OLD | NEW |
1 [Created by: generate-target-has-pathlen-but-not-ca.py] | 1 [Created by: generate-chains.py] |
2 | 2 |
3 Certificate chain with 1 intermediate, a trusted root, and a target | 3 Certificate chain with 1 intermediate, a trusted root, and a target |
4 certificate that is not a CA, and yet has a pathlen set. Verification is | 4 certificate that is not a CA, and yet has a pathlen set. Verification is |
5 expected to fail, since pathlen should only be set for CAs. | 5 expected to fail, since pathlen should only be set for CAs. |
6 | 6 |
7 Certificate: | 7 Certificate: |
8 Data: | 8 Data: |
9 Version: 3 (0x2) | 9 Version: 3 (0x2) |
10 Serial Number: 1 (0x1) | 10 Serial Number: 1 (0x1) |
11 Signature Algorithm: sha256WithRSAEncryption | 11 Signature Algorithm: sha256WithRSAEncryption |
(...skipping 233 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
245 7d:06:87:b1:1c:82:e9:1f:ed:97:11:db:1e:e8:0f:61:65:05: | 245 7d:06:87:b1:1c:82:e9:1f:ed:97:11:db:1e:e8:0f:61:65:05: |
246 d4:0e:4d:39:a2:6d:7b:bd:ce:36:63:48:72:9b:fb:ed:c9:09: | 246 d4:0e:4d:39:a2:6d:7b:bd:ce:36:63:48:72:9b:fb:ed:c9:09: |
247 11:23:8c:6a:e8:61:95:5b:f4:01:89:3f:81:75:65:46:6b:8b: | 247 11:23:8c:6a:e8:61:95:5b:f4:01:89:3f:81:75:65:46:6b:8b: |
248 fe:51:45:c9:47:67:3d:d1:4c:ce:bf:1e:5a:bd:fe:2f:78:9d: | 248 fe:51:45:c9:47:67:3d:d1:4c:ce:bf:1e:5a:bd:fe:2f:78:9d: |
249 77:95:15:17:47:57:68:bf:18:36:ba:5d:f8:56:94:14:44:76: | 249 77:95:15:17:47:57:68:bf:18:36:ba:5d:f8:56:94:14:44:76: |
250 82:23:dc:1f:79:0e:55:50:83:1c:da:72:70:a8:e8:60:c8:eb: | 250 82:23:dc:1f:79:0e:55:50:83:1c:da:72:70:a8:e8:60:c8:eb: |
251 09:99:56:6d:4d:f9:23:9f:95:e8:82:23:5b:16:ff:2e:29:a4: | 251 09:99:56:6d:4d:f9:23:9f:95:e8:82:23:5b:16:ff:2e:29:a4: |
252 a1:3b:f5:b4:cd:11:57:fe:fc:ab:a1:75:63:f9:60:85:50:b3: | 252 a1:3b:f5:b4:cd:11:57:fe:fc:ab:a1:75:63:f9:60:85:50:b3: |
253 18:eb:84:53:d0:73:ca:51:f6:2f:3c:cd:af:75:b0:f2:9b:a5: | 253 18:eb:84:53:d0:73:ca:51:f6:2f:3c:cd:af:75:b0:f2:9b:a5: |
254 83:62:cd:81 | 254 83:62:cd:81 |
255 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 255 -----BEGIN CERTIFICATE----- |
256 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 256 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
257 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 257 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
258 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNZwNaw88sxRp3v3mPz | 258 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNZwNaw88sxRp3v3mPz |
259 GiQQNvvo7gV2IVFR/VJHlxITRkK8lDde5kHS2HUnLD0EvOGsvKj22HRjmr6pe9Ib | 259 GiQQNvvo7gV2IVFR/VJHlxITRkK8lDde5kHS2HUnLD0EvOGsvKj22HRjmr6pe9Ib |
