diff options
| author | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2020-10-12 14:27:29 +0200 |
|---|---|---|
| committer | Allan Sandfeld Jensen <allan.jensen@qt.io> | 2020-10-13 09:35:20 +0000 |
| commit | c30a6232df03e1efbd9f3b226777b07e087a1122 (patch) | |
| tree | e992f45784689f373bcc38d1b79a239ebe17ee23 /chromium/net/data/ssl/scripts/generate-test-certs.sh | |
| parent | 7b5b123ac58f58ffde0f4f6e488bcd09aa4decd3 (diff) | |
| download | qtwebengine-chromium-85-based.tar.gz | |
BASELINE: Update Chromium to 85.0.4183.14085-based
Change-Id: Iaa42f4680837c57725b1344f108c0196741f6057
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Diffstat (limited to 'chromium/net/data/ssl/scripts/generate-test-certs.sh')
| -rwxr-xr-x | chromium/net/data/ssl/scripts/generate-test-certs.sh | 40 |
1 files changed, 39 insertions, 1 deletions
diff --git a/chromium/net/data/ssl/scripts/generate-test-certs.sh b/chromium/net/data/ssl/scripts/generate-test-certs.sh index 6a195fac246..e3f539b35fe 100755 --- a/chromium/net/data/ssl/scripts/generate-test-certs.sh +++ b/chromium/net/data/ssl/scripts/generate-test-certs.sh @@ -16,7 +16,7 @@ set -e -x # The current built-in verifier max lifetime is 39 months # The current OS verifier max lifetime is 825 days, which comes from # iOS 13/macOS 10.15 - https://support.apple.com/en-us/HT210176 -# 731 is used here as just a short-hand for 2 years +# 730 is used here as just a short-hand for 2 years CERT_LIFETIME=730 rm -rf out @@ -461,6 +461,44 @@ CA_NAME="req_ca_dn" \ -out ../certificates/pre_june_2016.pem \ -config ca.cnf +# Issued after 2020-09-01, lifetime == 399 days (bad) +openssl req -config ../scripts/ee.cnf \ + -newkey rsa:2048 -text -out out/399_days_after_2020_09_01.req +CA_NAME="req_ca_dn" \ + openssl ca \ + -batch \ + -extensions user_cert \ + -startdate 200902000000Z \ + -enddate 211006000000Z \ + -in out/399_days_after_2020_09_01.req \ + -out ../certificates/399_days_after_2020_09_01.pem \ + -config ca.cnf +# Issued after 2020-09-01, lifetime == 398 days (good) +openssl req -config ../scripts/ee.cnf \ + -newkey rsa:2048 -text -out out/398_days_after_2020_09_01.req +CA_NAME="req_ca_dn" \ + openssl ca \ + -batch \ + -extensions user_cert \ + -startdate 200902000000Z \ + -enddate 211005000000Z \ + -in out/398_days_after_2020_09_01.req \ + -out ../certificates/398_days_after_2020_09_01.pem \ + -config ca.cnf +# Issued after 2020-09-01, lifetime == 825 days and one second (bad) +openssl req -config ../scripts/ee.cnf \ + -newkey rsa:2048 -text -out out/398_days_1_second_after_2020_09_01.req +CA_NAME="req_ca_dn" \ + openssl ca \ + -batch \ + -extensions user_cert \ + -startdate 200902000000Z \ + -enddate 211005000001Z \ + -in out/398_days_1_second_after_2020_09_01.req \ + -out ../certificates/398_days_1_second_after_2020_09_01.pem \ + -config ca.cnf + + # Issued after 1 June 2016 (Symantec CT Enforcement Date) openssl req -config ../scripts/ee.cnf \ -newkey rsa:2048 -text -out out/post_june_2016.req |