Skip to content

regenerate multi-root-test-chain certs - #8649

Merged
briantting merged 1 commit into
youtube:25.lts.1+from
briantting:derp25
Jan 16, 2026
Merged

briantting merged 1 commit into
youtube:25.lts.1+from
briantting:derp25

Conversation

@briantting

@briantting briantting commented Jan 14, 2026 •

Copy link
Copy Markdown
Member

Regenerates the test certificates from the scripts generate-multi-root-test-chains.sh and generate-multi-root-keychain.sh

Bug: 40802244
Change-Id: Ie9ec231c1fc6e3ee1c46d7908c62f8a66fdab79b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7032484
Commit-Queue: Matt Mueller [email protected]
Reviewed-by: Hubert Chao [email protected]
Cr-Commit-Position: refs/heads/main@{#1530398}

Cherry-picked from: a6a5d55a2473e8eda675bf7a9da1671c39a13fea

Bug: 278599663

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request successfully regenerates the multi-root test certificates and updates the associated test cases and scripts. The changes correctly reflect the new certificate properties, including updated validity periods and serial numbers. The test assertions in nss_cert_database_unittest.cc have been adjusted to match the new order of certificates, and the generate-multi-root-test-chains.sh script now explicitly uses python3, which is a good practice for script maintainability. No issues of medium, high, or critical severity were found.

@kaidokert kaidokert left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Straight cherrypick, it should work ?

@briantting

Copy link
Copy Markdown
Member Author

Straight cherrypick, it should work ?

were getting more test failures with this unfortunately

Out of date test cert is failing net unittest. Branch is stable, cert
will not be updated.

Bug: 278599663
@briantting
briantting enabled auto-merge (squash) January 16, 2026 00:01
@briantting
briantting merged commit c5a53ae into youtube:25.lts.1+ Jan 16, 2026
245 checks passed
@briantting
briantting deleted the derp25 branch January 16, 2026 17:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants