| OLD | NEW |
|---|
| (Empty) |
| 1 #!/usr/bin/python | |
| 2 # Copyright (c) 2016 The Chromium Authors. All rights reserved. | |
| 3 # Use of this source code is governed by a BSD-style license that can be | |
| 4 # found in the LICENSE file. | |
| 5 | |
| 6 """A certificate tree with two self-signed root certificates(oldroot, newroot), | |
| 7 and a third root certificate (newrootrollover) which has the same key as newroot | |
| 8 but is signed by oldroot, all with the same subject and issuer. | |
| 9 There are two intermediates with the same key, subject and issuer | |
| 10 (oldintermediate signed by oldroot, and newintermediate signed by newroot). | |
| 11 The target certificate is signed by the intermediate key. | |
| 12 | |
| 13 | |
| 14 In graphical form: | |
| 15 | |
| 16 oldroot-------->newrootrollover newroot | |
| 17 | | | | |
| 18 v v v | |
| 19 oldintermediate newintermediate | |
| 20 | | | |
| 21 +------------+-------------+ | |
| 22 | | |
| 23 v | |
| 24 target | |
| 25 | |
| 26 | |
| 27 Several chains are output: | |
| 28 key-rollover-oldchain.pem: | |
| 29 target<-oldintermediate<-oldroot | |
| 30 key-rollover-rolloverchain.pem: | |
| 31 target<-newintermediate<-newrootrollover<-oldroot | |
| 32 key-rollover-longrolloverchain.pem: | |
| 33 target<-newintermediate<-newroot<-newrootrollover<-oldroot | |
| 34 key-rollover-newchain.pem: | |
| 35 target<-newintermediate<-newroot | |
| 36 | |
| 37 All of these chains should verify successfully. | |
| 38 """ | |
| 39 | |
| 40 import common | |
| 41 | |
| 42 # The new certs should have a newer notbefore date than "old" certs. This should | |
| 43 # affect path builder sorting, but otherwise won't matter. | |
| 44 JANUARY_2_2015_UTC = '150102120000Z' | |
| 45 | |
| 46 # Self-signed root certificates. Same name, different keys. | |
| 47 oldroot = common.create_self_signed_root_certificate('Root') | |
| 48 oldroot.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC) | |
| 49 newroot = common.create_self_signed_root_certificate('Root') | |
| 50 newroot.set_validity_range(JANUARY_2_2015_UTC, common.JANUARY_1_2016_UTC) | |
| 51 # Root with the new key signed by the old key. | |
| 52 newrootrollover = common.create_intermediate_certificate('Root', oldroot) | |
| 53 newrootrollover.set_key(newroot.get_key()) | |
| 54 newrootrollover.set_validity_range(JANUARY_2_2015_UTC, | |
| 55 common.JANUARY_1_2016_UTC) | |
| 56 | |
| 57 # Intermediate signed by oldroot. | |
| 58 oldintermediate = common.create_intermediate_certificate('Intermediate', | |
| 59 oldroot) | |
| 60 oldintermediate.set_validity_range(common.JANUARY_1_2015_UTC, | |
| 61 common.JANUARY_1_2016_UTC) | |
| 62 # Intermediate signed by newroot. Same key as oldintermediate. | |
| 63 newintermediate = common.create_intermediate_certificate('Intermediate', | |
| 64 newroot) | |
| 65 newintermediate.set_key(oldintermediate.get_key()) | |
| 66 newintermediate.set_validity_range(JANUARY_2_2015_UTC, | |
| 67 common.JANUARY_1_2016_UTC) | |
| 68 | |
| 69 # Target certificate. | |
| 70 target = common.create_end_entity_certificate('Target', oldintermediate) | |
| 71 | |
| 72 oldchain = [target, oldintermediate] | |
| 73 rolloverchain = [target, newintermediate, newrootrollover] | |
| 74 longrolloverchain = [target, newintermediate, newroot, newrootrollover] | |
| 75 oldtrusted = common.TrustAnchor(oldroot, constrained=False) | |
| 76 | |
| 77 newchain = [target, newintermediate] | |
| 78 newtrusted = common.TrustAnchor(newroot, constrained=False) | |
| 79 | |
| 80 time = common.DEFAULT_TIME | |
| 81 key_purpose = common.DEFAULT_KEY_PURPOSE | |
| 82 verify_result = True | |
| 83 errors = None | |
| 84 | |
| 85 common.write_test_file(__doc__, oldchain, oldtrusted, time, key_purpose, | |
| 86 verify_result, errors, | |
| 87 out_pem="key-rollover-oldchain.pem") | |
| 88 common.write_test_file(__doc__, rolloverchain, oldtrusted, time, key_purpose, | |
| 89 verify_result, errors, | |
| 90 out_pem="key-rollover-rolloverchain.pem") | |
| 91 common.write_test_file(__doc__, longrolloverchain, oldtrusted, time, | |
| 92 key_purpose, verify_result, errors, | |
| 93 out_pem="key-rollover-longrolloverchain.pem") | |
| 94 common.write_test_file(__doc__, newchain, newtrusted, time, key_purpose, | |
| 95 verify_result, errors, | |
| 96 out_pem="key-rollover-newchain.pem") | |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 2805213004:
Refactor how net/data/verify_certificate_chain_unittest/* (Closed)
