF8eH9gvKN1k/qspGG9oh+mWdbnvG9PujpYj++/MPDAaAXMQ2Wgr
257 +JNiL6Xh63U8WKoQDjjh93aYlp++IpT9f/a8WYFuyaQNC/wt3XUaivq87R3wZxcG
258 IbQ8lFawy76Ba2+mge3jXByFruznglkOhavoRHM0Ol1B74EDnPQrbs3Ujomqdfpb
259 XNECAwEAAaOByzCByDAdBgNVHQ4EFgQUDdWwlfT+ZociHRWIlVpOYnGux+4wHwYD
260 VR0jBBgwFoAUDdWwlfT+ZociHRWIlVpOYnGux+4wNwYIKwYBBQUHAQEEKzApMCcG
261 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
262 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
263 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAe+t1NxAnh
264 s5QN3umt+TgSvDirDYa/T9HT6GGrKEfmt2ux4srLn8tx78+rOBkYryebmTIJdLQD
265 DrO38rtG7UE3xbU7LMXZq2UO/bn1Eu5Z1/xbepwFaUQmv9p2HJQ+mqjGCzj/rhYv
266 Q/77LqtOhpdkDhC7AnA3K/NO1h+X4R5n9UYSf41BXxzcW9atFU5aTjVH7xIhGM+b
267 kZvviwFbV2waEctC5DytfSyWOyeSZwQwDVVHKdugbgOxRXtJ19aERktr6TEpUPn3
268 6z1xEMAgKxJCStU4g6zUQB4167EI4r9FwNHjF1NKB4GxB41xVGWfev1rDE4qolXh
269 iq8miyqa0znz
270 -----END TRUST_ANCHOR_UNCONSTRAINED-----
271
272 150302120000Z
273 -----BEGIN TIME-----
274 MTUwMzAyMTIwMDAwWg==
275 -----END TIME-----
276
277 SUCCESS
278 -----BEGIN VERIFY_RESULT-----
279 U1VDQ0VTUw==
280 -----END VERIFY_RESULT-----
281
282 serverAuth
283 -----BEGIN KEY_PURPOSE-----
284 c2VydmVyQXV0aA==
285 -----END KEY_PURPOSE-----
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698