| OLD | NEW |
| 1 [Created by: generate-constrained-root-bad-eku.py] | 1 [Created by: generate-chains.py] |
| 2 | 2 |
| 3 Certificate chain with 1 intermediate and a trust anchor. The trust anchor | 3 Certificate chain with 1 intermediate and a trust anchor. The trust anchor |
| 4 has an EKU that restricts it to clientAuth. Verification is expected to fail as | 4 has an EKU that restricts it to clientAuth. Verification is expected to fail as |
| 5 the end-entity is verified for serverAuth, and the trust anchor enforces | 5 the end-entity is verified for serverAuth, and the trust anchor enforces |
| 6 constraints. | 6 constraints. |
| 7 | 7 |
| 8 Certificate: | 8 Certificate: |
| 9 Data: | 9 Data: |
| 10 Version: 3 (0x2) | 10 Version: 3 (0x2) |
| 11 Serial Number: 1 (0x1) | 11 Serial Number: 1 (0x1) |
| (...skipping 234 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 246 a5:44:10:9b:e4:f9:4a:09:43:02:e0:01:ca:fd:c2:b1:07:31: | 246 a5:44:10:9b:e4:f9:4a:09:43:02:e0:01:ca:fd:c2:b1:07:31: |
| 247 c8:6b:0d:ec:c8:c1:4f:53:2e:10:1b:d9:8a:42:00:74:d5:cc: | 247 c8:6b:0d:ec:c8:c1:4f:53:2e:10:1b:d9:8a:42:00:74:d5:cc: |
| 248 ec:47:51:c5:12:63:a7:f2:93:4f:0e:cd:82:3c:70:3b:9f:c8: | 248 ec:47:51:c5:12:63:a7:f2:93:4f:0e:cd:82:3c:70:3b:9f:c8: |
| 249 0c:9f:5b:fa:15:47:e5:e6:6d:5d:37:7c:fa:e2:a2:4b:aa:d8: | 249 0c:9f:5b:fa:15:47:e5:e6:6d:5d:37:7c:fa:e2:a2:4b:aa:d8: |
| 250 be:c4:2e:e5:3e:71:ae:c9:7b:79:86:1c:29:3c:00:e3:d5:9b: | 250 be:c4:2e:e5:3e:71:ae:c9:7b:79:86:1c:29:3c:00:e3:d5:9b: |
| 251 30:23:12:c0:33:12:7d:36:8c:99:cb:6a:39:74:fa:8f:6e:8f: | 251 30:23:12:c0:33:12:7d:36:8c:99:cb:6a:39:74:fa:8f:6e:8f: |
| 252 5c:53:6e:53:94:59:c9:59:7d:1e:3c:e2:ac:32:43:5e:4c:14: | 252 5c:53:6e:53:94:59:c9:59:7d:1e:3c:e2:ac:32:43:5e:4c:14: |
| 253 87:cf:39:c9:55:38:e0:29:a6:19:e9:62:21:8d:f0:1b:9d:31: | 253 87:cf:39:c9:55:38:e0:29:a6:19:e9:62:21:8d:f0:1b:9d:31: |
| 254 c9:c3:93:12:fd:b3:0e:83:fc:21:dc:bb:df:09:a6:57:6e:18: | 254 c9:c3:93:12:fd:b3:0e:83:fc:21:dc:bb:df:09:a6:57:6e:18: |
| 255 58:ff:ad:73 | 255 58:ff:ad:73 |
| 256 -----BEGIN TRUST_ANCHOR_CONSTRAINED----- | 256 -----BEGIN CERTIFICATE----- |
| 257 MIIDejCCAmKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 257 MIIDejCCAmKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 258 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 258 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 259 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANniCKxGTz7JLA4bLg3L | 259 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANniCKxGTz7JLA4bLg3L |
| 260 BS6yYN05OzGQPInubzI/TpxKk9eX5emdCnKld8jmZ9vg4tc1q9V7JiqXOUwE4zKT | 260 BS6yYN05OzGQPInubzI/TpxKk9eX5emdCnKld8jmZ9vg4tc1q9V7JiqXOUwE4zKT |
| 261 32meXsf7OlNwGJE5diOqZVvghzLLLGxv5zifedsj6jyGm/ID098VXM5YtUZ3XSEJ | 261 32meXsf7OlNwGJE5diOqZVvghzLLLGxv5zifedsj6jyGm/ID098VXM5YtUZ3XSEJ |
