| OLD | NEW |
| 1 [Created by: generate-target-has-pathlen-but-not-ca.py] | 1 [Created by: generate-chains.py] |
| 2 | 2 |
| 3 Certificate chain with 1 intermediate, a trusted root, and a target | 3 Certificate chain with 1 intermediate, a trusted root, and a target |
| 4 certificate that is not a CA, and yet has a pathlen set. Verification is | 4 certificate that is not a CA, and yet has a pathlen set. Verification is |
| 5 expected to fail, since pathlen should only be set for CAs. | 5 expected to fail, since pathlen should only be set for CAs. |
| 6 | 6 |
| 7 Certificate: | 7 Certificate: |
| 8 Data: | 8 Data: |
| 9 Version: 3 (0x2) | 9 Version: 3 (0x2) |
| 10 Serial Number: 1 (0x1) | 10 Serial Number: 1 (0x1) |
| 11 Signature Algorithm: sha256WithRSAEncryption | 11 Signature Algorithm: sha256WithRSAEncryption |
| (...skipping 233 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 245 7d:06:87:b1:1c:82:e9:1f:ed:97:11:db:1e:e8:0f:61:65:05: | 245 7d:06:87:b1:1c:82:e9:1f:ed:97:11:db:1e:e8:0f:61:65:05: |
| 246 d4:0e:4d:39:a2:6d:7b:bd:ce:36:63:48:72:9b:fb:ed:c9:09: | 246 d4:0e:4d:39:a2:6d:7b:bd:ce:36:63:48:72:9b:fb:ed:c9:09: |
| 247 11:23:8c:6a:e8:61:95:5b:f4:01:89:3f:81:75:65:46:6b:8b: | 247 11:23:8c:6a:e8:61:95:5b:f4:01:89:3f:81:75:65:46:6b:8b: |
| 248 fe:51:45:c9:47:67:3d:d1:4c:ce:bf:1e:5a:bd:fe:2f:78:9d: | 248 fe:51:45:c9:47:67:3d:d1:4c:ce:bf:1e:5a:bd:fe:2f:78:9d: |
| 249 77:95:15:17:47:57:68:bf:18:36:ba:5d:f8:56:94:14:44:76: | 249 77:95:15:17:47:57:68:bf:18:36:ba:5d:f8:56:94:14:44:76: |
| 250 82:23:dc:1f:79:0e:55:50:83:1c:da:72:70:a8:e8:60:c8:eb: | 250 82:23:dc:1f:79:0e:55:50:83:1c:da:72:70:a8:e8:60:c8:eb: |
| 251 09:99:56:6d:4d:f9:23:9f:95:e8:82:23:5b:16:ff:2e:29:a4: | 251 09:99:56:6d:4d:f9:23:9f:95:e8:82:23:5b:16:ff:2e:29:a4: |
| 252 a1:3b:f5:b4:cd:11:57:fe:fc:ab:a1:75:63:f9:60:85:50:b3: | 252 a1:3b:f5:b4:cd:11:57:fe:fc:ab:a1:75:63:f9:60:85:50:b3: |
| 253 18:eb:84:53:d0:73:ca:51:f6:2f:3c:cd:af:75:b0:f2:9b:a5: | 253 18:eb:84:53:d0:73:ca:51:f6:2f:3c:cd:af:75:b0:f2:9b:a5: |
| 254 83:62:cd:81 | 254 83:62:cd:81 |
| 255 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 255 -----BEGIN CERTIFICATE----- |
| 256 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 256 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 257 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 257 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 258 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNZwNaw88sxRp3v3mPz | 258 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNZwNaw88sxRp3v3mPz |
| 259 GiQQNvvo7gV2IVFR/VJHlxITRkK8lDde5kHS2HUnLD0EvOGsvKj22HRjmr6pe9Ib | 259 GiQQNvvo7gV2IVFR/VJHlxITRkK8lDde5kHS2HUnLD0EvOGsvKj22HRjmr6pe9Ib |
| 260 loclO87R/7Td+ilkrt9MG7T7noqabHS6KnZFA7eRfpC6BD3cChd3s1/cVgfrY14r | 260 loclO87R/7Td+ilkrt9MG7T7noqabHS6KnZFA7eRfpC6BD3cChd3s1/cVgfrY14r |
