| OLD | NEW |
| 1 [Created by: generate-target-has-keycertsign-but-not-ca.py] | 1 [Created by: generate-chains.py] |
| 2 | 2 |
| 3 Certificate chain with 1 intermediate, a trusted root, and a target | 3 Certificate chain with 1 intermediate, a trusted root, and a target |
| 4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification | 4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification |
| 5 is expected to fail, since keyCertSign should only be asserted when CA is | 5 is expected to fail, since keyCertSign should only be asserted when CA is |
| 6 true. | 6 true. |
| 7 | 7 |
| 8 Certificate: | 8 Certificate: |
| 9 Data: | 9 Data: |
| 10 Version: 3 (0x2) | 10 Version: 3 (0x2) |
| 11 Serial Number: 1 (0x1) | 11 Serial Number: 1 (0x1) |
| (...skipping 232 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 244 ad:8d:ed:2f:93:39:9e:46:84:13:42:c9:92:37:4e:f9:32:a1: | 244 ad:8d:ed:2f:93:39:9e:46:84:13:42:c9:92:37:4e:f9:32:a1: |
| 245 84:17:22:95:c1:9e:1c:23:91:0a:33:32:29:38:7f:4d:ec:de: | 245 84:17:22:95:c1:9e:1c:23:91:0a:33:32:29:38:7f:4d:ec:de: |
| 246 90:0f:96:5d:fb:73:9a:a9:a9:56:c0:74:95:3d:f7:eb:6a:97: | 246 90:0f:96:5d:fb:73:9a:a9:a9:56:c0:74:95:3d:f7:eb:6a:97: |
| 247 45:2f:46:50:84:68:b9:5c:64:ad:01:8a:98:1a:c1:38:00:b2: | 247 45:2f:46:50:84:68:b9:5c:64:ad:01:8a:98:1a:c1:38:00:b2: |
| 248 8e:a9:8b:50:27:42:31:16:e4:c7:3b:11:a7:56:b4:f4:f7:bf: | 248 8e:a9:8b:50:27:42:31:16:e4:c7:3b:11:a7:56:b4:f4:f7:bf: |
| 249 f5:fc:e4:b8:2b:59:2c:d6:3d:35:6f:a7:a6:e6:cc:85:cd:36: | 249 f5:fc:e4:b8:2b:59:2c:d6:3d:35:6f:a7:a6:e6:cc:85:cd:36: |
| 250 ee:98:dc:af:35:33:24:f2:0d:5f:e5:de:1b:26:e6:de:2c:f6: | 250 ee:98:dc:af:35:33:24:f2:0d:5f:e5:de:1b:26:e6:de:2c:f6: |
| 251 cf:1e:ac:13:67:8b:8a:a1:8e:f0:62:d1:03:ed:aa:25:ca:0b: | 251 cf:1e:ac:13:67:8b:8a:a1:8e:f0:62:d1:03:ed:aa:25:ca:0b: |
| 252 82:32:6e:24:4e:95:96:b3:ea:a0:33:fc:20:a3:3e:e4:ce:a4: | 252 82:32:6e:24:4e:95:96:b3:ea:a0:33:fc:20:a3:3e:e4:ce:a4: |
| 253 60:af:33:78 | 253 60:af:33:78 |
| 254 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 254 -----BEGIN CERTIFICATE----- |
| 255 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 255 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 256 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 256 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 257 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOROlvbeAgXnFoD67bE8 | 257 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOROlvbeAgXnFoD67bE8 |
| 258 8xnqe9L+7ZO3CTd9wZibZamECXLN5djaIUTCLpKVEv41DGY0rfNPxS/QLldBHDvO | 258 8xnqe9L+7ZO3CTd9wZibZamECXLN5djaIUTCLpKVEv41DGY0rfNPxS/QLldBHDvO |
| 259 yVEXBesG90/7biedBtgQh/SXXw+dXdcr0zshW1qPIOCXFnsVOdY//x0GU3RieGhb | 259 yVEXBesG90/7biedBtgQh/SXXw+dXdcr0zshW1qPIOCXFnsVOdY//x0GU3RieGhb |
| 260 7cIF54aLGmM60+SpJY8OkhPfOdYxgr+979QhnQ5/yZDvHcXzxAAeSgNh9F7P6Vjl | 260 7cIF54aLGmM60+SpJY8OkhPfOdYxgr+979QhnQ5/yZDvHcXzxAAeSgNh9F7P6Vjl |
| 261 Ekk3MUmJVNhZQHjr4j91nKX/HDO4bCYmWo8oEh9OgeWmqt3G2cmUahU8nnpZKZLL | 261 Ekk3MUmJVNhZQHjr4j91nKX/HDO4bCYmWo8oEh9OgeWmqt3G2cmUahU8nnpZKZLL |
| 262 evVnxNTdTMVu+7PCWp3xCzUXkraF3P1FxT8T8838vLZZwBcLzrPhR9EvNHSkXLqp | 262 evVnxNTdTMVu+7PCWp3xCzUXkraF3P1FxT8T8838vLZZwBcLzrPhR9EvNHSkXLqp |
| 263 zw0CAwEAAaOByzCByDAdBgNVHQ4EFgQUJNu03j4/qh2wV3odfM2G6WvQFW8wHwYD | 263 zw0CAwEAAaOByzCByDAdBgNVHQ4EFgQUJNu03j4/qh2wV3odfM2G6WvQFW8wHwYD |
| 264 VR0jBBgwFoAUJNu03j4/qh2wV3odfM2G6WvQFW8wNwYIKwYBBQUHAQEEKzApMCcG | 264 VR0jBBgwFoAUJNu03j4/qh2wV3odfM2G6WvQFW8wNwYIKwYBBQUHAQEEKzApMCcG |
| 265 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 265 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 266 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 266 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 267 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQArRkrAQ1jM | 267 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQArRkrAQ1jM |
| 268 5Ub3g4yumgEmazJSNO6rY2yux0w18jVw0rmeFwuWaxF4neCDTkHmTz4Wf5P6T7n6 | 268 5Ub3g4yumgEmazJSNO6rY2yux0w18jVw0rmeFwuWaxF4neCDTkHmTz4Wf5P6T7n6 |
| 269 hiM00UdG2gDuWG9r10IEFUzogjGTxVhGQxnHS+thxyiiQvCtje0vkzmeRoQTQsmS | 269 hiM00UdG2gDuWG9r10IEFUzogjGTxVhGQxnHS+thxyiiQvCtje0vkzmeRoQTQsmS |
| 270 N075MqGEFyKVwZ4cI5EKMzIpOH9N7N6QD5Zd+3OaqalWwHSVPffrapdFL0ZQhGi5 | 270 N075MqGEFyKVwZ4cI5EKMzIpOH9N7N6QD5Zd+3OaqalWwHSVPffrapdFL0ZQhGi5 |
| 271 XGStAYqYGsE4ALKOqYtQJ0IxFuTHOxGnVrT097/1/OS4K1ks1j01b6em5syFzTbu | 271 XGStAYqYGsE4ALKOqYtQJ0IxFuTHOxGnVrT097/1/OS4K1ks1j01b6em5syFzTbu |
| 272 mNyvNTMk8g1f5d4bJubeLPbPHqwTZ4uKoY7wYtED7aolyguCMm4kTpWWs+qgM/wg | 272 mNyvNTMk8g1f5d4bJubeLPbPHqwTZ4uKoY7wYtED7aolyguCMm4kTpWWs+qgM/wg |
| 273 oz7kzqRgrzN4 | 273 oz7kzqRgrzN4 |
| 274 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 274 -----END CERTIFICATE----- |
| 275 | |
| 276 150302120000Z | |
| 277 -----BEGIN TIME----- | |
| 278 MTUwMzAyMTIwMDAwWg== | |
| 279 -----END TIME----- | |
| 280 | |
| 281 FAIL | |
| 282 -----BEGIN VERIFY_RESULT----- | |
| 283 RkFJTA== | |
| 284 -----END VERIFY_RESULT----- | |
| 285 | |
| 286 serverAuth | |
| 287 -----BEGIN KEY_PURPOSE----- | |
| 288 c2VydmVyQXV0aA== | |
| 289 -----END KEY_PURPOSE----- | |
| 290 | |
| 291 ----- Certificate i=0 (CN=Target) ----- | |
| 292 ERROR: Target certificate looks like a CA but does not set all CA properties | |
| 293 | |
| 294 | |
| 295 -----BEGIN ERRORS----- | |
| 296 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlm
aWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg== | |
| 297 -----END ERRORS----- | |
| OLD | NEW |