Commit cacd8f75 authored by mattm's avatar mattm Committed by Commit bot

Update CertVerifyProcWeakDigestTest for Sierra (Mac OS 10.12)

Starting with Mac OS 10.12, path building stops at the first weak digest (md2 or md5).

BUG=629712

Review-Url: https://codereview.chromium.org/2558983002
Cr-Commit-Position: refs/heads/master@{#438007}
parent 9007c3fb
......@@ -1806,7 +1806,8 @@ const WeakDigestTestData kVerifyEndEntityTestData[] = {
// Disabled on NSS - NSS caches chains/signatures in such a way that cannot
// be cleared until NSS is cleanly shutdown, which is not presently supported
// in Chromium.
#if defined(USE_NSS_CERTS) || defined(OS_IOS)
// OSX 10.12+ stops building the chain at the first weak digest.
#if defined(USE_NSS_CERTS) || defined(OS_IOS) || defined(OS_MACOSX)
#define MAYBE_VerifyEndEntity DISABLED_VerifyEndEntity
#else
#define MAYBE_VerifyEndEntity VerifyEndEntity
......@@ -1854,7 +1855,8 @@ const WeakDigestTestData kVerifyIncompleteEETestData[] = {
};
// Disabled on NSS - libpkix does not return constructed chains on error,
// preventing us from detecting/inspecting the verified chain.
#if defined(USE_NSS_CERTS) || defined(OS_IOS)
// OSX 10.12+ stops building the chain at the first weak digest.
#if defined(USE_NSS_CERTS) || defined(OS_IOS) || defined(OS_MACOSX)
#define MAYBE_VerifyIncompleteEndEntity DISABLED_VerifyIncompleteEndEntity
#else
#define MAYBE_VerifyIncompleteEndEntity VerifyIncompleteEndEntity
......@@ -1879,7 +1881,8 @@ const WeakDigestTestData kVerifyMixedTestData[] = {
};
// NSS does not support MD4 and does not enable MD2 by default, making all
// permutations invalid.
#if defined(USE_NSS_CERTS) || defined(OS_IOS)
// OSX 10.12+ stops building the chain at the first weak digest.
#if defined(USE_NSS_CERTS) || defined(OS_IOS) || defined(OS_MACOSX)
#define MAYBE_VerifyMixed DISABLED_VerifyMixed
#else
#define MAYBE_VerifyMixed VerifyMixed
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment