Index: net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py |
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py b/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py |
index 1a1460a9139b8aece4784d8b0e46eb6d3b9dc930..83a5af09fcae1e26dbd2ba49a49db69a88886d3d 100755 |
--- a/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py |
+++ b/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py |
@@ -3,17 +3,15 @@ |
# Use of this source code is governed by a BSD-style license that can be |
# found in the LICENSE file. |
-"""Certificate chain with 1 intermediate and a trusted root. The intermediate |
-restricts the EKU to clientAuth + any, and the target has serverAuth + |
-clientAuth. Verification is expected to succeed because intermediate will match |
-the "any".""" |
+"""Certificate chain where the intermediate restricts the extended key usage to |
+clientAuth + any, and the target sets serverAuth + clientAuth.""" |
import sys |
sys.path += ['..'] |
import common |
-# Self-signed root certificate (used as trust anchor). |
+# Self-signed root certificate. |
root = common.create_self_signed_root_certificate('Root') |
# Intermediate certificate. |