net/data/ssl/certificates/expired_cert.pem - Issue 5535006: Add unittests for net::TestRootCerts and regenerate test certificates

Side by Side Diff: net/data/ssl/certificates/expired_cert.pem

Issue 5535006: Add unittests for net::TestRootCerts and regenerate test certificates (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: Address wtc feedback Created 10 years ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

OLD	NEW
	1 Certificate:

	2 Data:

	3 Version: 3 (0x2)

	4 Serial Number: 1 (0x1)

	5 Signature Algorithm: sha1WithRSAEncryption

	6 Issuer: C=US, ST=California, L=Mountain View, O=Test CA, CN=Test Root CA

	7 Validity

	8 Not Before: Jan 1 00:00:00 2006 GMT

	9 Not After : Jan 1 00:00:00 2007 GMT

	10 Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1

	11 Subject Public Key Info:

	12 Public Key Algorithm: rsaEncryption

	13 RSA Public Key: (1024 bit)

	14 Modulus (1024 bit):

	15 00:d3:b1:98:19:4f:40:2b:f0:73:a0:e1:9d:af:32:

	16 36:cb:62:aa:d9:9e:81:a1:60:1a:a8:2f:1a:6f:f3:

	17 0e:5e:31:50:a6:a3:f3:15:b1:71:8e:e7:e6:9b:ed:

	18 7f:b5:ff:2f:3e:b3:50:83:5b:70:a6:70:80:32:d5:

	19 26:6c:67:bb:40:41:0d:b7:63:f0:60:b8:63:d0:ad:

	20 10:be:4b:ad:b2:57:9f:c1:fc:42:2e:56:46:71:b8:

	21 78:00:28:9e:ec:80:2d:8d:a5:4e:c6:3c:e0:53:9a:

	22 a3:c8:4b:3c:58:0f:89:4c:64:93:c0:db:49:a4:85:

	23 1e:50:31:b6:4e:66:c7:a1:fb

	24 Exponent: 65537 (0x10001)

	25 X509v3 extensions:

	26 X509v3 Basic Constraints: critical

	27 CA:FALSE

	28 X509v3 Subject Key Identifier:

	29 32:7B:D6:18:4F:26:9C:71:90:B5:37:FF:E4:33:5E:C8:C5:02:34:90

	30 X509v3 Authority Key Identifier:

	31 keyid:CB:0C:83:29:5E:38:A2:D6:9F:F7:76:FB:B3:B6:48:84:4E:F8:4D:F 3

	32

	33 X509v3 Extended Key Usage:

	34 TLS Web Server Authentication, TLS Web Client Authentication
	wtc 2010/12/08 19:58:22 We should not need TLS Web Client Authentication, We should not need TLS Web Client Authentication, but I see that many real server certs have TLS Web Client Authentication, too. Do you know why? Ryan Sleevi 2010/12/09 05:49:55 I'm not certain. I've assumed it's for protocols t Show quoted text On 2010/12/08 19:58:22, wtc wrote: > We should not need TLS Web Client Authentication, but > I see that many real server certs have TLS Web Client > Authentication, too. Do you know why? I'm not certain. I've assumed it's for protocols that require server-to-server communication, in particular so that a certificate can be mapped to a peer, whether the peer is acting as the TLS server or as the TLS client. I agree that we should not need it, but added it to match real server certs (which all of the ones I looked at included it, save for encrypted.google.com, which has no EKU and is thus valid for everything)
	35 X509v3 Subject Alternative Name:

	36 IP Address:127.0.0.1

	37 Signature Algorithm: sha1WithRSAEncryption

	38 66:6b:d6:b8:e5:77:c8:e5:af:6d:5f:f9:97:cd:ae:72:f0:68:

	39 23:28:b2:58:d2:6d:b0:37:5f:ec:36:d5:77:af:a2:80:02:27:

	40 02:43:84:e7:de:54:7a:40:43:06:fd:93:78:59:16:d4:6f:e5:

	41 a0:a5:6d:98:26:1b:6d:bf:67:92:67:e6:d1:d2:e7:e0:b2:5d:

	42 ee:83:00:ab:1a:15:bd:25:a7:be:36:26:06:34:3b:1c:5d:be:

	43 21:31:45:51:4c:0e:83:c2:04:e6:fd:2e:a9:94:f8:8a:4e:ff:

	44 af:89:ac:47:4c:85:79:19:f0:68:32:4c:aa:c0:6a:6c:9f:dc:

	45 4d:50

1 -----BEGIN CERTIFICATE-----	46 -----BEGIN CERTIFICATE-----

2 MIIEZDCCAkygAwIBAgIBAzANBgkqhkiG9w0BAQUFADBgMRAwDgYDVQQDEwdUZXN0	47 MIICujCCAiOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzET

3 IENBMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMN	48 MBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzEQMA4G

