| OLD | NEW |
|---|
| 1 SUBJECT_NAME = req_dn | 1 SUBJECT_NAME = req_dn |
| 2 KEY_SIZE = 2048 | 2 KEY_SIZE = 2048 |
| 3 | 3 |
| 4 [req] | 4 [req] |
| 5 default_bits = ${ENV::KEY_SIZE} | 5 default_bits = ${ENV::KEY_SIZE} |
| 6 default_md = sha1 | 6 default_md = sha256 |
| 7 string_mask = utf8only | 7 string_mask = utf8only |
| 8 prompt = no | 8 prompt = no |
| 9 encrypt_key = no | 9 encrypt_key = no |
| 10 distinguished_name = ${ENV::SUBJECT_NAME} | 10 distinguished_name = ${ENV::SUBJECT_NAME} |
| 11 req_extensions = req_extensions | 11 req_extensions = req_extensions |
| 12 | 12 |
| 13 [req_dn] | 13 [req_dn] |
| 14 C = US | 14 C = US |
| 15 ST = California | 15 ST = California |
| 16 L = Mountain View | 16 L = Mountain View |
| 17 O = Test CA | 17 O = Test CA |
| 18 CN = 127.0.0.1 | 18 CN = 127.0.0.1 |
| 19 | 19 |
| 20 [req_duplicate_cn_1] | 20 [req_duplicate_cn_1] |
| 21 O = Foo | 21 O = Foo |
| 22 CN = Duplicate | 22 CN = Duplicate |
| 23 | 23 |
| 24 [req_duplicate_cn_2] | 24 [req_duplicate_cn_2] |
| 25 O = Bar | 25 O = Bar |
| 26 CN = Duplicate | 26 CN = Duplicate |
| 27 | 27 |
| 28 [req_punycode_dn] |
| 29 CN = xn--wgv71a119e.com |
| 30 |
| 28 [req_extensions] | 31 [req_extensions] |
| 29 subjectAltName = IP:127.0.0.1 | 32 subjectAltName = IP:127.0.0.1 |
| 30 | 33 |
| 34 [req_punycode] |
| 35 basicConstraints = critical, CA:true |
| 36 subjectAltName = @punycode_san |
| 37 |
| 31 [req_san_sanity] | 38 [req_san_sanity] |
| 32 basicConstraints = critical, CA:true | 39 basicConstraints = critical, CA:true |
| 33 subjectAltName = @san_sanity | 40 subjectAltName = @san_sanity |
| 34 | 41 |
| 35 [san_sanity] | 42 [san_sanity] |
| 36 IP.1 = 127.0.0.2 | 43 IP.1 = 127.0.0.2 |
| 37 IP.2 = FE80::1 | 44 IP.2 = FE80::1 |
| 38 DNS = test.example | 45 DNS = test.example |
| 39 email = test@test.example | 46 email = test@test.example |
| 40 otherName = 1.2.3.4;UTF8:ignore me | 47 otherName = 1.2.3.4;UTF8:ignore me |
| 41 dirName = more_san_sanity | 48 dirName = more_san_sanity |
| 42 | 49 |
| 43 [req_spdy_pooling] | 50 [req_spdy_pooling] |
| 44 subjectAltName = @spdy_pooling | 51 subjectAltName = @spdy_pooling |
| 45 | 52 |
| 46 [more_san_sanity] | 53 [more_san_sanity] |
| 47 CN=127.0.0.3 | 54 CN=127.0.0.3 |
| 48 | 55 |
| 49 [spdy_pooling] | 56 [spdy_pooling] |
| 50 DNS.1 = www.example.org | 57 DNS.1 = www.example.org |
| 51 DNS.2 = mail.example.org | 58 DNS.2 = mail.example.org |
| 52 DNS.3 = mail.example.com | 59 DNS.3 = mail.example.com |
| 60 |
| 61 [punycode_san] |
| 62 DNS.1 = xn--wgv71a119e.com |
| 63 DNS.2 = *.xn--wgv71a119e.com |
| 64 DNS.3 = blahblahblahblah.com |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 515583004:
Update test cert generation scripts to use SHA-256 by default (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@test_cert_scripts