New issue
Advanced search Search tips

Issue 867174 link

Starred by 1 user

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Enable CertVerifyProcMacTest.MacKeychainReordering

Project Member Reported by nhar...@chromium.org, Jul 24

Issue description

CertVerifyProcMacTest.MacKeychainReordering is being disabled because the certificate it uses in the test chains to a Symantec root which is being distrusted in  crbug.com/796230 .

This test was originally introduced in https://codereview.chromium.org/2362533002. I don't know the details of the original bug well enough to find a replacement certificate to use in this test.

If all that's needed is a cert (with chain) where the root CA has a cert for that name/key where the signature algorithm uses SHA-1, then https://crt.sh/?id=595081092 chaining to https://crt.sh/?id=88 might be a suitable replacment.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Jul 24

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/264209c0622c077caa2378b869e3ce41a9fd3fd2

commit 264209c0622c077caa2378b869e3ce41a9fd3fd2
Author: Nick Harper <nharper@chromium.org>
Date: Tue Jul 24 23:28:15 2018

Disable CertVerifyProcMacTest.MacKeychainReordering

TBR=mattm@chromium.org

Bug:  796230 , 867174
Change-Id: I4ece7e608e597c9455bac468f828bdee91233c16
Reviewed-on: https://chromium-review.googlesource.com/1149197
Reviewed-by: Nick Harper <nharper@chromium.org>
Commit-Queue: Nick Harper <nharper@chromium.org>
Cr-Commit-Position: refs/heads/master@{#577728}
[modify] https://crrev.com/264209c0622c077caa2378b869e3ce41a9fd3fd2/net/cert/cert_verify_proc_mac_unittest.cc

Sign in to add a comment