From 3f73a473e6f25ea713bb89801e4edd56041358c0 Mon Sep 17 00:00:00 2001 From: "Carsten \"Tomcat\" Book" Date: Fri, 17 Oct 2014 13:13:01 +0200 Subject: [PATCH] Backed out changeset f5fa8ea86d3b (bug 622859) --- security/certverifier/ExtendedValidation.cpp | 27 +- .../ssl/tests/unit/psm_common_py/CertUtils.py | 27 -- .../ssl/tests/unit/test_keysize/cert9.db | Bin 32768 -> 0 bytes .../ssl/tests/unit/test_keysize/dsa-caBad.der | Bin 714 -> 605 bytes .../ssl/tests/unit/test_keysize/dsa-caOK.der | Bin 742 -> 633 bytes .../test_keysize/dsa-eeBad-intOK-caOK.der | Bin 699 -> 600 bytes .../test_keysize/dsa-eeOK-intBad-caOK.der | Bin 729 -> 630 bytes .../test_keysize/dsa-eeOK-intOK-caBad.der | Bin 729 -> 630 bytes .../unit/test_keysize/dsa-eeOK-intOK-caOK.der | Bin 727 -> 628 bytes .../unit/test_keysize/dsa-intBad-caOK.der | Bin 719 -> 610 bytes .../unit/test_keysize/dsa-intOK-caBad.der | Bin 751 -> 640 bytes .../unit/test_keysize/dsa-intOK-caOK.der | Bin 750 -> 639 bytes .../tests/unit/test_keysize/ev-rsa-caBad.der | Bin 976 -> 0 bytes .../test_keysize/ev-rsa-eeBad-intOK-caOK.der | Bin 975 -> 0 bytes .../test_keysize/ev-rsa-eeOK-intBad-caOK.der | Bin 976 -> 0 bytes .../test_keysize/ev-rsa-eeOK-intOK-caBad.der | Bin 977 -> 0 bytes .../test_keysize/ev-rsa-eeOK-intOK-caOK.der | Bin 974 -> 0 bytes .../unit/test_keysize/ev-rsa-intBad-caOK.der | Bin 1081 -> 0 bytes .../unit/test_keysize/ev-rsa-intOK-caBad.der | Bin 990 -> 0 bytes .../unit/test_keysize/ev-rsa-intOK-caOK.der | Bin 1079 -> 0 bytes .../ssl/tests/unit/test_keysize/generate.py | 297 ++++++------------ .../ssl/tests/unit/test_keysize/key4.db | Bin 48128 -> 0 bytes .../ssl/tests/unit/test_keysize/pkcs11.txt | 5 - .../ssl/tests/unit/test_keysize/rsa-caBad.der | Bin 548 -> 438 bytes .../ssl/tests/unit/test_keysize/rsa-caOK.der | Bin 549 -> 438 bytes .../test_keysize/rsa-eeBad-intOK-caOK.der | Bin 532 -> 434 bytes .../test_keysize/rsa-eeOK-intBad-caOK.der | Bin 532 -> 435 bytes .../test_keysize/rsa-eeOK-intOK-caBad.der | Bin 534 -> 436 bytes .../unit/test_keysize/rsa-eeOK-intOK-caOK.der | Bin 532 -> 434 bytes .../unit/test_keysize/rsa-intBad-caOK.der | Bin 555 -> 444 bytes .../unit/test_keysize/rsa-intOK-caBad.der | Bin 556 -> 445 bytes .../unit/test_keysize/rsa-intOK-caOK.der | Bin 555 -> 444 bytes .../manager/ssl/tests/unit/test_keysize_ev.js | 154 --------- security/manager/ssl/tests/unit/xpcshell.ini | 5 - 34 files changed, 104 insertions(+), 411 deletions(-) delete mode 100644 security/manager/ssl/tests/unit/test_keysize/cert9.db delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-caBad.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-eeBad-intOK-caOK.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-eeOK-intBad-caOK.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-eeOK-intOK-caBad.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-eeOK-intOK-caOK.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-intBad-caOK.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-intOK-caBad.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/ev-rsa-intOK-caOK.der delete mode 100644 security/manager/ssl/tests/unit/test_keysize/key4.db delete mode 100644 security/manager/ssl/tests/unit/test_keysize/pkcs11.txt delete mode 100644 security/manager/ssl/tests/unit/test_keysize_ev.js diff --git a/security/certverifier/ExtendedValidation.cpp b/security/certverifier/ExtendedValidation.cpp index 2a28dc2511b..49755861b37 100644 --- a/security/certverifier/ExtendedValidation.cpp +++ b/security/certverifier/ExtendedValidation.cpp @@ -90,7 +90,6 @@ struct nsMyTrustedEVInfo // OCSP signing certificate, or OCSP for the intermediate certificates // isn't working, or OCSP isn't working at all. -static const size_t NUM_TEST_EV_ROOTS = 2; static struct nsMyTrustedEVInfo myTrustedEVInfos[] = { // IMPORTANT! When extending this list, // pairs of dotted_oid and oid_name should always be unique pairs. @@ -99,9 +98,10 @@ static struct nsMyTrustedEVInfo myTrustedEVInfos[] = { #ifdef DEBUG // Debug EV certificates should all use the OID (repeating EV OID is OK): // 1.3.6.1.4.1.13769.666.666.666.1.500.9.1. - // If you add or remove debug EV certs you must also modify NUM_TEST_EV_ROOTS - // so that the correct number of certs are skipped as these debug EV certs are - // NOT part of the default trust store. + // If you add or remove debug EV certs you must also modify IdentityInfoInit + // (there is another #ifdef DEBUG section there) so that the correct number of + // certs are skipped as these debug EV certs are NOT part of the default trust + // store. { // This is the testing EV signature (xpcshell) (RSA) // CN=XPCShell EV Testing (untrustworthy) CA,OU=Security Engineering,O=Mozilla - EV debug test CA,L=Mountain View,ST=CA,C=US" @@ -118,20 +118,6 @@ static struct nsMyTrustedEVInfo myTrustedEVInfos[] = { "At+3zdo=", nullptr }, - { - // The RSA root with an inadequate key size used for EV key size checking - // O=ev-rsa-caBad,CN=XPCShell Key Size Testing rsa 2040-bit (EV) - "1.3.6.1.4.1.13769.666.666.666.1.500.9.1", - "DEBUGtesting EV OID", - SEC_OID_UNKNOWN, - { 0x0E, 0xE2, 0x7A, 0x44, 0xD3, 0xAB, 0x66, 0x1A, 0x31, 0xBF, 0x0C, - 0x1C, 0xFC, 0xAA, 0xD9, 0xD6, 0x27, 0x75, 0xC2, 0xDB, 0xC5, 0x69, - 0xD7, 0x1C, 0xDE, 0x9C, 0x7E, 0xD5, 0x86, 0x88, 0x6C, 0xB7 }, - "ME0xNDAyBgNVBAMMK1hQQ1NoZWxsIEtleSBTaXplIFRlc3RpbmcgcnNhIDIwNDAt" - "Yml0IChFVikxFTATBgNVBAoMDGV2LXJzYS1jYUJhZA==", - "PCQ3", - nullptr - }, #endif { // OU=Security Communication EV RootCA1,O="SECOM Trust Systems CO.,LTD.",C=JP @@ -1096,9 +1082,8 @@ IdentityInfoInit() // treating that root cert as EV. if (!entry.cert) { #ifdef DEBUG - // The debug CA structs are at positions 0 to NUM_TEST_EV_ROOTS - 1, and - // are NOT in the NSS root DB. - if (iEV < NUM_TEST_EV_ROOTS) { + // The debug CA info is at position 0, and is NOT on the NSS root db + if (iEV == 0) { continue; } #endif diff --git a/security/manager/ssl/tests/unit/psm_common_py/CertUtils.py b/security/manager/ssl/tests/unit/psm_common_py/CertUtils.py index 6ace04361a2..55df96b59a0 100644 --- a/security/manager/ssl/tests/unit/psm_common_py/CertUtils.py +++ b/security/manager/ssl/tests/unit/psm_common_py/CertUtils.py @@ -183,33 +183,6 @@ def generate_pkcs12(db_dir, dest_dir, der_cert_filename, key_pem_filename, child.expect(pexpect.EOF) return pk12_filename -def import_cert_and_pkcs12(db_dir, cert_filename, pkcs12_filename, nickname, - trust_flags): - """ - Imports a given certificate file and PKCS12 file into the SQL NSS DB. - - Arguments: - db_dir -- the location of the database and password file - cert_filename -- the filename of the cert in DER format - pkcs12_filename -- the filename of the private key of the cert in PEM - format - nickname -- the nickname to assign to the cert - trust_flags -- the trust flags the cert should have - """ - os.system('certutil -A -d sql:' + db_dir + ' -n ' + nickname + ' -i ' + - cert_filename + ' -t "' + trust_flags + '"') - os.system('pk12util -i ' + pkcs12_filename + ' -d sql:' + db_dir + - ' -w ' + db_dir + '/pwfile') - -def print_cert_info_for_ev(cert_filename): - """ - Prints out the information required to enable EV for the given cert. - - Arguments: - cert_filename -- the filename of the cert in DER format - """ - os.system('pp -t certificate-identity -i ' + cert_filename) - def init_nss_db(db_dir): """ Remove the current nss database in the specified directory and create a new diff --git a/security/manager/ssl/tests/unit/test_keysize/cert9.db b/security/manager/ssl/tests/unit/test_keysize/cert9.db deleted file mode 100644 index fc7e8d3ec2d9a9958b9806b875a0bc1cc30b79bb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 32768 zcmeG_2|QKZ_V=E1UGta>`Q%c@4CfB6p^&MJ$y8A)!!>2ftdh_~rpnl$D3NAm3YDmo zN~J-ALWm?&6O#Wq$GxGa-&fzud#`_X-F?Q`?Pa`;c`+C~@ z6UZ1G28+eaClD|gj3oR+uE-Ay|Crz(4*oF$a_{egBu1eXKnh~PK_oAJAm@}b(ztbul3ixhc z4WfXXk0HPe;#iej;*~k!x4~kJFv$OZFKi=YnFYnfuyM-%_6{C2FF(J<0S+E+j$Z*l z*Fs<0N}ph*tz)83_cAj_ zE)0&Li+nT4gWli0BKCT>iaYV5;;K2mW9V2!$)+B383P;n_rXh!qc7>JKLIW*3W*?@*g5zuX^sKDZvG(zeJ>X`FB;9)&C7+T1SueBkV9(OVqHsD znuiBM!U`@7V+k_w<9q}B{DZuG{ar(3VS0%EX96x`z-X`x)B|xaI2EQi@EdVpJ{~V9 zD2BCh^KzmEJFc;JbNXspveGS1!$o@f%LphAF)P2~2{N#yMv~QJLMd3I6g=!5XdYj4 zu#BUC;=ZLomes@I1x3WLc4&FO00(!PqyJY5%;PA~vER}lLPS|2fEUyk!(v9Lto4B1 z@~i9v{Jqiis;~4`5x;_(aUet z^ix%x;=uoJ4$NGI3!jgLmJulsX+*Ej`Ks5AX(0qlw{^6y+TGXBoqkb;AoKS4%+ zi7b%-%|uGEaR|}^6=1XijizJoq~PY|Z)U9EXm4iBi~9e7*BEdg&dP5#7YbF_4f83k$)`=unf=wN`XTl0b~Z=0uR6f za6b?YtOYGVHLwk=0XKtde%q#>s`zAaKnSE@h4j6|bEogwoz(Mmw-+%aSG44X3g7n- zyaSPFe8Y!xhePet$2H$u()7D-S(U&X{`-- z{Pz${2!hOvdtlLAOnGvL-Jow^ManyJSDc4;pUf0h!8J&6aHYFPCR>UQf`G{jiGKV*LmBPWjd!4jwFP=AS z%RL(2zPc%Nn*n>hb$z1XfY9OtCDtZ2;fK{W?#SVbrj+#t)5@b-{LJ!XnE()r!5-3q z=0n`DVI?{Ziyg)>K_GmAxR4v%$PF9_V7Ee|NSX^LfaAY9okdTTyNR?-&{&b=@w{e< z`t+Q!TxLhPjK%ocWt(<3dOvnrFT9|6uBGn~=HC3>_2yx13w<;w^LK2Qnh^n6Jzj1!`$B}?+9xq`tOq2(PVc|OtG7SgA6#@t zO`KBOCZV{a+vd)4bDq3effXeR1kOw4iVoA|Mdno;audG&QG8I!M(&xMVljU2I^#(mmDN9;Y=a@uvX60I~Pjkj&~FUe_2iAgz8 z_+V>puk!o@8&$gFy^wG5_wk$oOu&o6TTgzU3Qr{d=o-GS(tRDc!5Z%kI32 z4zDEl<43pFN^>+D;TI-I+1`(iZ{JLPe^%m@_Z(-X*=9j;4w08Uh59q!ibhxjJJ2G* z*mC`4Jdc*STu2k2w~f5JSMc4nKEE$vQ2I@7^ExrUXW6ndSJ50f1A^a{Ub)5ox^1&b z{=+%#7jHqu8cRQ=#vZ-6dtblyMZY~lck~Cc`OhwjU-M3m!<2O2PWsFVt(zvB36D)( zQm8DaD-DhW^tir0Revh>%N8O2lXXd;WVXSVoV49`H|?iNeY zr+q6H7uc0srZ7>xKEH0?r5L_w!51@$?D-o@jBWqYZ;`uK$8?El6DboBOA zSA~NT-SQl@$&?@ygfIc859vbMcs`gc4%=b4Wd`yO8|lxAh2}uA4DtY0K$K42GX!x7 zJ9&G;{$oWCZ%2C%B}X5>iTV{|ahHwv)*D!{^q+jW+Mg_W)$~N{E`tYODrvcc{LT3s z!*6}`3g(v z7W0FFClC2tE>W7kS$#c~&>zm1#vOHLR%AdxUc5HzvxBG7gk#R7{v~(f@alCcwY+@S z2ktaCkxYl`^vv_FD*L&dTX}7lWbb02Tue1{oP{LJ>G#C<5p|2%AU%LxYYnIAK%h_mNa+rXVMgOeB&> zL^4E$NVbBUBqRyZlmF{)0yhlXi2Sd>09=?A|Fn_6S1wWs_uuL&;6+bxt;Tf~6Lx>2 zUB#bn`=DLL4i^yZDikpZ>yWNOU`*47Qzp5qfY+zNk3+i()K@)fBf-4}8HxZ!MtTiY zKmOKz1_hq)qe5h&3Q-y9Gms>io}3KD|GiN?%x!k0fsy3`e?P4-#>fyu2e+`1A@J3a zI?fCEy$60BXq0tEk&9)yLLK(rOo`I<*k9aN-SOalU7jvBvgT=FCtpLB&GMyt58QWo z-q>7NzQg9JwynwDDV2 z&h;iWJggztSPrH}qOAA$Ip1547KXhYm^QFXmZ*vN5@6MN$O$RKlcoXF6b)>2SosSBh63-G@KsKt* zFeT3Q6K=R!dSj+6eV~yEg&%;-7`8n;lz>M7kQO5i4<*PyFqHVl1NAhng ze?qp-60YMKO(%+Z)#sg9sb6SO+a_G7e{;E_0hdHn{H0wH`=^zOr!?F?XqRZgRCtRZ zY%tKYyy)25qY|>sS4B!iU#)T7c-Y6**VCt~TGeS2*Gj#`JEMm_cMi~1*i3#`HwL=+0+3HresLDpgrJJIqmwkTXLAiQQO7r$> zO^ix(zqLIGbg{CL6U` z{`77XwOOLcOsLJGiiwxO@P|``#(c%$nv-m^z^m-x$Bo)7-*m>X(Q*SG?&OUaE+gXo zjpZ^41ATN{GHPQ`$J-cGTSgB9*Bl+&L8d>`$6S7wrwRHa_~n^r{*4la~M4zs#iO9Z{Kj{*G|$kt7OPJC>>%x2GdM4{?O9MP$>Myl9-b0rba#zN%@-9LKJ7b; zG{jze@L07pue7?{UqM&?1yK0ezwt8aGfV;4G*E+7AZ11xHVtHdz%)RcW6})*3`SvB zg5`l_CX3cL&E3SVByd5U{a#qGqI=YwDt*zm26e%c@haOl76x9Bc;tVSDYPSP>HGQf zw!VpFXNj6U>q{j+*HcZE^BO7%RG~dd8W@PRs+9%5k~uZ@E^(Hhufs}kLgu&h~21E(Ht5W^e!+A9LRxUGmFEc zEX&tdO|R|ZX=lriTv&L$e2=AITEH47-kX7QNl_vALdC8FazS-0)hiprTH=x~vuq&+ zX{h4;VuvN~)jjL|u%&N>ta$kDg^KCG3(kZ&7Z&$wIzL@kW-Xt}E-f>B!IM|OX~9z| zR;0uE#WDnd^Jc63Vww}pR?_vqECzUjl||lTDtw0nk%}xoW*D&ja=$0M%L}g5IKyDV zwj4DK{_q}l#4ZqFM(u*xn0R^EE|44N%aEI7y8zyg2RGTMT|ifi;7!;X$RDu=PznFW z82H7C81YYz+5sx#?En?ThmP9(9)#~LB^)#67lDLFbUoiU6ASRdq`w{Sm!@iP2fW}8 z?Wg5sRhjtm(N;@nB^!pVldQuo8(5$1V&(TDWJvqsjBWca>p8@`hdkzJ2wzrybjeOJ zO}YIzsGQep{|9V+UB`=t*s9hy8?UB=fr6P^YfjF%yN4uFa(|7gNyWzHN4Fdej@f(o zf{V<)6iIu#nZsvOLibUD9{h!kL4NUGmn|~CwCU>f@m=9aQ?cl@T=x2AvApCGj)lxy zW46z{I#_*3E6P_gx=&U zQZ7B8Fqp!}5#n~2BJ`nc$phQro7O7F{qioK2$FoQ=(}n)gj>AnT<5;zu9@8+UFDZT z;l+QW@{JiP9#;8UkOnlDk%m>i(hsP7hSLmgmH&X^pAnUwU+H?%>A_hiFFiRuV@^4V zo5oJJZG)IN>Nh8qS!@=swRBuzv09X9Yx+K5%g(BGPB$8? zUJuTixk93QZvC!;M$tLFX@_|*gf|LD2K%1r_#EE5d}zkNiNcq1O6}rLyW)@ESsSC! z{qBrZJL};Uo{Hv9sx5%gjh&`T%Rh!aeZ%!}ZhPayd)JS;Eo>+ybr|e-&D6>`u{OkJ z4_l4l_KyW~o6Dm)GV~Ho*dS2h!Pf%D#0e5*6wVP+KRVMKNKftZ!eG}Ef;ss zY)?;)qxQSh$WIC86`9Fv^A|YVCoExg?QNfvO};5nV7$2!Q5C;fNdq`cfw~D~`7;*z z4@&7o>znBMpA!RIL_y?@{@f6$#P(x4{@2fK!h5@6zK_%K6Smi=j{np9)Db05Wkr=d zgo!sml>E5CKXsCoJiHAbZnIG(Kc?@62mViBRbMfp>PKYyzpCpe>QUgzqf_)h<@=vt zOTif5|Bo00MR8kPLpzVn(s`BD4RoDb$ep>W{pzx3ww{}(dmT{IHe2apBQ>PaQ2(G; z;fQ-@aiweAv^b`U=!^EYJ`LIL-lSjd_EeSfER($2v@Ss8SbUwsp~vN^nt747pRobsf02phvxO>9FJaVx*#|Lz!ElpFc z)ZOm&c0^9Oro$#z1`P9qKIAkt7VCLo0=PI@9;8OQNC2dnq-D!?dEjKpRv0uG^TQBC><5?Wd zId#M}xeaHw?U37dX`!?lbD*|*?L*quhF+N${+m17A`MALE~-~dAJSQ){-O7lW{|V! zoBN$wCwE!Txf_z4w{|#a-s&QUq19)fY2ZCyB|eK6XnA)s{B3E)Wmo1emQs6nt(H-j z-cVi5u8_Z?vtzH;^HtO3Jr@k)Gz3_~H&FK&r$l%y7k|NPtt%E>6)&81c3VcHF);;E zj}uALzimassz1hd*U#gF~be$A3%t!$-Zqj31}` zCv2=y<^QMmp(Dy)jU83~>X>*%Sou@ODgXJCto-3qdEho1RsP@h#IOZ$Yjm(bBHG_r z0Fz@pj7|WoEZ( z_Uii&iEgrbB=>>L#LQZ-y1T@!qkvbDWFCrpPL3m)T((w=U$-qFbj`Hd#Mv@))0eH- z^+ZjaRjo1mSo@&Q{Edb?S1d?oeQ2HYI2mVhrm}L?mv-h3A$Qm1FP$%Ob>Sn#kI~E< z+f`>+RLTr-o2}FA3zrvZ@VAxe9NKZX?ZyiKmyfl5;!ZyvGCSMZH0N}>fOe~IOc2@5 zLb3HEGv6`Wd(`4p5&{9MJ|0@*(Ca*BRd2Q36hGdRu z%b7D)M^^ehZH5d&UKE?1AI`QhcQ7kaC5O%FjE!(HdiZFtMPi2}RQU#TIZXTUmKFN% z@10NXC`|j*nx%i$wRoYJYBe{{bm^4QkEV0BJ=vBQ9*_&ZxKm{O*Lv!t?6DVnxV|RyNataVmf|l5 zIyjHj3|$D<8BU~lm45yhZ0E~TcYl9Z2P^h;_l}Dtaa10XeSf^doWcA33NzV!_HIzA zjFXX6(34NJ=`$GA$bR7QaIU!H(gwF113VJVABZUnZ6etu%(|D$u2v34zVQF`m3X5& zaNson{+v61&b}BkBR7$kj`6Kcw1;X$|6`V609H8qg&|Ur>&LX|uXmTjN2$RtGESRL z`0AtD^bha(P-VKqgOfgzPS}Vn{TruDCwn9fA9@Ej*{CvwN79V17GC?O4C_)+`bZj; zj&JnnZ*$nrH_BOUymD5vofNVE{&YOdaskBX=f+;d0J8uYKmi~DD!@EI8<>f`2rK~h z0^Qh3&WX?ob-$9e~Uw+bWMe=t9{`2V|p#!-vyZw?XoxHBep-HG>SS|YgwT6<)U zKQB~#7GoV?H@v(~Iyje1mMB}ARw3*|HM>`R&sm|Ude%Fs!Z+5OgB8B@v(qn18T2fB z-DR4ktvJ_vFqI$gpeKvFgW+neF)HryF7|1`Ww+`1R@)xAXkbs-c&zMpBB7Of`Oa}E z?93r)yFH<~H&(c$xoC-yW;?01 zu>&X5{sc1fJfF6c_vzE#J-eSnTAxDK`+nYff#aZrOILwrIB-ckU(HS@4Z8R;dv|x- zM+}vAfM6@R();6`yKRy9SwhWgopbYw+&8z$uaG~Nt8v!1v2QXa02s`lbcX^4ll~sK zC1uxc9C$^#SlR1X-RGAS-Ih~C`TaTS=9TY#G)mjRicH6vKAG)eGZfWm!Fw&-nFNzJ z-Q7~iF}S2GxT1ph!TyFO`M@&oN1L81keIclCG4I2uM2DQnc)N^CEA|GY>_1lXH8G) z>AAGM{PZb_4^b{GXP5?@oLfqj6dsoHZ#F3lF=3&J_fdLphf#UAtJF?o-7#ZWvTyC# zmwOIno-4V1NcfhDbP)3{WBu0sWLfGX$13^Ur=dAMpD%sfXdM{nYHWL9!6ClRoUo6X ze`!tE4aDCOG#hf7qpQB8d0X6kr+ePjWjDL-T2FsyUF*1WmJX*whoekI_?Z(T&I%QX z#7v5shll=RpNGae=zh(_9OKiN=+qUu|DPQLlwr}mK*-zup&?R<=f_+Yzkc=~J`Wyd z`Z$-xgsnB|viQ^c(2)rMRc^)v0J6mIKRW>cAKeeP*{IKgF#*63H`r-0X0_jlY=7gp z_^AniAN2D5t&d^!EJ3*X=w9$2+5I=>=@S?L$U8GuKbRSR-{U}^X~;+v-J@~DbipFy z3Tz2W(Y`Lj)&`wjZ`*|C4~XhYJeSaIyR+Qa;abx|e6(Iz?L(DRp9s#31ij5ktzi2? zS2n9dngxW>QRG^gJoCh0uqg)fyHT(f$5^CAbhK6IQs(U_j6_E;Yu6SiYO*=Jcs zWv}h?+C#nj8`tSj%V|1(&gniHyA`5bupS5W-#grOT%Babz1zPfUNRe}?bb>RF)qz5 zouzcHsH1AQ{7_rsY>Cd}LDOD~gy1rPD{uEL>|WV2P^Z1ptZD#KPA8Ba?-pptizD~W zkMHYh-s;;^P+YgAXWNyQq*F0BmAU(dU$gq$V{PP4@>aR=DX`T*;EwjM)&JvpKk51( zi&;J!T4yt(npD@(#H7Etk5-uHA|Yti<7>(v(#O3sCtAMbyqW>Av@0`U?x~!rm=Mb| zdFP`#~p8w40AO%geG+RRkbM9i`(1>@%yiA2n}F~ z8k((H61+i6{6zyXwOh)ujIVgJSMzK9VHS&35h+Il=HH0Q#hWDUSRn1wzfkx?PuOr_ zOib_=L_JQ1w*}V!^;M64PXGUmSWa|K8(sf%A?yGCopT-#p8P)uk&1jjW&-^BSqu1& z#J~(3X97&vV526$AKr_OSO8RBh6Nx8TL9xX|4sH10Qk@Oz)d#R0vO*H!xlg_yaeDZ zW9kBt?r$uBN#FfPg2qiUz{$}L2Cn>Hi2siXn1_MA{yTvVZ~>SB-G?H!G5>D+rv1? pn{nPZ{fehwS?E_b`jvxz<)UAC=+|$K=$rbGr#LXhfj@}@{|8?B1YQ6D diff --git a/security/manager/ssl/tests/unit/test_keysize/dsa-caBad.der b/security/manager/ssl/tests/unit/test_keysize/dsa-caBad.der index c947b11aee4d6c182a4db36fe6e821b9add6fd1f..b7ea48d517058bcbc65a5930e2e522252218d515 100644 GIT binary patch delta 582 zcmX@bdY2`^pou9Gh{YB#GchtTF^f9X8gR35CbW4lrZTfIGZ}~&3KD1O=%kBj? zrj(TmKA0>M!++;b_tdRs6W=bg{$AT$#iuk^4aS-u zNr_I6Wt-*|Gl??vt_x4BcZ%|iIu)O5bb^1K_{p%u(@YiNcc!%_ocnV%t)_6lqNUg+ zi)v4zyO_C)cl1T-XMAc%@SbawvG%o`5L4WP*;DPMHeKb_J9OcbuV($lDB(j7 zbe4+SS+g-$GcZ+TCNG{XmT97KRa`_|!`e%s|I!wZrIS>Cw`*EnIxM_9Vy|LY&l7=J ztAC{TbUsKg+r%6DB6oRV&pDyxc0qoBLv}6w#V^YFa)*4EpR;-ZL*2HV`!62gatXFeBrC7FGjh zAcYd&%mxewx=bRmpYNG?t@$1NB;%*9Lr&Z}Q|^-=fT7u9Qmw3ZGOu95%D2xn8Vi$F IMV#FM07a1KcK`qY literal 714 zcmXqLVmfBf#MHcinTe5!i8)Cw-+-HqGoj6cF_oExnaRM#P|rYzjX9KsnMXAuz&SW0 zH77^GJGD|FII}8MAtbf9Br`8vA*DD`!P3k?Hz~8kP{=?4q@Ih16DX>ioamI8Vjw5Z zYiMFHiE)-e6Qd*>yH=aWISUp>Acu#klHt&E<1d~2 zmEJ2eKYU*~SHzq1@ydit{re&U(*h|XEv9w`mDVCQ_pR`yQHfQEX`TfB+r(l za3VcQqe)bb&q=wJ;U*_rrA_DL{N?Ld6_QRz?tgV|%EZ)P>2*4td|^1ipT^8~ZZWu1!LzuWouERCuvmS)}eJnH6q-qg&7 zwE}IoUrUwxKA-zO=V+4u!euNAj=2T;nlJVgW+{%&+d7-|gRM#I72}HUSB{JFJMh~3 z?|SaP{lIl)|Kp4jFB1C|PaA)mxjis)^~K#XAGgA&jL(ojBF?gkJ*61Ko=N-%iXWuVC}6m)N~jA?<0DbU)kc)aVC*~ YtNAsaWq-5YGNtP6Z3sE%@Wb>I0A-R4%K!iX diff --git a/security/manager/ssl/tests/unit/test_keysize/dsa-caOK.der b/security/manager/ssl/tests/unit/test_keysize/dsa-caOK.der index 0d23ff16acd40ab6df8cdb1bf7389cc2fad1b557..c57957fc455ca242a26c80cfaeb17468e7961cf3 100644 GIT binary patch literal 633 zcmXqLVk$LgVlrO9%*4pV#KM@?J=uVpjWeOmgE5tvg_+4f*ig`bpN%<`g_(yVr8rSH zInm$SKu(<3(8R#p(Adz_#KOotN}SgS#5I6&v1@8#++onfsKdst)#h=|f`t*tk!Nab zWVj#WG=KlU*t|Puo;xnF3iapaI?ytqIY;h=ZglBIhB-EiCM>wGb+bJFzv^kN`TxJ{ zX_x&vbN)8n80HxtcxE3AXk0U|D&l2%>E*UPH#TTh*R1c<^0o^|*PpvzN_MI`#VMgIOurOri|!yOZ6MMIP@~mwd;3$WuK3 z{iCgnAg9e+UVQwAm-@pgulRNEJ^Ibl|Lum--PxuGyzM7BPhG@*!R8NZwdKa!r$f^p zwriii@yU%dEaFioi)!+fs$;Sy%{or2x71f$4R2Fpjow?8?OAxR?Drk!3AdjZaY@u& zcdV{!IA|02f5DlRid&6VwQqQA(E4znfPIXM!R~!)JSsPS4rXp_WdOP3p5a4j8%K}F z7qmXk4OaPh&oc9j+~=1X_vXJo<})SY_u7iTE4x}cf_4AL8yuf|G)nFI&t<$@w{Klw zpV)d&$WZapoSJKI&679W+in-TyP?s@h=X1D=t<`N7E`?b`)>^|Svu9}XP#b;xUtpY z@Cpg@EzTMN7edost^aV(f}w$tiEdJ6iJ_nYKS%=?4+l_KH#yPY+dxj7 z*U-e!z|hRV*wEa_FiM=)2*fppa;aoX6XSM+CPp1LcC9v#a~3R&K#n|9V)9~3;x^~xZ%5u{N7UCX4g@)E z?#{g@@76n;JbHcgl29q%snQ6IozFslt^2v__p&dO_4XL^9#|1NQ)=0I#aZ82E>18H z|NrsEqRVB+#a67Wnt8%_#*8wH(nw9yh3hAZ+n$rH3z2<&j`8TUze`MtS4@^GDr)uY z&Mk6ZDfiWL_JY`+1;Ok+rJW@XOzlc-=cT6KGAcOC+}Ogv)YwoIX7lxZ;C|8gqpkWU zw&tEGPj+7K8lh6N&s;q}!Rjg3>Ohm-@3^ONMpSv0e+X*7wQ--HL+wq8rg+V{SAL&) z>FM|P(eyug^IlK1R;VuHTXepE)`GoSEF~^a6ic>!ogHxT>B;I>?z2y@Y6?9Jt+{x} z>A}rc74zCUFN&<_84%paVE5RFs3rIFf$oQ8j2f;vN4CUF!S)G z6esFt=9Tz+>n11qdmG4!^BS5Mm>U`!nwnS`nMaB98iBY5P_BWzp{#*4M5_o$Yig=f zVhXYWO^l4QCO#CYpL0BLg8rpbTYoLP7u=XqRx0>lvP=yBoj=`Ex0+3SyUhA~ZI@+6 z=l-3^GuY1__f9Tq| zxrLcbKO}Zg!sfvpM?GORk1rOV(p)tdYknjpIz5(cnpeyu%Fw$mJh9#>$}{Rze6G<6 z{&nIf!xB$3RfOM})|znc&(*Y=!u^VtVwWsp5`4oq?ev_a#y@3YifL2Pv!{K*+(N>W z&bvp4Ij(x#>}&wTaO`jZ literal 699 zcmXqLV%l!d#8k3?nTe5!iG|4`Tit-0jWeOmgE5tvg_+5~%TV7ymyJ1;g_%b!BEUH~ zBQ+;S!8^55Avm)tRUss`xFj<#T_L47QNhr_$V4|Ov&2x`Koq2bi-!*=tecrv;_t1S zoapauAScdiXkut!Xl7t+Xl`T}CC+OE;u=G_2L6V6209SCRPozoX=VVnO4dLcVwDKU zs?=1c#1v!;n;2&sG%-rDv1_$?oU>qI1af$oDj5zvH~!MOU+KLv^TYR*b49#4AFoWf z3MbN|G@3-^_?(nm8E$g2 zRoZk;&R@QcRUzqg=u+^3; z+>d!?=Zo+!`9;sS&z+KY-Q(N-n^v|mJ~M7T$+*V!!Ea&A&&_egb6#JNYr1OX6R{)Y z^902bUAJl6+jXMFH<%=qGCt3^R(WN$(&lx_&DyW8NF2B;BzotrfJs+jNn6i~66P8P zU~p{wbTifOuHZ@e#oTjFedsW_`KLJj*~@3!Rn8|IQr^$9=ELP_95J<<{#Q-2U2L@b z`K^j`tEPKix*;9UxJkLbso8N|%kNpvHG=WF8~!a1`S|m{=$_Ei4K=5Fy@H<2?5p48 zCey6d-6|~UTN-50GIdIgz9f6;lbC<^zM~{GW&;KTT_%xG>*(`GjGQ*7m*<``Z7f#V f+O;zk7;I03?Wfl`Ok?i3wCP}4nC>jg7t&_{9AXhZ diff --git a/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intBad-caOK.der b/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intBad-caOK.der index c01e16e6dfa83d4783f5997bb79e2ac6a9a86df7..9b5cf38bf6f09a71c3ef86b2f51ad9605ec6005f 100644 GIT binary patch literal 630 zcmXqLVk$CdVlr63%*4pV#B43L(14qbGoj6cF_oExnaM!PP{KfrjX9KsnTJ26I8iq< zuf!=aMK?Lo-`hY=oY&CAz}(Q-(A31j$UI7%*9gQlfN~Aw4P_0aA$mnXdQ(&Vy-^Hk zV%%ZS#Hho@uGQvo&Vq#z$dPAiY-G3}<1~N&zu3GxXP!GQu?qF)<~qH1| zMTR*xizY0%uXVFL{=e#Jt@;1I>}i+%I&=Ou-5BN>A9!XT3}{?4uPWkYdFkc0JvTOJ zRoATV)bh3qNY|gcYs1QQMoKatcJaoweCJAIVsJ+ z*-WAg?YooRlSLlyR+oIoe8^Kg|NWz_j3B4YTV8zphnM=pDX;i-?>+j>)Bo*;(%spn z2fXbkIZs{0e!=DsYqjOZ+owa*AGT|szwyb9Gc4j!CyQ$Gm8xU1Ce1odtGCowTn%qi zV~yThmF-!0u`FGD>89X94r7G@sRhydr{ zjMSVQ1@F{Kh2YGpRE3b#;*!j~bcK}SL|CF_3yL9)6&xZf0JIQ(}s4 za-zStft)z6p^2e^p_zfPp}CP^lsK;uh-(bx8Uz^X8|XspQp0bTp@ESJ*fLoIX^3Sa zAj?uy{k>6aY+~GQ(8Q?2#;(=oan6E;5y+8eYHVcq;M@D|KEK<;lU>?!4!Ms)?0P@6 zIb6%*HjGpIJ@vT1pI$LvK)S+F;rAuc!Kta6ZYS_f(9Bq1d;iSLcau93wX$SnW*+M^ zQRaTTPi%fx*}WGZPL{;r^Wqeo%m1f)gm#suH3C!a(KmmnOE(6|K-&` zR&XWX@9>+nU^9~_!^gUpZ#^64R@~;C{O!ow?1=ih#epEF&E2{8L@*K4e$0YYBHZi@n_?X%umBcN@dESt%REZZ_&| zSudwy{PoMNldLToJ6?-iPkTAT=wo(pn{RqoyVmoz;|oR zD&>qX|0ML@hfFN%>$)&$GGn06i#wm%^fRP)IXbMKqOo{VrQzjycN6AvNq*(s)%*BQ z&OVe>$ZW`9pa%@IMLlBbY-T;@3sWRk|L$4E`s2mJ*FfQUHEaKzy?y4{$*Y=-t}#1u J*)!Uo0RWh$B$EID diff --git a/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intOK-caBad.der b/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intOK-caBad.der index 063df6a78dc81ea90fee3314c3bcb9bc90ee0403..b3b083d686e299d3bb358ac9ca88dad5d9cb50d1 100644 GIT binary patch literal 630 zcmXqLVk$CdVlr63%*4pV#KLfj_q_o(8)rhB2V*KT3p0~}l%a%y7#nja3o{RYN^zoY zW?qTEw{CKxQ(}sNoH(zciGjJHv7xDng^_ubIIj_iYXIdM$Q#NUNJI3Bfb^!O0<|I= z(8Rdipovk3ja{qFKzo7m%($ch`oM>x`6SKJ4O+Yx&NV#>!h9nA4@&$-N>f$yL`gLx^?i_0eoGTNy!4o4369_zy4jhf`kh>)w0xo2UQV4W+xY zO%Hh6Pja5Ri2Z`iAJ%HijkiySrax@gK7Zqr8)sO=qfQpp?vfV|4Q|>gl_l)|y5ZJN?|Y%eX`5{-w|qGJp)KQF ze#V9m>sPjIaJzr3KUhgDHPPQDBcq|V$1uJ3LeH7I|D%~h&#XGQHF68j70;vJCg(bt zu`%+AMc5wx^K_c!BjKN`$^x%z)_-Zd^Vc`xm!JL=v)9Ip|E3?ca#jrXXhlgR%=!!l zI!q!Zml~T+)h^!Ys$ci~&9U+sr!*}^m_$VFo|xp-F8udi_YR-$jlazYXWicc0KUQq A<^TWy literal 729 zcmXqLV!CS3#58#UGZP~d6APo`tJenHY@7*g9*n8XEX+&>-iG=Hx@^p$EX+J=5dqG@ z8L2rr3f`%e3c;CGsR|*f#U+_}=?W>ui3)}WMkcyRnI(o224Wx$Ts-_hVcpEU5`S;q zgHuyC-A>?}pqa72_Wqff?EmFC(m{yPK*1`I`N;{t3_gNUAbGe!U>tl&z%-{CiD!Dc2= zhL3eG-+DI8t+>rO`P-4V*%9@1ivvMUo4a%G$-DK=CXZfUy(Co1cd9f(W9PHbU+aGE z`n~MSWW7Dcya!f<&XiiVUUAkpmWvb2!~cK0vFLKyaj_LEt7e`so-w1$qBK&|bm97m z;q2B-pJO~a?e7wk;uVwSii%o2yK{@&SIT|$oV_5nXF)J~Pibd~15>+F+j*(! zw~Pu7GdH#}fZXxo1}jtC41uB}4HI^~ZkZ9V>sWyFj8_gX+w335&#}>1Te)$U_aFCw zJBMdyI)3L0X06uUpSkIe+We4SjV!;u)gPbiz0i0k)nBGeD?n73{ez%NU$gY4W|7k_ zuJxz={x|L0G~?*=@S|7qXB8JoEC}e>&y{j?zf9}#%)eS(&yqu!+fmXXvp$1?4wHy) vA8UTmv<*>!;v0QQP%%SBQm_%fGo;NDhI_vuLPi)R!#~_>MV3P{~R*@j7 diff --git a/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intOK-caOK.der b/security/manager/ssl/tests/unit/test_keysize/dsa-eeOK-intOK-caOK.der index c391cca156216925c7ecfaf633da74fd41c3645f..97ad32b1e9e1b0ab4784fb70b39ed5b225640245 100644 GIT binary patch delta 594 zcmV-Y0U2fdW=Ru@8RZj~Fz=V*4Y#!(>TXoR@oIIkCpx-Ll zcVGV{%POD$^t^{1^_icxEnEYb@C=*5P=TzTdRXaqb<>8t*sv;le6NWrOFmF%FP*xu zsjf029PqjgUWE4wW(5s%QEZAOi3_M&Vnr=UXc7gL*Q>#5WPfV{6#$33V@G2Y{frJ18fq-Wvl)=}0 z+xlMVbq)1V6MO)-a69gP{%o)^WU;^=MevipvdDUzg%AmFeV2&F&8@u9Skwc>xP|`B zuXRRfjl>mtsf%&jY7s)G?P!!l>L5eJ1i>g6tIOqaR%16yjNye#txYC%K=1@l1Pa!$ z%-#2IwUD=UnZr)_F`1o@a8gV#3kC^bhDZTr0|WyC11|tDECLirpDIHIB6XEHsD|W4 gB%WkH2-#r*6e(%8ckyrIjL42KXgnYwNvtNu?Hq6XqW}N^ literal 727 zcmXqLV!CY5#57?6GZP~d6APoo-@gXjY@7*g9*n8XEX+&>UWWPxx@^p$EX+J=5dqG@ z8L2rr3f`%e3c;CGsR|*f#U+_}=?W>ui3)}WMkcyRnI(qe2BIJhTs(Y0VcpEU5`S;q zT!QR zy<)zAbcLhB?@OYCQ&TtHPT-rMnX$n3{+XHYCU+!iWy#3QJl1ET%>8zs*!--rdoMnm zDxD*tZrRT#&vqnEi~G+y@t@kOMPhDUxm&g5@QVL3uiE+k%d3B^;7Y#V;Wuf)W+qXF zk99BKdN$0hxXn5F+mW}~5%qP813^xkyL0c!yYwfO~ zz3j_my*~+T?-G;Z6_e$PidsFpbBo+p%6;{my&$${K`?tyX=jN8Q@c{zd8z5Q zj0z4jH?}Y^H8!NXDX!Y1bE@NJLTSPO=Jj*#)-5~qIgsf}omEt|e&K??D}~A)-p`!4 zDl>&IU3%ujJ!N}_*ul~dbF*?U6@)!)lTULz9{ulb*Zp!mt9y@B{w;}eJG$=ejTzr8 ze|kypd${r&Uxtyx@@X7@cWC}8yESX?q_wY-8#hUWcKxXNo4hmT$7_^C$ZWu1pbHGM xPKmlnDxS=X(ypW|-+1|~vihodpO{3F_Po@)Y*xLj`RkJRp)58yu?FoFVJFoFUcpaTK{0s;g9qHHBF3kC^bhDZTr0|WyCFcUEmFb@U; zRRjYJ2xN0%En{I%OE4Z64KXw@H!(9YH8eOfH(D1BGBhwZF)%STG&nLhS}+70u=y_u2*4yLRv{$%3p0V$Pca;$yQ;@0(e*4 zmW5!>{MBZBalaus7ScFeU`H<&IMe5)+cl?fCjHj1wF7;=O(G zwr#Xj!*+E^8;-+QE+Ffg-oq3=T%Du1j#)2g@_=AVoib>x>mCvUUf`RRKN_;t4KBja z@=Ym!(OMJ2;4GyVK05{jdjJA>O{nw5M)epud;0JzG$gWo2`P4WSBlfF0-}pw%}>S= zy~JiNQ?g@23OkI=!Li!lsKD-b_z+fL=u%Nxhe&<66ld`HqP!_Qg!FS5WTyV04fL}( z_Xs|ghxQR-x0U_@30v5ocs*!XF{6?V=6NXGn0Xfp}v7G8*?ZNGmlzCfOBw0 zYEF)VcWR|VaAsAiLP%f}w$tiEdJ6iJ_nYKS%=?4+l_KH#yPY+dxj7 z*U-e!z|hRV*wEa_FiM=)2*fppat*u;^$c_%wy5H_#nQ|GY>9+{7{n5OkR_RUB~FPc z5WAWfXBjjxO0uzQwRxPgU||Guc$g{~4m~&i(z##hy)yH|_my)+yg47QOt|DftN*WK zoPhH+?XY`hbNQ;z%F93X-1fUmy6V8voK;QoY)J|y(xWt*MCJILlv^2Ya2&1&SLdcoO#PK!r}Ik4u=mb;?%I>8pAWa_GP1mwwp;K^&nj0_|H(|E4BK}f zX!1V&C+>!Do!XncLlZ>*tSDrv;C7PKo&CN2PV;`&B&GZO(^lTqT;s6SmMh$kd1mK} z@GtpA&$rK=l6T$X+y0wYwlY35ZavAk#`M8&Va(6Xam909Uyy6MYULBLBjoc0#S&e& zY24d&qQy6uB$YBg&$w23Wwp}gb;`}!udhfPxGN-j=dOTBS7Aw8&x#V}Y6hl?IG$<0 zcFo`26TtiYbyCoXYWFo`IJuVA0^@kIaJR5r}I5W_# zV$@+{*J|@PXTib<*Sc9A|6ldA*8Klp_O#1>ojHG-ZVdB`4?MFE1~jgjR~7NHy!3M0o*Nsqs%zGF zYI)lQr0dV!wPEEtBPE#+yLjVTzH_Cq@)if?bg6c7uZT)=)%DB}Vx4+@^}(!^Y$j2L z_T9Hl^^>F#XP1K#$N zoTn~gzhLu+wc2vy?bD&@58JiR-}vOl85Z%VlSMW8O4Tu0lV%;K)m!Q-u7a$KChcf{u2GKLwvTJ2L3C`_ zq@U|+7u|CVoAiJ?ls`!0y|stsG%NYj?TmN&Chni_<>MJ~Rq$8916hw}U+iyv%}YFO z5xBBW``TOo=P4SdAGq63Tt4Fw5)W*~)`7ehS*9X94r7G@sRhydr{ zjMSVQ1@F{Kh2YGpRE3b#;*!j~bcK}SLX{~vEGx?FZ#Y{kl|nJ0{A%qX)c zjnp(`c-yTqh;#bmjnqE^rD+#>gta$h}XFNp0~5X|0F+F9bj z)UMQaUTXR+qk_ZCjjaqIcicPKufBqP*O_mBOu3l@Bt$QJ3dQs7nQbCC-Jj>lveJJa zBO0Fnf8}$^Ds%N2zbpR|p7a;aV*iuv`hQ*9;FD*21{o&UeZ%X(We!Z1)W{Gm!q=Tu_(d!B}GRaaekEwRxPgU||GuL?yZEdS(c*PQAYRU{*>tlPE*` z?qv65k;l8$CEqb0@)Xa1|7a^C$Z7MI7a#xOrT%crD}LR3kACy?f4iY{ced#PZ~IBk zQx~ycu=&GUZMpIG>Cp6t?b_#Wd~)Lqi+I$@qMCfA>X@uavyRj1E%g;w!`swYqxV*2 zdlnun`+bLb!tEzUToQHH9joga4%!6%UvOrn;#Q+o?He8&v_9M?U?1aRuzTMckIIdo zgP9v!89?rszEaP#Fwq=Iz?|1LJw#sJVwI5xY`pgUuuble2 zc|wTH?tfYzoJwA8;fN{wDYo$MW`ip;BCdXQ)36sz%U*igr}VnnVqpVFT96fHWc<&< zYQPMnP*MxCK7)Y{lZd>-C8L+?u4c)dGbuHmd-m^xOOa|!B6?O0n;n$2s~aRkt_J1+ literal 750 zcmXqLVtQrJ#I$??GZP~d6AR<=4F?Ul**Fv0JQ!1%S(up&TnzOMblI3gS(tg$A_AO) zGg5PM6ueU_6@oLXQWZi{i%T-|(iKvQ6BP^%j7)TsGD{2v4fsJCxOg~#!n(oZa2e!EX>epcDN7avZQ&XG{J z?B|nbI})eG{b!x{PwmwrF}JSVty*$;#ebPs?R@{`)jw8nCExGxo3vmvlPJT-x|eS~ z8|GHr=A8WP$lL6Q`ntt|Ag9gUx%cGVdS{bIudiMbD&;#>8lkcCS?I5IKX?6J_GPl( z9%J4ED?(>VEnBZR>l@3(3FhJdKi*h$x$L;uij`F}PZ-abQD#vZscE`!{X}uwbFy_I zvaioE9-a1giAnK_$#O+St)AVvMeZx*zIx7H5ZkjLn7ya8v&4a^U8(K7)bv|M1&5g% zTNs!c8}ud5_lRD)%kn0jedpw)=?8Z1tWdWJpSUFUV}Iln#mJr}5iy;;sTGGFXzjUJ zkmqajW?8-YyJJtMoYJY@{8njp<*vGAmCT+|vBnzOAvFp=7$UE*J^x*M^btqk`}i;s z##+y?_6w``Ek1GFRW9$>lTT&h``&TQw!Zhrq`UmfyR?0|ixmvyz-dQTn33^63#$P$ zkOC%0=1^IF7GPpzWJ5`t%mxewx=bPw>=UM}>s~ykNuz(^24Ies#JxL)Z&uNymW=4;zR`_0}}(?q|6cp4c9PDLs0`^kS;DBp42j3 zptNpsqEljuft)z6p^2e^p_zfPp}C=XlsK;uh-(bxQro&FMnz-~F|sl+H!<=t7&I|* zGBq(WFx(RO2Z|1ERgZ|0>_}d&M`0}P_YyH*@FQeZ)H9pTwNfrYwMIrvL{38q8PmyluTwHsrb%* z{&20K>B+$3KKj2jKFydQYH6o`pM9d;svz^^$Jb6iEuZS_eRrX+AXlDrYT%#U3G~ZIgE3z^%%eD72ZA};9>5xZH7X< z<$))&j=%qZ`c&((CsMAV@~3D1Nm5Tc|J$bb#hvnAqo7?CE^H?CUKg{a&;K)z6mq=a zXDk0IMXo7+tc$jEw(TSPhtglmRzLfS-j0m^9c7 zT-i9Z*%(<_*%=vGEDg*JOksQj#x~82l9B=|ef{$Ca=p}w#N2|MRK4W?G@BWgoZPeJw$5JnpcOlI*c*Nb*15lmU5<}ku3$Z=Hw`Nr&cNiXI7;ugrpXiWagzS6cr~b7#WyY=q6>BC}_BbX&OoyNPu*4@d&1t z=>ny7GxJLPy>*il{k;w3#CZ)(3=Is;42%uUjSQm1d5u6^V<^`kf)qOq5OyjU$U*EB zhuWE%>Xev*Y;zN%BC-b=Ss9p{82K0snix5mniv@v7EY0!WxLGR&CmNV<8F=}bKZMC zd*C$b-3tkaU$V|h_mrGpT!=18I{wI=t;?nU@-_1r1x>sQC%Cjsea8IKJ%cMGBKO4p zs~P=Y8nk~V^-SHxyYJr-9zNxdpEfoB;`{b`-P(uqHd)?uW$UT${$*MavGB;JsC$T(vx%x8v`-g{Qc^G55(_M=ayuJ1Wx%K!QQE6##ToDcb@=9{1TQTEJ3?1Cc`Gb01z;>N`W zjSCC{*f_M=7+G1_85vnz44e!cV0;6{Hj|8!k^(Dz{qpj1z0``t+=84`z2y8{D+?gd z#}W4W20p;ZkyT)EHE=d?WD^1!&cgWGvsDTN8JkNu84a`zG+~x7F^b7TEy=Ac0j9E) z{M^LMJiVO!^W~x%S#%68kgknRz8ni7C3tiT>UOa^k#(CWZ!vW(LNF=7yG0;=D#6t}&Er5J8Hi76?lf4CEk| zibE|;P4)LivAKy+3E78?tPIRejQk7+O^jSjO^l2T-zWC;R;~TI@o6)k*t3rsYwm5= zyVDa|8v8%`hI+*+V`HVg;WH0Q7MS^8I(;ckcgJbvFKXN0g!2AATy$4u-hMTYj}fol z`!03Vv(EoLLxe5KMU&+M1K+drUOPYL?<{!AviyZh(dnpV`#lm(>Q?VPH$~x@*`W(- z)EMRds>jZ%U3Ds^Z;kGU$35L0*`KZ}FI4z@;Bm&?)is_<4_|AniA~!PCSmu| z=-I>9EE+Fw8TjY!nmJMM_U%uzCf_r#|500A^rvkf&jO|N_uK3mnGPs!wTyL|X|VtC z^2s0izB8Dm&R2+1jm!Uj;o^&CHf4z?g=woc?Z|3*p%bICWtHvbqKBWEm>C%u7dI|8 zXk1_rz{a7?#>mRb&dA8(V&G)p0OK1lwwYvz9|8>!nsC<`(3n>LusrT3G;r zK90cGH}C<*j;sQUtAVqDBbyM=a2Cebo~=?K$k<%M$!MT$pb4{tiBU`zYDsQo2{4_d zvo>sVS6hM9~Qhi_rW8bvc37& z8*b|wu{)|OC8m^|lynsGXAx6XdU3m_Ra4>rQqid&KOX2fxM980x6X8qjjX>?(w^?o z*S)q!q{U}%r4L7{;%Adj=jzP_JIpT&b9PJpSN&YL`SGm9i?-}Ow^;J5xq3PKByZPe zbB#64t|y<+S#`U1MZuo~-|Irl$}+s8_PH$ z+=F6Jq9;x=%_QBn&pLCaHz1?{vqffYx^>Ekz#HfM?%fGytcj!Z|g<9@j z)nkvUN~Kr#-$+_~^Wcn@X6~4SArGb*EHICnl)U=y*#jzHn0sES-CdHTGGn{ur;^uO z8(FHvt_b{?xA#^}=OXd4fSX;5Uf1?-dwxaTN<%%+@$<#VFOqMkW?svFp69ZxdSTPm zQ+5n#o#Dk3r}OMv!ceBs_ZelsR#-HkQm)q1qV=jbobt>xcVJbJj(B`3!~ zC_cZeZ_4`Wd4ZS{q1Q_ZoK75 z=J2fF`i{Q5&cex^Pfs=6;68TcoJ-H0o60;-R@^YmUiDyOd$-n{1McdU>}8Htm#?L^ zJ@}+?zog~ui)K%wW&5oTi~e=Ww)*zztX+AU?3*iZ?bl5T)xKCcZBya@a+`!5Nq-YI z-?3%OeLm$*zu40+>l)wfIeaLC{a>)!>`4h4R_ZmUPjl;Tjd}Zew*9?$QJq}3|17p* hoQ*YRv%IG_B~>cWUz0Ce1!Gz0)~o?#|DrUthg) zW0Nyu^ZDD`-wHig8W|lvd;XR5H(C5MRkr=ysGaIrd;4zw7xV2uYFAF%!&1s@`*3$r zjdSCdwh6C;c1kSs+`=^TZ5xByo7VQvlGk2rnRLWrskF0i@d`EL^>3c2?2+z0aBX^s z;@9Q&GZ#E!mHn5LzwGq8%$~Wcr#(sB5}Yi&`=?v@c5}J4hqk-^J!Spmz?7}|fhMW5 zCq6c5m>+aBUqS1xliG>0w3XuP6_-l88GD^x=xbOv~Ow5c7jEfr=88pr} z@Mq)DW@BV!WoKk$aW-%?u!r#t7~709N=gc>^!3Zj%k@$#5_1c3QuUJabFD0ZKp%V9 z>l^q0<3?72#nk|48k-Q%Y!=4Xo~=?K$k<%M$!MT$pb4{siBU`zYDaEm2{4hR-M0_FC@3S zo{84;;8W`CKQO6juJB&P=?~5=h@BF|y8Wzzq{pvE(K}YZTdAb^|+ ze^>Z-;os#}A!p4@y>{+t=u(gPb1TQ>*d;Z)bFb`DSJ_6M-z@)JcaA^PRH4re@@tOB z`!3f1mwx>1+VG!gv);Z?TXIul{-ZUs#osQ7*~+W=`F!5iRXu+iHY9l^>{!3;(9+K< k40gy~t~@5qwPB{BO^B}gF)kRLv903Hs(+kHesgF zU>JvkhsoK|P|QFCB*V_b>ziMiSCW{Srx2EzT5hOppa>G@;*s*rugc8HNmS5Pa1B#P zNlhwES13s>E>Qq#mNk$DDdOf42~JHeEy^sZRB+8p&&*3rEy~PGH`F)K1xYjWs6_-g z2WO<_nr9#<&TD95Xkch&U~Fh^Xc;BWYXssN zL%9aQh9(9^5F@qWMtY}KDgcRiZy+?D$c9!{EER(F~WS=APT4g3oXF_Z_k~tN+TR=<_H!eP7&FSthU2 zhy1KZkF4mAjkvyO`7^sut|fnE8$zyYeKTfd=iHX?VRz>1ZGw76fwe66jQfmy4ux9w zSGAYcW(!}QqM~6vFCu2rElWjC%ZJNXzx-X`Q0F-@#%&tswa^ter?L2KJaQ!d-%Iw_ z5?LA1kJAqDy=QAuT%8*D@TG-R&=HNl{QgyTpBr_gACyFCy#3p~*W@2V!U|ig| z$Dnbi0Y5MlWrZ0T|Ff_fFas$AZjb;!3kxvuu^D)?acHwKva+%>GP2kk*cw>F_y&w^ z`WYo91y=g{<>lpisTGO21v#mD$@#ff7C@kn87cY(J|L47SX>R94IJ5ofabC=zV>XD z0zt;+5>7?~Z39i1`Am#rvQYDLD?w>9B|jIKko9u%lM{3FlM9NG;}@7Cfbq-7uxb0& zCxwrG+p4bceY$aD$g;TN+fNKUD(~;~-}QfaWMGp2ZVTgj?YF&6>0Z~a|9+~}t!i-O z4a1>&$D6G&u3s{+IkNJ8JrLxQ+*5P4Pr|B-oLxgOu#7d zXTPrY?<+rb<+uuF*O(va(@@oQ(U}tY+2gnE@~b)5tQC{PA7q~TC7|@=o8ff#$Yw4j L{}0ic38obQZ}Ex^ diff --git a/security/manager/ssl/tests/unit/test_keysize/ev-rsa-intOK-caBad.der b/security/manager/ssl/tests/unit/test_keysize/ev-rsa-intOK-caBad.der deleted file mode 100644 index 3147b266c44938b472deebeae887c6d8c923f900..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 990 zcmXqLV!mb2#B_K8GZP~d6AQyOD<1=1HcqWJkGAi;jEvl@3619KB2KZ8LNBNtN>BO}9}8MgeT_xWporfyn#!ly_mH9^UKnrD5L z>J7$-U)9UgLyGTL{&n0h)jsEtOHzMU>MgLwnJAD>9$}`hE=xuPst1~-wRKs}O+1q+L}u5iGoj{diZ>lvTdw*_uP8pjfF+<|%iB5A-phSpW@2V!U|ig|$Dnbi0Y5Mp zWrZ0T|Ff_fFas$AZjb;!3kxubuo-x>acHwKva+%>GP2kk*cw>F_y&w^`WYo91y=g{ z<>lpisTGO21v#mD$@#ff7C@kn87uk*J|L47SX>R94IJ5ofabC=zV>XD0zt;+5>7?~ zZ39i1`Am#rvQYDLD@%Z>E+s!VF*8puCqFqcM?bls7&(H0=@uBl3=C48^R^zzSeJ5j zb4s3zmWwy9meLvTlygz#tUPxcu1hHF_ua+ey*qzjvHj;fZt*mEWx-JOzU@0LJ7u5E zo5R#P@kCY1sRtpiek;qxD1ETLJ89cPS?y0Vmk2N@ywP3u`|};Af+e$~|4RK@yZy12 z{!7K%@B7zWDD2Vw@MWXgOU@-Rxq5*q7EhVHPEGU;Klr`=_8Y$M)-NAkyL578ru&0E zMz1~QW-PK_xVEq|au(Nl&yMfgte+h0;#s)0FXZ55Z=YLBY?C@A#ng5)PTk=6_NiJM zTj;#SeOif$VpG+%`Y!p;`nV$5@ym?n9}@x(FPc`k)h#V?LKtVprNzBYs2+K?@H&ixI1c`I;NcrYhW#;50D(EV>hAE_^ zCY7cul%y7yC;&Cf8c2f_ar1}-rzV#cWtLPbxaOs2=B1_Ko{Sq?vitA_AO) zGg5PMKt_ZBH3MZ8G=SC>l@^zj=NFY^RB8gvGmsPKH8e3aFf=nTHZ(UhjS}ZI0&$I@ zT!SD(69XfNk=k%0y;Ca{f-|d9;RY8KCn^{jm{{m0WtJ#txQ1yON*PFibaC+rrk3df zrFAp&O8mWblN0^D4VoC0kOPd7m4Ug5k)Hu5&c)Qk$jES#=@e(vz0(pqj&e-iboh1N z)T}it+b*l~Jn>?4pP&|XrK|sCi`m!BO6&8r)AUvR%lnd=59CVxT=Y)1DX1bTwVAp1 zplgJ{^@#L+GZk&xjVFH+|8o3u@xOY5d1v?oZ^#SXS*|G;pPI~DTJdhr(X-sIUbOgZ zy{7$g|5<~bw&6c!^sd}LdCpJA{l&8+F1Y?$F0$FLKl_UokFU{{SoMu-?a%nMDBSc- zpKivn;fTkw(vKOh*56&<`>$0(WZjLa%&N;h{;ilfIrdDVk=Xh75?9s~S1I+fe*-F1r}EWX9GtzA)v7=jITXg zr9hCexrCF^K-)kQW;_$4m@L%z+)7Z=Ov%p$renRF{N%(O{p5mTMc1@kVbg^5JQ4pU#JyQ_$SI%oe`)e!_M;qoS_2o9ty^4hXt%y-i&eFm!p}yb znf#p_m77aTH}yMm-dV7Irex2S88TXHmn2k~UltTP`Rl@yM@GJXZ@2_*I%Zm&z9sH> zfY_@8QG7OPTQXHG6_5V4t!gy)@lthMafj~_|6f1j2cO;&LibIv4Brr=FOgn ztw$e-%&6EF{bS>)>dOyg{&Gy+xl!rFe(jB&h1qwHioDOa`0x1roY3~mKNy-@FWSFl M2!B4cG(p1$05RN!rvLx| diff --git a/security/manager/ssl/tests/unit/test_keysize/generate.py b/security/manager/ssl/tests/unit/test_keysize/generate.py index dc858f7425c..2879c66e2ac 100644 --- a/security/manager/ssl/tests/unit/test_keysize/generate.py +++ b/security/manager/ssl/tests/unit/test_keysize/generate.py @@ -18,222 +18,121 @@ db_dir = tempfile.mkdtemp() dsaBad_param_filename = 'dsaBad_param.pem' dsaOK_param_filename = 'dsaOK_param.pem' -ca_ext_text = ('basicConstraints = critical, CA:TRUE\n' + - 'keyUsage = keyCertSign, cRLSign\n') +ca_ext_text = 'basicConstraints = critical, CA:TRUE\n' ee_ext_text = '' -aia_prefix = 'authorityInfoAccess = OCSP;URI:http://www.example.com:8888/' -aia_suffix = '/\n' - -mozilla_testing_ev_policy = ('certificatePolicies = @v3_ca_ev_cp\n\n' + - '[ v3_ca_ev_cp ]\n' + - 'policyIdentifier = ' + - '1.3.6.1.4.1.13769.666.666.666.1.500.9.1\n\n' + - 'CPS.1 = "http://mytestdomain.local/cps"') - -generated_ev_root_filenames = [] - -def generate_and_maybe_import_cert(key_type, cert_name_suffix, base_ext_text, - signer_key_filename, signer_cert_filename, - dsa_param_filename, key_size, generate_ev): - """ - Generates a certificate and imports it into the NSS DB if appropriate. - - Arguments: - key_type -- the type of key generated: potential values: 'rsa', 'dsa', - or any of the curves found by 'openssl ecparam -list_curves' - cert_name_suffix -- suffix of the generated cert name - base_ext_text -- the base text for the x509 extensions to be added to the - certificate (extra extensions will be added if generating - an EV cert) - signer_key_filename -- the filename of the key from which the cert will - be signed. If an empty string is passed in the cert - will be self signed (think CA roots). - signer_cert_filename -- the filename of the signer cert that will sign the - certificate being generated. Ignored if an empty - string is passed in for signer_key_filename. - Must be in DER format. - dsa_param_filename -- the filename for the DSA param file - key_size -- public key size for RSA certs - generate_ev -- whether an EV cert should be generated - - Output: - key_filename -- the filename of the key file (PEM format) - cert_filename -- the filename of the certificate (DER format) - """ - cert_name = key_type + cert_name_suffix - ev_ext_text = '' - subject_string = ('/CN=XPCShell Key Size Testing %s %s-bit' % - (key_type, key_size)) - if generate_ev: - cert_name = 'ev-' + cert_name - ev_ext_text = (aia_prefix + cert_name + aia_suffix + - mozilla_testing_ev_policy) - subject_string += ' (EV)' - - # Use the organization field to store the cert nickname for easier debugging - subject_string += '/O=' + cert_name - - [key_filename, cert_filename] = CertUtils.generate_cert_generic( - db_dir, - srcdir, - random.randint(100, 40000000), - key_type, - cert_name, - base_ext_text + ev_ext_text, - signer_key_filename, - signer_cert_filename, - subject_string, - dsa_param_filename, - key_size) - - if generate_ev: - # The dest_dir argument of generate_pkcs12() is also set to db_dir as - # the .p12 files do not need to be kept once they have been imported. - pkcs12_filename = CertUtils.generate_pkcs12(db_dir, db_dir, - cert_filename, key_filename, - cert_name) - CertUtils.import_cert_and_pkcs12(srcdir, cert_filename, pkcs12_filename, - cert_name, ',,') - - if not signer_key_filename: - generated_ev_root_filenames.append(cert_filename) - - return [key_filename, cert_filename] - -def generate_certs(key_type, bad_key_size, ok_key_size, generate_ev): - """ - Generates the various certificates used by the key size tests. - - Arguments: - key_type -- the type of key generated: potential values: 'rsa', 'dsa', - or any of the curves found by 'openssl ecparam -list_curves' - bad_key_size -- the public key size bad certs should have - ok_key_size -- the public key size OK certs should have - generate_ev -- whether an EV cert should be generated - """ +def generate_certs(key_type, bad_key_size, ok_key_size): if key_type == 'dsa': CertUtils.init_dsa(db_dir, dsaBad_param_filename, bad_key_size) CertUtils.init_dsa(db_dir, dsaOK_param_filename, ok_key_size) # OK Chain - if generate_ev and key_type == 'rsa': - # Reuse the existing RSA EV root - caOK_cert_name = 'evroot' - caOK_key = '../test_ev_certs/evroot.key' - caOK_cert = '../test_ev_certs/evroot.der' - caOK_pkcs12_filename = '../test_ev_certs/evroot.p12' - CertUtils.import_cert_and_pkcs12(srcdir, caOK_cert, caOK_pkcs12_filename, - caOK_cert_name, ',,') - else: - [caOK_key, caOK_cert] = generate_and_maybe_import_cert( - key_type, - '-caOK', - ca_ext_text, - '', - '', - dsaOK_param_filename, - ok_key_size, - generate_ev) + [caOK_key, caOK_cert] = CertUtils.generate_cert_generic( + db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-caOK', + ca_ext_text, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) - [intOK_key, intOK_cert] = generate_and_maybe_import_cert( - key_type, - '-intOK-caOK', - ca_ext_text, - caOK_key, - caOK_cert, - dsaOK_param_filename, - ok_key_size, - generate_ev) + [intOK_key, intOK_cert] = CertUtils.generate_cert_generic( + db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-intOK-caOK', + ca_ext_text, + caOK_key, + caOK_cert, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) - generate_and_maybe_import_cert( - key_type, - '-eeOK-intOK-caOK', - ee_ext_text, - intOK_key, - intOK_cert, - dsaOK_param_filename, - ok_key_size, - generate_ev) + CertUtils.generate_cert_generic(db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-eeOK-intOK-caOK', + ee_ext_text, + intOK_key, + intOK_cert, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) # Bad CA - [caBad_key, caBad_cert] = generate_and_maybe_import_cert( - key_type, - '-caBad', - ca_ext_text, - '', - '', - dsaBad_param_filename, - bad_key_size, - generate_ev) + [caBad_key, caBad_cert] = CertUtils.generate_cert_generic( + db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-caBad', + ca_ext_text, + dsa_param_filename = dsaBad_param_filename, + key_size = bad_key_size) - [int_key, int_cert] = generate_and_maybe_import_cert( - key_type, - '-intOK-caBad', - ca_ext_text, - caBad_key, - caBad_cert, - dsaOK_param_filename, - ok_key_size, - generate_ev) + [int_key, int_cert] = CertUtils.generate_cert_generic( + db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-intOK-caBad', + ca_ext_text, + caBad_key, + caBad_cert, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) - generate_and_maybe_import_cert( - key_type, - '-eeOK-intOK-caBad', - ee_ext_text, - int_key, - int_cert, - dsaOK_param_filename, - ok_key_size, - generate_ev) + CertUtils.generate_cert_generic(db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-eeOK-intOK-caBad', + ee_ext_text, + int_key, + int_cert, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) # Bad Intermediate - [intBad_key, intBad_cert] = generate_and_maybe_import_cert( - key_type, - '-intBad-caOK', - ca_ext_text, - caOK_key, - caOK_cert, - dsaBad_param_filename, - bad_key_size, - generate_ev) + [intBad_key, intBad_cert] = CertUtils.generate_cert_generic( + db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-intBad-caOK', + ca_ext_text, + caOK_key, + caOK_cert, + dsa_param_filename = dsaBad_param_filename, + key_size = bad_key_size) - generate_and_maybe_import_cert( - key_type, - '-eeOK-intBad-caOK', - ee_ext_text, - intBad_key, - intBad_cert, - dsaOK_param_filename, - ok_key_size, - generate_ev) + CertUtils.generate_cert_generic(db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-eeOK-intBad-caOK', + ee_ext_text, + intBad_key, + intBad_cert, + dsa_param_filename = dsaOK_param_filename, + key_size = ok_key_size) # Bad End Entity - generate_and_maybe_import_cert( - key_type, - '-eeBad-intOK-caOK', - ee_ext_text, - intOK_key, - intOK_cert, - dsaBad_param_filename, - bad_key_size, - generate_ev) + CertUtils.generate_cert_generic(db_dir, + srcdir, + random.randint(100, 40000000), + key_type, + key_type + '-eeBad-intOK-caOK', + ee_ext_text, + intOK_key, + intOK_cert, + dsa_param_filename = dsaBad_param_filename, + key_size = bad_key_size) -# Create a NSS DB for use by the OCSP responder. -CertUtils.init_nss_db(srcdir) +# SECKEY_PublicKeyStrengthInBits() rounds up the number of bits to the next +# multiple of 8 - therefore the highest key size less than 1024 that can be +# tested at the moment is 1016 +generate_certs('rsa', '1016', '1024') -# TODO(bug 636807): SECKEY_PublicKeyStrengthInBits() rounds up the number of -# bits to the next multiple of 8 - therefore the highest key size less than 1024 -# that can be tested is 1016, less than 2048 is 2040 and so on. -generate_certs('rsa', '1016', '1024', False) -generate_certs('rsa', '2040', '2048', True) - -generate_certs('dsa', '960', '1024', False) - -# Print a blank line and the information needed to enable EV for any roots -# generated by this script. -print -for cert_filename in generated_ev_root_filenames: - CertUtils.print_cert_info_for_ev(cert_filename) -print ('You now MUST update the compiled test EV root information to match ' + - 'the EV root information printed above.') +generate_certs('dsa', '960', '1024') diff --git a/security/manager/ssl/tests/unit/test_keysize/key4.db b/security/manager/ssl/tests/unit/test_keysize/key4.db deleted file mode 100644 index dba491b555c9bb73295e2308200897bb07a907c4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 48128 zcmeEv1wd5I+CS{l-QC?R-5{xybST~3-7cwwfJlP^0wN&Njg*0uN(e|dh)5|V;(vG1 z*H*BM6+G}GG%eD}*RQgj>CYHAW8m*+ z00ACaHc^11&|Pr=KLU4wTfn!