Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(237)

Side by Side Diff: net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py

Issue 2805213004: Refactor how net/data/verify_certificate_chain_unittest/* (Closed)
Patch Set: fix android Created 3 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
(Empty)
1 #!/usr/bin/python
2 # Copyright (c) 2015 The Chromium Authors. All rights reserved.
3 # Use of this source code is governed by a BSD-style license that can be
4 # found in the LICENSE file.
5
6 """Certificate chain with 1 intermediate, a trusted root, and a target
7 certificate that is not a CA, and yet has a pathlen set. Verification is
8 expected to fail, since pathlen should only be set for CAs."""
9
10 import common
11
12 # Self-signed root certificate (used as trust anchor).
13 root = common.create_self_signed_root_certificate('Root')
14
15 # Intermediate certificate.
16 intermediate = common.create_intermediate_certificate('Intermediate', root)
17
18 # Target certificate (end entity, but has pathlen set).
19 target = common.create_end_entity_certificate('Target', intermediate)
20 target.get_extensions().set_property('basicConstraints',
21 'critical,CA:false,pathlen:1')
22
23
24 chain = [target, intermediate]
25 trusted = common.TrustAnchor(root, constrained=False)
26 time = common.DEFAULT_TIME
27 key_purpose = common.DEFAULT_KEY_PURPOSE
28 verify_result = False
29 errors = """----- Certificate i=0 (CN=Target) -----
30 ERROR: Target certificate looks like a CA but does not set all CA properties
31
32 """
33
34 common.write_test_file(__doc__, chain, trusted, time, key_purpose,
35 verify_result, errors)
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698