Index: net/data/verify_certificate_chain_unittest/target-not-end-entity/generate-chains.py |
diff --git a/net/data/verify_certificate_chain_unittest/target-not-end-entity/generate-chains.py b/net/data/verify_certificate_chain_unittest/target-not-end-entity/generate-chains.py |
index d1c8b4937e3c8635d42b7970071a5b79d7e61eb5..2ddb84e60fa81e23d4f2ac4766bdc08c2fd7a84d 100755 |
--- a/net/data/verify_certificate_chain_unittest/target-not-end-entity/generate-chains.py |
+++ b/net/data/verify_certificate_chain_unittest/target-not-end-entity/generate-chains.py |
@@ -3,16 +3,15 @@ |
# Use of this source code is governed by a BSD-style license that can be |
# found in the LICENSE file. |
-"""Certificate chain with 1 intermediate, a trusted root, and a target |
-certificate that is also a CA. Verification is expected to succeed, as the test |
-code accepts any target certificate.""" |
+"""Certificate chain where the target certificate is a CA rather than an |
+end-entity certificate (based on the basic constraints extension).""" |
import sys |
sys.path += ['..'] |
import common |
-# Self-signed root certificate (used as trust anchor). |
+# Self-signed root certificate. |
root = common.create_self_signed_root_certificate('Root') |
# Intermediate certificate. |