| OLD | NEW |
|---|
| 1 This directory contains various certificates for use with SSL-related | 1 This directory contains various certificates for use with SSL-related |
| 2 unit tests. | 2 unit tests. |
| 3 | 3 |
| 4 - google.binary.p7b | 4 - google.binary.p7b |
| 5 - google.chain.pem | 5 - google.chain.pem |
| 6 - google.pem_cert.p7b | 6 - google.pem_cert.p7b |
| 7 - google.pem_pkcs7.p7b | 7 - google.pem_pkcs7.p7b |
| 8 - google.pkcs7.p7b | 8 - google.pkcs7.p7b |
| 9 - google.single.der | 9 - google.single.der |
| 10 - google.single.pem | 10 - google.single.pem |
| (...skipping 175 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 186 | 186 |
| 187 - aia-cert.pem | 187 - aia-cert.pem |
| 188 - aia-intermediate.der | 188 - aia-intermediate.der |
| 189 - aia-root.pem | 189 - aia-root.pem |
| 190 A certificate chain which we use to ensure AIA fetching works correctly | 190 A certificate chain which we use to ensure AIA fetching works correctly |
| 191 when using NSS to verify certificates (which uses our HTTP stack). | 191 when using NSS to verify certificates (which uses our HTTP stack). |
| 192 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL | 192 aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL |
| 193 containing the intermediate, which can be served via a URLRequestFilter. | 193 containing the intermediate, which can be served via a URLRequestFilter. |
| 194 aia-intermediate.der is stored in DER form for convenience, since that is | 194 aia-intermediate.der is stored in DER form for convenience, since that is |
| 195 the form expected of certificates discovered via AIA. | 195 the form expected of certificates discovered via AIA. |
| 196 |
| 197 - cybertrust_gte_root.pem |
| 198 - cybertrust_baltimore_root.pem |
| 199 - cybertrust_omniroot_chain.pem |
| 200 - cybertrust_baltimore_cross_certified_1.pem |
| 201 - cybertrust_baltimore_cross_certified_2.pem |
| 202 These certificates are reflect a portion of the CyberTrust (Verizon |
| 203 Business) CA hierarchy. _gte_root.pem is a legacy 1024-bit root that is |
| 204 still widely supported, while _baltimore_root.pem reflects the newer |
| 205 2048-bit root. For clients that only support the GTE root, two versions |
| 206 of the Baltimore root were cross-signed by GTE, namely |
| 207 _cross_certified_[1,2].pem. _omniroot_chain.pem contains a certificate |
| 208 chain that was issued under the Baltimore root. Combined, these |
| 209 certificates can be used to test real-world cross-signing; in practice, |
| 210 they are used to test certain workarounds for OS X's chain building code. |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 14492003:
Work around GTE CyberTrust/Baltimore CyberTrust cross-signing issues (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src