Index: net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem |
diff --git a/net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem b/net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem |
deleted file mode 100644 |
index c779a188a4dcc0d792f7720a57ca6d9d07e44141..0000000000000000000000000000000000000000 |
--- a/net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem |
+++ /dev/null |
@@ -1,287 +0,0 @@ |
-[Created by: generate-target-sets-eku-any.py] |
- |
-Certificate chain with 1 intermediate and a trusted root. The target |
-restricts EKU to clientAuth+any and requests serverAuth during verification. |
-This should succeed. |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 1 (0x1) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Intermediate |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Target |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (2048 bit) |
- Modulus: |
- 00:c3:82:13:64:0e:35:33:0c:ac:44:be:6d:92:f5: |
- e4:97:d8:9a:bd:64:f1:b5:67:62:01:7b:0c:98:57: |
- 4a:63:64:b0:9d:6a:7b:84:a2:91:fe:73:0b:4c:81: |
- ce:89:f9:8d:8d:8a:41:18:c8:d8:64:27:36:32:e6: |
- 36:26:44:16:13:2e:a1:ad:38:06:0b:1b:39:62:6a: |
- 94:ac:a0:59:be:52:cb:47:d7:4b:00:09:91:8e:14: |
- 69:a9:62:df:49:d8:b6:79:73:de:60:d4:b8:76:89: |
- a4:53:8a:1d:4b:80:88:31:e8:05:46:81:1b:7b:5d: |
- 52:d0:6b:3b:53:0d:25:3c:95:9b:2d:99:83:3c:03: |
- 8c:b5:73:fb:43:6c:82:b3:48:57:38:3c:ff:b7:79: |
- d8:13:74:06:d0:17:78:a9:38:09:76:ca:f9:b7:5a: |
- a5:8a:6e:85:7f:27:34:79:82:ef:a2:01:93:ae:fa: |
- 0b:18:47:d4:14:ff:67:78:2b:53:92:f6:ac:27:42: |
- c7:7f:8e:fd:06:4a:36:b9:7a:98:5e:0d:94:ef:1a: |
- fa:08:ad:8d:64:28:c7:c1:03:76:63:b9:33:5a:9f: |
- 16:be:d3:e0:5c:e9:43:7b:9b:83:b3:90:31:e7:59: |
- 2b:1c:d2:8c:73:15:a2:3a:94:35:03:80:97:f8:5d: |
- a3:13 |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- 5A:16:9C:06:85:B6:F4:77:AD:72:58:A2:4F:A1:FE:29:CF:97:8A:2B |
- X509v3 Authority Key Identifier: |
- keyid:24:B9:91:41:39:F1:30:5E:F8:C5:3B:C0:51:CC:11:58:A6:13:73:B3 |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Intermediate.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Intermediate.crl |
- |
- X509v3 Key Usage: critical |
- Digital Signature, Key Encipherment |
- X509v3 Extended Key Usage: |
- TLS Web Client Authentication, Any Extended Key Usage |
- Signature Algorithm: sha256WithRSAEncryption |
- e9:be:ed:82:c2:ea:51:5e:9d:c9:4f:2c:e3:ca:6e:0b:be:18: |
- 5c:c3:1e:3f:6c:1a:de:9d:cc:8c:45:b5:87:2e:b2:38:9a:84: |
- a6:e1:ef:93:ac:f1:b6:d0:ba:d6:87:59:5d:e8:a7:1b:3e:14: |
- 3a:9d:0b:50:c3:29:51:65:62:66:9e:a2:68:e8:be:f0:1a:e2: |
- 57:0e:dc:7e:28:94:d9:c3:a9:0e:9c:d6:b0:76:d8:ec:b9:fe: |
- e6:35:b5:8a:27:3f:1d:6a:4e:66:d5:ac:d8:05:b2:4d:47:16: |
- ff:09:88:7e:23:70:dc:6b:b2:14:38:97:d8:4c:5d:ee:41:aa: |
- ac:b3:6b:5f:d7:2f:39:93:19:5f:e6:b7:15:c9:2b:5b:2c:c0: |
- b6:81:84:49:0b:5f:df:e9:e1:01:4f:82:ad:35:0b:00:d3:ff: |
- 47:55:67:20:aa:3e:f9:b0:84:09:8d:e0:7b:16:b0:11:a5:16: |
- a7:27:81:85:ec:2d:47:73:48:e4:92:9d:b0:81:27:32:28:89: |
- de:cb:c2:fb:bd:60:09:2e:9a:99:ef:9b:cb:9c:2b:fc:b5:a2: |
- cc:01:73:bd:42:28:00:d4:d8:b2:8d:94:6b:5e:bf:1e:8e:93: |
- 13:89:65:6b:2f:af:92:37:a3:b4:98:14:f4:b1:ff:44:aa:c1: |
- 79:83:48:f7 |
------BEGIN CERTIFICATE----- |
-MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
-cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDghNk |
-DjUzDKxEvm2S9eSX2Jq9ZPG1Z2IBewyYV0pjZLCdanuEopH+cwtMgc6J+Y2NikEY |
-yNhkJzYy5jYmRBYTLqGtOAYLGzliapSsoFm+UstH10sACZGOFGmpYt9J2LZ5c95g |
-1Lh2iaRTih1LgIgx6AVGgRt7XVLQaztTDSU8lZstmYM8A4y1c/tDbIKzSFc4PP+3 |
-edgTdAbQF3ipOAl2yvm3WqWKboV/JzR5gu+iAZOu+gsYR9QU/2d4K1OS9qwnQsd/ |
-jv0GSja5epheDZTvGvoIrY1kKMfBA3ZjuTNanxa+0+Bc6UN7m4OzkDHnWSsc0oxz |
-FaI6lDUDgJf4XaMTAgMBAAGjgeUwgeIwHQYDVR0OBBYEFFoWnAaFtvR3rXJYok+h |
-/inPl4orMB8GA1UdIwQYMBaAFCS5kUE58TBe+MU7wFHMEVimE3OzMD8GCCsGAQUF |
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
-aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
-dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMBkGA1UdJQQSMBAGCCsGAQUF |
-BwMCBgRVHSUAMA0GCSqGSIb3DQEBCwUAA4IBAQDpvu2CwupRXp3JTyzjym4Lvhhc |
-wx4/bBrencyMRbWHLrI4moSm4e+TrPG20LrWh1ld6KcbPhQ6nQtQwylRZWJmnqJo |
-6L7wGuJXDtx+KJTZw6kOnNawdtjsuf7mNbWKJz8dak5m1azYBbJNRxb/CYh+I3Dc |
-a7IUOJfYTF3uQaqss2tf1y85kxlf5rcVyStbLMC2gYRJC1/f6eEBT4KtNQsA0/9H |
-VWcgqj75sIQJjeB7FrARpRanJ4GF7C1Hc0jkkp2wgScyKIney8L7vWAJLpqZ75vL |
-nCv8taLMAXO9QigA1NiyjZRrXr8ejpMTiWVrL6+SN6O0mBT0sf9EqsF5g0j3 |
------END CERTIFICATE----- |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 2 (0x2) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Root |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Intermediate |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (2048 bit) |
- Modulus: |
- 00:ed:3b:bb:f2:8b:20:81:de:42:41:c6:24:63:1c: |
- 4b:e5:63:b0:93:07:fd:22:64:50:7d:ef:8f:ed:65: |
- aa:ba:f4:d9:ad:0c:68:dd:50:b0:ea:0a:5e:18:9e: |
- df:48:88:ec:1f:fa:6b:4a:3e:db:ea:24:6e:b1:a3: |
- bb:0b:12:de:1d:49:d3:32:78:24:f9:e8:4f:aa:85: |
- 90:21:a2:2c:8f:58:95:8c:70:80:8d:cd:99:68:03: |
- 67:0f:48:eb:96:17:63:93:2b:8f:72:77:23:5f:97: |
- 4f:86:bd:17:d2:70:5b:5c:18:f8:01:d6:11:d8:c0: |
- dc:32:b2:f4:bf:dd:da:65:fb:86:23:c0:a4:bd:ff: |
- c2:a4:b6:87:9e:10:98:d4:f4:09:cb:26:50:1d:56: |
- 83:72:09:c6:c1:b7:cc:52:9c:61:09:04:bb:aa:2a: |
- 63:66:a5:b1:02:60:85:bc:30:91:62:bb:6f:b0:24: |
- 33:e8:b5:9a:13:1f:3a:73:95:d5:fb:bc:a9:48:dd: |
- 14:a2:a4:62:e1:97:19:57:b1:1a:da:c1:79:93:fd: |
- 74:cb:e1:ff:0c:49:c2:78:57:8e:ef:dc:df:60:96: |
- 8e:e6:a2:97:60:b9:53:6b:17:8e:ae:f9:3d:be:31: |
- dd:46:18:bd:af:b6:a6:02:fa:48:2f:d8:c6:f0:1f: |
- bc:43 |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- 24:B9:91:41:39:F1:30:5E:F8:C5:3B:C0:51:CC:11:58:A6:13:73:B3 |
- X509v3 Authority Key Identifier: |
- keyid:CD:6F:4C:FE:AA:7A:3A:63:5D:12:79:6D:F4:4C:B0:2A:8A:7F:FB:6C |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Root.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Root.crl |
- |
- X509v3 Key Usage: critical |
- Certificate Sign, CRL Sign |
- X509v3 Basic Constraints: critical |
- CA:TRUE |
- Signature Algorithm: sha256WithRSAEncryption |
- 57:11:25:a6:73:a0:63:5a:15:05:bf:24:b7:98:df:e2:d0:01: |
- ab:4f:9e:80:3b:f7:6c:67:9b:e4:ec:19:5c:bd:bc:32:1e:40: |
- 5a:8f:9f:66:f2:1a:5a:29:94:38:67:00:56:53:0f:5d:86:58: |
- a8:d8:10:f3:3e:16:ca:87:0c:95:28:64:b2:2f:db:42:31:46: |
- 35:64:0a:01:f7:91:a2:ad:d5:4b:0d:78:3c:6f:72:dc:36:56: |
- d6:d5:fc:d8:c4:bd:38:15:26:ba:69:e1:75:78:e8:a0:fd:7a: |
- 9d:9d:63:3b:27:35:7c:31:b7:f5:4a:1e:01:78:ee:a7:5f:b3: |
- 51:3a:70:fa:2d:87:6f:d3:8f:43:df:91:c3:2a:6c:94:98:15: |
- 7f:06:0a:b7:66:aa:96:f9:66:04:04:f0:b8:1c:ca:2d:f3:c7: |
- f6:fd:f2:ab:0c:33:24:fc:6f:bd:7a:b0:51:f9:a1:01:97:a0: |
- 7e:9a:22:53:9c:ae:a9:38:ce:af:9d:23:42:78:eb:33:ab:46: |
- 60:5e:e7:df:84:84:dd:c4:a0:4b:c3:21:e2:60:6d:29:44:97: |
- a3:94:f8:26:53:ac:f0:08:0f:c2:c1:5c:9f:23:0b:53:17:33: |
- 52:1c:04:96:1a:7d:26:c2:45:48:57:01:ac:aa:b4:0f:e2:03: |
- 99:bf:63:03 |
------BEGIN CERTIFICATE----- |
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tu78osg |
-gd5CQcYkYxxL5WOwkwf9ImRQfe+P7WWquvTZrQxo3VCw6gpeGJ7fSIjsH/prSj7b |
