OLD | NEW |
1 [Created by: generate-target-has-keycertsign-but-not-ca.py] | 1 [Created by: generate-chains.py] |
2 | 2 |
3 Certificate chain with 1 intermediate, a trusted root, and a target | 3 Certificate chain with 1 intermediate, a trusted root, and a target |
4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification | 4 certificate that is not a CA, and yet has the keyCertSign bit set. Verification |
5 is expected to fail, since keyCertSign should only be asserted when CA is | 5 is expected to fail, since keyCertSign should only be asserted when CA is |
6 true. | 6 true. |
7 | 7 |
8 Certificate: | 8 Certificate: |
9 Data: | 9 Data: |
10 Version: 3 (0x2) | 10 Version: 3 (0x2) |
11 Serial Number: 1 (0x1) | 11 Serial Number: 1 (0x1) |
(...skipping 232 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
244 ad:8d:ed:2f:93:39:9e:46:84:13:42:c9:92:37:4e:f9:32:a1: | 244 ad:8d:ed:2f:93:39:9e:46:84:13:42:c9:92:37:4e:f9:32:a1: |
245 84:17:22:95:c1:9e:1c:23:91:0a:33:32:29:38:7f:4d:ec:de: | 245 84:17:22:95:c1:9e:1c:23:91:0a:33:32:29:38:7f:4d:ec:de: |
246 90:0f:96:5d:fb:73:9a:a9:a9:56:c0:74:95:3d:f7:eb:6a:97: | 246 90:0f:96:5d:fb:73:9a:a9:a9:56:c0:74:95:3d:f7:eb:6a:97: |
247 45:2f:46:50:84:68:b9:5c:64:ad:01:8a:98:1a:c1:38:00:b2: | 247 45:2f:46:50:84:68:b9:5c:64:ad:01:8a:98:1a:c1:38:00:b2: |
248 8e:a9:8b:50:27:42:31:16:e4:c7:3b:11:a7:56:b4:f4:f7:bf: | 248 8e:a9:8b:50:27:42:31:16:e4:c7:3b:11:a7:56:b4:f4:f7:bf: |
249 f5:fc:e4:b8:2b:59:2c:d6:3d:35:6f:a7:a6:e6:cc:85:cd:36: | 249 f5:fc:e4:b8:2b:59:2c:d6:3d:35:6f:a7:a6:e6:cc:85:cd:36: |
250 ee:98:dc:af:35:33:24:f2:0d:5f:e5:de:1b:26:e6:de:2c:f6: | 250 ee:98:dc:af:35:33:24:f2:0d:5f:e5:de:1b:26:e6:de:2c:f6: |
251 cf:1e:ac:13:67:8b:8a:a1:8e:f0:62:d1:03:ed:aa:25:ca:0b: | 251 cf:1e:ac:13:67:8b:8a:a1:8e:f0:62:d1:03:ed:aa:25:ca:0b: |
252 82:32:6e:24:4e:95:96:b3:ea:a0:33:fc:20:a3:3e:e4:ce:a4: | 252 82:32:6e:24:4e:95:96:b3:ea:a0:33:fc:20:a3:3e:e4:ce:a4: |
253 60:af:33:78 | 253 60:af:33:78 |
254 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 254 -----BEGIN CERTIFICATE----- |
255 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 255 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
256 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 256 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
257 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOROlvbeAgXnFoD67bE8 | 257 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOROlvbeAgXnFoD67bE8 |
258 8xnqe9L+7ZO3CTd9wZibZamECXLN5djaIUTCLpKVEv41DGY0rfNPxS/QLldBHDvO | 258 8xnqe9L+7ZO3CTd9wZibZamECXLN5djaIUTCLpKVEv41DGY0rfNPxS/QLldBHDvO |
259 yVEXBesG90/7biedBtgQh/SXXw+dXdcr0zshW1qPIOCXFnsVOdY//x0GU3RieGhb | 259 yVEXBesG90/7biedBtgQh/SXXw+dXdcr0zshW1qPIOCXFnsVOdY//x0GU3RieGhb |
