summaryrefslogtreecommitdiff
path: root/chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
diff options
context:
space:
mode:
Diffstat (limited to 'chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py')
-rwxr-xr-xchromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py26
1 files changed, 17 insertions, 9 deletions
diff --git a/chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py b/chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
index 75144a0d8ea..c59751535fe 100755
--- a/chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
+++ b/chromium/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
@@ -3,25 +3,33 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The target
+"""Certificate chain with 1 intermediate and a trusted root. The target
certificate is signed using a weak RSA key (512-bit modulus), and so
verification is expected to fail."""
import common
-# Self-signed root certificate (part of trust store).
+# Self-signed root certificate (used as trust anchor).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with a very weak key size (512-bit RSA).
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.generate_rsa_key(512)
+# Intermediate with a very weak key size (512-bit RSA).
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_key(common.generate_rsa_key(512))
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
-trusted = [root]
+chain = [target, intermediate]
+trusted = common.TrustAnchor(root, constrained=False)
time = common.DEFAULT_TIME
verify_result = False
+errors = """[Context] Processing Certificate
+ index: 1
+ [Error] RSA modulus too small
+ actual: 512
+ minimum: 1024
+ [Error] Unacceptable modulus length for RSA key
+ [Error] VerifySignedData failed
+"""
-common.write_test_file(__doc__, chain, trusted, time, verify_result)
+common.write_test_file(__doc__, chain, trusted, time, verify_result, errors)