260 loclO87R/7Td+ilkrt9MG7T7noqabHS6KnZFA7eRfpC6BD3cChd3s1/cVgfrY14r | 260 loclO87R/7Td+ilkrt9MG7T7noqabHS6KnZFA7eRfpC6BD3cChd3s1/cVgfrY14r |
261 VMnXs0vzQmueKoCccVJdD22XxtP2xHp67uoiTxzoQlVusipWz4Y8lNHn4Hx4jJQF | 261 VMnXs0vzQmueKoCccVJdD22XxtP2xHp67uoiTxzoQlVusipWz4Y8lNHn4Hx4jJQF |
262 BbA/snAY2pLSmrpXfPtSSw80y9yrQKB2TswRuVe+8uL6K7ogsMjujQoRogLU9zg9 | 262 BbA/snAY2pLSmrpXfPtSSw80y9yrQKB2TswRuVe+8uL6K7ogsMjujQoRogLU9zg9 |
263 9KhJ9LSKCP/QwyUhDtzwFyLyvwc9519Mss0aGPH9OlpCebOCR62t4AJ/Cxk0XTuQ | 263 9KhJ9LSKCP/QwyUhDtzwFyLyvwc9519Mss0aGPH9OlpCebOCR62t4AJ/Cxk0XTuQ |
264 gSMCAwEAAaOByzCByDAdBgNVHQ4EFgQUj05eeBmuKIJpL88zlQTBzXXR9v8wHwYD | 264 gSMCAwEAAaOByzCByDAdBgNVHQ4EFgQUj05eeBmuKIJpL88zlQTBzXXR9v8wHwYD |
265 VR0jBBgwFoAUj05eeBmuKIJpL88zlQTBzXXR9v8wNwYIKwYBBQUHAQEEKzApMCcG | 265 VR0jBBgwFoAUj05eeBmuKIJpL88zlQTBzXXR9v8wNwYIKwYBBQUHAQEEKzApMCcG |
266 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 266 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
267 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 267 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
268 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAxcJTRL7dY | 268 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAxcJTRL7dY |
269 1ukYwNghvvflCBs0gjJKL1XomS+uJ+r4U7Mr4YQX7Ut+uHlcT9an/ZP03PPul6pC | 269 1ukYwNghvvflCBs0gjJKL1XomS+uJ+r4U7Mr4YQX7Ut+uHlcT9an/ZP03PPul6pC |
270 J0Qg0vZ7MrggJKMGy+awc9U6w8vqCQ+U1O4TvyhAWhz8ro99BoexHILpH+2XEdse | 270 J0Qg0vZ7MrggJKMGy+awc9U6w8vqCQ+U1O4TvyhAWhz8ro99BoexHILpH+2XEdse |
271 6A9hZQXUDk05om17vc42Y0hym/vtyQkRI4xq6GGVW/QBiT+BdWVGa4v+UUXJR2c9 | 271 6A9hZQXUDk05om17vc42Y0hym/vtyQkRI4xq6GGVW/QBiT+BdWVGa4v+UUXJR2c9 |
272 0UzOvx5avf4veJ13lRUXR1dovxg2ul34VpQURHaCI9wfeQ5VUIMc2nJwqOhgyOsJ | 272 0UzOvx5avf4veJ13lRUXR1dovxg2ul34VpQURHaCI9wfeQ5VUIMc2nJwqOhgyOsJ |
273 mVZtTfkjn5XogiNbFv8uKaShO/W0zRFX/vyroXVj+WCFULMY64RT0HPKUfYvPM2v | 273 mVZtTfkjn5XogiNbFv8uKaShO/W0zRFX/vyroXVj+WCFULMY64RT0HPKUfYvPM2v |
274 dbDym6WDYs2B | 274 dbDym6WDYs2B |
275 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 275 -----END CERTIFICATE----- |
276 | |
277 150302120000Z | |
278 -----BEGIN TIME----- | |
279 MTUwMzAyMTIwMDAwWg== | |
280 -----END TIME----- | |
281 | |
282 FAIL | |
283 -----BEGIN VERIFY_RESULT----- | |
284 RkFJTA== | |
285 -----END VERIFY_RESULT----- | |
286 | |
287 serverAuth | |
288 -----BEGIN KEY_PURPOSE----- | |
289 c2VydmVyQXV0aA== | |
290 -----END KEY_PURPOSE----- | |
291 | |
292 ----- Certificate i=0 (CN=Target) ----- | |
293 ERROR: Target certificate looks like a CA but does not set all CA properties | |
294 | |
295 | |
296 -----BEGIN ERRORS----- | |
297 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlm
aWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg== | |
298 -----END ERRORS----- | |
OLD | NEW |