зеркало из https://github.com/mozilla/gecko-dev.git
bug 1257969 - update test_pinning_dynamic.js test certificates to not use subject common name for name information r=jcj
MozReview-Commit-ID: 1NpjJO9r8ma --HG-- rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-badca.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-badca.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-pinningroot.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-pinningroot.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-badca.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-badca.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-pinningroot.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-pinningroot.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-badca.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-badca.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-pinningroot.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-pinningroot.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-badca.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-badca.pem.certspec rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-pinningroot.pem rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-pinningroot.pem.certspec extra : rebase_source : 9fa95f73f616da87f19bf8c5f7749b02b52b9696
This commit is contained in:
Родитель
e02ec1d888
Коммит
08f83f4f99
|
@ -94,17 +94,15 @@ function checkStateRead(aSubject, aTopic, aData) {
|
|||
|
||||
// the written entry is for a.pinning2.example.com without subdomains
|
||||
// and b.pinning2.example.com with subdomains
|
||||
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
|
||||
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
|
||||
checkDefaultSiteHPKPStatus();
|
||||
|
||||
|
@ -112,16 +110,14 @@ function checkStateRead(aSubject, aTopic, aData) {
|
|||
// add includeSubdomains to a.pinning2.example.com
|
||||
gSSService.setKeyPins("a.pinning2.example.com", true, 1000, 2,
|
||||
[NON_ISSUED_KEY_HASH, PINNING_ROOT_KEY_HASH]);
|
||||
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
|
||||
ok(gSSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HPKP,
|
||||
"a.pinning2.example.com", 0),
|
||||
|
@ -135,17 +131,15 @@ function checkStateRead(aSubject, aTopic, aData) {
|
|||
// Now setpins without subdomains
|
||||
gSSService.setKeyPins("a.pinning2.example.com", false, 1000, 2,
|
||||
[NON_ISSUED_KEY_HASH, PINNING_ROOT_KEY_HASH]);
|
||||
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
|
||||
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
|
||||
checkDefaultSiteHPKPStatus();
|
||||
|
||||
|
@ -154,17 +148,15 @@ function checkStateRead(aSubject, aTopic, aData) {
|
|||
gSSService.setKeyPins("a.pinning2.example.com", true, 1000, 1,
|
||||
["not a hash"]);
|
||||
}, /NS_ERROR_ILLEGAL_VALUE/, "Attempting to set an invalid pin should fail");
|
||||
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
|
||||
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
|
||||
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
|
