gecko-dev/build/pgo/certs
J.C. Jones 3a0a8e2762 Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE
commands:

openssl x509 -in security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.pem -outform der -out security/manager/ssl/tests/unit/test_missing_intermediate/missing-intermediate.der

mach python ./build/pgo/genpgocert.py

./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/emailEE.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem.certspec >security/manager/ssl/tests/unit/test_certDB_import/importedCA.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/ee2.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int.pem
./mach python ./security/manager/ssl/tests/unit/pycert.py <security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem.certspec >security/manager/ssl/tests/unit/test_intermediate_preloads/int2.pem


Differential Revision: https://phabricator.services.mozilla.com/D61653

--HG--
extra : amend_source : ba63f416c91785a479695f342cf8db70ccd49cba
2020-02-04 20:17:49 -07:00
..
alternateroot.ca
alternateroot.ca.keyspec
alternateroot.certspec
bug413909cert.certspec
cert9.db Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE 2020-02-04 20:17:49 -07:00
dynamicPinningBad.certspec
dynamicPinningBad.server.keyspec
dynamicPinningGood.certspec
escapeattack1.certspec
evintermediate.ca
evintermediate.ca.keyspec
evintermediate.certspec
expired.certspec
imminently_distrusted.certspec
key4.db Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE 2020-02-04 20:17:49 -07:00
mochitest.certspec
mochitest.client Bug 1613275 - Regenerate expired certs not handled by Bug 1607845 a=RyanVM CLOSED TREE 2020-02-04 20:17:49 -07:00
mochitest.client.keyspec
noSubjectAltName.certspec
pgoca.ca
pgoca.ca.keyspec
pgoca.certspec
README
selfsigned.certspec
sha1_end_entity.certspec
sha256_end_entity.certspec
staticPinningBad.certspec
staticPinningBad.server.keyspec
unknown_ca.certspec
untrusted.certspec
untrustedandexpired.certspec

This directory contains CA and server certificates for testing.

You can find instructions on how to add or modify certificates at:

https://firefox-source-docs.mozilla.org/build/buildsystem/test_certificates.html

Specific notes for certs:

  dynamicPinningGood: Changing this keyspec will require changing
  browser/base/content/test/general/pinning_headers.sjs . You can obtain a new
  valid pin via:

  certutil -L -d . -n dynamicPinningGood -r | openssl x509 -inform der -pubkey \
  -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary \
  | openssl enc -base64