diff options
Diffstat (limited to 'chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py')
-rwxr-xr-x | chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py | 24 |
1 files changed, 14 insertions, 10 deletions
diff --git a/chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py b/chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py index fae1831ca5e..da5d0718e57 100755 --- a/chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py +++ b/chromium/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py @@ -3,30 +3,34 @@ # Use of this source code is governed by a BSD-style license that can be # found in the LICENSE file. -"""Certificate chain with 1 intermediary, where the target is expired (violates +"""Certificate chain with 1 intermediate, where the target is expired (violates validity.notBefore). Verification is expected to fail.""" import common -# Self-signed root certificate (part of trust store). +# Self-signed root certificate (used as trust anchor). root = common.create_self_signed_root_certificate('Root') root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC) -# Intermediary certificate. -intermediary = common.create_intermediary_certificate('Intermediary', root) -intermediary.set_validity_range(common.JANUARY_1_2015_UTC, +# Intermediate certificate. +intermediate = common.create_intermediate_certificate('Intermediate', root) +intermediate.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC) # Target certificate. -target = common.create_end_entity_certificate('Target', intermediary) +target = common.create_end_entity_certificate('Target', intermediate) target.set_validity_range(common.MARCH_2_2015_UTC, common.JANUARY_1_2016_UTC) -chain = [target, intermediary] -trusted = [root] +chain = [target, intermediate] +trusted = common.TrustAnchor(root, constrained=False) -# Both the root and intermediary are valid at this time, however the +# Both the root and intermediate are valid at this time, however the # target is not. time = common.MARCH_1_2015_UTC verify_result = False +errors = """[Context] Processing Certificate + index: 1 + [Error] Time is before notBefore +""" -common.write_test_file(__doc__, chain, trusted, time, verify_result) +common.write_test_file(__doc__, chain, trusted, time, verify_result, errors) |