260 7cIF54aLGmM60+SpJY8OkhPfOdYxgr+979QhnQ5/yZDvHcXzxAAeSgNh9F7P6Vjl | 260 7cIF54aLGmM60+SpJY8OkhPfOdYxgr+979QhnQ5/yZDvHcXzxAAeSgNh9F7P6Vjl |
261 Ekk3MUmJVNhZQHjr4j91nKX/HDO4bCYmWo8oEh9OgeWmqt3G2cmUahU8nnpZKZLL | 261 Ekk3MUmJVNhZQHjr4j91nKX/HDO4bCYmWo8oEh9OgeWmqt3G2cmUahU8nnpZKZLL |
262 evVnxNTdTMVu+7PCWp3xCzUXkraF3P1FxT8T8838vLZZwBcLzrPhR9EvNHSkXLqp | 262 evVnxNTdTMVu+7PCWp3xCzUXkraF3P1FxT8T8838vLZZwBcLzrPhR9EvNHSkXLqp |
263 zw0CAwEAAaOByzCByDAdBgNVHQ4EFgQUJNu03j4/qh2wV3odfM2G6WvQFW8wHwYD | 263 zw0CAwEAAaOByzCByDAdBgNVHQ4EFgQUJNu03j4/qh2wV3odfM2G6WvQFW8wHwYD |
264 VR0jBBgwFoAUJNu03j4/qh2wV3odfM2G6WvQFW8wNwYIKwYBBQUHAQEEKzApMCcG | 264 VR0jBBgwFoAUJNu03j4/qh2wV3odfM2G6WvQFW8wNwYIKwYBBQUHAQEEKzApMCcG |
265 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 265 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
266 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 266 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
267 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQArRkrAQ1jM | 267 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQArRkrAQ1jM |
268 5Ub3g4yumgEmazJSNO6rY2yux0w18jVw0rmeFwuWaxF4neCDTkHmTz4Wf5P6T7n6 | 268 5Ub3g4yumgEmazJSNO6rY2yux0w18jVw0rmeFwuWaxF4neCDTkHmTz4Wf5P6T7n6 |
269 hiM00UdG2gDuWG9r10IEFUzogjGTxVhGQxnHS+thxyiiQvCtje0vkzmeRoQTQsmS | 269 hiM00UdG2gDuWG9r10IEFUzogjGTxVhGQxnHS+thxyiiQvCtje0vkzmeRoQTQsmS |
270 N075MqGEFyKVwZ4cI5EKMzIpOH9N7N6QD5Zd+3OaqalWwHSVPffrapdFL0ZQhGi5 | 270 N075MqGEFyKVwZ4cI5EKMzIpOH9N7N6QD5Zd+3OaqalWwHSVPffrapdFL0ZQhGi5 |
271 XGStAYqYGsE4ALKOqYtQJ0IxFuTHOxGnVrT097/1/OS4K1ks1j01b6em5syFzTbu | 271 XGStAYqYGsE4ALKOqYtQJ0IxFuTHOxGnVrT097/1/OS4K1ks1j01b6em5syFzTbu |
272 mNyvNTMk8g1f5d4bJubeLPbPHqwTZ4uKoY7wYtED7aolyguCMm4kTpWWs+qgM/wg | 272 mNyvNTMk8g1f5d4bJubeLPbPHqwTZ4uKoY7wYtED7aolyguCMm4kTpWWs+qgM/wg |
273 oz7kzqRgrzN4 | 273 oz7kzqRgrzN4 |
274 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 274 -----END CERTIFICATE----- |
275 | |
276 150302120000Z | |
277 -----BEGIN TIME----- | |
278 MTUwMzAyMTIwMDAwWg== | |
279 -----END TIME----- | |
280 | |
281 FAIL | |
282 -----BEGIN VERIFY_RESULT----- | |
283 RkFJTA== | |
284 -----END VERIFY_RESULT----- | |
285 | |
286 serverAuth | |
287 -----BEGIN KEY_PURPOSE----- | |
288 c2VydmVyQXV0aA== | |
289 -----END KEY_PURPOSE----- | |
290 | |
291 ----- Certificate i=0 (CN=Target) ----- | |
292 ERROR: Target certificate looks like a CA but does not set all CA properties | |
293 | |
294 | |
295 -----BEGIN ERRORS----- | |
296 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlm
aWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg== | |
297 -----END ERRORS----- | |
OLD | NEW |