-6iRusaO7CxLeHUnTMngk+ehPqoWQIaIsj1iVjHCAjc2ZaANnD0jrlhdjkyuPcncj |
-X5dPhr0X0nBbXBj4AdYR2MDcMrL0v93aZfuGI8Ckvf/CpLaHnhCY1PQJyyZQHVaD |
-cgnGwbfMUpxhCQS7qipjZqWxAmCFvDCRYrtvsCQz6LWaEx86c5XV+7ypSN0UoqRi |
-4ZcZV7Ea2sF5k/10y+H/DEnCeFeO79zfYJaO5qKXYLlTaxeOrvk9vjHdRhi9r7am |
-AvpIL9jG8B+8QwIDAQABo4HLMIHIMB0GA1UdDgQWBBQkuZFBOfEwXvjFO8BRzBFY |
-phNzszAfBgNVHSMEGDAWgBTNb0z+qno6Y10SeW30TLAqin/7bDA3BggrBgEFBQcB |
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
-AFcRJaZzoGNaFQW/JLeY3+LQAatPnoA792xnm+TsGVy9vDIeQFqPn2byGloplDhn |
-AFZTD12GWKjYEPM+FsqHDJUoZLIv20IxRjVkCgH3kaKt1UsNeDxvctw2VtbV/NjE |
-vTgVJrpp4XV46KD9ep2dYzsnNXwxt/VKHgF47qdfs1E6cPoth2/Tj0PfkcMqbJSY |
-FX8GCrdmqpb5ZgQE8Lgcyi3zx/b98qsMMyT8b716sFH5oQGXoH6aIlOcrqk4zq+d |
-I0J46zOrRmBe59+EhN3EoEvDIeJgbSlEl6OU+CZTrPAID8LBXJ8jC1MXM1IcBJYa |
-fSbCRUhXAayqtA/iA5m/YwM= |
------END CERTIFICATE----- |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 1 (0x1) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Root |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Root |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (2048 bit) |
- Modulus: |
- 00:e8:17:31:b6:0e:84:10:a4:9b:bf:9e:ae:9e:29: |
- b7:6f:81:ae:d7:df:45:89:d1:29:51:0e:1e:39:7a: |
- 96:6b:7f:c0:78:df:88:cf:db:b3:ab:8d:49:0f:fb: |
- 70:55:85:4f:93:9f:12:a1:a6:55:5c:a9:ae:8d:79: |
- 4d:a6:3a:32:03:9c:bf:ad:95:c4:8b:49:1f:02:b5: |
- 23:a0:9f:da:d3:45:c6:8c:fc:ec:97:46:57:dd:77: |
- 56:c6:a2:46:78:da:a2:59:bb:22:ea:de:63:94:50: |
- 19:91:1c:10:cd:67:e0:57:10:bd:e0:de:69:67:80: |
- 6d:31:a8:43:bc:49:2c:8a:d6:4a:23:0f:a6:78:f4: |
- 74:c7:4f:37:52:3a:af:9c:03:b2:b3:6c:26:ab:62: |
- 61:12:6d:22:15:66:da:ec:d6:b8:1f:9b:14:b9:04: |
- 9c:9b:5e:b5:cb:8b:62:95:67:6a:a1:57:44:02:77: |
- a2:81:3e:c7:20:52:a2:16:2e:ba:c2:29:a1:54:ed: |
- 33:67:f2:2a:26:a3:b6:da:08:8d:63:6c:ca:4f:c6: |
- 84:88:b9:60:08:cf:50:8e:5a:3e:75:d7:ec:d7:63: |
- c1:fe:18:3f:4e:fb:08:de:39:45:d2:81:34:8e:89: |
- 5a:48:ce:49:bf:ca:84:cb:26:ac:c2:f7:1f:6b:3f: |
- 0d:49 |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- CD:6F:4C:FE:AA:7A:3A:63:5D:12:79:6D:F4:4C:B0:2A:8A:7F:FB:6C |
- X509v3 Authority Key Identifier: |
- keyid:CD:6F:4C:FE:AA:7A:3A:63:5D:12:79:6D:F4:4C:B0:2A:8A:7F:FB:6C |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Root.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Root.crl |
- |