| 262 +eOuFs7m1ZVB1e7HdIm/3MiAR+BJbv8mawrUwgQhoLWwB00bHOGoUyMTPwEx2T/c | 262 +eOuFs7m1ZVB1e7HdIm/3MiAR+BJbv8mawrUwgQhoLWwB00bHOGoUyMTPwEx2T/c |
| 263 LXCLYUmxbW/GTvc1RRdAOZ0oHXdogsJ1msKfkKtMyYo+aCosumKr4VjIO/7AlY5V | 263 LXCLYUmxbW/GTvc1RRdAOZ0oHXdogsJ1msKfkKtMyYo+aCosumKr4VjIO/7AlY5V |
| 264 M1PKP/uarpUTZT+mmtaY8a1ydM7YZRKfY/1jxT+QPdiyK/5I+tqr8knGHSq6+HPh | 264 M1PKP/uarpUTZT+mmtaY8a1ydM7YZRKfY/1jxT+QPdiyK/5I+tqr8knGHSq6+HPh |
| 265 UKECAwEAAaOB4DCB3TAdBgNVHQ4EFgQUGt2mi0CkW2obBr+bdlSKm4j4iwcwHwYD | 265 UKECAwEAAaOB4DCB3TAdBgNVHQ4EFgQUGt2mi0CkW2obBr+bdlSKm4j4iwcwHwYD |
| 266 VR0jBBgwFoAUGt2mi0CkW2obBr+bdlSKm4j4iwcwNwYIKwYBBQUHAQEEKzApMCcG | 266 VR0jBBgwFoAUGt2mi0CkW2obBr+bdlSKm4j4iwcwNwYIKwYBBQUHAQEEKzApMCcG |
| 267 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 267 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 268 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 268 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 269 AwIBBjAPBgNVHRMBAf8EBTADAQH/MBMGA1UdJQQMMAoGCCsGAQUFBwMCMA0GCSqG | 269 AwIBBjAPBgNVHRMBAf8EBTADAQH/MBMGA1UdJQQMMAoGCCsGAQUFBwMCMA0GCSqG |
| 270 SIb3DQEBCwUAA4IBAQB/WDlN7OB+EfrBKdHIVkIZM/SM4KEikPydzNI2T/eRUcwK | 270 SIb3DQEBCwUAA4IBAQB/WDlN7OB+EfrBKdHIVkIZM/SM4KEikPydzNI2T/eRUcwK |
| 271 QEnazHCBPlmuZaPFhkJf3/4dUZP7d5kBsALFlR8yb6JKIShQ+LxdZwEooE9soEPq | 271 QEnazHCBPlmuZaPFhkJf3/4dUZP7d5kBsALFlR8yb6JKIShQ+LxdZwEooE9soEPq |
| 272 e3pmOjOgwgylRBCb5PlKCUMC4AHK/cKxBzHIaw3syMFPUy4QG9mKQgB01czsR1HF | 272 e3pmOjOgwgylRBCb5PlKCUMC4AHK/cKxBzHIaw3syMFPUy4QG9mKQgB01czsR1HF |
| 273 EmOn8pNPDs2CPHA7n8gMn1v6FUfl5m1dN3z64qJLqti+xC7lPnGuyXt5hhwpPADj | 273 EmOn8pNPDs2CPHA7n8gMn1v6FUfl5m1dN3z64qJLqti+xC7lPnGuyXt5hhwpPADj |
| 274 1ZswIxLAMxJ9NoyZy2o5dPqPbo9cU25TlFnJWX0ePOKsMkNeTBSHzznJVTjgKaYZ | 274 1ZswIxLAMxJ9NoyZy2o5dPqPbo9cU25TlFnJWX0ePOKsMkNeTBSHzznJVTjgKaYZ |
| 275 6WIhjfAbnTHJw5MS/bMOg/wh3LvfCaZXbhhY/61z | 275 6WIhjfAbnTHJw5MS/bMOg/wh3LvfCaZXbhhY/61z |
| 276 -----END TRUST_ANCHOR_CONSTRAINED----- | 276 -----END CERTIFICATE----- |
| 277 | |
| 278 150302120000Z | |
| 279 -----BEGIN TIME----- | |
| 280 MTUwMzAyMTIwMDAwWg== | |
| 281 -----END TIME----- | |
| 282 | |
| 283 FAIL | |
| 284 -----BEGIN VERIFY_RESULT----- | |
| 285 RkFJTA== | |
| 286 -----END VERIFY_RESULT----- | |
| 287 | |
| 288 serverAuth | |
| 289 -----BEGIN KEY_PURPOSE----- | |
| 290 c2VydmVyQXV0aA== | |
| 291 -----END KEY_PURPOSE----- | |
| 292 | |
| 293 ----- Certificate i=2 (CN=Root) ----- | |
| 294 ERROR: The extended key usage does not include server auth | |
| 295 | |
| 296 | |
| 297 -----BEGIN ERRORS----- | |
| 298 LS0tLS0gQ2VydGlmaWNhdGUgaT0yIChDTj1Sb290KSAtLS0tLQpFUlJPUjogVGhlIGV4dGVuZGVkIGtl
eSB1c2FnZSBkb2VzIG5vdCBpbmNsdWRlIHNlcnZlciBhdXRoCgo= | |
| 299 -----END ERRORS----- | |
| OLD | NEW |