NOT FOR REVIEW....

net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
new file mode 100644
index 0000000000000000000000000000000000000000..4ff87e0492835efce95bd3b040c6ab2e39ddddcb
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
@@ -0,0 +1,283 @@
+[Created by: generate-intermediary-unknown-non-critical-extension.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary has an unknown X.509 extension that is marked as
+non-critical
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b3:7d:b4:34:7a:8e:b0:fe:62:ff:5c:93:5e:29:
+                    db:95:1c:16:fb:3e:b3:9d:33:2e:55:41:db:e3:9e:
+                    4a:15:87:88:2b:3c:68:50:c9:59:f6:95:21:2d:3a:
+                    ac:6f:e9:73:dc:68:60:d6:98:55:bf:ec:e1:d8:57:
+                    a8:be:6e:8a:5a:8d:9a:14:62:63:10:1e:1e:82:41:
+                    d2:06:64:77:e0:a7:b6:5a:37:90:24:a2:6b:77:c9:
+                    43:49:d1:e1:08:36:be:7e:a4:ec:20:c2:8a:33:a9:
+                    9f:31:e0:2e:ba:2a:81:29:61:3c:00:2b:a3:fa:65:
+                    11:ab:7d:8d:d9:a6:f1:f9:b2:e9:4c:f4:89:f7:57:
+                    3b:7e:31:ac:2b:1f:32:1b:4c:10:26:57:86:c1:b0:
+                    28:4c:f2:71:34:cc:82:5b:5c:d8:0e:16:33:4f:17:
+                    a7:c2:e4:3b:33:96:b5:76:98:c2:67:1e:20:ac:23:
+                    de:ee:71:5b:8e:18:44:9a:db:1e:7e:2f:2d:ef:66:
+                    89:8e:31:a5:e3:76:71:5d:6d:29:ab:ed:7c:bc:1b:
+                    54:ed:a0:ea:44:bb:0c:29:db:24:a1:98:24:3e:e1:
+                    b2:4f:09:19:38:03:97:91:a4:47:ae:13:46:8c:d6:
+                    a7:14:fd:53:84:cd:81:26:17:2f:6b:78:ec:3b:45:
+                    1f:3b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                95:9F:E2:AC:14:6F:7C:56:7D:A9:DF:EB:8A:B4:37:9E:71:57:05:70
+            X509v3 Authority Key Identifier: 
+                keyid:EF:FE:E6:1E:2D:4D:B5:03:E8:28:40:A1:63:80:20:F0:51:89:D1:5D
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         21:b1:9e:32:e0:48:77:23:54:79:90:ac:7a:63:78:5f:c1:30:
+         6c:71:52:ff:4f:4e:19:b7:c3:33:dd:31:0a:76:d6:a6:78:0a:
+         58:e2:7d:91:96:1e:1b:a0:6b:0a:9e:d9:83:54:8f:0d:78:8e:
+         b6:0a:14:7b:62:d3:e2:00:22:a7:31:e4:e3:d0:fc:d8:92:3d:
+         8d:14:a6:ac:bd:fe:a5:de:e0:e7:dd:c5:5f:89:c6:e9:09:7d:
+         60:61:0f:f7:4a:74:e5:48:18:78:e4:e9:16:39:7d:f0:86:46:
+         87:1c:b2:1e:53:9b:9d:df:e0:cf:e0:eb:92:ef:af:e6:fb:15:
+         25:87:43:1f:eb:1f:3b:76:95:bc:7e:a7:39:11:c0:c2:6e:81:
+         9e:f3:26:13:f9:27:07:66:89:fe:1a:c5:45:67:cf:f1:85:20:
+         9a:53:36:1d:26:82:6c:9a:f2:6f:a1:9c:39:3d:b1:59:b6:4d:
+         00:77:30:ca:7b:98:28:88:9c:b6:14:9d:2f:2a:aa:a1:00:48:
+         03:fa:0a:1e:8d:49:bb:0a:6b:96:ca:03:f1:fc:5d:94:64:19:
+         37:94:26:81:c4:e1:b8:fc:d7:20:83:ec:e4:29:70:7d:d2:64:
+         73:a9:8d:86:e2:b6:e7:98:d9:c6:2f:be:9f:a9:6b:72:02:5c:
+         79:e8:5b:65
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:9c:b6:6d:45:0e:8f:23:bf:fb:6d:f4:65:09:d6:
+                    9b:5f:c0:61:a1:9d:37:06:99:95:ca:7f:c7:cc:17:
+                    36:54:ef:d9:6e:5d:dd:e2:b6:68:5f:5c:a2:f5:68:
+                    cc:70:e1:fa:ec:1f:3f:90:1e:e4:73:bd:ae:c9:b8:
+                    e5:24:22:bd:36:4f:bb:68:96:d7:c3:6d:bc:7b:64:
+                    ad:d6:6f:03:5b:ba:28:15:20:f0:25:8c:f9:e5:1b:
+                    79:0a:ab:d4:97:3f:6b:c2:b0:b1:b6:59:5d:25:60:
+                    a3:28:49:f6:13:00:93:f9:d1:18:b7:35:44:fc:03:
+                    e5:df:79:00:df:0e:e1:5e:c2:05:b2:f7:25:e8:81:
+                    74:8d:99:f7:8e:1e:4a:2e:c5:09:e5:95:d9:e9:a7:
+                    e7:f0:e1:5c:d6:cf:8e:a8:20:fd:d6:a1:c7:86:2e:
+                    16:b0:b7:f4:d0:16:d1:8b:40:4e:b8:f2:72:c6:a7:
+                    76:97:3a:26:92:82:c6:27:68:47:db:91:89:52:68:
+                    ec:78:08:78:db:7b:5a:24:40:da:95:e6:67:09:39:
+                    62:32:ef:20:d9:89:c4:54:d3:95:67:8b:cf:66:31:
+                    b6:8c:2b:6a:ff:a6:d5:03:8b:83:51:ed:bd:69:37:
+                    16:a8:ff:8f:a3:3e:1a:6e:25:41:99:da:1f:76:74:
+                    d4:89
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                EF:FE:E6:1E:2D:4D:B5:03:E8:28:40:A1:63:80:20:F0:51:89:D1:5D
+            X509v3 Authority Key Identifier: 
+                keyid:64:1A:AD:CD:A1:33:E5:0D:B6:E0:01:B7:37:AF:23:07:FD:31:1E:B7
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            1.2.3.4: 
+                ....
+    Signature Algorithm: sha256WithRSAEncryption
+         55:42:aa:6c:05:d5:11:38:a3:31:59:ba:dd:64:a0:05:1a:b6:
+         6a:17:09:6e:e5:db:82:10:4d:45:9e:f7:5b:24:a8:2f:a1:3d:
+         f6:1f:e0:a9:ad:b6:29:20:21:37:a1:95:e5:2c:8e:36:e4:d0:
+         98:ad:b9:58:79:30:c8:20:40:6c:b7:d4:29:df:44:24:4e:ac:
+         a4:6c:eb:19:b2:8e:de:78:50:71:a3:49:b4:16:96:a4:a6:10:
+         fc:7f:70:ed:ec:38:b4:2d:cc:e4:e6:b6:86:4d:4f:05:50:f2:
+         84:30:18:4f:59:9b:05:c3:14:f6:9b:b6:eb:8b:40:c3:5d:d9:
+         d9:7f:a9:3c:21:a1:b4:ea:f9:6a:52:b7:6d:d0:a8:36:4c:ef:
+         fe:ce:26:b8:f1:7d:fc:5f:32:b7:3f:17:59:43:56:f8:6c:bb:
+         ab:c6:b4:7f:0c:22:b5:6b:34:63:7a:ae:34:86:c7:fd:f8:82:
+         ef:b5:b3:68:7f:70:5a:54:e1:65:53:d9:65:34:72:dc:00:1b:
+         7e:2b:8a:b6:56:e5:15:75:f4:ce:68:6b:d5:74:50:6a:94:be:
+         6c:f7:79:ee:d9:49:2d:62:0f:50:7a:4b:5b:29:c4:88:bd:37:
+         6e:1a:8b:af:7c:f7:55:1e:b6:b8:b4:41:4f:f0:93:cf:b0:e4:
+         16:d6:15:fe
+-----BEGIN CERTIFICATE-----
+MIIDejCCAmKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLZtRQ6P
+I7/7bfRlCdabX8BhoZ03BpmVyn/HzBc2VO/Zbl3d4rZoX1yi9WjMcOH67B8/kB7k
+c72uybjlJCK9Nk+7aJbXw228e2St1m8DW7ooFSDwJYz55Rt5CqvUlz9rwrCxtlld
+JWCjKEn2EwCT+dEYtzVE/APl33kA3w7hXsIFsvcl6IF0jZn3jh5KLsUJ5ZXZ6afn
+8OFc1s+OqCD91qHHhi4WsLf00BbRi0BOuPJyxqd2lzomkoLGJ2hH25GJUmjseAh4
+23taJEDaleZnCTliMu8g2YnEVNOVZ4vPZjG2jCtq/6bVA4uDUe29aTcWqP+Poz4a
+biVBmdofdnTUiQIDAQABo4HYMIHVMB0GA1UdDgQWBBTv/uYeLU21A+goQKFjgCDw
