Index: net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem |
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem |
deleted file mode 100644 |
index 91b78ba29fcec4120d90683f3a6bfb352f8160a0..0000000000000000000000000000000000000000 |
--- a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem |
+++ /dev/null |
@@ -1,267 +0,0 @@ |
-[Created by: generate-target-signed-by-512bit-rsa.py] |
- |
-Certificate chain with 1 intermediate and a trusted root. The target |
-certificate is signed using a weak RSA key (512-bit modulus), and so |
-verification is expected to fail. |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 1 (0x1) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Intermediate |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Target |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (2048 bit) |
- Modulus: |
- 00:f2:42:db:44:b2:6b:f2:0a:41:04:53:7d:0b:34: |
- a4:fe:8d:d5:3a:ff:e5:a9:0c:5d:e4:2d:69:fe:e3: |
- dd:8a:47:2f:e8:9e:5a:54:ab:0b:95:84:16:af:fa: |
- 29:11:43:5c:c9:59:15:30:59:77:bb:62:dd:d6:e4: |
- 27:3a:bf:a9:82:cb:b8:f4:3c:5c:1d:74:87:8d:57: |
- af:0a:69:91:68:b4:aa:f6:14:8b:25:14:60:68:c9: |
- 8d:56:09:06:a6:ad:12:8a:cb:05:33:b0:1e:11:03: |
- 52:bf:af:7d:87:b0:97:22:fb:5a:f4:ea:5b:14:56: |
- cc:ad:03:2a:da:75:59:35:8b:88:3a:b7:66:3b:18: |
- a8:7c:c4:29:4f:66:ac:da:1f:ba:ec:ef:fc:55:01: |
- 1e:31:7a:af:ca:5c:5d:cf:73:49:2f:50:b9:0d:3b: |
- 4c:0c:d9:b0:d6:25:86:ea:3d:4d:ea:de:3b:9c:2a: |
- 79:b3:c6:13:9a:bb:22:53:62:7c:a9:05:a6:a3:c7: |
- f5:28:72:24:c0:d6:ec:6f:66:eb:5a:85:91:5e:cd: |
- a5:95:cc:9f:60:88:a1:bc:95:33:1f:f4:8f:99:68: |
- 56:64:39:4c:a4:df:f3:41:10:14:50:e5:ba:42:e5: |
- c6:ec:50:37:44:26:de:0d:28:71:b8:63:bb:38:7e: |
- 04:a9 |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- 78:F8:8D:81:56:D4:CD:CF:11:9F:9E:DD:3D:6C:F2:07:FE:0F:37:7D |
- X509v3 Authority Key Identifier: |
- keyid:E9:D8:44:8D:24:EE:A1:82:18:6F:21:FA:4E:EC:FB:DF:D1:91:57:9D |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Intermediate.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Intermediate.crl |
- |
- X509v3 Key Usage: critical |
- Digital Signature, Key Encipherment |
- X509v3 Extended Key Usage: |
- TLS Web Server Authentication, TLS Web Client Authentication |
- Signature Algorithm: sha256WithRSAEncryption |
- 96:6a:e6:ba:df:4c:9f:c4:01:e6:e3:5a:79:d9:56:ae:76:14: |
- 8a:33:3a:65:e2:28:2f:90:81:5c:1e:8b:ca:1c:0e:a5:f1:ca: |
- 8a:f3:fc:17:f4:2f:0d:3b:cf:ee:06:23:d8:81:6e:14:e4:72: |
- 1b:9c:05:50:37:ca:ce:da:ea:f8 |
------BEGIN CERTIFICATE----- |
-MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
-cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyQttE |
-smvyCkEEU30LNKT+jdU6/+WpDF3kLWn+492KRy/onlpUqwuVhBav+ikRQ1zJWRUw |
-WXe7Yt3W5Cc6v6mCy7j0PFwddIeNV68KaZFotKr2FIslFGBoyY1WCQamrRKKywUz |
-sB4RA1K/r32HsJci+1r06lsUVsytAyradVk1i4g6t2Y7GKh8xClPZqzaH7rs7/xV |
-AR4xeq/KXF3Pc0kvULkNO0wM2bDWJYbqPU3q3jucKnmzxhOauyJTYnypBaajx/Uo |
-ciTA1uxvZutahZFezaWVzJ9giKG8lTMf9I+ZaFZkOUyk3/NBEBRQ5bpC5cbsUDdE |
-Jt4NKHG4Y7s4fgSpAgMBAAGjgekwgeYwHQYDVR0OBBYEFHj4jYFW1M3PEZ+e3T1s |
-8gf+Dzd9MB8GA1UdIwQYMBaAFOnYRI0k7qGCGG8h+k7s+9/RkVedMD8GCCsGAQUF |
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
-aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
-dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAJZq5rrfTJ/EAebjWnnZVq52 |
-FIozOmXiKC+QgVwei8ocDqXxyorz/Bf0Lw07z+4GI9iBbhTkchucBVA3ys7a6vg= |
------END CERTIFICATE----- |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 2 (0x2) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Root |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Intermediate |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (512 bit) |
- Modulus: |
- 00:d5:13:bb:52:bf:ca:19:1a:06:19:68:07:1d:e6: |
- 87:16:d3:f0:e0:12:ba:a2:b5:2a:3d:ed:b3:64:16: |
- 06:a3:50:fc:b0:a4:49:f2:f9:ab:34:ad:4f:db:0a: |
- 3d:2b:25:92:86:3f:94:df:fb:fc:54:f2:c7:6d:9e: |
- d2:10:e0:cd:0d |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- E9:D8:44:8D:24:EE:A1:82:18:6F:21:FA:4E:EC:FB:DF:D1:91:57:9D |
- X509v3 Authority Key Identifier: |
- keyid:BE:33:72:47:C2:B1:97:41:99:C0:31:57:52:56:0C:B5:53:78:5A:A4 |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Root.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Root.crl |
- |
- X509v3 Key Usage: critical |
- Certificate Sign, CRL Sign |
- X509v3 Basic Constraints: critical |
- CA:TRUE |
- Signature Algorithm: sha256WithRSAEncryption |
- 71:33:95:7f:18:b3:82:8b:63:87:5b:f0:c3:e5:6b:06:f4:07: |
- 42:35:3d:af:0f:b9:e9:9e:91:07:04:c4:6d:00:de:11:81:0e: |
- 49:ce:7c:92:ad:c7:5d:c6:42:9f:b9:8f:c7:ab:02:46:f6:ef: |
- 8b:47:be:ad:f6:1f:ee:04:aa:b8:07:1a:43:66:6d:1f:39:2a: |
- f5:98:4f:4f:60:2d:ca:2f:f7:0e:d8:f3:16:7b:48:03:42:00: |
- dc:ff:7e:d7:cf:e3:5e:d5:29:33:46:16:a8:42:65:ae:42:bd: |
- e6:15:2a:07:bb:05:25:cd:b9:99:05:87:61:69:ef:b5:3d:7e: |
- 10:af:7e:7a:64:44:cb:73:65:b5:bc:e3:db:a6:7f:92:5d:31: |
- 87:f3:6c:4d:ac:6a:7f:1b:12:ba:ff:16:2a:80:16:3c:a5:cc: |
- d4:4d:a4:ed:28:0b:5d:cb:d5:7d:c0:a4:7e:c7:10:df:d1:25: |
- a9:8a:a3:f1:fc:e1:27:2e:f8:27:0c:09:36:78:2c:a3:6f:78: |
- 0c:b3:4b:7c:f3:5a:31:93:94:74:61:94:0e:c3:ba:3d:94:54: |
- f5:c1:1e:e9:c1:a9:07:a1:d2:78:e5:6b:e6:06:34:77:62:bb: |
- 80:5a:98:c0:bf:10:38:b9:6f:ed:11:36:01:b1:ad:72:42:30: |
- c1:da:ad:2b |
------BEGIN CERTIFICATE----- |
-MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
-ZXJtZWRpYXRlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANUTu1K/yhkaBhloBx3m |
-hxbT8OASuqK1Kj3ts2QWBqNQ/LCkSfL5qzStT9sKPSslkoY/lN/7/FTyx22e0hDg |
-zQ0CAwEAAaOByzCByDAdBgNVHQ4EFgQU6dhEjSTuoYIYbyH6Tuz739GRV50wHwYD |
-VR0jBBgwFoAUvjNyR8Kxl0GZwDFXUlYMtVN4WqQwNwYIKwYBBQUHAQEEKzApMCcG |
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBxM5V/GLOC |
-i2OHW/DD5WsG9AdCNT2vD7npnpEHBMRtAN4RgQ5JznySrcddxkKfuY/HqwJG9u+L |
-R76t9h/uBKq4BxpDZm0fOSr1mE9PYC3KL/cO2PMWe0gDQgDc/37Xz+Ne1SkzRhao |
-QmWuQr3mFSoHuwUlzbmZBYdhae+1PX4Qr356ZETLc2W1vOPbpn+SXTGH82xNrGp/ |
-GxK6/xYqgBY8pczUTaTtKAtdy9V9wKR+xxDf0SWpiqPx/OEnLvgnDAk2eCyjb3gM |
-s0t881oxk5R0YZQOw7o9lFT1wR7pwakHodJ45WvmBjR3YruAWpjAvxA4uW/tETYB |
-sa1yQjDB2q0r |
------END CERTIFICATE----- |
- |
-Certificate: |
- Data: |
- Version: 3 (0x2) |
- Serial Number: 1 (0x1) |
- Signature Algorithm: sha256WithRSAEncryption |
- Issuer: CN=Root |
- Validity |
- Not Before: Jan 1 12:00:00 2015 GMT |
- Not After : Jan 1 12:00:00 2016 GMT |
- Subject: CN=Root |
- Subject Public Key Info: |
- Public Key Algorithm: rsaEncryption |
- Public-Key: (2048 bit) |
- Modulus: |
- 00:ca:3f:f8:1f:42:8f:55:98:f8:9f:fb:94:03:42: |
- 2a:c1:42:3a:2b:2a:f3:54:14:f3:fe:67:25:24:d3: |
- 9a:7f:66:1a:60:0b:9d:d8:bd:65:71:b5:f5:d9:fe: |
- eb:f6:04:72:57:97:bc:23:b0:be:bd:ce:94:9e:58: |
- 1a:10:e7:33:09:0b:57:a8:1c:6f:fa:f7:ce:d1:31: |
- 34:90:1a:b4:60:2d:d2:7f:29:9b:4e:ec:f4:6e:99: |
- 21:6b:98:9c:90:09:fc:bd:2f:55:c3:34:38:48:4a: |
- 73:fe:58:e2:09:b9:d9:f9:53:f6:84:e2:5d:fc:eb: |
- 3c:ba:92:f5:bc:97:cc:ef:43:54:f7:4f:c9:b4:2c: |
- 86:95:32:a6:e8:91:f5:8e:31:f8:de:b5:d9:c9:3d: |
- 4d:d7:24:4c:8c:58:aa:8a:c5:79:ab:e7:cd:3b:5c: |
- 84:67:52:5a:88:33:c3:55:d5:a9:2e:c9:5b:61:7c: |
- 87:05:c1:0b:d7:19:4a:fe:bd:ba:af:d7:e5:70:d1: |
- a4:92:08:d2:f2:ca:2b:b1:94:d0:84:57:f9:30:92: |
- fc:3a:67:82:10:6e:e3:89:9f:b3:df:75:6e:99:46: |
- bd:ce:b1:e8:ac:a2:3b:21:80:da:11:13:bd:df:93: |
- 0e:0e:ee:5d:f5:39:a2:a8:f7:41:c8:cb:00:5c:ac: |
- ee:b1 |
- Exponent: 65537 (0x10001) |
- X509v3 extensions: |
- X509v3 Subject Key Identifier: |
- BE:33:72:47:C2:B1:97:41:99:C0:31:57:52:56:0C:B5:53:78:5A:A4 |
- X509v3 Authority Key Identifier: |
- keyid:BE:33:72:47:C2:B1:97:41:99:C0:31:57:52:56:0C:B5:53:78:5A:A4 |
- |
- Authority Information Access: |
- CA Issuers - URI:http://url-for-aia/Root.cer |
- |
- X509v3 CRL Distribution Points: |
- |
- Full Name: |
- URI:http://url-for-crl/Root.crl |
- |
- X509v3 Key Usage: critical |
- Certificate Sign, CRL Sign |
- X509v3 Basic Constraints: critical |
- CA:TRUE |
- Signature Algorithm: sha256WithRSAEncryption |
- 6a:f1:5f:9d:b3:dd:07:5a:5c:44:0a:17:df:04:6c:e5:17:03: |
- a6:ba:c1:85:f3:4f:ff:15:52:85:7c:98:aa:58:ab:39:b2:6d: |
- ae:71:ff:85:36:de:d6:72:c6:3f:7b:6e:e3:13:32:d5:cd:d8: |
- 22:c3:48:71:e7:ed:02:97:5a:b0:bd:e7:fd:d4:21:53:66:7e: |
- 17:df:97:cd:c0:75:18:f3:a8:6a:0c:bc:de:c3:02:36:17:eb: |
- 99:a4:b7:01:be:89:27:3c:43:9e:d4:e8:24:2a:81:0b:fa:32: |
- 74:90:53:5f:c1:3c:2e:cf:04:ec:90:5e:f4:20:8e:39:06:49: |
- ee:8d:69:1e:5f:7f:e0:90:ea:b3:cd:70:42:40:76:22:ec:53: |
- b4:c7:cd:bf:41:34:92:29:80:97:9a:28:f1:f4:8c:65:a2:74: |
- f3:79:a5:0a:fa:4f:a7:df:d2:c2:a8:23:9f:51:15:19:2c:40: |
- fd:67:75:3a:24:8c:5b:9a:71:df:02:92:90:d8:e2:58:22:79: |
- 44:10:e5:2c:fd:7e:25:6e:e2:42:ec:02:67:44:17:8a:ac:e5: |
- 9c:b2:0b:d3:22:f5:88:2f:53:e6:e8:a5:43:a4:65:97:a6:36: |
- f6:57:d3:4b:15:28:55:05:df:52:b5:19:c8:7e:a8:3a:4a:79: |
- 52:33:b9:52 |
------BEGIN TRUST_ANCHOR_UNCONSTRAINED----- |
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMo/+B9Cj1WY+J/7lANC |
-KsFCOisq81QU8/5nJSTTmn9mGmALndi9ZXG19dn+6/YEcleXvCOwvr3OlJ5YGhDn |
-MwkLV6gcb/r3ztExNJAatGAt0n8pm07s9G6ZIWuYnJAJ/L0vVcM0OEhKc/5Y4gm5 |
-2flT9oTiXfzrPLqS9byXzO9DVPdPybQshpUypuiR9Y4x+N612ck9TdckTIxYqorF |
-eavnzTtchGdSWogzw1XVqS7JW2F8hwXBC9cZSv69uq/X5XDRpJII0vLKK7GU0IRX |
-+TCS/DpnghBu44mfs991bplGvc6x6KyiOyGA2hETvd+TDg7uXfU5oqj3QcjLAFys |
-7rECAwEAAaOByzCByDAdBgNVHQ4EFgQUvjNyR8Kxl0GZwDFXUlYMtVN4WqQwHwYD |
-VR0jBBgwFoAUvjNyR8Kxl0GZwDFXUlYMtVN4WqQwNwYIKwYBBQUHAQEEKzApMCcG |
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBq8V+ds90H |
-WlxEChffBGzlFwOmusGF80//FVKFfJiqWKs5sm2ucf+FNt7WcsY/e27jEzLVzdgi |
-w0hx5+0Cl1qwvef91CFTZn4X35fNwHUY86hqDLzewwI2F+uZpLcBvoknPEOe1Ogk |
-KoEL+jJ0kFNfwTwuzwTskF70II45BknujWkeX3/gkOqzzXBCQHYi7FO0x82/QTSS |
-KYCXmijx9IxlonTzeaUK+k+n39LCqCOfURUZLED9Z3U6JIxbmnHfApKQ2OJYInlE |
-EOUs/X4lbuJC7AJnRBeKrOWcsgvTIvWIL1Pm6KVDpGWXpjb2V9NLFShVBd9StRnI |
-fqg6SnlSM7lS |
------END TRUST_ANCHOR_UNCONSTRAINED----- |
- |
-150302120000Z |
------BEGIN TIME----- |
-MTUwMzAyMTIwMDAwWg== |
------END TIME----- |
- |
-FAIL |
------BEGIN VERIFY_RESULT----- |
-RkFJTA== |
------END VERIFY_RESULT----- |
- |
-serverAuth |
------BEGIN KEY_PURPOSE----- |
-c2VydmVyQXV0aA== |
------END KEY_PURPOSE----- |
- |
------ Certificate i=0 (CN=Target) ----- |
-ERROR: RSA modulus too small |
- actual: 512 |
- minimum: 1024 |
-ERROR: Unacceptable modulus length for RSA key |
-ERROR: VerifySignedData failed |
- |
- |
------BEGIN ERRORS----- |
-LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBSU0EgbW9kdWx1cyB0b28gc21hbGwKICBhY3R1YWw6IDUxMgogIG1pbmltdW06IDEwMjQKRVJST1I6IFVuYWNjZXB0YWJsZSBtb2R1bHVzIGxlbmd0aCBmb3IgUlNBIGtleQpFUlJPUjogVmVyaWZ5U2lnbmVkRGF0YSBmYWlsZWQKCg== |
------END ERRORS----- |