||||
checkDefaultSiteHPKPStatus();
|
||||
|
||||
|
@ -190,17 +182,15 @@ function checkStateRead(aSubject, aTopic, aData) {
|
|||
}
|
||||
|
||||
function checkExpiredState() {
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
|
||||
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
|
||||
|
||||
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
|
||||
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
|
||||
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
|
||||
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
|
||||
|
||||
do_test_finished();
|
||||
}
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC3TCCAcegAwIBAgIUZ43d9XFCi63R7powaxJ2yo+CZMkwCwYJKoZIhvcNAQEL
|
||||
MIIC3TCCAcegAwIBAgIUV5m012rtg+d5cCp0i5kH8EXtjkowCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMBoxGDAWBgNVBAMMD3d3dy5leGFtcGxlLmNvbTCCASIwDQYJKoZIhvcN
|
||||
MDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJKoZIhvcN
|
||||
AQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxKzSKxy9Rv
|
||||
plraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEGzwi+moYn
|
||||
YLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHXKVp/ccW+
|
||||
|
@ -9,10 +9,10 @@ ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBpmIpD/uSM
|
|||
5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6kKqLx2Fn
|
||||
JCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMlMCMwIQYD
|
||||
VR0RBBowGIIWYS5waW5uaW5nMi5leGFtcGxlLmNvbTALBgkqhkiG9w0BAQsDggEB
|
||||
AKaVczZawvQaq94aZc/DZ4sOOzfia640kRDwz/UBtHDxOLzxujw7JRNohxeP9/ty
|
||||
U1s1BK/mr5ounqfYrI60C6AHfickavs5Xw2kA9AZKP9lKCI2jPjAwaGGmwvx0KaR
|
||||
ByreIRNEDrZ0UXr7hkv+Z0/wEOvYaJwUoQSrPLSTsNpgFvvJhAhOeFrCZ7usjs8H
|
||||
+oe7tVUnVlG0JsxXRGUdj3/sRxCRasUk37MemBveGhFCmdJfYkxIo31AC+Op1mfr
|
||||
VfGRnHrLYsThhmhPWA03bjiF3o+j85vHlIwkEtsMimhPlwIeR/t2RIc1Oz6NC0co
|
||||
ydMYvmElijePAfFrs1NZlOk=
|
||||
ALq/odHt8EMiK06PiYFsk3JnNnu6VAWW5Wi+tYu3GNXs0aNTHLMTcZWGsO2j0lXQ
|
||||
knbq5dpRE8RNgvwqHp/LRuAXK6m7rGR+N3mNliss3FB+QSybEJQzlBIJJiK+XIpJ
|
||||
+ydrK2pAlA07KEA6FLUoawTSCZ3OaDomTteUUVIQhWMtosLYIXK2Id+ob1mLLOTO
|
||||
eegtQSPRvXjbJ4/p6BwTzyviIuRpgxv2ZSi1oguFuots/mii+zVqRm3c5CS8JxtB
|
||||
q6WD8akfSpShw/MnUEKjmGHoSTr35k8OlLAztcdNU11OUuTkIbcOAE8uF1ivWYDX
|
||||
Cu8XygUzKjAFXwLTK031RFY=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,5 +1,5 @@
|
|||
issuer:badca
|
||||
subject:www.example.com
|
||||
subject:test end-entity
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:a.pinning2.example.com
|
|
@ -1,7 +1,7 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC4zCCAc2gAwIBAgIUdz06U/oEYSq4lG11JvhyeQOI0ZowCwYJKoZIhvcNAQEL
|
||||
MIIC4zCCAc2gAwIBAgIUObXzySX0Vw67Zr+kHrhgN0q65C0wCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3d3dy5leGFtcGxlLmNvbTCCASIwDQYJ
|
||||
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJ
|
||||
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxK
|
||||
zSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEG
|
||||
zwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHX
|
||||
|
@ -9,10 +9,10 @@ KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp
|
|||
mIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6
|
||||
kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMl
|
||||
MCMwIQYDVR0RBBowGIIWYS5waW5uaW5nMi5leGFtcGxlLmNvbTALBgkqhkiG9w0B
|
||||
AQsDggEBAG0RIjdGexRB5KC2MWIRtcfQwzmUP8QAZVTS7sdByAi6VMaQ3G2XydwT
|
||||
rSL8Rgwr+zbaN1AhGo7v2IDQEi6rKu6CkORdCRISgJEqXHntBpEUAVdp76M0YA4l
|
||||
bKNolLb1SZgbfMDiGrP0Dh6HFKxAlLxNhKg0CSdYRECeHYVFafljwQZKJCSod3ww
|
||||
VWNQoWqPSDP5AWvKTonQc8KpSf1XLaRXEHKO+44qi3et4DhuQsOiWC5FZPgnELaB
|
||||
v/KzOsnh5vFRK2goBr7vnGRAFV3zWo18jMv36gDIOBoJBOyHaZOMDtc+9A1wN6gz
|
||||
kUSjhxaaSs6+yoPaLXp5W5pzh31TtOs=
|
||||
AQsDggEBAKn7kQfBTYeF/fVbJYME0/T2llK9xz6+c9D1q3N/Jov/5ROQ2b5lLkK/
|
||||
rtwQ30ySJcY5u18rWm/LrXULfxB3pU45yhGYCF0Fi+V4kjh+bqBLTcqorssQo62l
|
||||
MuKw7HtIpJdfn5ljquOksIgAjlKc0xWz/pbs1swouBnURsZq+ljfcwoux/p9FDlW
|
||||
vT+zkUmqswnwXWrjzfThgTD0qAtZhWd1VhP9/BNEGD53z6IQ6ouep4/lenu2f/VU
|
||||
NQhsLoBNTtdcvPpj15auAD99nUbJSA2qSFa+asK8S8Qzz7kCCA5gEmpaBqSk43pk
|
||||
W54q8Zo/jSyuF75Jliak+efqVI8huzg=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,4 +1,4 @@
|
|||
issuer:pinningroot
|
||||
subject:www.example.com
|
||||
subject:test end-entity
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:a.pinning2.example.com
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC3TCCAcegAwIBAgIUcZiU3qmEWdgKgkZit70cBo440LwwCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJKoZIhvcN
|
||||
AQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxKzSKxy9Rv
|
||||
plraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEGzwi+moYn
|
||||
YLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHXKVp/ccW+
|
||||
ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBpmIpD/uSM
|
||||
5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6kKqLx2Fn
|
||||
JCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMlMCMwIQYD
|
||||
VR0RBBowGIIWYi5waW5uaW5nMi5leGFtcGxlLmNvbTALBgkqhkiG9w0BAQsDggEB
|
||||
AHwPZUIuba9el4HrZZGc/vcfneJnZtQrjAng9OgdIFuGCCe1S4iKespW9vH/jgWp
|
||||
NORQAi36VL25v4a5ZqdE2YqimxI3mT3juBrmozc1reYzR1DsKLlV1Rjuz0aFWjIJ
|
||||
B5GL7INmkYzif7tCQ9deMDQxJbb/n3C7lyuC66O1JYNnXax7pxklhZR12pzqbTzi
|
||||
yobmAocE99yqZyGr8sMveXoUnjSN/FzdFl+Gfx8eJ7Fq6C9fXPUtRgVsiniA/jYo
|
||||
6fNERK028xM53N6cAaH0Hj3mqaAWNAnw8pMu20O4IKbt0l8sAW46WjF4PWP0DPVi
|
||||
+YOL429Fm3QccLRV3uZwARY=
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,5 @@
|
|||
issuer:badca
|
||||
subject:test end-entity
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:b.pinning2.example.com
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC4zCCAc2gAwIBAgIUF8eAw51IuldEuREGUy6/Xe27gBswCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJ
|
||||
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxK
|
||||
zSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEG
|
||||
zwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHX
|
||||
KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp
|
||||
mIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6
|
||||
kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMl
|
||||
