| Index: net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/generate-chains.py
|
| diff --git a/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/generate-chains.py b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/generate-chains.py
|
| index b1219afa6240e940468c12615319a890b7c86236..c258acb2ad5f8a24b2ddf3855eb710942586e9cd 100755
|
| --- a/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/generate-chains.py
|
| +++ b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/generate-chains.py
|
| @@ -3,16 +3,15 @@
|
| # Use of this source code is governed by a BSD-style license that can be
|
| # found in the LICENSE file.
|
|
|
| -"""Certificate chain with 1 intermediate and a trusted root. The intermediate
|
| -lacks the basic constraints extension, and hence is expected to fail validation
|
| -(RFC 5280 requires v3 signing certificates have a BasicConstaints)."""
|
| +"""Certificate chain where the intermediate lacks a basic constraints
|
| +extension (yet is used to issue another certificate)."""
|
|
|
| import sys
|
| sys.path += ['..']
|
|
|
| import common
|
|
|
| -# Self-signed root certificate (used as trust anchor).
|
| +# Self-signed root certificate.
|
| root = common.create_self_signed_root_certificate('Root')
|
|
|
| # Intermediate that lacks basic constraints.
|
|
|