| Index: net/data/verify_certificate_chain_unittest/generate-key-rollover.py
|
| diff --git a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py b/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
|
| deleted file mode 100755
|
| index f838098723afeb15ffcce4e802dbaa489c3cb5eb..0000000000000000000000000000000000000000
|
| --- a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
|
| +++ /dev/null
|
| @@ -1,96 +0,0 @@
|
| -#!/usr/bin/python
|
| -# Copyright (c) 2016 The Chromium Authors. All rights reserved.
|
| -# Use of this source code is governed by a BSD-style license that can be
|
| -# found in the LICENSE file.
|
| -
|
| -"""A certificate tree with two self-signed root certificates(oldroot, newroot),
|
| -and a third root certificate (newrootrollover) which has the same key as newroot
|
| -but is signed by oldroot, all with the same subject and issuer.
|
| -There are two intermediates with the same key, subject and issuer
|
| -(oldintermediate signed by oldroot, and newintermediate signed by newroot).
|
| -The target certificate is signed by the intermediate key.
|
| -
|
| -
|
| -In graphical form:
|
| -
|
| - oldroot-------->newrootrollover newroot
|
| - | | |
|
| - v v v
|
| -oldintermediate newintermediate
|
| - | |
|
| - +------------+-------------+
|
| - |
|
| - v
|
| - target
|
| -
|
| -
|
| -Several chains are output:
|
| - key-rollover-oldchain.pem:
|
| - target<-oldintermediate<-oldroot
|
| - key-rollover-rolloverchain.pem:
|
| - target<-newintermediate<-newrootrollover<-oldroot
|
| - key-rollover-longrolloverchain.pem:
|
| - target<-newintermediate<-newroot<-newrootrollover<-oldroot
|
| - key-rollover-newchain.pem:
|
| - target<-newintermediate<-newroot
|
| -
|
| -All of these chains should verify successfully.
|
| -"""
|
| -
|
| -import common
|
| -
|
| -# The new certs should have a newer notbefore date than "old" certs. This should
|
| -# affect path builder sorting, but otherwise won't matter.
|
| -JANUARY_2_2015_UTC = '150102120000Z'
|
| -
|
| -# Self-signed root certificates. Same name, different keys.
|
| -oldroot = common.create_self_signed_root_certificate('Root')
|
| -oldroot.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
|
| -newroot = common.create_self_signed_root_certificate('Root')
|
| -newroot.set_validity_range(JANUARY_2_2015_UTC, common.JANUARY_1_2016_UTC)
|
| -# Root with the new key signed by the old key.
|
| -newrootrollover = common.create_intermediate_certificate('Root', oldroot)
|
| -newrootrollover.set_key(newroot.get_key())
|
| -newrootrollover.set_validity_range(JANUARY_2_2015_UTC,
|
| - common.JANUARY_1_2016_UTC)
|
| -
|
| -# Intermediate signed by oldroot.
|
| -oldintermediate = common.create_intermediate_certificate('Intermediate',
|
| - oldroot)
|
| -oldintermediate.set_validity_range(common.JANUARY_1_2015_UTC,
|
| - common.JANUARY_1_2016_UTC)
|
| -# Intermediate signed by newroot. Same key as oldintermediate.
|
| -newintermediate = common.create_intermediate_certificate('Intermediate',
|
| - newroot)
|
| -newintermediate.set_key(oldintermediate.get_key())
|
| -newintermediate.set_validity_range(JANUARY_2_2015_UTC,
|
| - common.JANUARY_1_2016_UTC)
|
| -
|
| -# Target certificate.
|
| -target = common.create_end_entity_certificate('Target', oldintermediate)
|
| -
|
| -oldchain = [target, oldintermediate]
|
| -rolloverchain = [target, newintermediate, newrootrollover]
|
| -longrolloverchain = [target, newintermediate, newroot, newrootrollover]
|
| -oldtrusted = common.TrustAnchor(oldroot, constrained=False)
|
| -
|
| -newchain = [target, newintermediate]
|
| -newtrusted = common.TrustAnchor(newroot, constrained=False)
|
| -
|
| -time = common.DEFAULT_TIME
|
| -key_purpose = common.DEFAULT_KEY_PURPOSE
|
| -verify_result = True
|
| -errors = None
|
| -
|
| -common.write_test_file(__doc__, oldchain, oldtrusted, time, key_purpose,
|
| - verify_result, errors,
|
| - out_pem="key-rollover-oldchain.pem")
|
| -common.write_test_file(__doc__, rolloverchain, oldtrusted, time, key_purpose,
|
| - verify_result, errors,
|
| - out_pem="key-rollover-rolloverchain.pem")
|
| -common.write_test_file(__doc__, longrolloverchain, oldtrusted, time,
|
| - key_purpose, verify_result, errors,
|
| - out_pem="key-rollover-longrolloverchain.pem")
|
| -common.write_test_file(__doc__, newchain, newtrusted, time, key_purpose,
|
| - verify_result, errors,
|
| - out_pem="key-rollover-newchain.pem")
|
|
|