Add new certificateProvider extension API.

chrome/test/data/extensions/api_test/certificate_provider/create_test_certs.sh

Index: chrome/test/data/extensions/api_test/certificate_provider/create_test_certs.sh
diff --git a/chrome/test/data/extensions/api_test/platform_keys/create_test_certs.sh b/chrome/test/data/extensions/api_test/certificate_provider/create_test_certs.sh
similarity index 85%
copy from chrome/test/data/extensions/api_test/platform_keys/create_test_certs.sh
copy to chrome/test/data/extensions/api_test/certificate_provider/create_test_certs.sh
index 85c67f44693b139d798ece957c11e47eaf0f2a51..951cd294ba9ef5103e3772841a6c520311741f61 100755
--- a/chrome/test/data/extensions/api_test/platform_keys/create_test_certs.sh
+++ b/chrome/test/data/extensions/api_test/certificate_provider/create_test_certs.sh
@@ -6,10 +6,8 @@
 
 # Generates the following tree of certificates:
 #     root (self-signed root)
-#     \   \
-#      \   \--> l1_leaf (end-entity)
-#       \
-#        \----> l1_interm --> l2_leaf (end-entity)
+#         \

[bartfab (slow), 2015/09/04 09:21:58]

Nit: Un-indent so "\" aligns with the start of the word "root."

[pneubeck (no reviews), 2015/09/07 17:21:33]

Done.

+#          \--> l1_leaf (end-entity)
 
 try() {
   "$@" || {
@@ -46,12 +44,12 @@ root_cert() {
 # Create a cert with CommonName CN signed by CA_ID and store it at $1.der .
 # $2 must either be "leaf_cert" (for a server/user cert) or "ca_cert" (for a
 # intermediate CA).
+# Stores the private key at $1.pk8 .
 issue_cert() {
   if [[ "$2" == "ca_cert" ]]
   then
     try /bin/sh -c "echo 01 > out/${1}-serial"
     try touch out/${1}-index.txt
-    try openssl genrsa -out out/${1}.key 2048
   fi
   try openssl req \
     -new \
@@ -66,6 +64,8 @@ issue_cert() {
     -out out/${1}.pem \
     -config ca.cnf
 
+  try openssl pkcs8 -topk8 -in out/${1}.key -out ${1}.pk8 -outform DER -nocrypt
+
   try openssl x509 -in out/${1}.pem -outform DER -out out/${1}.der
   try cp out/${1}.der ${1}.der
 }
@@ -78,9 +78,3 @@ CN=root \
 
 CA_ID=root CN=l1_leaf \
   try issue_cert l1_leaf leaf_cert
-
-CA_ID=root CN=l1_interm \
-  try issue_cert l1_interm ca_cert
-
-CA_ID=l1_interm CN=l2_leaf \
-  try issue_cert l2_leaf leaf_cert