Closed Bug 1171557 Opened 5 years ago Closed 5 years ago

convert test_cert_trust.js to generate certificates at build time

Categories

(Core :: Security: PSM, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla41
Tracking Status
firefox41 --- fixed

People

(Reporter: keeler, Assigned: keeler)

References

Details

Attachments

(2 files)

test_cert_trust.js is one of the PSM tests we need to convert to use the new build-time certificate generation system. It should also use certificates that are more realistic with respect to the Baseline Requirements. In particular, the root certificate is not supposed to have an extended key usage extension while the end-entity certificate is. This depends on bug 969985 because otherwise there would be merge conflicts in security/manager/ssl/tests/unit/moz.build.
Blocks: 1171819
bug 1171557 - convert test_cert_trust.js to generate certificates at build time
Attachment #8616223 - Flags: review?(mgoodwin)
bug 1171557 - make test_cert_trust.js certs a bit more realistic

According to the Baseline Requirements, root certificates MUST NOT
have the extendedKeyUsage extension. The extension is optional for
intermediates and required for end-entity certificates. This change
modifies the test certificates so they're more in line with the BRs.
Attachment #8616224 - Flags: review?(mgoodwin)
Blocks: 1171820
Comment on attachment 8616223 [details]
MozReview Request: bug 1171557 - convert test_cert_trust.js to generate certificates at build time

https://reviewboard.mozilla.org/r/10441/#review9221

Looks good to me!
Attachment #8616223 - Flags: review?(mgoodwin) → review+
Comment on attachment 8616224 [details]
MozReview Request: bug 1171557 - make test_cert_trust.js certs a bit more realistic

https://reviewboard.mozilla.org/r/10443/#review9223

I'm a little unclear as to why some of these error codes change, but since the tests still test the right things, I'm OK with this.
Attachment #8616224 - Flags: review?(mgoodwin) → review+
https://hg.mozilla.org/mozilla-central/rev/8ac66e2b39b0
https://hg.mozilla.org/mozilla-central/rev/08fc6655e2da
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla41
You need to log in before you can comment on or make changes to this bug.