| Index: net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py
|
| diff --git a/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py b/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py
|
| index 1a1460a9139b8aece4784d8b0e46eb6d3b9dc930..83a5af09fcae1e26dbd2ba49a49db69a88886d3d 100755
|
| --- a/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py
|
| +++ b/net/data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/generate-chains.py
|
| @@ -3,17 +3,15 @@
|
| # Use of this source code is governed by a BSD-style license that can be
|
| # found in the LICENSE file.
|
|
|
| -"""Certificate chain with 1 intermediate and a trusted root. The intermediate
|
| -restricts the EKU to clientAuth + any, and the target has serverAuth +
|
| -clientAuth. Verification is expected to succeed because intermediate will match
|
| -the "any"."""
|
| +"""Certificate chain where the intermediate restricts the extended key usage to
|
| +clientAuth + any, and the target sets serverAuth + clientAuth."""
|
|
|
| import sys
|
| sys.path += ['..']
|
|
|
| import common
|
|
|
| -# Self-signed root certificate (used as trust anchor).
|
| +# Self-signed root certificate.
|
| root = common.create_self_signed_root_certificate('Root')
|
|
|
| # Intermediate certificate.
|
|
|