NOT FOR REVIEW....

net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
new file mode 100644
index 0000000000000000000000000000000000000000..c40c9c044b51192bcb05735a562d1ab4e5975cb1
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
@@ -0,0 +1,280 @@
+[Created by: generate-intermediary-signed-with-md5.py]
+
+Simple certificate chain with 1 intermediary that is signed by
+the root using MD5.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:fc:76:f1:72:c3:b8:6c:b9:b9:80:f7:71:7e:f6:
+                    70:1d:4a:a7:06:63:1b:07:03:38:c3:61:c2:a8:a4:
+                    e7:b6:4a:9a:aa:10:b3:66:4d:bb:0e:81:7a:9c:de:
+                    d9:f5:ae:ce:3d:59:91:02:00:59:bf:cb:81:0a:c2:
+                    7b:93:cc:b5:4c:51:9d:08:75:29:9c:55:86:7c:f0:
+                    57:a8:eb:2c:80:90:ef:24:c7:91:fe:b1:02:38:09:
+                    05:3c:e9:94:0c:cd:ae:4c:7f:15:dd:14:65:07:ef:
+                    9f:9f:35:45:d4:93:e4:3e:bb:81:bb:6e:0d:4a:87:
+                    d8:5a:57:ec:a0:fc:a5:a0:72:a0:16:79:a4:93:1c:
+                    b1:6b:60:69:3e:0d:8b:19:4a:cc:9e:2a:3a:2d:e7:
+                    40:bc:df:0d:78:c5:8c:6b:1c:30:69:b2:e4:d1:46:
+                    c3:3d:75:c4:c5:c4:2d:20:20:e2:86:7e:ac:be:53:
+                    de:a5:a1:55:22:44:b6:66:68:14:70:6e:7f:a0:40:
+                    6f:23:31:dd:98:b1:17:da:d6:b7:68:1e:07:a4:39:
+                    5e:ed:21:77:64:5b:b8:4a:85:11:18:b3:d7:5b:64:
+                    76:8d:27:2b:7c:90:96:90:f8:47:03:b5:d2:7d:79:
+                    71:03:bb:6e:1b:26:92:ae:31:00:a6:05:31:50:ce:
+                    1b:01
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                80:0D:6B:08:FA:3F:DD:BD:B1:BD:C4:91:83:47:56:EA:8C:DA:8B:2D
+            X509v3 Authority Key Identifier: 
+                keyid:D7:2A:F6:50:54:AB:6B:8F:BA:C3:E2:27:F4:82:95:74:87:A9:47:A8
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         4c:6c:a5:35:98:b5:02:91:36:a1:9a:61:17:6f:a0:55:fe:69:
+         ae:16:cd:13:a9:66:46:db:87:a4:11:1c:0e:15:9e:b2:ea:42:
+         65:62:c7:eb:91:98:cf:a9:14:f5:32:49:36:7d:a4:67:7d:4a:
+         97:65:9f:92:61:00:18:51:7d:9b:38:16:84:a4:e4:46:6f:82:
+         01:32:c3:ac:e7:ad:85:d6:c0:3c:ad:4c:34:6f:29:29:9e:b4:
+         da:b9:8c:30:8c:cd:e2:6e:b2:f5:8b:e5:79:b2:f9:6d:c0:80:
+         ab:0c:5c:4a:8e:bb:c4:b7:dd:b1:05:4a:ea:26:96:8a:b6:f4:
+         78:d5:7f:1f:88:81:df:97:76:07:9c:e0:38:57:42:15:a9:9d:
+         dc:b2:dd:40:4f:c6:b6:74:bd:f6:4c:78:85:d8:aa:d9:d1:bc:
+         01:73:fd:9c:43:4b:e5:32:31:50:26:24:a9:ea:e2:27:3b:de:
+         9b:b6:de:7d:c6:cb:1f:46:41:3e:6e:c3:ab:9d:a9:b7:fc:e6:
+         4b:8c:2f:a7:a7:22:c7:f1:16:fb:fa:63:6b:b1:e6:7f:3a:7e:
+         d4:df:b5:8f:f8:40:d0:63:4a:61:5c:04:2c:53:29:fa:13:39:
+         a7:47:7f:f2:34:32:ac:1c:c4:2f:47:4f:58:44:fb:2f:e4:c5:
+         59:6c:79:68
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: md5WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e8:17:80:fc:d3:3e:1c:c1:02:d6:7d:ca:ed:93:
+                    37:36:44:b5:aa:df:e4:3b:cf:f9:5a:6c:d7:31:2e:
+                    3f:99:92:c9:09:91:a4:b3:60:ba:95:8b:7e:7d:ef:
+                    1a:5c:94:a4:35:f3:ac:ca:49:2d:46:a7:a3:c7:c2:
+                    6a:8b:9d:e0:f2:ff:b6:f8:a9:33:76:da:1a:02:2c:
+                    92:2c:38:03:9b:a7:e2:60:22:1d:db:85:74:88:cc:
+                    2d:d7:49:60:40:bd:ef:68:18:10:8b:c0:3e:7d:8c:
+                    9c:41:63:32:95:56:2f:4f:a1:57:ab:ee:dc:3c:95:
+                    a6:a3:0f:91:bd:8a:e8:c9:00:c8:23:b5:9c:b0:fb:
+                    94:bf:f2:a5:23:b7:61:b9:00:8a:5b:3a:84:ec:69:
+                    ff:ac:e0:e8:2f:3f:eb:7a:76:88:98:cd:13:2f:54:
+                    82:88:d9:01:35:5f:70:e0:34:ae:2d:ac:ec:61:73:
+                    e6:30:a0:37:e2:b5:f5:71:7c:10:cf:1e:56:40:7d:
+                    17:19:4f:9c:7e:68:7c:e1:89:01:8e:dd:06:3d:b4:
+                    ce:b4:4e:df:8e:1d:f9:1d:71:22:a3:2d:c1:e2:3f:
+                    aa:a4:af:d0:14:4d:12:25:df:23:49:66:4b:e0:c5:
+                    b7:bd:d6:5a:cf:30:0a:c6:ab:49:f0:db:1c:5e:07:
+                    8b:cb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D7:2A:F6:50:54:AB:6B:8F:BA:C3:E2:27:F4:82:95:74:87:A9:47:A8
+            X509v3 Authority Key Identifier: 
+                keyid:AF:A7:C2:5F:97:6B:AF:C1:36:9A:C6:21:AF:EA:87:61:66:89:A4:10
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: md5WithRSAEncryption
+         18:7c:af:2f:90:9e:4c:78:8f:04:0d:8a:40:78:84:36:d8:02:
+         04:37:8c:cc:10:3b:e1:09:d1:dd:17:b9:96:45:50:91:0f:09:
+         aa:32:b3:4b:62:03:04:7e:1a:15:0c:f4:0f:7c:45:f0:c3:e1:
+         41:75:fc:e6:cf:52:0f:81:d3:36:7d:e6:3c:e0:d4:34:b6:b3:
+         3c:dd:a2:d0:2e:a0:b4:ce:0a:fa:63:65:0e:1f:bf:aa:d5:12:
+         71:e5:ce:3a:91:79:96:f3:17:97:96:75:20:a7:e6:2a:9d:0c:
+         d3:8c:2a:4b:7c:83:56:30:1e:bb:db:34:00:cb:26:fd:82:1a:
+         fc:6b:87:6a:69:a2:a8:74:a2:b0:2e:46:6f:16:ee:64:ab:81:
+         d3:28:36:25:be:65:10:38:be:74:f2:5d:86:8d:c6:8a:7e:66:
+         69:06:39:98:ef:4c:7f:bf:04:2e:b8:b9:af:13:7a:60:b1:ea:
+         3e:3b:36:75:58:dc:38:b3:b4:f1:e3:1b:7e:4c:92:69:77:92:
+         54:76:89:e2:6a:58:7a:51:e1:2a:5e:56:be:d6:87:be:2d:ca:
+         fb:92:13:ef:54:18:f6:b0:81:37:08:67:ce:79:38:ef:d1:eb:
+         6f:5d:09:e3:c8:f9:5c:d9:71:32:a5:15:88:19:ae:23:21:ea:
+         da:d8:ce:ad
+-----BEGIN CERTIFICATE-----
+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BeA/NM+
+HMEC1n3K7ZM3NkS1qt/kO8/5WmzXMS4/mZLJCZGks2C6lYt+fe8aXJSkNfOsykkt
+Rqejx8Jqi53g8v+2+KkzdtoaAiySLDgDm6fiYCId24V0iMwt10lgQL3vaBgQi8A+
+fYycQWMylVYvT6FXq+7cPJWmow+RvYroyQDII7WcsPuUv/KlI7dhuQCKWzqE7Gn/
+rODoLz/renaImM0TL1SCiNkBNV9w4DSuLazsYXPmMKA34rX1cXwQzx5WQH0XGU+c
+fmh84YkBjt0GPbTOtE7fjh35HXEioy3B4j+qpK/QFE0SJd8jSWZL4MW3vdZazzAK
+xqtJ8NscXgeLywIDAQABo4HLMIHIMB0GA1UdDgQWBBTXKvZQVKtrj7rD4if0gpV0
+h6lHqDAfBgNVHSMEGDAWgBSvp8Jfl2uvwTaaxiGv6odhZomkEDA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEEBQADggEB
+ABh8ry+Qnkx4jwQNikB4hDbYAgQ3jMwQO+EJ0d0XuZZFUJEPCaoys0tiAwR+GhUM
+9A98RfDD4UF1/ObPUg+B0zZ95jzg1DS2szzdotAuoLTOCvpjZQ4fv6rVEnHlzjqR
+eZbzF5eWdSCn5iqdDNOMKkt8g1YwHrvbNADLJv2CGvxrh2ppoqh0orAuRm8W7mSr
+gdMoNiW+ZRA4vnTyXYaNxop+ZmkGOZjvTH+/BC64ua8TemCx6j47NnVY3DiztPHj
+G35Mkml3klR2ieJqWHpR4SpeVr7Wh74tyvuSE+9UGPawgTcIZ855OO/R629dCePI
++VzZcTKlFYgZriMh6trYzq0=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ac:c9:87:47:6b:ff:52:fc:15:45:00:c4:58:f6:
+                    b5:ae:8d:6f:f8:e4:77:34:e2:1a:a6:17:b2:dc:f9:
+                    84:6d:a9:a6:26:bd:ad:f8:d8:7f:7f:23:3b:96:45:
+                    7c:55:8b:4c:60:ee:ab:ed:ae:f3:25:6d:d9:bc:6f:
+                    13:33:38:82:5e:b6:23:7a:7c:ab:10:57:6b:29:08:
+                    ee:bb:3f:96:7d:d9:e1:0e:a4:c6:5f:7d:46:60:6a:
+                    8b:89:c2:76:c1:d2:b2:5a:f1:e4:20:bb:60:51:63:
+                    60:06:e4:e3:d0:60:e6:c5:3c:aa:e0:86:67:af:7b:
+                    13:81:47:bf:a5:c3:49:d3:b5:38:97:1c:32:1f:30:
+                    9f:ef:6f:d7:6a:a2:33:b7:e3:46:a3:32:11:92:7c:
+                    c8:45:d8:fb:69:72:2a:36:e8:56:ce:51:12:3e:d0:
+                    38:34:2a:15:19:8d:34:63:ec:2f:9c:f9:8e:41:89:
+                    53:ef:07:25:c9:29:b5:76:bd:76:59:9a:5c:a7:db:
+                    68:60:56:76:14:71:7e:90:27:e8:24:18:83:d7:08:
+                    ef:03:fb:47:01:eb:e0:01:34:cf:91:6f:c4:07:8b:
+                    1a:18:92:69:d6:10:7d:18:1b:3b:2b:71:2a:bd:97:
+                    da:c5:a6:c4:c3:6c:c4:8d:0a:5d:8d:c9:23:18:b0:
+                    85:23
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                AF:A7:C2:5F:97:6B:AF:C1:36:9A:C6:21:AF:EA:87:61:66:89:A4:10
+            X509v3 Authority Key Identifier: 
+                keyid:AF:A7:C2:5F:97:6B:AF:C1:36:9A:C6:21:AF:EA:87:61:66:89:A4:10
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         46:52:ae:54:62:c7:72:41:82:ad:2b:a8:1b:47:33:fe:51:bb:
+         65:d8:ec:11:ac:1b:99:b1:d4:be:3d:2f:32:5f:cf:54:c4:53:
+         68:eb:b0:f3:87:3a:52:4d:b9:a3:8e:ad:cf:f7:ef:96:ae:f0:
+         6b:63:c3:d0:eb:66:63:25:33:f9:d4:49:6b:30:4c:b2:f2:d1:
+         93:8f:08:cd:df:6f:06:d9:3e:6b:fa:90:22:4d:e1:b6:27:d9:
+         c0:14:36:05:a0:a7:20:8a:c3:4f:10:dd:aa:13:ff:a9:50:3d:
+         4b:27:43:37:34:a2:56:54:28:6c:20:92:b2:9a:5c:85:66:3c:
+         83:ce:eb:b2:19:6a:17:20:f3:fa:04:1e:31:4b:52:85:5c:7d:
+         f9:da:b8:be:12:ed:59:4b:64:a7:ce:c2:a9:b6:ee:64:f0:56:
+         6a:d9:fd:a3:96:d3:31:c3:9a:2b:8b:73:8c:ce:ec:0f:55:64:
+         6f:ab:d2:61:89:f7:12:a4:84:50:0a:1f:a9:be:f6:db:83:cd:
+         7d:94:75:f0:33:57:a4:a6:dc:bf:2e:da:f8:c1:48:ad:30:d3:
+         78:2d:5f:1b:d7:4e:d4:43:56:6d:1c:89:2e:fb:41:66:42:40:
+         73:15:5e:37:78:8e:6a:bf:b5:1b:cb:83:7b:49:93:1c:5c:f6:
+         54:db:06:65
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzJh0dr/1L8FUUAxFj2
+ta6Nb/jkdzTiGqYXstz5hG2ppia9rfjYf38jO5ZFfFWLTGDuq+2u8yVt2bxvEzM4
+gl62I3p8qxBXaykI7rs/ln3Z4Q6kxl99RmBqi4nCdsHSslrx5CC7YFFjYAbk49Bg
+5sU8quCGZ697E4FHv6XDSdO1OJccMh8wn+9v12qiM7fjRqMyEZJ8yEXY+2lyKjbo
+Vs5REj7QODQqFRmNNGPsL5z5jkGJU+8HJckptXa9dlmaXKfbaGBWdhRxfpAn6CQY
+g9cI7wP7RwHr4AE0z5FvxAeLGhiSadYQfRgbOytxKr2X2sWmxMNsxI0KXY3JIxiw
+hSMCAwEAAaOByzCByDAdBgNVHQ4EFgQUr6fCX5drr8E2msYhr+qHYWaJpBAwHwYD
+VR0jBBgwFoAUr6fCX5drr8E2msYhr+qHYWaJpBAwNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBGUq5UYsdy
+QYKtK6gbRzP+Ubtl2OwRrBuZsdS+PS8yX89UxFNo67DzhzpSTbmjjq3P9++WrvBr
+Y8PQ62ZjJTP51ElrMEyy8tGTjwjN328G2T5r+pAiTeG2J9nAFDYFoKcgisNPEN2q
+E/+pUD1LJ0M3NKJWVChsIJKymlyFZjyDzuuyGWoXIPP6BB4xS1KFXH352ri+Eu1Z
+S2SnzsKptu5k8FZq2f2jltMxw5ori3OMzuwPVWRvq9JhifcSpIRQCh+pvvbbg819
+lHXwM1ekpty/Ltr4wUitMNN4LV8b107UQ1ZtHIku+0FmQkBzFV43eI5qv7Uby4N7
+SZMcXPZU2wZl
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----