History log of /external/autotest/client/site_tests/security_RootCA/security_RootCA.py
Revision Date Author Comments (<<< Hide modified files) (Show modified files >>>)
6a4ff93a9316d479f24d948927d886caff0cd9d4 15-May-2015 Christopher Wiley <wiley@chromium.org> Remove references to run_remote_test

This actually refers to run_remote_tests.sh, a deprecated script.

BUG=brillo:1067
TEST=None

Change-Id: I05ae051d2075038ff976dc5d60d6e3fd47fdd54f
Reviewed-on: https://chromium-review.googlesource.com/271548
Reviewed-by: Fang Deng <fdeng@chromium.org>
Commit-Queue: Christopher Wiley <wiley@chromium.org>
Tested-by: Christopher Wiley <wiley@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
386924ea4ceaead84d537e4e371f523e2100d0a5 15-Jul-2014 Jorge Lucangeli Obes <jorgelo@chromium.org> security_RootCA: only verify installed cert stores.

BUG=chromium:390191
TEST=Passes on daisy_spring, gizmo VM.

Change-Id: If1db50f506ade4a1e3a5984d4f0dc89c3907af23
Reviewed-on: https://chromium-review.googlesource.com/207961
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Commit-Queue: Jorge Lucangeli Obes <jorgelo@chromium.org>
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
4bcdd2ba40de41d306d0ece671f076660582a145 18-Apr-2014 Mike Frysinger <vapier@chromium.org> switch to common nss util names

We're installing symlinks for all the nss utils with a "nss" prefix that
are only used by these tests. Use the plain names that upstream is using
so we can drop them.

BUG=None
TEST=`cbuildbot {arm,amd64,x86}-generic-full` passes

Change-Id: I46dfd7dbc1379a0ef491bce573ac5e63b86846ef
Reviewed-on: https://chromium-review.googlesource.com/195474
Reviewed-by: Chris Masone <cmasone@chromium.org>
Commit-Queue: Mike Frysinger <vapier@chromium.org>
Tested-by: Mike Frysinger <vapier@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
8ab2707c0052ef30c6bb523c3e4efdd67b981a66 09-Oct-2013 Jorge Lucangeli Obes <jorgelo@chromium.org> security_RootCA: log in the same format as the baseline.

BUG=None
TEST=Passes (with better logging!)

Change-Id: I68eab129081f6f66bcf1723fb476f6efaf0ea344
Reviewed-on: https://chromium-review.googlesource.com/172470
Commit-Queue: Jorge Lucangeli Obes <jorgelo@chromium.org>
Tested-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
f2c929f74efbc152acc33669c15210dc5a129b64 23-Mar-2013 Jim Hebert <jimhebert@chromium.org> New baseline format for test, + latest baseline updates

This also tightens the list of what we look for, on the nss side,
to be limited to things marked as trusted for SSL specifically.
This accounts for nearly all of the previous "nss-only" items in
the test baseline. A bugfix related to cases where nsscertutil
returned more than 1 cert also closes someof the incorrectly-reported
gap.

Also lint fixes.

BUG=chromium:221667
TEST=security_RootCA passes on ToT/lumpy

Change-Id: I37d3d5cd7236017325c6e8cf109f37f056307dbe
Reviewed-on: https://gerrit.chromium.org/gerrit/46336
Tested-by: Jim Hebert <jimhebert@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Commit-Queue: Jim Hebert <jimhebert@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
7ba20285a2a9b6a66099b6525ea9164a089c3d78 15-Mar-2012 Jim Hebert <jimhebert@chromium.org> glob the location of libnssckbi.so to avoid breaking on 64 bit builds

BUG=chromium-os:27864
TEST=run_remote_tests ... security_RootCA passes on lumpy

Change-Id: Ic071ec234926f38f3efabdfeffec128750aa6592
Reviewed-on: https://gerrit.chromium.org/gerrit/18249
Tested-by: Jim Hebert <jimhebert@chromium.org>
Commit-Ready: Jim Hebert <jimhebert@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
bb8b2c38cfc14a7ba2bd0ba735a61640c71e4c67 09-Sep-2011 J. Richard Barnette <jrbarnette@chromium.org> Further enhance coverage of security_RootCA.

The default openssl routine for the test "is cert X a trusted root
cert?" looks in /etc/ssl/certs for files with a basename created
with an sprintf format along the lines of either "%08lx.%d" or
"%08lx.r%d". This changes the test for the SSL certs to look at the
files matching that pattern.

BUG=None
TEST=run the new test against build 0.15.1005.0

Change-Id: Ib4385e69a693f399552d6b3933bdc5160fa181ab
Reviewed-on: http://gerrit.chromium.org/gerrit/7490
Tested-by: Richard Barnette <jrbarnette@chromium.org>
Reviewed-by: Jim Hebert <jimhebert@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
654451e32abf7199a8c144950cc9f667f9b9088a 09-Sep-2011 Jim Hebert <jimhebert@chromium.org> Add permissions regression test for unreadable certs

BUG=chromium-os:19875, chromium-os:19848
TEST=run_remote_test ... security_RootCA
Passes on "15.0.874.5 Platform 1011.0 x86-zgb test"

Change-Id: I3b7246c670ce5206ac6ac4ce7d460e92930ee85c
Reviewed-on: http://gerrit.chromium.org/gerrit/7467
Tested-by: Jim Hebert <jimhebert@chromium.org>
Reviewed-by: Richard Barnette <jrbarnette@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
2d012fdbed42b9d001b1c963d7acc2ca8413b47b 08-Sep-2011 J. Richard Barnette <jrbarnette@chromium.org> Fix security_RootCA to check /etc/ssl/certs for OpenSSL certs

Previously, the test looked in /usr/share/ca-certificates/chromeos;
the test broke when the files all moved up one directory level.
The fix should kill three birds with this one stone: 1) the test
will pass again, 2) future changes of this sort won't break the
test, and 3) test coverage increases by checking the actual files
used by OpenSSL code.

BUG=chromium-os:20149
TEST=run this against build 0.15.1005.0

Change-Id: I081e647b426e5a29e4d2558f31e5100e40a74bee
Reviewed-on: http://gerrit.chromium.org/gerrit/7386
Tested-by: Richard Barnette <jrbarnette@chromium.org>
Reviewed-by: Jim Hebert <jimhebert@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
0c38ab7416afb49bf5b9baba08b6ba2ab9727f70 30-Aug-2011 Jim Hebert <jimhebert@chromium.org> Fix nss-under-report in security_RootCA

BUG=chromium-os:19836
TEST=run_remote_tests.sh --remote=... security_RootCA
Now fails on yesterday's builds due to having exactly 1 extra
fingerprint in both nss & openssl - the fingerprint removed
from the baseline earlier this morning. (In other words, the
baseline correctly reflects what we expect to see coming in
upcoming builds.)

All additions to the baseline were vetted against a known-good list.

Change-Id: Ib0e3bdb2d340a70ef59ecbf4197ab5d7a6a73086
Reviewed-on: http://gerrit.chromium.org/gerrit/6910
Tested-by: Jim Hebert <jimhebert@chromium.org>
Reviewed-by: Will Drewry <wad@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
12afba228d5806e0ec35711e06fa808dd2f704e1 20-May-2011 Jim Hebert <jimhebert@chromium.org> Add some command line options so we can use alternate, superset-oriented
baseline files. (Not used in the suite, intended for interactive use.)

BUG=chromium-os:9017
TEST=ran manually at my desk with and without these options

Change-Id: I1e43e1edee746f9f5a6389ee2c906d57b54a8d5f
Reviewed-on: http://gerrit.chromium.org/gerrit/1219
Tested-by: Jim Hebert <jimhebert@chromium.org>
Reviewed-by: Chris Masone <cmasone@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py
4db70188ba021eb305bd6ebe0efb269fca9dbfb0 18-May-2011 Jim Hebert <jimhebert@chromium.org> Add security_RootCA test for validating roots shipped in CrOS

BUG=chromium-os:9017
TEST=run_remote_tests ... this test currently passes on 0.13.525
The test currently passes, unsurprisingly, since the current baseline
is derived from current shipping reality. This has been previously manually
inspected vs the "golden" list and approved, but it wouldn't
hurt to do that one more time coinciding with this check in, since it's been
a few months. I'll take care of that and log any discrepancies with
bugs.

Change-Id: I0cb0edbd9e8911c47145fc9e36bacf340005b54b
Reviewed-on: http://gerrit.chromium.org/gerrit/1122
Reviewed-by: Chris Masone <cmasone@chromium.org>
Reviewed-by: Jim Hebert <jimhebert@chromium.org>
Tested-by: Jim Hebert <jimhebert@chromium.org>
/external/autotest/client/site_tests/security_RootCA/security_RootCA.py