Index: net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/generate-chains.py |
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/generate-chains.py b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/generate-chains.py |
index a0f50e7804df9eaded4c1bda0ab5896ba403697c..c83ecf5de8bf12b24866bf6fec9f621978827b7f 100755 |
--- a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/generate-chains.py |
+++ b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/generate-chains.py |
@@ -3,20 +3,18 @@ |
# Use of this source code is governed by a BSD-style license that can be |
# found in the LICENSE file. |
-"""Certificate chain with 1 intermediate and a trusted root. The intermediate |
-has a basic constraints extension but does not mark it as critical. |
-Verification is expected to succeed, since although not critical, the |
-basicConstraints indicates CA=true as expected.""" |
+"""Certificate chain where the intermediate's Basic Constraints extension is |
+not marked as critical.""" |
import sys |
sys.path += ['..'] |
import common |
-# Self-signed root certificate (used as trust anchor). |
+# Self-signed root certificate. |
root = common.create_self_signed_root_certificate('Root') |
-# Intermediate with non-critical basic constarints. |
+# Intermediate with non-critical basic constraints. |
intermediate = common.create_intermediate_certificate('Intermediate', root) |
intermediate.get_extensions().set_property('basicConstraints', 'CA:true') |