MCMwIQYDVR0RBBowGIIWYi5waW5uaW5nMi5leGFtcGxlLmNvbTALBgkqhkiG9w0B
|
||||
AQsDggEBALZmpMSC6MFzPfqQvr6/KtCX81Nhyeg+voDpz9hjJqH6FC76PIllPomb
|
||||
f+Z7in5Mk4DaPot8061edSpwM8CHarfty8VlKwBU/BjZkJ2n4HebkqNzVwM/MG1s
|
||||
My31zA6SPTMc9i+nZQzo9gzxpAKYSJPFtR0RhyXKPicy1seYk5URoU0N5w9qA42A
|
||||
IUN+1o7Hz5xKhps524wELiku4ws1Ws/k2MB4PLotCKEdOnnqdxgaIKUjtAwi/pBW
|
||||
Khzd7Nizq9wl2aT67eioTvewfsw+9kuH8G1ltzhoK0wcAAplM+TVVpS6hsvERV51
|
||||
Hny2R5Us6i/sgc7RtcoMAWrZYs0L33w=
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,4 @@
|
|||
issuer:pinningroot
|
||||
subject:test end-entity
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:b.pinning2.example.com
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICvTCCAaegAwIBAgIUJ47TyJhbI7bV9uYc8QLzVz9XpHEwCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMCExHzAdBgNVBAMMFmEucGlubmluZzIuZXhhbXBsZS5jb20wggEiMA0G
|
||||
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdcZSZgmfdwgqZ5HxuHbDf1zlOLBs
|
||||
Ss0iscvUb6Za2irdQcjCSYrEo7PB9hSH9BtpiUG9gKUcPBICRMWEpMRIMwXlE4wB
|
||||
Bs8IvpqGJ2C65qLo828jxdmDE7nfrzeDRdrOUdTW3NKmyzzHBuvNMHDsmMzkCqWR
|
||||
1ylaf3HFvmZpHSst/shJRFkLxaPqSf2TsddTQF8Xc3aZlYZmJUeX7UJpCIgIEUIg
|
||||
aZiKQ/7kjOaHgd0itqac0oN1Ex+TKxKM4ob6fSUcBirSfvAW8YfN1U6DKzW4kw90
|
||||
upCqi8dhZyQqsf1tYhQNGMTAuMaPw3SEVzJK196G5lUvHR4ZHXEhaNO7AgMBAAEw
|
||||
CwYJKoZIhvcNAQELA4IBAQA7ATnoXQlBBpIw4VDWmFHmqMGSDlQezLgGfyaOgtVw
|
||||
X+xtAGTeCGL2j/yF12Dib2o7vvbTC+w0cW+gX39v2M85DyEwwLlU8/1uKikPoxeK
|
||||
LKsUCmmtLj1jG74FaIMp3xDUX7N7mNoN4VV/yAGDCpaffys5JJkHLdJV8iPFZu+m
|
||||
usWluNsCGi+Ujthvq1mlSY3PvDdCmpN82Z45eF6bMB4GSXUKtvYQuT9JtAycgORS
|
||||
22DO1Gi1UyElvn9V2g63CMrS1yQndHnKqE5Zx570n7Pa7ZevDrzfhlhaBD6kfA2m
|
||||
Q83BvuNrA4LryZW2O88VKAevxqpzAooPeoTa+9ys37Gj
|
||||
-----END CERTIFICATE-----
|
|
@ -1,4 +0,0 @@
|
|||
issuer:badca
|
||||
subject:a.pinning2.example.com
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICwzCCAa2gAwIBAgIUQcgBodTQiA1Lr6bJYwLmdyVMdDIwCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMCExHzAdBgNVBAMMFmEucGlubmluZzIuZXhhbXBsZS5jb20w
|
||||
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdcZSZgmfdwgqZ5HxuHbD
|
||||
f1zlOLBsSs0iscvUb6Za2irdQcjCSYrEo7PB9hSH9BtpiUG9gKUcPBICRMWEpMRI
|
||||
MwXlE4wBBs8IvpqGJ2C65qLo828jxdmDE7nfrzeDRdrOUdTW3NKmyzzHBuvNMHDs
|
||||
mMzkCqWR1ylaf3HFvmZpHSst/shJRFkLxaPqSf2TsddTQF8Xc3aZlYZmJUeX7UJp
|
||||
CIgIEUIgaZiKQ/7kjOaHgd0itqac0oN1Ex+TKxKM4ob6fSUcBirSfvAW8YfN1U6D
|
||||
KzW4kw90upCqi8dhZyQqsf1tYhQNGMTAuMaPw3SEVzJK196G5lUvHR4ZHXEhaNO7
|
||||
AgMBAAEwCwYJKoZIhvcNAQELA4IBAQBLHr8ohj4jqMtT0B9ErZ/9p4uV1MD/dllB
|
||||
sAyPhaRw1lQbPqpd5xkj8OgPVlWbDQL/4ldwwKG4nAsFTTJgc8DjVSfUK0zlDrd9
|
||||
YuWXUsQKwKeMrXJza7ry4qWmRwIz/Te86Y7Xv8Ce4vkKxeLGSV5/srF8fqt1ow8+
|
||||
v72bkmzOqAI74Q444e5CEhg5p5Me/xqPThek15aYtIAZ4wvbogtQTU0VCmU2T218
|
||||
yUqwTyD7iq3qhXROI65K1QGKVmk1MUxFHnyChSEzRSxZuNnLTSelzUwKgKar8lOR
|
||||
t8oijuWg/2vW7JOxWDRCbyoYsHXrCBHj2lWdSTfg/SulH82mN4W5
|
||||
-----END CERTIFICATE-----
|
|
@ -1,3 +0,0 @@
|
|||
issuer:pinningroot
|
||||
subject:a.pinning2.example.com
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICvTCCAaegAwIBAgIUS+nD0HsAWNl3hT0CQHo5UNlLwP8wCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMCExHzAdBgNVBAMMFmIucGlubmluZzIuZXhhbXBsZS5jb20wggEiMA0G
|
||||
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdcZSZgmfdwgqZ5HxuHbDf1zlOLBs
|
||||
Ss0iscvUb6Za2irdQcjCSYrEo7PB9hSH9BtpiUG9gKUcPBICRMWEpMRIMwXlE4wB
|
||||
Bs8IvpqGJ2C65qLo828jxdmDE7nfrzeDRdrOUdTW3NKmyzzHBuvNMHDsmMzkCqWR
|
||||
1ylaf3HFvmZpHSst/shJRFkLxaPqSf2TsddTQF8Xc3aZlYZmJUeX7UJpCIgIEUIg
|
||||
aZiKQ/7kjOaHgd0itqac0oN1Ex+TKxKM4ob6fSUcBirSfvAW8YfN1U6DKzW4kw90
|
||||
upCqi8dhZyQqsf1tYhQNGMTAuMaPw3SEVzJK196G5lUvHR4ZHXEhaNO7AgMBAAEw
|
||||
CwYJKoZIhvcNAQELA4IBAQC+axVjRZODEoD1mmxL88dvPuvx4uMl8G+Lu4z6s0cN
|
||||
kXwdzvGCoCasy2Tk0ooPoAMq4ljAZV9tRPjrJHhzpQWTeaKa/o2lEWWOu8HNZGrd
|
||||
6me5AS6tEm21+SKcjX63DORzHjoe57aDts/Wrt6b+rMVWhram9twDvg3ysJyelEi
|
||||
2Jq9nZiu30naUk4K4620F+3w4r/AnoXJBDOocWs85PDpwNyfA62rgEwvnXmjNwQT
|
||||
fqD/2NLRNEc6MWhxA+SmqscWOiD95hofEgLvrGaUD7H8Zf8V1HgSYUHyHZUzNnYp
|
||||
0HroXbsHmjqtExTOR7vv9i7lvWV3U+phsgkBGpDbsrEM
|
||||
-----END CERTIFICATE-----
|
|
@ -1,4 +0,0 @@
|
|||
issuer:badca
|
||||
subject:b.pinning2.example.com
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICwzCCAa2gAwIBAgIUUeRn09WzMhNs2shaDZF+4AYdW7MwCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMCExHzAdBgNVBAMMFmIucGlubmluZzIuZXhhbXBsZS5jb20w
|
||||
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdcZSZgmfdwgqZ5HxuHbD
|
||||
f1zlOLBsSs0iscvUb6Za2irdQcjCSYrEo7PB9hSH9BtpiUG9gKUcPBICRMWEpMRI
|
||||
MwXlE4wBBs8IvpqGJ2C65qLo828jxdmDE7nfrzeDRdrOUdTW3NKmyzzHBuvNMHDs
|
||||
mMzkCqWR1ylaf3HFvmZpHSst/shJRFkLxaPqSf2TsddTQF8Xc3aZlYZmJUeX7UJp
|
||||
CIgIEUIgaZiKQ/7kjOaHgd0itqac0oN1Ex+TKxKM4ob6fSUcBirSfvAW8YfN1U6D
|
||||
KzW4kw90upCqi8dhZyQqsf1tYhQNGMTAuMaPw3SEVzJK196G5lUvHR4ZHXEhaNO7
|
||||
AgMBAAEwCwYJKoZIhvcNAQELA4IBAQCikHkD7b5CVJEVNg6HpLJGk0oNnh6iTt89
|
||||
Ulfkkm+OYRwvbvopxg/8BgK2W/CK9OAsA2UZ+kqKMSopUlkJTdI6wGv947MGxSHo
|
||||
WVC2uCTMQmbzSzkcEve9xvmF6XGNJbL1py7bDSnevkULEnDHslokZoeIAkB8ZwXh
|
||||
lVJ719wlAwf6ZLNrqsGAVbPRCCcU/CM3+LRlJdE5rCsaBjGRoeeHZYuSwWIr8MaW
|
||||
WMFaznbbNhmzhMzPzvvPs5P/FR3CY604i8B0YeCArHFTPftBFObrquKqi6RpnqAI
|
||||
892RArKu+hzF0TEbWVGiJMC22ANddiZyIU5fhVirSZJuKWxDMRZj
|
||||
-----END CERTIFICATE-----
|
|
@ -1,3 +0,0 @@
|
|||
issuer:pinningroot
|
||||
subject:b.pinning2.example.com
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICvzCCAamgAwIBAgIUadQhTOaeMIR2O4A6KIZ/dLFDUg0wCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMCMxITAfBgNVBAMMGHguYS5waW5uaW5nMi5leGFtcGxlLmNvbTCCASIw
|
||||
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4
|
||||
sGxKzSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUT
|
||||
jAEGzwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQK
|
||||
pZHXKVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgR
|
||||
QiBpmIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiT
|
||||
D3S6kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEA
|
||||
ATALBgkqhkiG9w0BAQsDggEBAEAYUVc00Pmc6z1D4hzJr9LYqkfoferag1YiyHVC
|
||||
+vtyc5xtCmzk1k+dBJvtO+NXCHcjEWe+UdL5qV+NtA0/RrZ3vFxbrfsd17zWKLZL
|
||||
encmq/o4gksjl2PhlhMwd3O/58SkNyxsbjT7vMXqUEMhNezqUC5NMNJQQByueLwK
|
||||
llK+g/e3ImB5pyUY4XJFnbgu3J09URpW+A2AqoT4wLUJ/y698tYY8Iam409J2jBh
|
||||
TG8oJwDkMQTKMupn42Nkr9ZRGDa7wNmkfA2eqznTK1JVtQECWzFXHS8iRwTXrq2S
|
||||
cVn9apmB4E86Uv9AHelFsfb6hNeCVEZu2pIwlWy7XOnXu/s=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,4 +0,0 @@
|
|||
issuer:badca
|
||||
subject:x.a.pinning2.example.com
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICxTCCAa+gAwIBAgIUO9Yx5LA7SlIu9Du5qByOSYLD4JswCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMCMxITAfBgNVBAMMGHguYS5waW5uaW5nMi5leGFtcGxlLmNv
|
||||
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4
|
||||
dsN/XOU4sGxKzSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSk
|
||||
xEgzBeUTjAEGzwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680w
|
||||
cOyYzOQKpZHXKVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ft
|
||||
QmkIiAgRQiBpmIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83V
|
||||
ToMrNbiTD3S6kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo
|
||||
07sCAwEAATALBgkqhkiG9w0BAQsDggEBAEJjt9hOHnfoQ7aKYNpjw/W2+q5modGk
|
||||
a93D+OvwSSUPUFbFaLD1mKY3M+icy38X9k6W6IGAwf4Xr7uPqLttG2DWrPcqXC9A
|
||||
cHVIidLvqb3/Ju67yRnZu4KTmchbrRRyKPTAdPW+avfq9ZRz+Fv4qTFOTbewtjLe
|
||||
EDwBUnPLM2wBvpRHGExmv9pOWV6sq9pDYpm2E7PCOy8lo1Bf4v34QTxbZd3QOLU1
|
||||
aiVuq93JUNu844mx+bStNR88fGShb7ajT4h+WKMiOAROBT31nyqBF0b+CDN2OH/C
|
||||
iV2nHKcb3ol19ljeb3s8WdkV93m+dTGUPT5x0spLhXJEirMxOLk6Erg=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,3 +0,0 @@
|
|||
issuer:pinningroot
|
||||
subject:x.a.pinning2.example.com
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICvzCCAamgAwIBAgIUc0bsXHcnliTsNs0ktQe+n6wAVW8wCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMCMxITAfBgNVBAMMGHguYi5waW5uaW5nMi5leGFtcGxlLmNvbTCCASIw
|
||||
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4
|
||||
sGxKzSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUT
|
||||
jAEGzwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQK
|
||||
pZHXKVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgR
|
||||
QiBpmIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiT
|
||||
D3S6kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEA
|
||||
ATALBgkqhkiG9w0BAQsDggEBAF+Iyze1CDeVB0wg9+Njv5L43GUdMAob+Iw3WN0i
|
||||
ykwDSwtQD9yLDpK1cEOhxOhH+DGeI6Q0JIdVOgWAY1rIQLvXm+VeAVgJbAH3WBsg
|
||||
ojkp4aGzzKnsz65tG31rbTwQPFJhye5Xk5TwOZQ9WnYYNFNiXVakvNItBvG3+1j2
|
||||
EAONwsGwKYR0NJohoGvvfZOE9pW9geLu+Blmngwzu4vXryXOsnu5YLj8y+7dHK0a
|
||||
hYqV0cZi7ouSMgSZEYX3ZdjwrWJiPNRcJGHNpfS+rbHpLpc4GpbQh3Su1o4L0oc2
|
||||
CWwmObH1kNE1FVNDqmvZN4pbHHXtdb15JGhKA2Z/Ir6EFr8=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,4 +0,0 @@
|
|||
issuer:badca
|
||||
subject:x.b.pinning2.example.com
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
|
@ -1,17 +0,0 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIICxTCCAa+gAwIBAgIUE2xpzUR5zz5wa1nIrOKsrLbKBLowCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMCMxITAfBgNVBAMMGHguYi5waW5uaW5nMi5leGFtcGxlLmNv
|
||||
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4
|
||||
dsN/XOU4sGxKzSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSk
|
||||
xEgzBeUTjAEGzwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680w
|
||||
cOyYzOQKpZHXKVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ft
|
||||
QmkIiAgRQiBpmIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83V
|
||||
ToMrNbiTD3S6kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo
|
||||
07sCAwEAATALBgkqhkiG9w0BAQsDggEBADdYRHf3fIdFBQtcRa7bBnCouZKAOZ4r
|
||||
7ASvn8qqXpE4oCJrluWgTamGe9DhTkbA6k4oWl9mSDOiTU+6hcfXAjwkOJ8tDC7L
|
||||
OtEGicuqn4ze6p1SX42PG4qEHpFtJkoGYNcLv9R8+O6wIP1wqsU62MYTjXhV9lVP
|
||||
rUzvkbfZouarVemRs000Q20VcraB6Bzcm8YY8Hlo1N0IRdw/FsvJROKRyelzUO7H
|
||||
WF0jLbiJTcHGdOC2uxXzdcPQLRzLu13mIUBklCQWS0lg90YUiQ6CzxQfOnaRNKBn
|
||||
G9NWMHbooCPv/xEza9YAjpVbX09roP1PdobBJfY/QOg/3Dz1CTB7hbQ=
|
||||
-----END CERTIFICATE-----
|
|
@ -1,3 +0,0 @@
|
|||
issuer:pinningroot
|
||||
subject:x.b.pinning2.example.com
|
||||
subjectKey:alternate
|
|
@ -7,16 +7,14 @@
|
|||
# Temporarily disabled. See bug 1256495.
|
||||
#test_certificates = (
|
||||
# 'badca.pem',
|
||||
# 'cn-a.pinning2.example.com-badca.pem',
|
||||
# 'cn-a.pinning2.example.com-pinningroot.pem',
|
||||
# 'cn-b.pinning2.example.com-badca.pem',
|
||||
# 'cn-b.pinning2.example.com-pinningroot.pem',
|
||||
# 'cn-www.example.com-alt-a.pinning2.example-badca.pem',
|
||||
# 'cn-www.example.com-alt-a.pinning2.example-pinningroot.pem',
|
||||
# 'cn-x.a.pinning2.example.com-badca.pem',
|
||||
# 'cn-x.a.pinning2.example.com-pinningroot.pem',
|
||||
# 'cn-x.b.pinning2.example.com-badca.pem',
|
||||
# 'cn-x.b.pinning2.example.com-pinningroot.pem',
|
||||
# 'a.pinning2.example.com-badca.pem',
|
||||
# 'a.pinning2.example.com-pinningroot.pem',
|
||||
# 'b.pinning2.example.com-badca.pem',
|
||||
# 'b.pinning2.example.com-pinningroot.pem',
|
||||
# 'x.a.pinning2.example.com-badca.pem',
|
||||
# 'x.a.pinning2.example.com-pinningroot.pem',
|
||||
# 'x.b.pinning2.example.com-badca.pem',
|
||||
# 'x.b.pinning2.example.com-pinningroot.pem',
|
||||
# 'pinningroot.pem',
|
||||
#)
|
||||
#
|
||||
|
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC3zCCAcmgAwIBAgIUV9fwdZm5AUQy6D5L7TvYqLJfJEcwCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJKoZIhvcN
|
||||
AQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxKzSKxy9Rv
|
||||
plraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEGzwi+moYn
|
||||
YLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHXKVp/ccW+
|
||||
ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBpmIpD/uSM
|
||||
5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6kKqLx2Fn
|
||||
JCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMnMCUwIwYD
|
||||
VR0RBBwwGoIYeC5hLnBpbm5pbmcyLmV4YW1wbGUuY29tMAsGCSqGSIb3DQEBCwOC
|
||||
AQEATpVpfKSJvkmEeAlw34BnBIXwZ+FzvM//cFb7LGY4Zv6BSo8caMORVPSc8kZG
|
||||
ilo+2p54hGGtsCA3hkYf2EWyFDQTYrHKL0aNpnC1IuSELmSQUfvBRwyk3NLIlurA
|
||||
7XV+xB2ns2ov9Fk+5pfrYKK/xQTTRv2hWemURRi0JULwnLWWD3ypf6pQmmEGiYA0
|
||||
SGjuWgBAl/WQ9zP0oer9wopYERrooGVRuxJZaa6ZUZahN8OXGCbQ4uLnMWB4T1Nb
|
||||
rHU5L5R+3ZRxUkwBJ0Be1gLFcQsm4h+iy0gO/b8TVvpqU0hDo9KAdu4oQSodS6Hn
|
||||
SWvf9pLUCUD07CYY5Iqyzh+9Tw==
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,5 @@
|
|||
issuer:badca
|
||||
subject:test end-entity
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:x.a.pinning2.example.com
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC5TCCAc+gAwIBAgIUC3HSIMysvO+GM76wsSRG5d/kbnEwCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJ
|
||||
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxK
|
||||
zSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEG
|
||||
zwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHX
|
||||
KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp
|
||||
mIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6
|
||||
kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMn
|
||||
MCUwIwYDVR0RBBwwGoIYeC5hLnBpbm5pbmcyLmV4YW1wbGUuY29tMAsGCSqGSIb3
|
||||
DQEBCwOCAQEAQYuFy53Snfi1zTrdsaCeRbl3mPx/uDWqhIjgtjVSkGLsxtkD0vra
|
||||
mhn73QZYlERy9Fw1UBL7rplwxfm1kMc5YZLZDA6Mc6LiZHcnT6dKEYw+AFJu2G7V
|
||||
