Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(32)

Side by Side Diff: net/data/ssl/scripts/aia-test.cnf

Issue 515583004: Update test cert generation scripts to use SHA-256 by default (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@test_cert_scripts
Patch Set: Rebased Created 6 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/data/ssl/certificates/README ('k') | net/data/ssl/scripts/ca.cnf » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 CA_DIR=out 1 CA_DIR=out
2 CA_NAME=aia-test-root 2 CA_NAME=aia-test-root
3 AIA_URL=http://aia-test.invalid 3 AIA_URL=http://aia-test.invalid
4 4
5 [ca] 5 [ca]
6 default_ca = CA_root 6 default_ca = CA_root
7 preserve = yes 7 preserve = yes
8 8
9 [CA_root] 9 [CA_root]
10 dir = ${ENV::CA_DIR} 10 dir = ${ENV::CA_DIR}
11 key_size = 2048 11 key_size = 2048
12 algo = sha1 12 algo = sha256
13 database = $dir/${ENV::CA_NAME}-index.txt 13 database = $dir/${ENV::CA_NAME}-index.txt
14 new_certs_dir = $dir 14 new_certs_dir = $dir
15 serial = $dir/${ENV::CA_NAME}-serial 15 serial = $dir/${ENV::CA_NAME}-serial
16 certificate = $dir/${ENV::CA_NAME}.pem 16 certificate = $dir/${ENV::CA_NAME}.pem
17 private_key = $dir/${ENV::CA_NAME}.key 17 private_key = $dir/${ENV::CA_NAME}.key
18 RANDFILE = $dir/.rand 18 RANDFILE = $dir/.rand
19 default_days = 3650 19 default_days = 3650
20 default_crl_days = 30 20 default_crl_days = 30
21 default_md = sha1 21 default_md = sha256
22 policy = policy_anything 22 policy = policy_anything
23 unique_subject = no 23 unique_subject = no
24 copy_extensions = copy 24 copy_extensions = copy
25 25
26 [user_cert] 26 [user_cert]
27 basicConstraints = critical, CA:false 27 basicConstraints = critical, CA:false
28 extendedKeyUsage = serverAuth, clientAuth 28 extendedKeyUsage = serverAuth, clientAuth
29 authorityInfoAccess = caIssuers;URI:${ENV::AIA_URL} 29 authorityInfoAccess = caIssuers;URI:${ENV::AIA_URL}
30 30
31 [ca_cert] 31 [ca_cert]
32 basicConstraints = critical, CA:true 32 basicConstraints = critical, CA:true
33 keyUsage = critical, keyCertSign, cRLSign 33 keyUsage = critical, keyCertSign, cRLSign
34 34
35 [policy_anything] 35 [policy_anything]
36 # Default signing policy 36 # Default signing policy
37 countryName = optional 37 countryName = optional
38 stateOrProvinceName = optional 38 stateOrProvinceName = optional
39 localityName = optional 39 localityName = optional
40 organizationName = optional 40 organizationName = optional
41 organizationalUnitName = optional 41 organizationalUnitName = optional
42 commonName = optional 42 commonName = optional
43 emailAddress = optional 43 emailAddress = optional
44 44
45 [req] 45 [req]
46 default_bits = 2048 46 default_bits = 2048
47 default_md = sha1 47 default_md = sha256
48 string_mask = utf8only 48 string_mask = utf8only
49 prompt = no 49 prompt = no
50 encrypt_key = no 50 encrypt_key = no
51 distinguished_name = req_env_dn 51 distinguished_name = req_env_dn
52 52
53 [req_env_dn] 53 [req_env_dn]
54 CN = ${ENV::CA_COMMON_NAME} 54 CN = ${ENV::CA_COMMON_NAME}
55 55
OLDNEW
« no previous file with comments | « net/data/ssl/certificates/README ('k') | net/data/ssl/scripts/ca.cnf » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698