| 261 VMnXs0vzQmueKoCccVJdD22XxtP2xHp67uoiTxzoQlVusipWz4Y8lNHn4Hx4jJQF | 261 VMnXs0vzQmueKoCccVJdD22XxtP2xHp67uoiTxzoQlVusipWz4Y8lNHn4Hx4jJQF |
| 262 BbA/snAY2pLSmrpXfPtSSw80y9yrQKB2TswRuVe+8uL6K7ogsMjujQoRogLU9zg9 | 262 BbA/snAY2pLSmrpXfPtSSw80y9yrQKB2TswRuVe+8uL6K7ogsMjujQoRogLU9zg9 |
| 263 9KhJ9LSKCP/QwyUhDtzwFyLyvwc9519Mss0aGPH9OlpCebOCR62t4AJ/Cxk0XTuQ | 263 9KhJ9LSKCP/QwyUhDtzwFyLyvwc9519Mss0aGPH9OlpCebOCR62t4AJ/Cxk0XTuQ |
| 264 gSMCAwEAAaOByzCByDAdBgNVHQ4EFgQUj05eeBmuKIJpL88zlQTBzXXR9v8wHwYD | 264 gSMCAwEAAaOByzCByDAdBgNVHQ4EFgQUj05eeBmuKIJpL88zlQTBzXXR9v8wHwYD |
| 265 VR0jBBgwFoAUj05eeBmuKIJpL88zlQTBzXXR9v8wNwYIKwYBBQUHAQEEKzApMCcG | 265 VR0jBBgwFoAUj05eeBmuKIJpL88zlQTBzXXR9v8wNwYIKwYBBQUHAQEEKzApMCcG |
| 266 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 266 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 267 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 267 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 268 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAxcJTRL7dY | 268 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAxcJTRL7dY |
| 269 1ukYwNghvvflCBs0gjJKL1XomS+uJ+r4U7Mr4YQX7Ut+uHlcT9an/ZP03PPul6pC | 269 1ukYwNghvvflCBs0gjJKL1XomS+uJ+r4U7Mr4YQX7Ut+uHlcT9an/ZP03PPul6pC |
| 270 J0Qg0vZ7MrggJKMGy+awc9U6w8vqCQ+U1O4TvyhAWhz8ro99BoexHILpH+2XEdse | 270 J0Qg0vZ7MrggJKMGy+awc9U6w8vqCQ+U1O4TvyhAWhz8ro99BoexHILpH+2XEdse |
| 271 6A9hZQXUDk05om17vc42Y0hym/vtyQkRI4xq6GGVW/QBiT+BdWVGa4v+UUXJR2c9 | 271 6A9hZQXUDk05om17vc42Y0hym/vtyQkRI4xq6GGVW/QBiT+BdWVGa4v+UUXJR2c9 |
| 272 0UzOvx5avf4veJ13lRUXR1dovxg2ul34VpQURHaCI9wfeQ5VUIMc2nJwqOhgyOsJ | 272 0UzOvx5avf4veJ13lRUXR1dovxg2ul34VpQURHaCI9wfeQ5VUIMc2nJwqOhgyOsJ |
| 273 mVZtTfkjn5XogiNbFv8uKaShO/W0zRFX/vyroXVj+WCFULMY64RT0HPKUfYvPM2v | 273 mVZtTfkjn5XogiNbFv8uKaShO/W0zRFX/vyroXVj+WCFULMY64RT0HPKUfYvPM2v |
| 274 dbDym6WDYs2B | 274 dbDym6WDYs2B |
| 275 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 275 -----END CERTIFICATE----- |
| 276 | |
| 277 150302120000Z | |
| 278 -----BEGIN TIME----- | |
| 279 MTUwMzAyMTIwMDAwWg== | |
| 280 -----END TIME----- | |
| 281 | |
| 282 FAIL | |
| 283 -----BEGIN VERIFY_RESULT----- | |
| 284 RkFJTA== | |
| 285 -----END VERIFY_RESULT----- | |
| 286 | |
| 287 serverAuth | |
| 288 -----BEGIN KEY_PURPOSE----- | |
| 289 c2VydmVyQXV0aA== | |
| 290 -----END KEY_PURPOSE----- | |
| 291 | |
| 292 ----- Certificate i=0 (CN=Target) ----- | |
| 293 ERROR: Target certificate looks like a CA but does not set all CA properties | |
| 294 | |
| 295 | |
| 296 -----BEGIN ERRORS----- | |
| 297 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlm
aWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg== | |
| 298 -----END ERRORS----- | |
| OLD | NEW |