+UYnRXTAfBgNVHSMEGDAWgBRkGq3NoTPlDbbgAbc3ryMH/TEetzA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wCwYDKgMEBAQBAgMEMA0GCSqG
+SIb3DQEBCwUAA4IBAQBVQqpsBdUROKMxWbrdZKAFGrZqFwlu5duCEE1FnvdbJKgv
+oT32H+CprbYpICE3oZXlLI425NCYrblYeTDIIEBst9Qp30QkTqykbOsZso7eeFBx
+o0m0FpakphD8f3Dt7Di0Lczk5raGTU8FUPKEMBhPWZsFwxT2m7bri0DDXdnZf6k8
+IaG06vlqUrdt0Kg2TO/+zia48X38XzK3PxdZQ1b4bLurxrR/DCK1azRjeq40hsf9
++ILvtbNof3BaVOFlU9llNHLcABt+K4q2VuUVdfTOaGvVdFBqlL5s93nu2UktYg9Q
+ektbKcSIvTduGouvfPdVHra4tEFP8JPPsOQW1hX+
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cb:8a:d4:33:20:71:73:f5:94:14:00:cd:65:61:
+                    5b:63:c2:51:80:65:e9:43:1e:91:99:0f:92:30:ba:
+                    c2:ed:77:4d:52:28:b0:1a:d0:64:df:93:4f:f6:1f:
+                    fe:8a:91:0c:0c:0b:ba:bb:1d:7e:04:ce:a5:69:43:
+                    3f:cd:bb:f6:03:a1:5f:91:53:ff:8d:98:fb:6f:bd:
+                    48:9d:d2:20:30:68:06:87:68:da:06:61:e2:23:ba:
+                    67:70:f3:a9:ae:ee:2d:c2:96:2e:8f:63:7d:9e:44:
+                    67:fd:11:ec:2c:f1:9c:4e:7d:a3:d1:7c:b4:91:0e:
+                    04:7c:6f:73:12:98:9d:ae:23:c0:09:d1:ad:89:df:
+                    50:30:7a:74:3f:b6:5a:7a:53:84:eb:72:aa:55:65:
+                    aa:01:24:54:b5:32:c9:4b:54:07:35:96:4b:51:fd:
+                    39:d5:3f:c2:7c:fa:80:27:0e:a8:a5:50:5b:b2:7f:
+                    bd:45:77:b8:6a:0f:b1:89:7e:3c:9b:dd:c4:6d:1f:
+                    74:61:33:51:dc:d1:17:7a:4e:f4:51:45:a1:a8:f0:
+                    b9:db:8b:dc:08:13:5b:50:7c:d0:f3:55:52:f7:78:
+                    1f:ff:53:f5:72:e6:79:99:f9:10:2b:41:49:84:ed:
+                    1b:e7:f7:cf:b4:59:f6:21:23:88:04:29:77:95:c7:
+                    50:3b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                64:1A:AD:CD:A1:33:E5:0D:B6:E0:01:B7:37:AF:23:07:FD:31:1E:B7
+            X509v3 Authority Key Identifier: 
+                keyid:64:1A:AD:CD:A1:33:E5:0D:B6:E0:01:B7:37:AF:23:07:FD:31:1E:B7
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         51:d1:26:e2:9e:de:5b:17:e7:06:fc:e5:fe:b0:13:95:29:9e:
+         3e:cc:de:d3:03:82:61:78:31:ec:6b:4b:fb:aa:67:47:a7:8c:
+         4e:28:c7:80:ed:f4:58:b5:75:b1:4a:4a:f2:2a:c5:72:ad:ea:
+         97:c0:af:7a:be:08:9e:31:c4:1f:95:42:03:98:48:f8:93:72:
+         d1:6c:9b:c1:53:d9:f7:aa:e3:b5:42:dc:2b:67:70:80:0a:7f:
+         00:cd:48:19:56:36:b6:02:39:a5:53:14:ba:b8:5a:49:9a:4a:
+         b0:dc:07:22:79:d4:30:ea:29:d0:b1:3d:09:43:d0:7b:dc:e1:
+         10:fe:b7:7c:cf:e8:54:20:73:51:1a:e3:b8:86:cf:aa:2d:4e:
+         6b:ca:75:76:33:8b:d8:f0:58:1a:89:b8:7a:1a:d9:fc:6e:3b:
+         df:16:58:10:ad:a4:5f:06:d5:ef:9a:5f:e4:50:c0:40:de:35:
+         d7:e2:93:f0:45:f3:a1:34:56:e1:f2:5a:4e:7b:dd:5c:8e:6c:
+         6b:9c:d8:ae:e4:3e:6e:48:38:25:6c:cf:16:1d:fd:8b:99:fe:
+         8e:7f:bc:f9:c1:ac:5f:09:88:4f:74:11:9f:a0:9b:90:fc:32:
+         96:3c:7b:72:63:10:f4:89:ab:60:90:a6:53:d4:2f:62:77:ce:
+         21:58:fd:af
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----