net: add NetSol's EV OIDs to cross-certifying roots.

net/base/ev_root_ca_metadata.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ev_root_ca_metadata.h"
 
 #if defined(USE_NSS)
 #include <cert.h>
 #include <pkcs11n.h>
 #include <secerr.h>
@@ skipping 15 matching lines @@
 
   // The EV policy OIDs of the root CA.
   const char* policy_oids[3];
 };
 
 static const EVMetadata ev_root_ca_metadata[] = {
   // AddTrust External CA Root
   // https://addtrustexternalcaroot-ev.comodoca.com
   { { { 0x02, 0xfa, 0xf3, 0xe2, 0x91, 0x43, 0x54, 0x68, 0x60, 0x78,
         0x57, 0x69, 0x4d, 0xf5, 0xe4, 0x5b, 0x68, 0x85, 0x18, 0x68 } },
-    {"1.3.6.1.4.1.6449.1.2.1.5.1", NULL},
+    {
+      "1.3.6.1.4.1.6449.1.2.1.5.1",
+      // This is the Network Solutions EV OID. However, this root
+      // cross-certifies NetSol and so we need it here too.
+      "1.3.6.1.4.1.782.1.2.1.8.1",
+      NULL,
+    },
   },
   // AffirmTrust Commercial
   // https://commercial.affirmtrust.com/
   { { { 0xf9, 0xb5, 0xb6, 0x32, 0x45, 0x5f, 0x9c, 0xbe, 0xec, 0x57,
         0x5f, 0x80, 0xdc, 0xe9, 0x6e, 0x2c, 0xc7, 0xb2, 0x78, 0xb7 } },
     {"1.3.6.1.4.1.34697.2.1", NULL},
   },
   // AffirmTrust Networking
   // https://networking.affirmtrust.com:4431
   { { { 0x29, 0x36, 0x21, 0x02, 0x8b, 0x20, 0xed, 0x02, 0xf5, 0x66,
@@ skipping 171 matching lines @@
     {"2.16.840.1.113733.1.7.48.1", NULL},
   },
   // UTN - DATACorp SGC
   { { { 0x58, 0x11, 0x9f, 0x0e, 0x12, 0x82, 0x87, 0xea, 0x50, 0xfd,
         0xd9, 0x87, 0x45, 0x6f, 0x4f, 0x78, 0xdc, 0xfa, 0xd6, 0xd4 } },
     {"1.3.6.1.4.1.6449.1.2.1.5.1", NULL},
   },
   // UTN-USERFirst-Hardware
   { { { 0x04, 0x83, 0xed, 0x33, 0x99, 0xac, 0x36, 0x08, 0x05, 0x87,
         0x22, 0xed, 0xbc, 0x5e, 0x46, 0x00, 0xe3, 0xbe, 0xf9, 0xd7 } },
-    {"1.3.6.1.4.1.6449.1.2.1.5.1", NULL},
+    {
+      "1.3.6.1.4.1.6449.1.2.1.5.1",
+      // This is the Network Solutions EV OID. However, this root
+      // cross-certifies NetSol and so we need it here too.
+      "1.3.6.1.4.1.782.1.2.1.8.1",
+      NULL,
+    },
   },
   // ValiCert Class 2 Policy Validation Authority
   { { { 0x31, 0x7a, 0x2a, 0xd0, 0x7f, 0x2b, 0x33, 0x5e, 0xf5, 0xa1,
         0xc3, 0x4e, 0x4b, 0x57, 0xe8, 0xb7, 0xd8, 0xf1, 0xfc, 0xa6 } },
     {"2.16.840.1.114413.1.7.23.3", "2.16.840.1.114414.1.7.23.3", NULL},
   },
   // VeriSign Class 3 Public Primary Certification Authority
   // https://www.verisign.com/
   { { { 0x74, 0x2c, 0x31, 0x92, 0xe6, 0x07, 0xe4, 0x24, 0xeb, 0x45,
         0x49, 0x54, 0x2b, 0xe1, 0xbb, 0xc5, 0x3e, 0x61, 0x74, 0xe2 } },
@@ skipping 171 matching lines @@
 // static
 bool EVRootCAMetadata::PolicyOIDsAreEqual(PolicyOID a, PolicyOID b) {
 #if defined(USE_NSS)
   return a == b;
 #else
   return !strcmp(a, b);
 #endif
 }
 
 }  // namespace net