1#!/usr/bin/env python 2# Copyright 2015 The Chromium Authors 3# Use of this source code is governed by a BSD-style license that can be 4# found in the LICENSE file. 5 6"""Certificate chain where the target certificate has a smaller validity range 7than the other certificates, making it easy to violate just its validity. 8 9 Root: 2015/01/01 -> 2016/01/01 10 Intermediate: 2015/01/01 -> 2016/01/01 11 Target: 2015/03/01 -> 2015/09/01 12""" 13 14import sys 15sys.path += ['../..'] 16 17import gencerts 18 19# Self-signed root certificate. 20root = gencerts.create_self_signed_root_certificate('Root') 21root.set_validity_range(gencerts.JANUARY_1_2015_UTC, 22 gencerts.JANUARY_1_2016_UTC) 23 24# Intermediate certificate. 25intermediate = gencerts.create_intermediate_certificate('Intermediate', root) 26intermediate.set_validity_range(gencerts.JANUARY_1_2015_UTC, 27 gencerts.JANUARY_1_2016_UTC) 28 29# Target certificate. 30target = gencerts.create_end_entity_certificate('Target', intermediate) 31target.set_validity_range(gencerts.MARCH_1_2015_UTC, 32 gencerts.SEPTEMBER_1_2015_UTC) 33 34chain = [target, intermediate, root] 35gencerts.write_chain(__doc__, chain, 'chain.pem') 36