- X509v3 Key Usage: critical |
- Certificate Sign, CRL Sign |
- X509v3 Basic Constraints: critical |
- CA:TRUE |
- Signature Algorithm: sha256WithRSAEncryption |
- 19:6d:6b:ec:62:f0:48:f8:4a:1a:58:9b:71:ce:df:3d:3e:19: |
- 23:14:18:ab:d9:fa:12:7f:b8:ed:a7:00:2e:a8:75:6d:11:b1: |
- 99:65:29:44:fe:92:5b:78:4c:1d:e5:22:92:15:16:81:95:d9: |
- 0d:d4:0f:50:ea:62:80:5e:25:7b:6e:70:10:46:3c:f8:24:54: |
- d3:9e:f2:cc:30:68:63:f5:19:89:ef:00:2f:57:81:18:89:d4: |
- 72:53:76:b2:9a:1c:30:19:a7:37:f9:3f:c1:be:35:ea:95:eb: |
- 23:7e:66:c1:81:82:7d:64:88:64:bb:23:7a:ed:ee:14:ae:05: |
- c0:03:29:69:04:c3:4c:e8:ca:4d:78:87:e1:9f:98:8b:45:cf: |
- 70:98:cb:51:e2:d3:04:03:13:e9:a1:82:d2:b8:13:f0:56:20: |
- 6f:f5:59:1f:f9:96:7e:79:f7:c9:53:68:72:e5:94:bf:9f:84: |
- 4c:7c:e9:01:f4:e9:1f:14:4c:83:07:c2:63:65:10:75:30:e5: |
- b8:ee:1e:74:dd:29:78:66:9b:79:46:3b:27:45:c4:5d:a9:aa: |
- a2:ed:95:28:e1:59:b9:b7:e2:85:69:e7:c4:12:36:c4:60:00: |
- fb:a3:74:69:cf:a0:ee:46:76:bd:45:c4:24:69:5b:5b:55:2e: |
- 43:3e:b2:1c |
------BEGIN TRUST_ANCHOR_UNCONSTRAINED----- |
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOgXMbYOhBCkm7+erp4p |
-t2+BrtffRYnRKVEOHjl6lmt/wHjfiM/bs6uNSQ/7cFWFT5OfEqGmVVypro15TaY6 |
-MgOcv62VxItJHwK1I6Cf2tNFxoz87JdGV913VsaiRnjaolm7IureY5RQGZEcEM1n |
-4FcQveDeaWeAbTGoQ7xJLIrWSiMPpnj0dMdPN1I6r5wDsrNsJqtiYRJtIhVm2uzW |
-uB+bFLkEnJtetcuLYpVnaqFXRAJ3ooE+xyBSohYuusIpoVTtM2fyKiajttoIjWNs |
-yk/GhIi5YAjPUI5aPnXX7Ndjwf4YP077CN45RdKBNI6JWkjOSb/KhMsmrML3H2s/ |
-DUkCAwEAAaOByzCByDAdBgNVHQ4EFgQUzW9M/qp6OmNdEnlt9EywKop/+2wwHwYD |
-VR0jBBgwFoAUzW9M/qp6OmNdEnlt9EywKop/+2wwNwYIKwYBBQUHAQEEKzApMCcG |
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAZbWvsYvBI |
-+EoaWJtxzt89PhkjFBir2foSf7jtpwAuqHVtEbGZZSlE/pJbeEwd5SKSFRaBldkN |
-1A9Q6mKAXiV7bnAQRjz4JFTTnvLMMGhj9RmJ7wAvV4EYidRyU3aymhwwGac3+T/B |
-vjXqlesjfmbBgYJ9ZIhkuyN67e4UrgXAAylpBMNM6MpNeIfhn5iLRc9wmMtR4tME |
-AxPpoYLSuBPwViBv9Vkf+ZZ+effJU2hy5ZS/n4RMfOkB9OkfFEyDB8JjZRB1MOW4 |
-7h503Sl4Zpt5RjsnRcRdqaqi7ZUo4Vm5t+KFaefEEjbEYAD7o3Rpz6DuRna9RcQk |
-aVtbVS5DPrIc |
------END TRUST_ANCHOR_UNCONSTRAINED----- |
- |
-150302120000Z |
------BEGIN TIME----- |
-MTUwMzAyMTIwMDAwWg== |
------END TIME----- |
- |
-SUCCESS |
------BEGIN VERIFY_RESULT----- |
-U1VDQ0VTUw== |
------END VERIFY_RESULT----- |
- |
-serverAuth |
------BEGIN KEY_PURPOSE----- |
-c2VydmVyQXV0aA== |
------END KEY_PURPOSE----- |