Use SHA-256, rather than SHA-1, for EV metadata

Desktop / Chromium - David Benjamin [chromium.org] - 20 August 2017 17:30 EDT

To make this easier next time, I've checked the roots into net/data/ssl/ev_roots/. This also removes the last usage of SHA-1 in net/base/hash_value.h which can now be fully removed.

Bug: 618487 Change-Id: Ib04d0ad50ecb874d45b99eb56815a9a7dbc2f348 Reviewed-on: https://chromium-review.googlesource.com/621209 Commit-Queue: David Benjamin

9cedc3a Use SHA-256, rather than SHA-1, for EV metadata.
net/base/hash_value.cc | 2 +-
net/base/hash_value.h | 23 +-
net/cert/cert_verify_proc_mac.cc | 13 +-
net/cert/cert_verify_proc_nss.cc | 11 +-
net/cert/cert_verify_proc_unittest.cc | 11 +-
net/cert/cert_verify_proc_win.cc | 7 +-
net/cert/ev_root_ca_metadata.cc | 444 ++++++++++++---------
net/cert/ev_root_ca_metadata.h | 19 +-
net/cert/ev_root_ca_metadata_unittest.cc | 14 +-
...d305b365c41e3470a78a1d37b134a98cd547b92dab3.pem | 79 ++++
...66791700d6451d7fb56f0b2ab1d3b8eb070e56edff5.pem | 55 +++
...2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7.pem | 76 ++++
...ad4d83294366a828856553f3b14303f90147f5d40ef.pem | 128 ++++++
...89b8542e94617d893d7fe944e10a7937ee29d9693c0.pem | 138 +++++++
...1db6e317653ca7848e1bebd3a0b0179a707f92cf178.pem | 71 ++++
...af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b.pem | 76 ++++
...809116b575bf87989f06518f9808c860503178baf66.pem | 87 ++++
...40ed59ad1821bb4afacf0aa9a58b5d57a338a3afbcb.pem | 86 ++++
...0d324de72284e079d7b5220bb8fbd747816eebebaca.pem | 137 +++++++
...0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658.pem | 83 ++++
...c072b1011a077bd77c097f40164b2f8598abd83860c.pem | 85 ++++
...5aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb.pem | 77 ++++
...e2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7.pem | 53 +++
...13458cc43bfa7f59c8182d783a513f6ebec100c8924.pem | 51 +++
...7b8dfe868cb31d02ebb3ada271569f50343b46db3a4.pem | 45 +++
...ef880858cbce50102b36e8f0a040c3c69e74522fe6e.pem | 80 ++++
...118f80bec4f62304d83cec4713a19c39c011ea46db4.pem | 119 ++++++
...b2bca32563f49844acfc32b7be4b0ff599f9e8c7af7.pem | 83 ++++
...8c13bf3b448457fa06cc10250997fa01458317c41e5.pem | 124 ++++++
...fea610ddf2fa078b5c8067f4e828290bfb860e84b3c.pem | 87 ++++
...f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f.pem | 124 ++++++
...fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5.pem | 79 ++++
...1f1ec8c92013fc5f82ae98ee533eb4619b8deb4d06c.pem | 78 ++++
...d209ed1503029fbcbd41ca1b506ec27f15ade7dac69.pem | 88 ++++
...d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339.pem | 81 ++++
...0d7b53091f73292089e6e5a63e2749dd3aca9198eda.pem | 79 ++++
...cae71c9fde4604c064cf5ffb686bae5dbaad7fdd34c.pem | 82 ++++
...cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a.pem | 119 ++++++
...c5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a.pem | 53 +++
...5391adfc6c2dd60d87bb736d2b521484aa47a0ebef6.pem | 77 ++++
...0317f074671b85d7ea80d5b07273463534b32b40234.pem | 122 ++++++
...8f997168f24c58fc5023bf5da5be2eb6e1dd8902ed5.pem | 128 ++++++
...abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066.pem | 123 ++++++
...25190edcfedb1974a606a13c6e5290fcb2ae63edab5.pem | 80 ++++
...196a6c9906c30c4e08783eae8c1609954d69355596b.pem | 51 +++
...72f9f95d5755a5b2b457d81f3692b610a98672f0e1b.pem | 116 ++++++
...982d2b50010b6d165374acf83a7d4a32db768c4408e.pem | 78 ++++
...4e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd.pem | 122 ++++++
...8d7be4979ebf2611f7dd79bf91c1c6b566a219ed766.pem | 54 +++
...8e75c053b1eca57ea55c8688f647c6881f2c8357b95.pem | 127 ++++++
...d9d4f6f366ea894d22f5f34d989a983acec2fffed50.pem | 86 ++++
...11f8d43d576671c6eb2bceab413fb83d965d06d2ff2.pem | 86 ++++
...dc85ea6fcd5480b603239bdc454fc758b2a26cf7f79.pem | 60 +++
...5cd98b62149e5494a67f5845e7bd1ed019f27b86bd6.pem | 81 ++++
...816634aa3a79e6e4b96950f8279dafc8d9bd8812137.pem | 90 +++++
...04534b11482d5bf0e698ecc498df52577ebf2e93b9a.pem | 118 ++++++
...b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c.pem | 90 +++++
...f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf.pem | 83 ++++
...83d542b209dc7ff4528f7d677b18389fea5e5c49e86.pem | 125 ++++++
...136a2966db26c950a971db46b4199f4ea54b78bfb9f.pem | 82 ++++
...31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e.pem | 77 ++++
...bebb23e37c71bf325dcbcdd240ea04daf58b47e1840.pem | 119 ++++++
...965dd0a0867da0b9cbd6e77714aeafb2349ab393da3.pem | 87 ++++
...62a94deeee4b4659989c3d0caf19baf6405e41ab7df.pem | 87 ++++
...d728aae3a9b6296b9fdba60bc2e11f647f2c675fb37.pem | 77 ++++
...72a86afaf8b951ffb431d837f1e5688b45971ed1557.pem | 53 +++
...2c7b7c6da3203170894e5fb71fffb6667d5e6810a36.pem | 48 +++
...fb39f0fb3d1e5426e9060b06ee6f13e9a3c5833cd43.pem | 94 +++++
...29f5d4191163b162a2225011357d56d07ffa7bc1f72.pem | 55 +++
...d4dc13da255c02c542f378365ea893911f55e55f23c.pem | 126 ++++++
...aa7ec7d155eaa625ee82916e2cd294361886cd1fbd4.pem | 81 ++++
...0fe5087b128448ba8e5184f84c51e02b5c8fb962b24.pem | 76 ++++
...47add2581b07d79adf8397eb4ecba9c5e8488821423.pem | 49 +++
...a550986d76e3ba005667c442c9762b4fbb773de228c.pem | 46 +++
...bf8be56350ee9bad1a6b9bd515edc5c6d5b8711ac44.pem | 77 ++++
...c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4.pem | 83 ++++
...1aa4920e813b2d198608cb7b7cfe21143b836df09ea.pem | 152 +++++++
...2362cf9d8bf719da1bd1b1efc946f5b4c99f42c1b9e.pem | 87 ++++
...3865bdf1cd4102e7d0759af635a7cf4720dc963c53b.pem | 78 ++++
...1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2.pem | 91 +++++
...e75fc6d1ff62c441f0fa8bc77f034b19e5db258015d.pem | 127 ++++++
...038cd623962458da5c695fbdea3c22b0bfb25897092.pem | 50 +++
...00073a43fc3ad19195a392282017895974a99026b6c.pem | 76 ++++
...a6b255b7b4fabef42935b50a265acb5cb6027e44e70.pem | 48 +++
...1228accb08119643b749c898964b1746d46c3d4cbd2.pem | 122 ++++++
...381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99.pem | 78 ++++
...b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d.pem | 118 ++++++
...4092eec2908bed0b0f316c2d4730c84eaf1f3d34881.pem | 89 +++++
...9f6bc24823dd367b5255759b4e71b61fce9f7375d73.pem | 88 ++++
...f0ccdda96710b9cd9875eca7e31707af3e96d522bbd.pem | 79 ++++
net/test/cert_test_util.cc | 5 +-
net/test/cert_test_util.h | 4 +-
net/url_request/url_request_unittest.cc | 7 +-
93 files changed, 7410 insertions(+), 250 deletions(-)

Upstream: git.chromium.org


  • Share