Skip to content

Commit 3d9b718

Browse files
suzannajiwanisethmoo
authored andcommitted
Add p256+sha384 test cert
Test signature validation against a fake cert chain whose intermediate certificate signs the leaf with a p256 key using sha384. Generated using openssl. PiperOrigin-RevId: 944011042 Change-Id: I93a349fda01615cab043566295a48be4888c9352
1 parent 1666512 commit 3d9b718

2 files changed

Lines changed: 41 additions & 0 deletions

File tree

src/test/kotlin/provider/KeyAttestationCertPathValidatorTest.kt

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -260,6 +260,15 @@ class KeyAttestationCertPathValidatorTest {
260260
assertThat(exception.reason).isEqualTo(BasicReason.EXPIRED)
261261
}
262262

263+
@Test
264+
fun p256Sha384Intermediate_succeeds() {
265+
val certPath = readCertPath("p256_sha384_intermediate.pem")
266+
val root = certPath.certificatesWithAnchor.last()
267+
val params =
268+
PKIXParameters(setOf(TrustAnchor(root, null))).apply { date = FakeCalendar.DEFAULT.today() }
269+
certPathValidator.validate(certPath, params)
270+
}
271+
263272
@Test
264273
fun forgedKeybox_throwsCertPathValidatorException() {
265274
val certPath = Chains.forgedKeybox
Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIBdzCCAR2gAwIBAgIBAjAKBggqhkjOPQQDAzAcMRowGAYDVQQDDBFUZXN0IElu
3+
dGVybWVkaWF0ZTAeFw0yNDAxMDEwMDAwMDBaFw0zNDAxMDEwMDAwMDBaMBQxEjAQ
4+
BgNVBAMMCVRlc3QgTGVhZjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBqQpJH6
5+
/KMGJcJyFrn1O5UFKfgFY0IpfJ6CFoijMxgd0wEkHfJxmr+raceuTykXXVVxdOpy
6+
UoQmZiXBmtw1PNujWDBWMBQGCisGAQQB1nkCAREEBgQEBAIFADAdBgNVHQ4EFgQU
7+
bIoAns4i7eKpY7/wWAY3dBcDKTcwHwYDVR0jBBgwFoAU2PaTsAJyUGeWGHR1//Xk
8+
G5yCfJAwCgYIKoZIzj0EAwMDSAAwRQIhAKkafkMZhoVFTrOE7T8o5oRFV79FzO0/
9+
P7n8s6KuwiLXAiA5qUmDUXEiI94HddoysULan5oiq73YDh2pwKOxkRv5Qw==
10+
-----END CERTIFICATE-----
11+
-----BEGIN CERTIFICATE-----
12+
MIIBgjCCASigAwIBAgIBATAKBggqhkjOPQQDAzAUMRIwEAYDVQQDDAlUZXN0IFJv
13+
b3QwHhcNMjQwMTAxMDAwMDAwWhcNMzQwMTAxMDAwMDAwWjAcMRowGAYDVQQDDBFU
14+
ZXN0IEludGVybWVkaWF0ZTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABFjV02Xx
15+
9WHqlJLqliDXgGlIlLenTYGdpCZtDIc5k4ixDBLvQfbMrnjemjjeUssvfJvO8gkj
16+
zO+esSPhHUSIf2ujYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEG
17+
MB0GA1UdDgQWBBTY9pOwAnJQZ5YYdHX/9eQbnIJ8kDAfBgNVHSMEGDAWgBSMoD+h
18+
inW5a/FoQO+IyTuL1BuCTDAKBggqhkjOPQQDAwNIADBFAiA7KrlpJpR3GAbeINO8
19+
pCN4ESFvs4DFGFAJacJdssl9kwIhAIDq2rk9DL1p/FV1mKWFNVyuZqt5HNxhJTiF
20+
qpgCnAgv
21+
-----END CERTIFICATE-----
22+
-----BEGIN CERTIFICATE-----
23+
MIIBfTCCASOgAwIBAgIUMvJabJaz5RJp0wnaNaOtJSEo/GIwCgYIKoZIzj0EAwMw
24+
FDESMBAGA1UEAwwJVGVzdCBSb290MB4XDTI0MDEwMTAwMDAwMFoXDTM0MDEwMTAw
25+
MDAwMFowFDESMBAGA1UEAwwJVGVzdCBSb290MFkwEwYHKoZIzj0CAQYIKoZIzj0D
26+
AQcDQgAE2kjHtGifLOvcHsIo14W46o39Du/ObLitndTPoXyLsNKSmCyNuOXzMVGp
27+
EpXW0fC5KsV+8NqMu0eI3Qm8rOdit6NTMFEwHQYDVR0OBBYEFIygP6GKdblr8WhA
28+
74jJO4vUG4JMMB8GA1UdIwQYMBaAFIygP6GKdblr8WhA74jJO4vUG4JMMA8GA1Ud
29+
EwEB/wQFMAMBAf8wCgYIKoZIzj0EAwMDSAAwRQIgYK7jkjOwDYdpCfSOLtGBYCsx
30+
usE1jbE31QkzBWkXakUCIQCFni4F7fIU4FmfRS+9ct6GYUv2z4qCxLFSx07hOnWB
31+
EA==
32+
-----END CERTIFICATE-----

0 commit comments

Comments
 (0)