1#!/usr/bin/env python 2# Copyright 2015 The Chromium Authors 3# Use of this source code is governed by a BSD-style license that can be 4# found in the LICENSE file. 5 6"""Certificate chain where the leaf certificate asserts the keyCertSign key 7usage, however does not have CA=true in the basic constraints extension to 8indicate it is a CA.""" 9 10import sys 11sys.path += ['../..'] 12 13import gencerts 14 15# Self-signed root certificate. 16root = gencerts.create_self_signed_root_certificate('Root') 17 18# Intermediate certificate. 19intermediate = gencerts.create_intermediate_certificate('Intermediate', root) 20 21# Target certificate (end entity but has keyCertSign bit set). 22target = gencerts.create_end_entity_certificate('Target', intermediate) 23target.get_extensions().set_property('keyUsage', 24 'critical,digitalSignature,keyEncipherment,keyCertSign') 25 26chain = [target, intermediate, root] 27gencerts.write_chain(__doc__, chain, 'chain.pem') 28