bug 1257969 - update test_pinning_dynamic.js test certificates to not use subject common name for name information r=jcj

MozReview-Commit-ID: 1NpjJO9r8ma

--HG--
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-badca.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-badca.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-pinningroot.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-a.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/a.pinning2.example.com-pinningroot.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-badca.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-badca.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-pinningroot.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-b.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/b.pinning2.example.com-pinningroot.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-badca.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-badca.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-pinningroot.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.a.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.a.pinning2.example.com-pinningroot.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-badca.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-badca.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-badca.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-badca.pem.certspec
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-pinningroot.pem => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-pinningroot.pem
rename : security/manager/ssl/tests/unit/test_pinning_dynamic/cn-x.b.pinning2.example.com-pinningroot.pem.certspec => security/manager/ssl/tests/unit/test_pinning_dynamic/x.b.pinning2.example.com-pinningroot.pem.certspec
extra : rebase_source : 9fa95f73f616da87f19bf8c5f7749b02b52b9696
This commit is contained in:
David Keeler 2016-03-18 14:14:00 -07:00
Родитель e02ec1d888
Коммит 08f83f4f99
35 изменённых файлов: 203 добавлений и 244 удалений

Просмотреть файл

@ -94,17 +94,15 @@ function checkStateRead(aSubject, aTopic, aData) {
// the written entry is for a.pinning2.example.com without subdomains
// and b.pinning2.example.com with subdomains
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkDefaultSiteHPKPStatus();
@ -112,16 +110,14 @@ function checkStateRead(aSubject, aTopic, aData) {
// add includeSubdomains to a.pinning2.example.com
gSSService.setKeyPins("a.pinning2.example.com", true, 1000, 2,
[NON_ISSUED_KEY_HASH, PINNING_ROOT_KEY_HASH]);
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
ok(gSSService.isSecureHost(Ci.nsISiteSecurityService.HEADER_HPKP,
"a.pinning2.example.com", 0),
@ -135,17 +131,15 @@ function checkStateRead(aSubject, aTopic, aData) {
// Now setpins without subdomains
gSSService.setKeyPins("a.pinning2.example.com", false, 1000, 2,
[NON_ISSUED_KEY_HASH, PINNING_ROOT_KEY_HASH]);
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkDefaultSiteHPKPStatus();
@ -154,17 +148,15 @@ function checkStateRead(aSubject, aTopic, aData) {
gSSService.setKeyPins("a.pinning2.example.com", true, 1000, 1,
["not a hash"]);
}, /NS_ERROR_ILLEGAL_VALUE/, "Attempting to set an invalid pin should fail");
checkFail(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
checkFail(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkDefaultSiteHPKPStatus();
@ -190,17 +182,15 @@ function checkStateRead(aSubject, aTopic, aData) {
}
function checkExpiredState() {
checkOK(certFromFile('cn-a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-badca'), "a.pinning2.example.com");
checkOK(certFromFile('cn-www.example.com-alt-a.pinning2.example-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-badca'), "a.pinning2.example.com");
checkOK(certFromFile('a.pinning2.example.com-pinningroot'), "a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-badca'), "x.a.pinning2.example.com");
checkOK(certFromFile('x.a.pinning2.example.com-pinningroot'), "x.a.pinning2.example.com");
checkFail(certFromFile('cn-b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('cn-b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('cn-x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('cn-x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
checkFail(certFromFile('b.pinning2.example.com-badca'), "b.pinning2.example.com");
checkOK(certFromFile('b.pinning2.example.com-pinningroot'), "b.pinning2.example.com");
checkFail(certFromFile('x.b.pinning2.example.com-badca'), "x.b.pinning2.example.com");
checkOK(certFromFile('x.b.pinning2.example.com-pinningroot'), "x.b.pinning2.example.com");
do_test_finished();
}

Просмотреть файл

@ -1,7 +1,7 @@
-----BEGIN CERTIFICATE-----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@ -9,10 +9,10 @@ ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBpmIpD/uSM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ALq/odHt8EMiK06PiYFsk3JnNnu6VAWW5Wi+tYu3GNXs0aNTHLMTcZWGsO2j0lXQ
knbq5dpRE8RNgvwqHp/LRuAXK6m7rGR+N3mNliss3FB+QSybEJQzlBIJJiK+XIpJ
+ydrK2pAlA07KEA6FLUoawTSCZ3OaDomTteUUVIQhWMtosLYIXK2Id+ob1mLLOTO
eegtQSPRvXjbJ4/p6BwTzyviIuRpgxv2ZSi1oguFuots/mii+zVqRm3c5CS8JxtB
q6WD8akfSpShw/MnUEKjmGHoSTr35k8OlLAztcdNU11OUuTkIbcOAE8uF1ivWYDX
Cu8XygUzKjAFXwLTK031RFY=
-----END CERTIFICATE-----

Просмотреть файл

@ -1,5 +1,5 @@
issuer:badca
subject:www.example.com
subject:test end-entity
issuerKey:alternate
subjectKey:alternate
extension:subjectAlternativeName:a.pinning2.example.com

Просмотреть файл

@ -1,7 +1,7 @@
-----BEGIN CERTIFICATE-----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@ -9,10 +9,10 @@ KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp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AQsDggEBAKn7kQfBTYeF/fVbJYME0/T2llK9xz6+c9D1q3N/Jov/5ROQ2b5lLkK/
rtwQ30ySJcY5u18rWm/LrXULfxB3pU45yhGYCF0Fi+V4kjh+bqBLTcqorssQo62l
MuKw7HtIpJdfn5ljquOksIgAjlKc0xWz/pbs1swouBnURsZq+ljfcwoux/p9FDlW
vT+zkUmqswnwXWrjzfThgTD0qAtZhWd1VhP9/BNEGD53z6IQ6ouep4/lenu2f/VU
NQhsLoBNTtdcvPpj15auAD99nUbJSA2qSFa+asK8S8Qzz7kCCA5gEmpaBqSk43pk
W54q8Zo/jSyuF75Jliak+efqVI8huzg=
-----END CERTIFICATE-----

Просмотреть файл

@ -1,4 +1,4 @@
issuer:pinningroot
subject:www.example.com
subject:test end-entity
subjectKey:alternate
extension:subjectAlternativeName:a.pinning2.example.com

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,5 @@
issuer:badca
subject:test end-entity
issuerKey:alternate
subjectKey:alternate
extension:subjectAlternativeName:b.pinning2.example.com

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,4 @@
issuer:pinningroot
subject:test end-entity
subjectKey:alternate
extension:subjectAlternativeName:b.pinning2.example.com

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,4 +0,0 @@
issuer:badca
subject:a.pinning2.example.com
issuerKey:alternate
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,3 +0,0 @@
issuer:pinningroot
subject:a.pinning2.example.com
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,4 +0,0 @@
issuer:badca
subject:b.pinning2.example.com
issuerKey:alternate
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,3 +0,0 @@
issuer:pinningroot
subject:b.pinning2.example.com
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,4 +0,0 @@
issuer:badca
subject:x.a.pinning2.example.com
issuerKey:alternate
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,3 +0,0 @@
issuer:pinningroot
subject:x.a.pinning2.example.com
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -1,4 +0,0 @@
issuer:badca
subject:x.b.pinning2.example.com
issuerKey:alternate
subjectKey:alternate

Просмотреть файл

@ -1,17 +0,0 @@
-----BEGIN CERTIFICATE-----
MIICxTCCAa+gAwIBAgIUE2xpzUR5zz5wa1nIrOKsrLbKBLowCwYJKoZIhvcNAQEL
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
NzAyMDQwMDAwMDBaMCMxITAfBgNVBAMMGHguYi5waW5uaW5nMi5leGFtcGxlLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4
dsN/XOU4sGxKzSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSk
xEgzBeUTjAEGzwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680w
cOyYzOQKpZHXKVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ft
QmkIiAgRQiBpmIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83V
ToMrNbiTD3S6kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo
07sCAwEAATALBgkqhkiG9w0BAQsDggEBADdYRHf3fIdFBQtcRa7bBnCouZKAOZ4r
7ASvn8qqXpE4oCJrluWgTamGe9DhTkbA6k4oWl9mSDOiTU+6hcfXAjwkOJ8tDC7L
OtEGicuqn4ze6p1SX42PG4qEHpFtJkoGYNcLv9R8+O6wIP1wqsU62MYTjXhV9lVP
rUzvkbfZouarVemRs000Q20VcraB6Bzcm8YY8Hlo1N0IRdw/FsvJROKRyelzUO7H
WF0jLbiJTcHGdOC2uxXzdcPQLRzLu13mIUBklCQWS0lg90YUiQ6CzxQfOnaRNKBn
G9NWMHbooCPv/xEza9YAjpVbX09roP1PdobBJfY/QOg/3Dz1CTB7hbQ=
-----END CERTIFICATE-----

Просмотреть файл

@ -1,3 +0,0 @@
issuer:pinningroot
subject:x.b.pinning2.example.com
subjectKey:alternate

Просмотреть файл

@ -7,16 +7,14 @@
# Temporarily disabled. See bug 1256495.
#test_certificates = (
# 'badca.pem',
# 'cn-a.pinning2.example.com-badca.pem',
# 'cn-a.pinning2.example.com-pinningroot.pem',
# 'cn-b.pinning2.example.com-badca.pem',
# 'cn-b.pinning2.example.com-pinningroot.pem',
# 'cn-www.example.com-alt-a.pinning2.example-badca.pem',
# 'cn-www.example.com-alt-a.pinning2.example-pinningroot.pem',
# 'cn-x.a.pinning2.example.com-badca.pem',
# 'cn-x.a.pinning2.example.com-pinningroot.pem',
# 'cn-x.b.pinning2.example.com-badca.pem',
# 'cn-x.b.pinning2.example.com-pinningroot.pem',
# 'a.pinning2.example.com-badca.pem',
# 'a.pinning2.example.com-pinningroot.pem',
# 'b.pinning2.example.com-badca.pem',
# 'b.pinning2.example.com-pinningroot.pem',
# 'x.a.pinning2.example.com-badca.pem',
# 'x.a.pinning2.example.com-pinningroot.pem',
# 'x.b.pinning2.example.com-badca.pem',
# 'x.b.pinning2.example.com-pinningroot.pem',
# 'pinningroot.pem',
#)
#

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,5 @@
issuer:badca
subject:test end-entity
issuerKey:alternate
subjectKey:alternate
extension:subjectAlternativeName:x.a.pinning2.example.com

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,4 @@
issuer:pinningroot
subject:test end-entity
subjectKey:alternate
extension:subjectAlternativeName:x.a.pinning2.example.com

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,5 @@
issuer:badca
subject:test end-entity
issuerKey:alternate
subjectKey:alternate
extension:subjectAlternativeName:x.b.pinning2.example.com

Просмотреть файл

@ -0,0 +1,18 @@
-----BEGIN CERTIFICATE-----
MIIC5TCCAc+gAwIBAgIUaZKVPhRiSIGsY5Su0m0ZT2NBmhkwCwYJKoZIhvcNAQEL
MBYxFDASBgNVBAMMC3Bpbm5pbmdyb290MCIYDzIwMTQxMTI3MDAwMDAwWhgPMjAx
NzAyMDQwMDAwMDBaMBoxGDAWBgNVBAMMD3Rlc3QgZW5kLWVudGl0eTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMF1xlJmCZ93CCpnkfG4dsN/XOU4sGxK
zSKxy9RvplraKt1ByMJJisSjs8H2FIf0G2mJQb2ApRw8EgJExYSkxEgzBeUTjAEG
zwi+moYnYLrmoujzbyPF2YMTud+vN4NF2s5R1Nbc0qbLPMcG680wcOyYzOQKpZHX
KVp/ccW+ZmkdKy3+yElEWQvFo+pJ/ZOx11NAXxdzdpmVhmYlR5ftQmkIiAgRQiBp
mIpD/uSM5oeB3SK2ppzSg3UTH5MrEozihvp9JRwGKtJ+8Bbxh83VToMrNbiTD3S6
kKqLx2FnJCqx/W1iFA0YxMC4xo/DdIRXMkrX3obmVS8dHhkdcSFo07sCAwEAAaMn
MCUwIwYDVR0RBBwwGoIYeC5iLnBpbm5pbmcyLmV4YW1wbGUuY29tMAsGCSqGSIb3
DQEBCwOCAQEAhay+iBKxHhmVL2wSG82T2GhAW0ccFWd+9NUzMQ8Lky2xZGJyUfql
7babhj/24S7qpn+MBQHLuLkpkm81ih66U/xJOjtsMjKmKeJxrxSSr6MiYGRyTfqb
q7DCAuJRhhVYeshP0I6n8YtOh9c97kFnnjCdeOBLaCI4je/tsXSF9ZHC8AUPpjJQ
B2s52p0InGBXsuPxJYUN0KM7mhbO2aAEw0h9n9T6nV6uov+BIIdYKeyB9gX0QTw8
TIFJveMmQqq2mf0mK6T/g29i7E1tjf6j5cy8mUCFTtUpLlkF0TrHwGoRg7VDAQCq
YP5sNZVWkf+W/TWvIDjB0hp/dhoAjbMjRg==
-----END CERTIFICATE-----

Просмотреть файл

@ -0,0 +1,4 @@
issuer:pinningroot
subject:test end-entity
subjectKey:alternate
extension:subjectAlternativeName:x.b.pinning2.example.com

Просмотреть файл

@ -24,7 +24,7 @@ function loadCert(cert_name, trust_string) {
function checkFailParseInvalidPin(pinValue) {
let sslStatus = new FakeSSLStatus(
certFromFile('cn-a.pinning2.example.com-pinningroot'));
certFromFile('a.pinning2.example.com-pinningroot'));
let uri = Services.io.newURI("https://a.pinning2.example.com", null, null);
throws(() => {
gSSService.processHeader(Ci.nsISiteSecurityService.HEADER_HPKP, uri,
@ -34,7 +34,7 @@ function checkFailParseInvalidPin(pinValue) {
function checkPassValidPin(pinValue, settingPin) {
let sslStatus = new FakeSSLStatus(
certFromFile('cn-a.pinning2.example.com-pinningroot'));
certFromFile('a.pinning2.example.com-pinningroot'));
let uri = Services.io.newURI("https://a.pinning2.example.com", null, null);
// setup preconditions for the test, if setting ensure there is no previous