net/data/verify_certificate_chain_unittest/root-bad-eku/generate-chains.py - Issue 2931053002: Add extra path validation tests for EKU processing

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: net/data/verify_certificate_chain_unittest/root-bad-eku/generate-chains.py

Issue 2931053002: Add extra path validation tests for EKU processing (Closed)

Patch Set: Remove the comment changes from this CL Created 3 years, 5 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

OLD	NEW
	(Empty)
1 #!/usr/bin/python

2 # Copyright (c) 2017 The Chromium Authors. All rights reserved.

3 # Use of this source code is governed by a BSD-style license that can be

4 # found in the LICENSE file.

5

6 """Certificate chain with 1 intermediate and a trust anchor. The trust anchor

7 has an EKU that restricts it to clientAuth. Verification is expected to fail as

8 the end-entity is verified for serverAuth, and the trust anchor enforces

9 constraints."""

10

11 import sys

12 sys.path += ['..']

13

14 import common

15

16 # Self-signed root certificate (used as trust anchor) with non-CA basic

17 # constraints.

18 root = common.create_self_signed_root_certificate('Root')

19 root.get_extensions().set_property('extendedKeyUsage', 'clientAuth')

20

21 # Intermediate certificate.

22 intermediate = common.create_intermediate_certificate('Intermediate', root)

23

24 # Target certificate.

25 target = common.create_end_entity_certificate('Target', intermediate)

26

27 chain = [target, intermediate, root]

28 common.write_chain(__doc__, chain, 'chain.pem')

OLD	NEW