4 TW91bnRhaW4gVmlldzESMBAGA1UEChMJQ2VydCBUZXN0MB4XDTA2MDEwMTAwMDAw	49 A1UECgwHVGVzdCBDQTEVMBMGA1UEAwwMVGVzdCBSb290IENBMB4XDTA2MDEwMTAw

5 MFoXDTA3MDEwMTAwMDAwMFowSjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm	50 MDAwMFoXDTA3MDEwMTAwMDAwMFowYDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh

6 b3JuaWExEjAQBgNVBAoTCUNlcnQgVGVzdDESMBAGA1UEAxMJMTI3LjAuMC4xMIGf	51 bGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEDAOBgNVBAoMB1Rlc3Qg

7 MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuUjUPzXBw61Xsh1RGSyJowrqC+TYv	52 Q0ExEjAQBgNVBAMMCTEyNy4wLjAuMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC

8 pf44P2c5sF/Y/KX0LoJEA72in+2d7N8sf3IsJvy6X1uPnVdX7wKzgtHI6FFjOcbR	53 gYEA07GYGU9AK/BzoOGdrzI2y2Kq2Z6BoWAaqC8ab/MOXjFQpqPzFbFxjufmm+1/

9 zs9MiyEJkeFKADI+ZMV0httNOy93ajESsjZMwgoHMKOv5ikNCdwE/nefSfu6Zuap	54 tf8vPrNQg1twpnCAMtUmbGe7QEENt2PwYLhj0K0QvkutslefwfxCLlZGcbh4ACie

10 CsadArkHe3d5dwIDAQABo4HCMIG/MAkGA1UdEwQCMAAwHQYDVR0OBBYEFNr8t46H	55 7IAtjaVOxjzgU5qjyEs8WA+JTGSTwNtJpIUeUDG2TmbHofsCAwEAAaOBgDB+MAwG

11 i0oOuzYzmjE24g25B9fKMIGSBgNVHSMEgYowgYeAFF3Of5nj1BlBMU/Gz7El9Vqv	56 A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDJ71hhPJpxxkLU3/+QzXsjFAjSQMB8GA1Ud

12 45cxoWSkYjBgMRAwDgYDVQQDEwdUZXN0IENBMQswCQYDVQQGEwJVUzETMBEGA1UE	57 IwQYMBaAFMsMgyleOKLWn/d2+7O2SIRO+E3zMB0GA1UdJQQWMBQGCCsGAQUFBwMB

13 CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzESMBAGA1UEChMJ	58 BggrBgEFBQcDAjAPBgNVHREECDAGhwR/AAABMA0GCSqGSIb3DQEBBQUAA4GBAGZr

14 Q2VydCBUZXN0ggkA1FGT1D/e2U4wDQYJKoZIhvcNAQEFBQADggIBABdhpWwsDDAn	59 1rjld8jlr21f+ZfNrnLwaCMosljSbbA3X+w21XevooACJwJDhOfeVHpAQwb9k3hZ

15 eQKSk70sigbUk1eeGzE0AR2nNfs1N/Lx+EYBmWdOEZTi5ngwJoDavb6okaOWRYV5	60 FtRv5aClbZgmG22/Z5Jn5tHS5+CyXe6DAKsaFb0lp742JgY0OxxdviExRVFMDoPC

16 nIyIWGuJQfJ6OPZycNn9HMC2vL9er2gu6y8/6Sob4POThAdf519oHXFWR7S5fnPK	61 BOb9LqmU+IpO/6+JrEdMhXkZ8GgyTKrAamyf3E1Q
	wtc 2010/12/08 19:58:22 Do you know why the new cert is much shorter? Jus Do you know why the new cert is much shorter? Just curious. Ryan Sleevi 2010/12/09 05:49:55 Signature size. The new root is only 1024 bits, be Show quoted text On 2010/12/08 19:58:22, wtc wrote: > Do you know why the new cert is much shorter? Just curious. Signature size. The new root is only 1024 bits, because it no longer represents a sensitive key.
17 rvbspRHm/gycMA3Lvkzm2tHEQI4d+3pKAPtGtDUEnHEuo13tbaA3N8RJXStJXp4y

18 foqYEPJpG5SD3hDBTlVbg6J3li6B4r2LfCMgRXjrsNJSBamPrXX8n+K2SzCPLDli

19 9s387TMKLxGI7v5y5BcLcxuvBrAGS5rUw1q6+wNAvAkOSai6SfBmhUSn4OwQl0yX

20 y/1IOj2iCEwUJDMHQRp0K03xvN+nAaqFbnbBxVcL42lgMkLt2cL+X4tkBPzx2/Ys

21 4tuEk2/BftaHX0rby7OWCCh8q9QM+CmXzOipbwsjViTBpdR99RP7lrhojO3Tkx58

22 bxHBj9EpOjxCQyv1x3xZ5GpyAIgSduVusHwk7FJBNetg5Csa0GBEr2d6Lh+zPSm/

23 ZPgWqaVH6YoY+2HP2Mi2YxNYWJOR3ycNOxTuTp3M/glDBFYJaB5/PXTzFKrzo/vE

24 za7vs4El0Ei7YZYC0vxqpUbiS6l7Ul+TPfk6q/OAkYjaJ76uYlcKVmN060wK83z5

25 Vtoy6YuY/8hrMRl3jrMaiVsMSMg+nOsM

26 -----END CERTIFICATE-----	62 -----END CERTIFICATE-----

27 -----BEGIN RSA PRIVATE KEY-----	63 -----BEGIN RSA PRIVATE KEY-----

28 MIICWwIBAAKBgQDuUjUPzXBw61Xsh1RGSyJowrqC+TYvpf44P2c5sF/Y/KX0LoJE	64 MIICWwIBAAKBgQDTsZgZT0Ar8HOg4Z2vMjbLYqrZnoGhYBqoLxpv8w5eMVCmo/MV

29 A72in+2d7N8sf3IsJvy6X1uPnVdX7wKzgtHI6FFjOcbRzs9MiyEJkeFKADI+ZMV0	65 sXGO5+ab7X+1/y8+s1CDW3CmcIAy1SZsZ7tAQQ23Y/BguGPQrRC+S62yV5/B/EIu

30 httNOy93ajESsjZMwgoHMKOv5ikNCdwE/nefSfu6ZuapCsadArkHe3d5dwIDAQAB	66 VkZxuHgAKJ7sgC2NpU7GPOBTmqPISzxYD4lMZJPA20mkhR5QMbZOZseh+wIDAQAB

31 AoGARF1wu0fDqaDY1TE9C60iActalZfH44NKmfgWNIZT+HsBYDq3Q6uPCse18kew	67 AoGAQlI9SJCfliR61UhZ0m105TtAM3WJPzmQoGhBbBlFwxTII6zxlzZEUXUttmQt

32 /aLRrbjBZvVT3q7UD3WQ4M32P44rEAAhdYGhMndF53xrtX5SQ7LPb381mlPoJ2AE	68 wqLz9jzPWJfpLvvH7iUBKK1G6ESXTzquNUYq6Yhn48EeLUygjple/T2EYwHxrVKg

33 Wv9R+0X45aRtiSC/Y7E9ebN5p4RY9NjRUjcaI67d1NgNAwECQQD6k83u6R73tsJt	69 lxt7TpFrkH/lJyRSRTSJjCnBBMfFwM8NA7rJkONsUocyKqECQQDsR6DAAmiw5PDe

34 k2OCTnUxvQi9Oo5GwDfiubHOQx3tG3ZDIjsyg1GCJa/PVRiP6PXkgIoAWmiyGFIR	70 PRiPww+Dup9Tps1DpcVcbzXw66bGRnM8WlTu++IQPzn09mGCBjFVEX0TjdGl9OLx

35 +gIO86kPAkEA83qA4L4HxLQLapDvBDNgiz9eHA/FJvsk5yH0jupR+CDLRqM6Dfzj	71 GFvfGPjNAkEA5Vyoi4YIiF22Ul/9Mwo5wmqOaTK2WZO/4XynpstW7n0ySk5XIKL4

36 iLeztyJV3n96lMDIc4lEzplysDw/TD6ZGQJABzYFsSBoUbyir8CUFoXnfXzxKXDr	72 x17NMTuhbXqLtvO4LLRboIE1O3cFlm+l5wJAKQvUcCa6+yf6dBEXCDpxooe0D/sl

37 80FI2m95nHP2AoLNznTHu1ZoHBS1kIPkZw/PM7o3Pndbl/R3OCk3sfJ1JQJABSB7	73 I4BTxdgH/d9iLIWmlTB4GsAlKH9jWRvIGqdqwIV2PgRgDD17gzihFSOobQJAHR/w

38 PkBCIZ4471GF9uyuB8CZ1rVuTVfUexl38Np2R2dJYH9nZYwBrotPuXd7n2fHyQIW	74 /xacCsTrm/Y4brzDrN5fCxi3cxSB7x4nI9T6Svp24lykT66iLJ7rK29JBl/jUe4M

39 NniZflA03gkmvBBFYQJADftQ5+jabFxXkqwZsrsvtG+Ji53BZrLrczFxgPyGVfUF	75 2xBj+jOuEMkCWqH+zQJAfY8tFgk+lTz4uXklpyeU1ZR9VZup4g3eJf21bp5nBRfk

40 A1pyQE3M6SykYjp+S3Zg6eS+yKE06guecEVhTQtwBA==	76 yROePkvzYNRyOIceRKFMXMUWQ2+CPauBCiwZcOpISQ==

41 -----END RSA PRIVATE KEY-----	77 -----END RSA PRIVATE KEY-----

	78

OLD	NEW

« net/data/ssl/certificates/README ('K') | « net/data/ssl/certificates/README ('k') | net/data/ssl/certificates/ok_cert.pem » ('j') | net/data/ssl/certificates/openssl_cert.cnf » ('J')