IqVSvmOPRkeEoekQvLbNuZF0yHXciFTErQfFTbRs8ynI/g9l2lE5zKeWfAgQ9CoB
|
||||
LQHrFVGqsCC9x4clUTI8x8eIcJuGwb85nCpS9gXaoyMP7QcvodtwiGmj+3GiMm2j
|
||||
SqHlduIe/7xgOdH8Dbr6sxgq/cJoC6iLtidUsY0SAWyyXok59chM1Flh0D737pbX
|
||||
ccKFejiTjZpcKA6jrqLUUBSQEpea3r/kww==
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,4 @@
|
|||
issuer:pinningroot
|
||||
subject:test end-entity
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:x.a.pinning2.example.com
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC3zCCAcmgAwIBAgIUPbeAFV7ZV8HOLAo0q6NnZUarWbQwCwYJKoZIhvcNAQEL
|
||||
MBAxDjAMBgNVBAMMBWJhZGNhMCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAxNzAyMDQw
|
||||
MDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJKoZIhvcN
|
||||
AQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxKzSKxy9Rv
|
||||
plraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEGzwi+moYn
|
||||
YLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHXKVp/ccW+
|
||||
ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBpmIpD/uSM
|
||||
5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6kKqLx2Fn
|
||||
JCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMnMCUwIwYD
|
||||
VR0RBBwwGoIYeC5iLnBpbm5pbmcyLmV4YW1wbGUuY29tMAsGCSqGSIb3DQEBCwOC
|
||||
AQEALmqNhwOL7i+mgcbIhP9N270dNGT0zINoE/xU6An5dXAvChJFXOIld0x74aip
|
||||
YFPclHHUby3NNwbE7VIY//LjQJGgJSeNAN+/cscUn8h+o7o0mGbwDr6Nvz+6CmsZ
|
||||
/RJAUKlgGfKzywvHm3iZg9P6Pw0zMQkwOQqM4J2fWaS2EZBRNpYpEA2gX1uZvCzX
|
||||
fDYSyJbTSKtEfVQhLMpIExQnjRTMg+y6JELEWHCRQzOagEbMy/cvWuxJU1asppNS
|
||||
ogCWYEqOI49QN13v6yY/wSMaxvRZvIJdQXnNWYvEkQ9uS9tJtGJ6EfHvTC9n2T/t
|
||||
SQnxnGSdbJwMQ0LHVOrLGXr8Ug==
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,5 @@
|
|||
issuer:badca
|
||||
subject:test end-entity
|
||||
issuerKey:alternate
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:x.b.pinning2.example.com
|
|
@ -0,0 +1,18 @@
|
|||
-----BEGIN CERTIFICATE-----
|
||||
MIIC5TCCAc+gAwIBAgIUaZKVPhRiSIGsY5Su0m0ZT2NBmhkwCwYJKoZIhvcNAQEL
|
||||
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
|
||||
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJ
|
||||
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxK
|
||||
zSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEG
|
||||
zwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHX
|
||||
KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp
|
||||
mIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6
|
||||
kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMn
|
||||
MCUwIwYDVR0RBBwwGoIYeC5iLnBpbm5pbmcyLmV4YW1wbGUuY29tMAsGCSqGSIb3
|
||||
DQEBCwOCAQEAhay+iBKxHhmVL2wSG82T2GhAW0ccFWd+9NUzMQ8Lky2xZGJyUfql
|
||||
7babhj/24S7qpn+MBQHLuLkpkm81ih66U/xJOjtsMjKmKeJxrxSSr6MiYGRyTfqb
|
||||
q7DCAuJRhhVYeshP0I6n8YtOh9c97kFnnjCdeOBLaCI4je/tsXSF9ZHC8AUPpjJQ
|
||||
B2s52p0InGBXsuPxJYUN0KM7mhbO2aAEw0h9n9T6nV6uov+BIIdYKeyB9gX0QTw8
|
||||
TIFJveMmQqq2mf0mK6T/g29i7E1tjf6j5cy8mUCFTtUpLlkF0TrHwGoRg7VDAQCq
|
||||
YP5sNZVWkf+W/TWvIDjB0hp/dhoAjbMjRg==
|
||||
-----END CERTIFICATE-----
|
|
@ -0,0 +1,4 @@
|
|||
issuer:pinningroot
|
||||
subject:test end-entity
|
||||
subjectKey:alternate
|
||||
extension:subjectAlternativeName:x.b.pinning2.example.com
|
|
@ -24,7 +24,7 @@ function loadCert(cert_name, trust_string) {
|
|||
|
||||
function checkFailParseInvalidPin(pinValue) {
|
||||
let sslStatus = new FakeSSLStatus(
|
||||
certFromFile('cn-a.pinning2.example.com-pinningroot'));
|
||||
certFromFile('a.pinning2.example.com-pinningroot'));
|
||||
let uri = Services.io.newURI("https://a.pinning2.example.com", null, null);
|
||||
throws(() => {
|
||||
gSSService.processHeader(Ci.nsISiteSecurityService.HEADER_HPKP, uri,
|
||||
|
@ -34,7 +34,7 @@ function checkFailParseInvalidPin(pinValue) {
|
|||
|
||||
function checkPassValidPin(pinValue, settingPin) {
|
||||
let sslStatus = new FakeSSLStatus(
|
||||
certFromFile('cn-a.pinning2.example.com-pinningroot'));
|
||||
certFromFile('a.pinning2.example.com-pinningroot'));
|
||||
let uri = Services.io.newURI("https://a.pinning2.example.com", null, null);
|
||||
|
||||
// setup preconditions for the test, if setting ensure there is no previous
|
||||
|
|
Загрузка…
Ссылка в новой задаче