tree 3f36a86beb714804a45fc5a88c628eaf6b4d3bf6
parent 9f7f4d033b03ae1b6e7b69c9e3bfb368f06a887d
author Roland Shoemaker <bracewell@google.com> 1716479441 -0700
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1716485754 +0000

More ECH certificates

In the rejection tests, make sure the certificate served matches the
public name in the ECH config, so shims which verify the returned
certificate can make sure they are using the right name.

Previously there was a mismatch where the name to be verified was
public.example, but the certificate returned was valid for "test".

Change-Id: I511415431e01c9a83766c633cf11c34f0fa93058
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/68727
Auto-Submit: Roland Shoemaker <bracewell@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>