Note: Google Test filter = TrustStoreNSSTestWithoutSlotFilter.IssuerSerialAliasing* [==========] Running 2 tests from 1 test suite. [----------] Global test environment set-up. [----------] 2 tests from TrustStoreNSSTestWithoutSlotFilter [ RUN ] TrustStoreNSSTestWithoutSlotFilter.IssuerSerialAliasingReturnsTrustedAnchor [2668:2668:ERROR:crypto/nss_util.cc:79] Failed to create /home/awillia_google_com/.local/share/pki/nssdb directory. [ OK ] TrustStoreNSSTestWithoutSlotFilter.IssuerSerialAliasingReturnsTrustedAnchor (135 ms) [ RUN ] TrustStoreNSSTestWithoutSlotFilter.IssuerSerialAliasingCertVerificationBypass [*] Certificate verification BYPASS: leaf for 'victim.example' signed only by attacker key K_evil validated as TRUSTED via forged anchor C aliasing (issuer,serial) of locally-trusted root T. path[0] = leaf (SPKI hash != T's key) path[1] = C (attacker cert, DER != T's DER, treated as TrustAnchor) path.last_cert_trust = TRUSTED_ANCHOR+enforce_anchor_expiry+enforce_anchor_constraints [ OK ] TrustStoreNSSTestWithoutSlotFilter.IssuerSerialAliasingCertVerificationBypass (53 ms) [----------] 2 tests from TrustStoreNSSTestWithoutSlotFilter (189 ms total) [----------] Global test environment tear-down [==========] 2 tests from 1 test suite ran. (189 ms total) [ PASSED ] 2 tests.