#W#Ale@?_)RkKt?&XAGP%@Ha5PgaR>2j|_>Zp|@^w zXi+DH-oOcgkO&6=iLl|(ATcVi91ge-+yE{?O8pS92iO5@fNVMoXAGP%@V|@!6d(dT zcc-QbDom)CEJT3`B~-7GVM5N)J`zkwv7SPN2{Bjn5nw_{{52p<@U%1rAOjIlx$Rsp zU_y=$9_~CG^#8vRq6FcQiD_x!uM2sanLAoJdw8h3+j*OL{z(GJYRXG%%hPB}%c#iH zd`m&YVrNOCuBoUht$B$?S^g4@&P7EH9eEnHi!`!o7Zp?#WwmLfWz;maIcUs4kPi>! z!wdQFL1owm=oTL6CSmALVdzg`*iUE@VSZ>N0F4Bpkq|TzhDIXL$P5~pLn0BFDbPs_ zvj~FP-~pZN2Wo`}1U170g4*E$K@IVMpq6+*P*Xf0s4X54)EE!Q0vdmTcY+UQnfFA7 zS>}aV=7m}2g<0l>S>}aV=7m}2gXQ9b<>G_o;)CVlgXI#0X$4_gL6}w$rWHKV!fXn{ zYzo0r!ua8V5yT5SQeF@=FE8v!d0}YzL6E@91Ks>ZgxckUrRIaB=7Xh%C}BxX5<=7P z!i?{i~$5796TyCLV-re&e!vT~y!5zA7-!`V4oTKRgoIYPFYn0a}+z<7GXE2(zIFv*BoFZsqtb z3CediV9I~6!N;nAfJ97A3vY4)-OJqG%EI%T4dm}^c$}#J!3qzEhm{Y2M0}q1pHcA5 zq6yD887K=xA}0Mxft`nkmzDcBE#i0kKGFWeu7!C{?*DL(Z~z&=E<6YPG9VT5qZd93 zsQ$0N5KR!k=iov5Jp3SDB%lrg5QAM`T~^E1%F&TV*~*Vb%g*15M%&86)6Ut3#@)k= zh8M&S;xxDOq+yZQW#yp(Q9*N|VGvt+b3)XdR#q}*mYjCZo@&aR7G`S7sQ(4~!aubS zF$^&e-3!z{%4GzwAUsIxzlfh4M0$cB?+gAvnMVGbpu?Df;79r|K>rgpr$PT}8c`bo z%mxoq{V%dY2*N*M1>*}V7G@B<2*wCtNqCUnUorY8ywo7d6Qe|bTq-B05(ZjL8F&c+ z%nuLJ{4bg(1CgAV$NhFDzgPx=u?7QqvIvxxT8t z-6;X6KoV3dZ+90L&y(^`0|%r5Y68Q74#4L?5lH!80oMNCKT~H%aK^xYmjMzWKRk)N zGi@* zdh!Jo&%zl4XAJy*!2k;-Pzv6|&c?*S%Fl$?T2Mp?#4l`eG7!iMf)@X?aK^wH1OK@U zV4Zg8;gIG5bbb&-2ZV=s5TL#SXuAJ9p3T#GJMho|R{(bz@?WEP%`h7dCk{9F;C9r# z`IiObMu%^=uD;f5wZylL=U8y(_>7Yv-0lf@CdzhRqJ_nNU20;`;`wD(0w4I6QIZie zg98DF;lVCG`{GzsH^FG6&OSM_21yN>i^OtGT*X87CBprrwzMhKQEo~^7Ispo-W1cS z4!MkP`ky{z#uSeCz3n*dTgD@|&hp6Ek5$;>ZXVl(G&I3{Ecao*XAO+g`%jYuxj)&a z-fj0%F;0DE)A?qStSmaOx1T>6-mV^tC2s_SECs`b&xA84Gt*M)a%-dFO7T7Ls_9%% z)CKfOoynWTha~E^n{-s3gY!j#V~X&i`CGPqt=g|GdZ<;hBErMLgF@j2K`cn^it z_b}lx5aEF!QUrpBMx<{E?9hA0Epx|90tK4sN-4Mi@bCzs@F=f7UA@7hQnW9(mWIl& zi5Wzt`qq9HxGm9;cSKxcA<^uPw){dMS@e!yNA$wu@w-8OmkQ_Y5JOY zV|{W1R#I6-`(AU1SLbA*+n)-%K!+j49ys`n2EMGl^*JG5^2Z2Zg2-!IwtVeEkFFRd zq;%#w1G6`y3RiV+p2yteOo_c@;`y|x1%s7~etW3w$x^la`BAA@`zr|SJw>Fh2J6|= zTqB^1&jfr_Qs)LtAI~CM8LO&{=iDKbIPlehDo(CIZW^)j$){i-GUv0LMO|$pbOq&imf2y4 zBu{)BdB+7;$)5F2h}cptl$P7vYk%{qj+;bD^GLR~d0jFNwKTWGL}J;xlIGbZG&VPB z*;hmBTUeW+@tveq*aa|Iml&glO!k@l-i}?@J?{^>ZxAX5`m*_ zqV@WO?MBPGc~yA!;@glX4@=38(X9Ygp~#*fyl4W%H4Sba48JOLy$Q-W_6n83?ek8|r_IHMJ0{D-6Cz1NdNaDodRw0@`1Jc9;QAgxRt4! zuO0_w9Upc~L?4Xw?Fg`auC97*uc0SP*gr#|Lx*IATCW&`Sd|looOAK9EJ3@xr{k{cZJubxG;7q0&?UR!S#95V zspQHD?q&0GB)>)w@lzqcy)D@nsvKeD9T><_CWHxk&tzltn`!TrvLcE*X3IrAOq@=hEQ+(`$EVx&EC1 zoBs>E0SEa%3ug?RG4MamK!Ol_2m%2X7SvPsT_6ZG<;Q}9{9!>_>{xhskS01_1YBs~ z*S{}`A!=x<-wT+3YxxHj{2q$4RA&sFG4O?fct-%N{B!-t2mzS?Uta$4q2(V5&JGTE z8}JdJ2VV(~3HkAN1TZZUqEsjz+&5RG5WgV5fYl$aND%l6$PfwjOJ5Wb3#0~;{`M0C z#E(EDJKG2fm}w(Q2#6= z&{ScKqN*wj8nv-2hNW%GsfS)M^;pi3fJ5ZSey5*2aS2R^h$#I9qlJ~b=U0EJ$XAe% zHt{b(BHp^1+3Rv7*}#@Nt|hVuyn4H^Ow>tf{f0)sNZ1fy=vN>mtykBH?NW>GQPt$X z^i88ZqCUtuVp_~kn5#a&MGtxbrbGBSNYHP9v_QiV>#?br2u`?lelELp@3J~Bs0oSI zF^EYz@>1A%-LF6@Hf7cxzn5LeQDP3>RGXS*X}EvnIF*hkA!w0GMZ;SNrUm|Rw!e2g z{|=F}@40Xo;It?Cl0;bQ7RMN$Jvx>$AjjC~!lWJ|P7k{KD~!AIZENNH-0@CNMJ;i{ zUM-HJCJHNfqIv6$3QrU=WLbe}0YAm~J3K1gk`Q85AJgJCOj2Tgt+2x%#kXLqOe&=M znHp8)!8p;cFeb|mXV=QTGuxRt-m753Bio)v7WZz>YjQA|8W42PAvS?Wq~r&qxSDx* zK<4aOK1v&WSE-L^II+(PeC8rpLzAiX2qb=rC&CvmK{e!3lJwoShKQQQ$b|7?!bcD+ z2snG&%2?&~IhwvNKK3BU(0@27|BP@zLqHt>58fHB8;SuDCwER3abLTevuVxQ zqwJ-^`N;>Lmv(-I(Nb#k)phF)cr$vwx0Sdk3X|Cb2W__(8VGI*Ck^A~A%SVpev0vT zc-)ER3!2g;%B&q(HP`Yr^(SMRHH$9cE~lT6Q+<_TwfifKMMM}Y56bT+Shba!Co^8_ zyO>cB*N75?BTMwOKR8UK1x$zf4<{R1Q(J#M*}qeEnL5@VR+lB0h_~O2#Wz$+eJ^o* zEj1`qCaXGwmFpl+{8u1fR&B?$$Z@@53yQO!xTt4aG8a7^zVybYNm-2eS}^_|m=5LV zAb*F+U^fG1WO^6Z54TqLZ6392*IyUB+e1~jPiE!y3^~Zv{Z}B3ct(^^U3b#G_ zqHpssomM=GFKL_j{nH(f;}FoTUTlp~YP^ZNtW+je7MNbX@0uU?p}$!PSE+f$zS`Oc zYLL*|Pm8V%ZD16!6sPxq^PfBI!6uPzZ^lO2xHsdh^se?A zwZ97!gIpX?r~OLC%<{*Zo1$UlA$$waY6u^dAq9CLQ7hWlf#0DbTrLl!i%q~I0%#d-_Cr#`e8^f zWspj(r-WoXN{fkANAS%w{D)F9Hk>`|CDP4eKTRV;r<)bzdr!o85dE;|N)wA0n|qMR zZxiMn47*45*#u5=ySHBp7N9F;GhEtadM{j~4W{ahCmwdom|GE!_EH$?rFy>~UFH_( zqnt9_v^PTWk+OySz4u$!Wl`0HWnY41RPl;Cs45(l__WuBC7pUI2ACh>M;9I$@~_LJ52VG38Jo?E{25Q$x(r%(*D`Fe4rOVzBa zEG74S=LUx%odDu})YnTYk~ti$=c9ekpLf51I_`Mol7R!$5mr6n>Mj|@hY?ssRdy%1 z!RFj(*2JS0qxDR<0YqJ?X(hRK?O8h6m^yO0?>XrEF6Ml?gED?)2hs6P8?+#=F6sqR z0I(kh)c=6cDb~Se&NFcDM^DAovYR}Vks=b6+fo&Fr>$E9HrTO zB@36XC~s656H7e5+FI`rDKNn1`9wf!V4^*l^U6E+hja9TWT#_qO`5byRSxz?KTcow z6nQmSYtFoMf*nt@0|AYH;giq9B+g?;>ACpMq2i!H`Eo>aoK(ZUVhs`EqE>A0z`4@@gl zOqhT0endBw$oesVc=QYIu#T1Yhk`Rl!ZhM#hbf0|AIuAEmF2tovYwA7K;bqkR*N>= zKtYsORc-eYztXKIZkwWjM4&N~fX=$?{0V1T7M{nHCO7H=9J3_z7GH}I z`B4*mKJ?m?tP_xCNv|jd5Z~|i67P#@*QlkqMY3@xRz7KCQR$AABBh!f1%ioL`u^#- z!`lx?(edu2*(2jw&8)2OD+u22IN|$BapmJez)0|0X775d6k$Y0T3()8GzbanG-YnH z%owb4>E!^fDwGbPdd%&USak!2cHv#Cro_{y*U#kA?s&`7ihX5&zNu zH-Pm2@ge>HXQ%c5Y4LvO$cP9E3R?ap-`#BzXX*3UQJ+GwuE5v!ura%a(IF2NR+opV zA(g&pC3_CJ9sSgIhcCy~a!2xM30K^Q#ZS7TN}_u1k`8KjffGB}q`^e3j9@z4AA5wt z=E5L>ztsP48A+WSXT*mqTIhCk;_`USH>`0{imMTo#edax2=(gtuR!uP+)<9Xvx-Tc zys{xoJj0wY8iM>tiH zjL1JGjs8xzH3hC|_kbLYi=ewU`DVdwdw~ksYe_iyc!iC^T(QID>A%8gN~$1HBXox* zrI~A9-U(z@jf5x5%q}!hjLPXMPx}egDrwJe-wLA zDS?Le(HQ0&28*P{8pKX^ZZwCYd&_NVVjg;>hiX}NBn@cfLwu3sV7&JN6dqC zrnkA9iuIp+0u*q|tR%|PJ|zyGOaD-fK>MlKx*c+vKs^ELc9)Elf!ex;hh0=5E>AZq zgD0o5AM9e^@Qq1|-faDR&X`bU<8d+0cCA6E#!Yx1A$M{KiB6KYsUGW#l*9U5vZli5 zYGB(;p$RwUo5GJd#$3E(+^VvsyKdhI0N_S;sP;Q%*#<0@7iY_w7WK|+$IN@BR)GB< zN?a3)y;phH5q0{Z(7?VvcGc5(46URg=1bNN6&`i9WXC~e9BttZ#!)Kco@7-GYy}2s z+k~U>F^^CVbdxY+^sJageYAJ@>*ZF8iwOaXQee}hYi_{-8BRa?Q0#1>CZ}JoJ+2+D?Za7 zJRSFBz|hzd|HH~uG;Ow+Lkw|!Q76+A+{v3Sm$Q1GV(p~zf;KO#^)0$_bj!b5e2=M_ zM7k{i+A{Wrmf_jVC8^fP(f{T34Pgp`;i|%n6F*dx3bIeX>8BHra$L2iO z`f0lT$;Wd-=d$Z;D;qft=L!T>yO*g0^Eq+tEm`OtxF(n!7pW%j`{&HN^>p$d@&$gx z!Do%z=xMtv`TTV3dG7V9w|ZCv>GTAFy{1eFjX2x#C)iPJ9tAD!%FfG8B060~Ftbk0 zAMT>z2&y85HzaE#d*6gkT8htG!Ch`0G`c7?#9ijEWc=A}R(MW*x ze$zH7hu>-jcf}Wr=>yNk>A2xXk*TohKMqTE&krm

UW{3CBOd&1``7u!qJfwA$iR zqKK;7uF)GWo3tG(>)vw=?g4Uoe%+=wgKn6!hD;&$v6r#k8%OJ9w zZ%t|TuGl3fOA2YGG7d?IWydE*TsW#vEljN8rNweY%gFhB`z38%j}W~3mA6Q3q^>6T zI30_10mzQXrfZ5*-W!G2b@T-E^j15Ub^9(m0lVLoy2X#hKF{v;K2)V~W6?v5QH)gv&V< z4JfQuXDkauUd#;9QNFjU`b14|U&^zJLXAnhP^8PxbT|j6vF7Ft%4gcam*JJ+==d`q z`R*Ya(sIGX>@g|ABZLO=Rcn<4G}(84-#%d++>*87ay4SHn!{g zXttdHA;W2=vx;@mtBf9l@qqX_s3@+?h`PTxi)zg1k(yf=T{((Zcq=(O2I&*DM2gkd zj}^JNsMF;8$h)hj$-!|9l$Pt914Kam^+Z+LEhA*>&vwWMtT-)W=L}DJoPc7%86Az{e`B!-p;P+h(r%M+7KRk1I5o#$Lv~dTZ!cGaoR~uJtfb zGbM(m?!M>;uD!%5d5`OO-j8mM!r9tH^Y6xQJzHQLpD%kCW1cl{U-x;!D;3U3TD{2@ zOLe*Dd9sL*{1%ook)*s&?cP88~8Xsj@*|j_f0VAJJ@RN&QzT{=3F8WYgevybk8_Z(N>)2mK z-5V@oeVpD()i@zp`@GsAJE{zCA&Na~uk-%2j@OtxZNwYWM2;*8g>5?ejaN&94abXE z2o#P@!nPd-4`o@;y_Hu4j&+$&MNX?13D~l4&_DB4yLvuiRhYfUBp074B@l~PY+*e$ zAk5X98ugXMNQ2+$xD!5RJSzro$|LmzzQBCt+0?Te?-$f0x#ZxsMTx9hxiOVoje@|r zb{`}2B?8Hj7GQX2_%c>o#qmZ^_&bi%ao>8EKY-I#CV#^ei^i^nWaWvdvB?SU8hqo4 z^mm5NG=sVb2~jr^^|)8y!H*Zy#Y=D<;g}nhC98e3)~-%A+O%azkQiG=mDjM7QMX-< zluBc54jVL;Pin#HdZA|#D=A)H^SW&2?UM>`8Y}zvjiJ~Sr5XJ3%7zGXUX65cNw==E z8cWVnQL-7QU(OZY?!S!3x2~kl4ty`S+ z>i8pt_|VFFK`lhi9O0$Oxqgtk8ujE zGibH_6-ZA**V#*%3rnBwHkZ$DTFsDUj5v#^Tdt`!i=N+9XdMI75&RtF?=U&n+g72Tz5_$;egDy=Y31nTCn z&WlZ9o6c$+zF;sd{tsvS`(d-+@&9KZa22IbP7b?2!Iw-CsJ>~0oz<|)E-~vgzo6aY zu<}bH$Bni0b#$>^G7A<5dC0MF4O``SUfyN*oe`3R1~H*9H2A0Q3Jt-XQ`} zeCvFFo&N_}n-H4euPuf9r}bHXww~;13!(kFBi@`Qf$cSo9duw-Sto8ATvMqP~a$dR#Esh)_5IOZ0_#`n57-m)TJ z!Dn(WPgeHq3_9$xbAAmBt-N~A1#R%|{SuN(*sejnc=ZC!jR_x9@i6@CUhmW4VSx#DF{LRO7(hH$_CXY@Spqrd1uR96Qz04qf@|h-aR7`DSlqY)2`UDX*Nkv_DAXMoylglV8RXCnbH4Pf@Oh z>-eL-s7{?iElS2k65ne#5U~2NuUxf$8XQ4f&OfHKteW+%4(&XFq{4dyY}X@l{AYG6 zCIm}YoB_)VHy54;eslq7+FQwu9$NshA4DauY>9#RkFtv2*nV`4+L|P2Mg%JfS|M$a ztF%t%RfaqV_*jMPlKLbdK~7b&lj$1n@sSA)+xxP2k1b@nYNm&`Tp<1vyS+LAl6%5Cy0Iv_%N~AqIez%fWc+nOb1mLSNzihP^j5os4s?w{pEvTt zrD`Vxg)33k2!)Mm-MEYH1u<&Hvp1buy$8_e!7;rGodwD@so*ogqmDC&0 zVtkSJ&xIEkU}u_!_yCOC-Vy2D>Mg98J!1MWBJ#WhzE!vSThg!96}b-6L8VQZU*R@+XZ0HIUF=0@MRIu#yW6s-xB zOuni^2U=4otrmPbp!0LB=i`24(keydB0OAR=d-&!!UAr(J>KW<-SrzBJsme+vqw8# zetF-~#1aM1@tgMp8Y}P{5_rX|#eC#G_E9F7;gEOhV>+wHR5P(8 zPC{;jqupdN9WHjGC|qkdvZdull;)in0?}D!pWg!=uH78pMH~W;! zTkCpzMGw1>S|FH&kEVLmG}!LLt*{Z3~K19j7W%ACWJ`}O_TD%><-&JSKCDID5U%7#9si0!{b1-Tjh zwEMr%q6F>`fZOUUEtq?e=vm&@6M9LQI3oBQS1UdNU!63Vj`GJIp_w_4m8JPtkiXO0 z3a>lt&-c8qU0|_9A1c9Ku@WBlLBAK5wzbzM>{F_E_^&{c!^_2XyCA+bdT->a%iNK; zjJP}rx|i7%pzUv}#!u@Grla^d$lqZSNr64ex$kqBLxHY-?lAZmS%rFLgfpmW=Se^w z(M{oBK65&{!r2In6MX!pqas+!$|#ee2iYr|K)h!*qF8{HoXZ?cOa8;zh7tM4!=ArG zWU^kEol)+Ec$Z2|<=#&BUG;oHBw`07HV2bNax-ME2WBmIYy{hinBcZei4 z%jDE}>U!Lnf;~4!Tr}AHej95u#iPb5ir61Dmq_hbAjPH>)M)7DD=vnQbbdW3DzdI`PEa=|8Gqxw8{p2_MH{fWy?;e^h&MWoe?Z7wl=l9-ts z-sUW{UvGG1dmaBeVrO)#*=5(6yYJuL>ezG=W^!s_d@|?nMP3p=YJO*|JuN&8-LPGI zCIyruboquw$)~5gB%Jj%J&(jxjEBXF>it?%vqsz=Y;mMC z(pIl-;9sH_j80kdEfvBtiBmEYT760ffYTAVK0r!}!xkq~dML}RrJAPAvBDmKHnd0f zc}pF@{1GpzXM+Bpdjf_Rp4)1c)I2^P^QtUw5u*`6Y)t{VP@tXw87hY$Gj{KAG-2Ir zkgSIGBeq^fQRK^-FJ?MPEbxiLwQ6%)A;E0UXm_0 z|2wyLu>njUHKcYER`zc^xjzLZ4t$koKH-7EFhju#ZGP+(RkcF4h?g;si*t(@+H0uq zJWxV^jTk)cbq|F$c5c4*&Se3G=LVPXZxJ#!Aif(rD(1S$s2_e@az(dNmS#=&z-J373*1i#79L8yu{>+Ejt} z$Szc(<8<77#i_Za!0?My#r1@{o%lqGB@2ruxSQ(*TqI;N(<-msdv6^pHHK!uUM?dC z490LXLoGqP3|nMmVe@6KOQ&mM@}lv%A>Pc!0Y1-<8kgH2_=O=0K5&UsC$%ykJxC;8 zxYjtR6I+I#)os+HMq{|oMV#DW0^$pgD9cR^y&J7eC}U8vp>$*Ah$ghvLc ztPc(ScVtP}8{KsJM$v4BoO3)+$Nh?LJo{okG464OtnX)W;?j$m>t!dnuTAmlEK(8F zUlVbB2{u=DDr`aflmVvxJd$grrAsh(TS%~-GRSiIvYt`+Y_vTCAj;)n-koG zsSuZFRpm^$ez*pGIg{veLq+PlV=ik)FR3hsnptyqT@~P4MG~jUEg{tTI4a_6$iz%2 zKK#=WH2UI2I7?YUOE2S1ZLMiLG~?j|XHzdyUZkC=GcTFCEc28h%#lg_+EV7%Tb~(*g;la%?_nBs6~X(+CEN&RRfV;fL!aFi*gLdhLGNP5E!w_BZwa{|Qpy z&3~de+kD2r83Ql|;ti31bNv6$lWraVYm;uFGkgDWy&uR%*yP(1D(Lzk-`f9>@jpnr z9QHCyDAd0;{`aR>d7d`@_to%euTJ`NtG^xBclOPIHh+B%rdHGHaz)geQq4GJ27^u8 z`hAa4&>k~ynp|jD>^LFr@_7994k^Kq4**(~ISZSI#>12VC9hd*#K(_{;*Io2^6oB4 zZp(XqqP(I#!nVtYh>Timy4hs6R*TEUs}Y1S#dn=or9(#~-apDK$N_)wCIgGuEq%iq zuSIB4MP~1otbTMo7p$0QsE~sCN~dTn1wp0a(Ib=NRpd1ids~Bf>o%+nq)^%tD~;Jz zVKU7}ET6E|{3Un59ON^ems!?7#pJJa8+y)t;=EtCyoBoCgRrI^S#{P>!W7((K^x!nDNv1hUK1 z3r}X824!fMIZD*C_-&399}S`GRWNKY%7nhVCp{5=B}-9dpAyVJ`JgV{?)`?=)zPG+{B?;1y5DxmA!{t zuzPCX3s^)_P&jEZ5H#kTKf+2;+Q3x8Z10~ZUb7I67upG@{M46u4qA>M3^bGV0nskAA@{W0XhdZ%N*MOa-|-(p)+{6tF6fqo>dVqc=$;YQCgI6#YaWJ~VleY0wlXa#6=;ZfLe*E?^> z+)L-Xt{JTJVp z3(jh^DT-8ASmzp4FyHvacNd|uCX|9_Q%cwdx%-}oQfALD;Npa0A7<4A@Dp8zkv<=3&b-x+SP zy`Oh+K^-3<F8yTAw$nEr}1AxkJism&^yq0+i?np+g zWGp$2ig!P%!E#Dl%9L}(_9y|<(*H0d1jA_Y731%WwqQA3=0KlWu16z@#mmaS^=j5# z7Sn14j;R;1xZI!E1ou}MJ2QiVU1DC`w>f%cX|pY>ePC`P7?tT>y^3a?y_DC@4yL91 zDaPO7@##uFwT!F=^yl6Rr{rc6|#L@V&Uk+Pc{(NluDRU1!UT;K= zHc8oX#A1)U5oHJUZNCyT)oPF}n2z?xlMNf~75Xbg9v=x@A&jAq0%m9iYBiPLH&Dr_N;p0L)oX6{9f6jW)3~c^8%Qb`iHaq{jmA(T#;g6fXqMzpcUku;CFx>z*ztS{30aTS@>Vc02NRg z_KwFdijMZLd01%mKXH80{1YS;qse>_$I zLiwqh7xhQ=_bX6i{8Y`0`GflVwV^;bKUMSM{-FN;fd~-6Pu0AHKd66rc827qYF^SG z)!)r(0a5%^%}e=%`umd$qJfrwTmS$LAPF!8_yf`awU8C+w}Ci7E}#m~9(Wa42z&&b z1JFQ{oQ3}{8TkJFus^h!=zpdK(S5J|VTpg>_u3y`_ki>>Eidv9T4-7SR?ndQOv{V@ zz4rUX%RpE^)AC|}ul@dc9T48nw7mG=YrlW`3`F!ZEids8T4)*nW5N}P>}OhD^6$0Z zw=qCeKhyG3LoR9d(=Kb+{GWPB=o7r({QqC)|9th;Loj&lh3;; zmUiyS;zS+%gz}$90`?MPb-gZ$>2{g>T8giQ)7A}?)dn2M$!~WYCkBz z{V4JwMh>0LMy(_m&_-J$VkDCeYMsBEw0V6GPSEN$&1FVom%SG+SHh6!Nfz9!i!1Bx z!&f*AIjV~#s@!LHPKE+bdx7VMs3!rMis+Wiwk>5pPEn)#(o!3wp$MJ-!^0oF`<}PD zVHw5DjoS5c>Fv4eJz0a+(>i`Pp0B1Pt?(MZJOmvy)8)7hvG+x|UUqz4@l-qCIHP?b z-PT%37t3jM3NSmK(5+9HbHAarZ~IdW)$&m*8QH!&n#*tkL5&k(1(79F8AZO8J-1Yd z-rnS(R3zKe_a0CE1nvoV)Jre5>-oeUqBzfCd%cTbq@y8r8c3E`$rWqxjTDdyw`l1t zI{x^8>~N4``D$#n7OHOnNd3IVy*Hn7dglqA)ZYzJ6UwyqZ=`)N&5%8)%AfJMqE2Ah z>Z#7Vu6U`bdDa?oY2RrQ#pnsG&*xS;1$f7`yxCV4oCmh*WjL=g9pRJkt|(fF2N&%V zo$fXz;dAWev8=Vfz9Rmn4spI;8WW=nN*wsAG9BIAg)jl+p-dwg3MErtS&xZ%spDPR z)hlD`(jo~Bo0Vb?80_e|Ph)~fSP#tSJ_#B6(j_yEsTr-#-uRT;TO}UrKej$LjdZW% zqX@!Xn$3~0i)dSAZ~M!FVy!X@`V?M)J}`CMJ+@eWFg!qee}~fjyclI;Twb=iaEA^q zLder9f4*by5}MO-D=o?LbiA9l=VDXsr1f}u*^vZo-~{&@IplX*{kucLbgJ;&cbipk zrL~^6kPa(FC-KoEU|=3Wi||BVM%ksJvH)tMJNLS&Tzum{R)rpA8)ci}R#LAG9CIX2 zwNIkoe3zjX>LYmVHNTIpWw|-R^Ay^1MYT8Y(8fmH>_MDhD=O&ldP=4*A+*!%=e%ak zO1d7-;}o7OQ_s}t;y$DI`*>s*oaF!3xWAUmE&%^^}*alybCAT%_bwNMk@Rr z8W6CTFd&Z{W{X%hTD&mrT6l9cB8#pB5bSIys(_iv7$1`%T0NJh9l%3Oqk0MWQA38{ zGD-!(n~!(L9|<@L08qE~iaZ0|ZjpgxEbYp>tOEvYQ?ZF$l3g2}^l7bYk6W$~G8Oc^ z3yf7bSTyh-PShQ(6WPHd6Pq;B8``^241YTAVPi~zy*rI;zEmFV2*Bz~1g>w3PjD|v z&FQej5c_hiyolNC;VUn5$Lg!NGQohUC%eIX5ZocjKfYt&>3oihPR2xIjM*mCjL#n} zA1bRx++@M(}EVfug&hG%*bTm z5*wW0W^Mt8FiKa}6!3FaP9+*DwHud7acU`&b6ud+ilkZywkIpNRkz<^8*v%=HRZKB zC(cL{hD%tJ5g#b>qGKHoDVEP!_{-_3lWc{CTOX~G;c?AND;ey*FJ`yhvJM5kLy3%5 zwQ==qAW?L=_kv5mFrbr?sOAOQ)PBknT={ygB5WMSLN%3@o6E4Ff&cW{9a=E|4dHL{ z|9?Xc%>5>xNoNe4G4Klp;+;`{)BpeH`9F}ifPS(2mloaQIw}7Ka6p4!z&cZ(F>uDf zUts`D$N1wI#Sf0z-*{0YScvO&#jW)e+&kP0K~F&WfcN4fwPh0&J;cc8HV)Y^AT76_ z`u}|o(APL6Y$&ljFO~bPh~R!|2#0&9h^9?RQvvj!LxnD`$$i>E!RG&UYN|kVfA0T7 z`{rL)0Z~(iX8ddY|36IvJmvYH@2!)_JJS{uW+WwVjVC$t_!Uz&O$+_G|DSu4GDD(J zRpFv?Cwvo1eb$EJ(u~ZFcPk|44k=~nrs!l>UKqHWKb<>|6fGAr_(~|vH54;9K`uOb z3AlRR7EN2nJm5hh=Emw&o&TBUCj<@AMn7_0zO;*EB@?4B(yo(@hx5VS8 z++5sD&s|-=*7dpl&dN;&y7f{Y{5Rx&2zh|V@3PKs8ZRD>N*k+n9fAaI(eREX5zSOy z=i5FPzq7Fr>AqFlFdDHH^>{J)L2R!8_Ri-wsICL3v)IWlLf!k`OBaYNN+RKrutYLX(B;uE; z_zCERCVkwrX~si|Lt_mOUF7dI1(Z}K(y&prTHPkX$c+i6D<@*VkLYFc!rrSn+*4?6 zEmUu?6|1&p0B&Q~OyR)KtmFLAxV%_SC{V2r>%+vp#|{POS_?+!ri*2Ch@}0vSj6P8 z8hYf_A#s_?JjtB%IZmUwBldloy2I>wvYkq3GNuD)E-dr!DnO=@tw^D-3fJa)nZyDb zeXa(@qhu{g*JgLYQ85@j_Acx2OzTr$KD|ry)GMaT7N2y#MbJOj?b=%S&EOQ8lP-}} z-;R{sFx>{1BWb5*<{A_JPNHak`dX1ALdY?X5Q?N-SyXCsd4(r&f|VWx`>X!r>ZZZO z!V#``R;k39fJ#?aWb8_5HynNi(Tx=4H{hdCT$M5p@dD?F3x;4F$N?#5qM#JfWB**OlmzH_oKoj)!9sB%eVrhlo6<7MrtaGph1 zPaQs*`Ls1lw@!cSy{*<$ZU-J|buh?&Jo&Bt|Aa8b^rF@q%$Ij8nfT)NpM5I&-p1l- zn-{)b`)^BJj;iFETdFsHtNm+T-hJJ``?uP)wgVD;)7h=Bwej+{70F!{wR+p};xohP zmB}T{*xjvGB`uM3D0KQinX}&~Zh!fFYjz%FC1A&0TPr!K+;V}Sg0d%f`-OtKR1{@8 zfA3(q!g{~!;189wu7=-F+NYe=5&D!QdH-mU-I|k@Ju}v_$we>UlD2EVn|NNoq~zlx z^RtdK`R>bpI-h5TsGy7U#GHpp`#P+uIs~UIU;oMS-ovx3ZQsHtXSuZod#AN85K^Mn-N{1_Kd8Ap-$6=1>-99?qiT zMBU^>r^FNkIdNV?69aQYV?$FD3nTL=ab6=3*8s}Jp{sEovgwSh49tx^3K+Mkxf5m2H19_9x84&EXAfBXTQlc`SH_jocN!bls|zWoXZSmzkJKoFa9caq(`?UE(n$(nE`sc(#LLdLlbv}1~Wpd%dNg5VB zo6bgGx$)lGe*4hpue0&?AUw9B?;S9{QSPWif3Jz@hLrhK{i`ggI#SU*U2TX@2<@3cp&$8 tT~>F_;u4X^5^B478>_2xzP?oWB5}2Tl6B33&nCNXR7`q#sOev05db_#sYCz( literal 548 zcmXqLVp1?@V(ePL%*4pV#4J(AXu!+HsnzDu_MMlJk(-slz|~OSK$ndYW-3>rI_8XFjP1mqaon(T7B zwOPXMef6*YKY2`vDa+R83e2sUEtSj_cUr}EM|KI{FAkO0syx5nWo~M2S)92>Q!RbuOYprtTCC4!`EYDCd z@N9DPzPORP$PwY+N-w{of@6Ehn+a diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-caOK.der b/security/manager/ssl/tests/unit/test_keysize/rsa-caOK.der index ab42878ab1455ea8ac473caf0498abe468d222e1..0016f5152ca9fcb536e6cf63c605826391f8da32 100644 GIT binary patch literal 438 zcmXqLV%%iV#3;RhnTe5!iG^XuI}Zb1HcqWJkGAi;jEvl@3YW;3>rI`8XFm2 zRA=8RI#nIGrpDekFjM|#m#fGVE#5bCD)LV-3bYu@it90OGKnwx^5FUu@s+oC%~N=> z>MZj^fzLjfIlZFJ&nh&QZ7M3Qwb9pHo*{4ghdc7${q)TaJKhS+h+x_`&!aEGF)vCa zXitw_hg?kM+xw-LW;dxQOg5~!zGA9wSyjXAtxU{}42+9~4IqA%6=r1o&%$cJ45X0V z3=9uupkpts{F$1oT5GYS=qDKjrmx>c28X-=DQO?%K6&w-&UD7o~_zeI}Lg z_h~%u(!lEmk2dWNRh_uz>y0j>TE(4ZzyGz&c&Gm%Ra@)ru~y;T|J!^|6s_6&dGjQ# qJwKdyxYnn5?#`S$xBc#QNweSj0^EVA6AEhPij~T&T{8DU%_aa*yrTgC literal 549 zcmXqLVp23{V(ePL%*4pV#KQRTV1fZJ8>d#AN85K^Mn-N{1_KvEeFI%K=1>-99<_)7 z=irRgoE!!3)Jlcm%&Js{kksOm%)E4kqT)maLjxld-K5MCLqP+6kOnRu4xq4Za-zSt zft)z6p^2e^p_zfPp}C<+lsK;uh-(bxQpuLa`N*zkWMyD(>}4=$>|| z`+F~KmHao(IJkR>v`JXw*ABm^hW&H%+o!z|%6$6g4SV$|)7P(Fx}E%dMwey%q}O`# zUV$^-$0+`pc_P$x-o2VE*6+*YH3H1nR{Y^JoZ9oIwPkL~{KBc(pKE6S3}@j=y(pa% z{wI3rfkQ>2q2a7E&5j@Vb8p2`J=G5GXeMSx2FAq-26EuQkrifS{LjK_zzn1exPhT1 z%g@3Bj084h4*-Lo8R+uFu(j*M-cInm?47lu9*lwsGGTv%)^6duyGPpToR z_089E$vbI%N||qV9&U27V<@}(^67$!^)bsb4zRsFlXFY?PuG97l?zPnq-QR@ptCkn y@A2^+w@m7rj&L+RJ;KS9Ff}&J<9Kje@HS0dZ+59E!tO;|YA@?f72H|#y&nKCp2TGU diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-eeBad-intOK-caOK.der b/security/manager/ssl/tests/unit/test_keysize/rsa-eeBad-intOK-caOK.der index 2ec11beb7a00d95f163c485082461ccfbd7c4c44..7397577653cc496ac8f07e8b7351fe4af172cb1b 100644 GIT binary patch delta 356 zcmV-q0h|7m1hNAyFoFTDFoFRWpaTK{0s;g8-XX0p4F(A+hDe6@4FLfQ1pqJ^F&8iu z1_M`bweR}?zpI{$y_eutRBqCF7ahh!S}(S8aA-r z61H?g$}~&z*pfJ~ccwXLt@55GKXp?6Viu`bN2K_)fxAG`r$T{r9QK;c-J0nFD2qH9 z$7GulxLP7xs0Ig@+=7=I=(skTub!uO!dDF~qxVnbNvru5MM9byhD z8pJ$V@bcuF_g<$m2_cWW5x?qe`2KN$#(8?D_L1(5-R3oCcrM~`_a1yOIa-8RtmUUN zfdybiNkQzW5{x>OSSHg$Ofj41HDCv>JmZK}%3KO4tm)w}UuZ0iO_w14y3@5qwPB{BO^B}gMpW!zJV?qb0`Zlk6J{4 zb8tp#PL6_iYNbMOW>u;}NNRCOW?s5NQE{Szp@ET!Zc=86p}2u4NCOuSA5d5~Gq1$o zTQ@n;-`hY=oY&CA(7@2lz}V2-&@@V%*9gQlhH?!8NU+P$3~ZOIfi%P}5s+P}sZNP0 z$Tl|4L-r3ND+6<54}(Et2UBAM!yS?DL0OL&gAzU#-uL(+bdO>A&Lf_xw)}0KR^Pt- zs-L;?`LZ`1H=O3@=NfD%af>>-cA1rXVIZH1!Y={$8e_Zn+e4De=a#Hq);gQ#NRz|) zHK#R}M$IfxZl5}9`PHoDmn6N58UwSWqP#){Hy(Yo&oyX!a_RlUM*}1S|Ju%*eB~q) zGa~~dvg?4M&D_|?P(6X`#AEGjbH1f>t}fVS#=Ed!$+N%WQO4JotmX)Jd|K+H9W`z5 z)0s@24m(OLvikB$i_+(s)|HwkZcr++I&_3vrs%qEu4U1e`r^$;?W$(<1pJoHTeNoG v{D8_$HxH23|3tEKdXPf zMF!Pu<(!GNjv_`UN!8|*%}=HJ!Y2mAWR*=)1qsyy;rh(!ATJ`~cQTZov& zB<)*o2u5rkrxV9L^j8DpTm+gIIstu?eE}JM!-3db7-4w!fW4yCb~d#AN85K^Mn-N{1_N(HeFI%K=1>-9 z9<_)7=irRgoE!!3)Jlcm%&Js{kksOm%)E4kqT)maLjyxI-K5MCLkR;hkOr=ay5eCV zK?7q$b3@Z8ab6=6AlDemH3%TVWFr%>$+8C05R)^F>wj-ab*;M2!~c)>%o~;V;Cl1! zi}xAtiM*b5S+L^L*NEK``D(WtE;1<_Ul6NbC|)RDuv8{Vq@Zr5bFJf_CpV6)G1q1A z*fIZ7%+9iw3c*iTpF1@x&bqVpd;Zl2N8gC7?2h>Q@=Ih&qom+WaYZ}NsyL%pd{(O8 z-~RAfyyft8Q;kcEdnd~)L0Y$>HqCZvWx2=*D&D zo6qme|D@dIy5@hSSX58n@fw4Vn~bu}`Qj5g8TpR*{D0xs$5t3S$4B+F>6Z-#g5EsW z^8XwxUzmHkaPJEPzlpnFN;IuHrLvsKL^c1A%?rt68~w`WJ)XF~ci%g?h#p4(RpYMx diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-eeOK-intOK-caBad.der b/security/manager/ssl/tests/unit/test_keysize/rsa-eeOK-intOK-caBad.der index 8ad88d3f551804afa4cbd6739cec647cfe3735d8..5ec9faf69dfe2fb5754b3066887b16bba2090b32 100644 GIT binary patch delta 358 zcmV-s0h#`m1hfM!FoFTFFoFRYpaTK{0s;g8^m?^04F(A+hDe6@4FLfQ1pqJ_F&How z1_Mi1N*RM|V?A#JvGq-5GuHreb1+CymVQx;DOJiGR?oAdaWy zv3t>EZ0XODG8!q=Mj_$>fd&qwSMG&x`*0}AbFHuv#R?ScsFP40LQePX4gFutj+Ptj zLLu-yS5!ZmHk1>Oi(UWA5G)*_T>*iUegPPN8o!9rZ>z-=d9SfO74`G2Zp`}VAzHJU z%Z%u`J0;i6cJ*)&w^(V-@GiAw{2;#QSd(+l$a$IZ;WDqcP$ntp=iosBlEY@N5q~s3 zaJ5-9P<6s#3KKayt(!qpXQfR_n;J;z+lzvV-Di2Ry}W;(EDS2i9i}kIBu)=^I$aF` EU3^EDzW@LL delta 456 zcmdnOJdGvJpovMypoy`10W%XL6B7%Qz=y>Kylk9WZ60mkc^MhGSs4tx4fPFl*_cCF zn0eG90-S?0Qgd+C{%Nj^SOwKf}-Nsx6*C)wmmR=P*CD-5iv#5CqzSd`SN6~ZyVQtux{fG zzqgv}w0+0Vs`c4d&t$B4cIDZ`>zvixc??Agw)>ivhh8*W_RY67m0kL>v9om<=d@To~{bU(NiFyTY-z$#KEjU~@#`CbSS2De0O3lp`{Ct0UmFmhD%s<}O zUNzX)w`sH9>`0S$FW%^V-|t=dTaYuqx@2bI;Q)!Ibzf5}-)&WW>RQ&eJV492)3;XE z(Zpp#{E4H1*ZMDgo7j^O;8bU4sHnAnrs|IUJ5J?Q95qciQ`H(h<;hH?BOI3)IRR9h BuDSpK diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-eeOK-intOK-caOK.der b/security/manager/ssl/tests/unit/test_keysize/rsa-eeOK-intOK-caOK.der index be843f5263e288faad1ee2be7e75fa46da6f3708..94dfef87e0e90302740d7280c42f1bbd7599b625 100644 GIT binary patch delta 358 zcmV-s0h#`k1hNAyFoFTDFoFRWpaTK{0s;g9-}Cn{4F(A+hDe6@4FLfQ1pqJ^F&8iu z1_MTG19z0~)2o zLV4p((A1W+i(<~}!JNIL-=@VPDrjh)_utE`)X5Oy@Gs?F(f9@!^ctL={EaE}CU8db z;?33dxiPoRjTA6~AqL-Zx52d4!U4&Xd;u7LKH$ur=WG1<>F0o_jzFJY0jl@KL=jd#AN85K^Mn-N{1_LiceFI%K=1>-99<_)7 z=irRgoE!!3)Jlcm%&Js{kksOm%)E4kqT)maLjxld-K5MCLvaI9kOnRuKA^B}W?qTE zw{CKxzqf&$IIp3Jp@E^9fw7^vp-GfDuMvoA4CNa5lWv!cffU3pVUS&^sX(icENq;Q z>>Wl{2Ij_I27|^68H?3ay;L>V?tD0wZ7QFoJBzN4>HgI+U2iNUyk{gyu z^VNtqciZ<$XYBn{{d#XyNvrX^A}^y)v$ix%*c_X^Z%sB&8tYf4FI%oEZ#>S!Ij3-; zx^<*HOH#?(FwF$XV$(mRS8vS`to)yy_O8JEbj0REmsZ=w2pu-q@brr0{3~~vm>C%u zk(~z&ZDydmR`9*uU%1z5LCYtWn@4YEht^$7pZ{8P%Dl6QKC7GcR%|@BXqR03OsgaV zU-sXgG1mM~vdrZq(pLvw4a?d8UhL~Hju~4Nj`Zf|FwHrna&xytot!|n*P1rY=AEH8 rI3q%SDT~<7a{V|d{$)a~+NWvPeVQT?rPm)+-Jxx`$gO9=0%0Qnfl?f zq5mrieE0=VIQwpblZa zlUzE}r$s7XTP~m)_f|{0UiIxnb&<2~H$}uaUT%<9uWX2Xc-`7=***5dZhNoQ2RWrM zhg|;8ezb?%ziIW|lbcsfUR+Y*wDRxMm-S4{j0}v6g$*DckrifS{LjK_zzn3&Jj>kJ z$iV0SkZ)OTg;3fX&H8gUlBew1bgNUOyo)R2?x)}Oe9Jwfr(W8&d#AN85K^Mn-N{1_KvEeFI%K=1>-99<_)7 z=irRgoE!!3)Jlcm%&Js{kksOm%)E4kqT)maLjxld-K5MCLqP+6kOnRu4xq4Za-zSt zft)z6p^2e^p_zfPp}C=HlsK;uh-(bx8hDdni=i3V76}6}h%NjeTQc)XoDx$YmNm{p z_5>p<19M{!gF#~lQ)2_e-4jpN-xa-ISX5bXbN`al(WW9lwq4=7UAg_c=DGEkb$ybh zRU(~Ei8+GG0`^TgFtcQgx-o9mGW@KPo ztY9Dq4kB4$M#ldvtOm?L%77c_8(Dr97GPAcA-f+K3CxX+3}K1>vrK->yS{v<=#9VL zGmHwB`SbF6E`R#-;KzDl_m#&!v#(F=_pE*_cS6L{_smt($y!T-Xf&iYUI; diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-intOK-caBad.der b/security/manager/ssl/tests/unit/test_keysize/rsa-intOK-caBad.der index 26f46a1bbc47f0d42c3b2ca49b0a2515a9505714..b7391c49ab365f162407d3e272a5e35fddf2c038 100644 GIT binary patch delta 410 zcmZ3(vX?p8powuO5GyZWW@2PwVqxfh)@#7a#;Mij(e|B}k&&B~!9c`N$UuONIh2K& zhqI_SQ8zi!DKW)BPMp`!#K7Fp*wEC(!pJ;IoYx4%HGpyrqzokt#K5{H9@VSg?&ZMT zS-bE9=d-;+lDFL+gdcdRT~}YeNH6%3o@4#ZHSd3H`j`={6L#XT;pqbLhNhC{g>Pi7 z9$t5Ux%csfZNXcX_ARlP$LZvK?|yBp4_C{H&;7T={pFMAdnf$eY!Q5Vw|jK{z3t$ZwDJ4`s!_&m>C%u7YiE*8t?-hB`eIx_@9N*ho>*`N={GQMJrP6EPvY50VE9#q~0F@V_-2eap literal 556 zcmXqLV$v{ZVw|*qnTe5!iG_(Flh1&cjZ>@5qwPB{BO^B}gMq7|zJV?qb0`Zlk6J{4 zb8tp#PL6_iYNbMOW>u;}NNRCOW?s5NQE{Szp@E^9Zc=86p^$+9NCOuSCs0^7IngOG z#XwG+*U$u{!ob+j+|V>ioYx4%HHLBxyh*Ue$OLSSgn<~u8h(&9nRzAt-cZXL=Og=q zk(GhDv6sQ1v6HE>k>P{nm#S{_U80|?{=GM3Ucfv%SoW@P-&!fL<_qzt%00{kp2z{p@j_5d&%m>U}y7IMXJ?Adi@cb#heRal*Lhr)`H`yg~ty-979&WvTH~-xWtD373fs{Y|9R&ICTrGdlZz3OM&HBrBT=)k7@{-6# diff --git a/security/manager/ssl/tests/unit/test_keysize/rsa-intOK-caOK.der b/security/manager/ssl/tests/unit/test_keysize/rsa-intOK-caOK.der index 74c7eddfcac8594e6ad1d78d40ccb43e1caeeb8c..d41c1cb05c90f8e10e0453581b3aee6e0c63ad00 100644 GIT binary patch delta 410 zcmZ3@vWGdzpowt@5GyWVW@2PwVqp|}m}|hx#;Mij(e|B}k&&B~!9dth(14$fIh2K& zhoh)CQ8zi!-`hY=oY&CAz}(Q-(A31j$Sg{n*9gQlfN~8a4aE&a!I~x>(XHR`)g$CF zU+bffkAI5u%>1yuVp-IenPxK;A6gfxs_ebA?eVH)?m0I%&3cyZ+QV(c%4V;4N@&7w z|2pnniECz*ZJ8bR%|Wm@*EZ>|WBLZGj*!iB?(4ljGk@>8dE718AB(PihW)Em6gUSmT>hEY)Y32t;&G(l?V-G|{$Ylb(5G*B-mg n$3Naucd1uWyllUusj2H(_ND)-yHoE-^>4l|zstheEua$sJnEbe literal 555 zcmXqLVp2C~Vw|vmnTe5!iG}gS4krU%HcqWJkGAi;jEvl@3FPr%nK{N@9r&i5?Z>!M_y=5|K;=M z_rLb%2U1qw+En}EzwejH3~g7xT+4kI7^k1Qr=(zh*lo9jGX0bLZ<}&HS@Y%Sr2SSwH%M8$z`?m`KfFvzOK0c=EWn|Q&m5mf4Onqbf%S@d;cgb`kfK~;KX&~OFb@f z_BEcj=RLfq)Y5$Y?UK7cxS9MddtaBoGnl>Rij|=C{l}H89%q`rC2npty7`w)%iLzw RsTG^9n^&bNaCpvb0|2Aa%) OK INT -> OK EE - // In opt builds, this chain is only validated for DV. Hence, an OCSP fetch - // will not be done for the "-intOK-caOK" intermediate in such a build. - let expectedNamesForOCSP = isDebugBuild - ? [ certNamePrefix + "-intOK-caOK", - certNamePrefix + "-eeOK-intOK-caOK" ] - : [ certNamePrefix + "-eeOK-intOK-caOK" ]; - addKeySizeTestForEV(expectedNamesForOCSP, certNamePrefix, - rootCAOKCertFileName, - ["-intOK-caOK"], - "-eeOK-intOK-caOK", - isDebugBuild); - - // Bad CA -> OK INT -> OK EE - expectedNamesForOCSP = [ certNamePrefix + "-eeOK-intOK-caBad" ]; - addKeySizeTestForEV(expectedNamesForOCSP, certNamePrefix, - "-caBad", - ["-intOK-caBad"], - "-eeOK-intOK-caBad", - false); - - // OK CA -> Bad INT -> OK EE - expectedNamesForOCSP = isDebugBuild - ? [ certNamePrefix + "-intBad-caOK" ] - : [ certNamePrefix + "-eeOK-intBad-caOK" ]; - addKeySizeTestForEV(expectedNamesForOCSP, certNamePrefix, - rootCAOKCertFileName, - ["-intBad-caOK"], - "-eeOK-intBad-caOK", - false); - - // OK CA -> OK INT -> Bad EE - expectedNamesForOCSP = [ certNamePrefix + "-eeBad-intOK-caOK" ]; - addKeySizeTestForEV(expectedNamesForOCSP, certNamePrefix, - rootCAOKCertFileName, - ["-intOK-caOK"], - "-eeBad-intOK-caOK", - false); -} - -function run_test() { - // Setup OCSP responder - Services.prefs.setCharPref("network.dns.localDomains", "www.example.com"); - - checkForKeyType("rsa"); - - run_next_test(); -} diff --git a/security/manager/ssl/tests/unit/xpcshell.ini b/security/manager/ssl/tests/unit/xpcshell.ini index 0deda49fa04..c79302812c2 100644 --- a/security/manager/ssl/tests/unit/xpcshell.ini +++ b/security/manager/ssl/tests/unit/xpcshell.ini @@ -106,11 +106,6 @@ run-sequentially = hardcoded ports skip-if = os == "android" [test_add_preexisting_cert.js] [test_keysize.js] -[test_keysize_ev.js] -run-sequentially = hardcoded ports -# Bug 1009158: this test times out on Android -# Bug 1008316: B2G doesn't have EV enabled -skip-if = os == "android" || buildapp == "b2g" [test_cert_chains.js] run-sequentially = hardcoded ports # Bug 1009158: this test times out on Android