NOT FOR REVIEW....

net/data/verify_certificate_chain_unittest/target-wrong-signature.pem

Index: net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
diff --git a/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
new file mode 100644
index 0000000000000000000000000000000000000000..bde7aef74bf397e0e0a6ee6bbe2dfaec10ed10e2
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
@@ -0,0 +1,280 @@
+[Created by: generate-target-wrong-signature.py]
+
+Simple certificate where the target has an incorrect
+signature.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:aa:ca:78:9c:82:69:af:38:57:a3:8b:61:08:7e:
+                    60:19:35:96:79:c1:83:55:c9:d8:d7:76:02:dc:de:
+                    6b:8d:2d:56:45:f9:72:33:a8:6f:d3:68:0f:e7:b8:
+                    c5:b0:4b:83:83:86:d8:3f:12:0f:d2:d7:c7:f2:fd:
+                    83:8e:c2:59:f8:ec:39:82:25:26:14:bf:6c:6e:19:
+                    d9:58:71:45:bc:0a:63:ef:a2:80:e0:08:b4:3a:bb:
+                    a6:36:3e:a9:33:47:66:8d:78:4c:b1:0d:09:b4:05:
+                    f5:b3:37:69:34:63:1d:95:48:c1:8b:aa:71:66:21:
+                    bd:38:ce:19:7c:dc:f5:0d:a5:ec:07:f2:34:b6:19:
+                    09:cf:39:03:60:81:ff:cb:81:57:d7:30:f5:e6:58:
+                    de:0b:88:e7:45:c0:df:25:2f:19:b3:6e:98:8b:65:
+                    90:cd:83:61:e5:cc:64:60:79:db:7c:28:fb:43:d9:
+                    5a:91:0f:46:6e:3b:1b:a4:fc:2f:e6:5b:61:73:d2:
+                    45:cf:10:07:84:79:5a:30:40:47:15:03:9d:ac:fc:
+                    14:a3:c1:f0:58:c6:ce:65:a5:89:08:bd:60:21:b2:
+                    3c:1e:44:75:6d:2f:73:dc:94:79:b5:07:5a:56:b7:
+                    66:e5:ea:e5:80:68:94:22:cd:a1:43:bd:6e:45:af:
+                    7b:d5
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B5:EF:94:5C:7B:C4:6D:11:F4:71:D5:38:DB:C2:66:ED:A3:A2:41:64
+            X509v3 Authority Key Identifier: 
+                keyid:F5:D3:79:33:DA:32:48:A5:B5:B8:52:ED:27:1E:3A:A1:7A:69:07:BF
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         48:43:47:21:3b:17:a3:09:d1:9c:a0:29:2b:36:81:7e:21:0a:
+         b5:45:cb:9f:67:60:6a:ec:50:07:0e:07:e2:05:f6:c4:48:4d:
+         73:29:32:f8:2a:38:f4:af:af:d7:57:de:3e:7b:1c:42:73:69:
+         db:d6:ea:ec:49:ef:b7:88:30:77:db:bd:f1:92:c2:12:71:f2:
+         21:ec:4c:57:4e:9c:d5:5a:ae:1a:23:01:8a:94:81:60:43:92:
+         c0:a9:2a:9a:70:56:a9:88:f5:04:60:a7:b4:6f:f7:55:38:ce:
+         72:45:c4:1a:e4:83:86:f2:7d:49:c9:6d:b7:96:85:48:3b:21:
+         69:8c:68:fe:64:31:7c:4e:6a:c4:28:e9:f5:b9:2f:59:de:47:
+         66:eb:c1:d4:36:31:d7:10:45:09:c9:62:5a:99:de:f2:1d:d2:
+         64:ce:59:d4:d5:25:0c:ed:1f:02:e1:75:f3:c1:fa:5e:4c:be:
+         19:d4:56:91:e0:f3:3e:5d:f2:c8:cf:d2:b8:3f:76:3a:d1:63:
+         89:81:13:69:f3:f4:2e:91:b2:75:7f:44:89:1b:e5:5c:96:70:
+         73:50:35:ce:d4:f0:f7:cb:3e:9e:46:23:8f:ad:d6:23:71:64:
+         9b:e5:72:bd:29:14:30:69:0a:65:58:50:f4:f9:e5:e8:5c:37:
+         e6:3d:97:f0
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cc:28:b6:25:32:34:ad:b1:b3:97:30:97:bd:98:
+                    ff:c3:3b:6b:47:93:56:89:b7:46:14:9e:06:9c:87:
+                    b1:13:07:a5:0c:7a:a5:6a:d8:d3:81:e9:cb:2e:cb:
+                    6f:11:0c:e5:14:76:58:39:d0:2f:e7:a1:c8:fb:19:
+                    d0:22:09:5b:4d:85:1f:08:71:a7:17:d5:5b:a4:de:
+                    45:4d:6a:53:91:36:28:60:ab:cb:16:82:02:a9:69:
+                    8c:89:50:b1:e3:9b:1e:ef:10:3f:53:e5:5c:08:e8:
+                    a0:66:9b:21:ec:7f:57:81:2b:d8:a0:87:43:24:b9:
+                    f2:89:a1:bb:e0:81:04:d5:68:df:63:32:dd:11:a6:
+                    b3:3b:02:d8:13:3d:24:24:8c:0f:9b:cb:3b:59:1f:
+                    76:de:99:60:51:dd:ff:0f:b2:95:40:07:87:9f:54:
+                    4a:ee:d1:5d:39:36:8f:6c:cb:e7:eb:ca:fa:f2:c9:
+                    ed:aa:4b:37:a2:f3:bf:9b:5d:fb:27:1e:e7:77:54:
+                    88:25:b0:97:6a:3f:40:e1:14:40:b5:ad:b0:36:9f:
+                    55:82:85:5c:c8:4c:b3:c1:ab:51:a5:2a:a3:5f:8f:
+                    e1:34:be:ae:3c:70:75:c9:99:c8:bc:e9:05:b8:1d:
+                    fd:b7:be:98:38:26:7c:d9:83:8a:ea:1c:fa:3d:06:
+                    f2:37
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B1:96:7E:B6:C5:C8:C8:7A:AA:6D:5A:0D:2D:2B:CB:EF:B9:E8:A6:D9
+            X509v3 Authority Key Identifier: 
+                keyid:DB:17:10:A3:0C:5E:7A:7D:3A:90:69:AC:3F:70:45:8A:D2:B0:7C:80
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         b1:f5:c1:4c:5f:6b:e4:d4:f0:d8:d2:47:a8:19:79:71:b1:13:
+         55:5b:65:99:91:d1:51:f4:e8:c3:87:db:71:2a:f4:67:eb:cc:
+         f5:5f:6f:52:39:c1:8b:e5:9f:2f:19:7d:57:2f:7a:e2:61:2e:
+         1d:24:b5:4e:0a:af:29:bd:70:2c:a0:1c:23:23:a2:0e:8b:47:
+         ea:ca:d9:b9:7f:b9:eb:81:d0:98:44:c2:e4:9a:cb:95:e1:c3:
+         b4:45:ac:a6:80:a4:32:0d:69:1d:18:22:88:c3:2d:f7:ae:3a:
+         57:1b:bd:40:ce:3d:d0:11:91:e6:4d:e7:f6:90:14:10:39:aa:
+         43:6a:0c:76:90:65:6d:7a:02:0d:34:e2:cb:25:1b:2e:8a:20:
+         4c:d9:a1:0a:71:e2:21:8c:ce:0e:17:7f:73:37:0b:09:1f:68:
+         37:7c:e4:da:63:db:62:ed:b0:39:57:26:f5:f7:6c:de:60:95:
+         0d:41:22:68:ea:7e:17:34:c3:ab:c4:ef:55:46:be:15:61:35:
+         41:b0:55:7e:b7:86:ef:b6:a2:36:a6:8b:b8:c8:d7:0a:2b:50:
+         a2:a4:49:bd:c4:65:bf:ef:6f:84:96:ff:bd:a0:f9:32:e3:04:
+         4b:55:b8:dc:e0:b2:9c:10:1b:38:28:d2:35:a5:11:e1:8b:84:
+         9f:a9:56:fc
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c4:1f:d3:24:00:7a:95:66:a3:e9:11:30:3a:ca:
+                    d9:45:ad:e6:50:38:15:20:e2:e1:01:ff:37:06:67:
+                    26:47:98:32:12:0d:18:59:01:c0:37:52:a7:77:76:
+                    d0:40:f9:a5:ab:77:8e:3f:85:d8:e8:27:2f:53:5a:
+                    6e:bb:1b:57:40:5f:90:fc:51:4e:b1:34:6d:79:c8:
+                    0e:a1:25:43:39:32:b5:52:3e:a8:4e:1d:18:ff:d0:
+                    e9:2a:b9:73:a2:7f:01:6d:d1:18:c0:57:8c:2e:75:
+                    bc:a5:97:2d:8b:f6:72:e2:b9:61:3e:88:7e:78:1f:
+                    03:30:80:06:e4:f8:d7:6b:16:57:b0:8e:d5:9e:f4:
+                    bb:d3:e9:5e:5f:2d:1b:f8:63:78:c2:81:d0:cf:4f:
+                    18:27:85:37:99:9e:ad:23:9e:d1:1c:a9:ad:bf:ed:
+                    f8:a9:dd:d5:63:8a:3d:ee:6b:02:d0:19:6c:8b:36:
+                    1d:96:5b:ff:c9:59:82:42:c5:18:45:54:58:de:01:
+                    98:3c:f3:b4:fe:78:6a:82:0c:c2:cb:3f:9a:82:a3:
+                    e0:91:c6:e7:84:3e:d2:c6:bc:93:96:3e:9c:85:b9:
+                    36:17:b5:5c:1e:f5:77:b7:f6:42:d6:6b:d1:76:71:
+                    ef:4a:bf:df:fd:68:ab:7a:25:81:8e:81:e0:42:04:
+                    0d:13
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                DB:17:10:A3:0C:5E:7A:7D:3A:90:69:AC:3F:70:45:8A:D2:B0:7C:80
+            X509v3 Authority Key Identifier: 
+                keyid:DB:17:10:A3:0C:5E:7A:7D:3A:90:69:AC:3F:70:45:8A:D2:B0:7C:80
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         38:fa:81:98:e9:24:3a:a4:e5:88:7d:b8:e8:0c:d5:50:4c:67:
+         d8:97:f8:57:6b:0f:4e:dd:a0:23:96:ae:2b:af:2d:bd:f3:1a:
+         bc:74:9d:e5:ba:ac:c4:47:34:ff:6f:8b:95:9e:28:32:f4:1a:
+         d7:7f:be:a7:ac:c0:b9:6a:4e:01:bf:06:f1:31:39:a9:f1:cb:
+         2a:81:41:38:a3:c9:33:d0:de:86:07:e8:4a:01:7c:6d:1e:cf:
+         ab:b8:26:cd:4e:95:35:6e:39:48:b4:ea:d0:5d:63:65:79:86:
+         7c:65:44:fa:b5:0e:7c:3d:8c:ba:a2:3e:f8:34:ea:03:d7:01:
+         5f:b4:5b:60:32:17:c5:5a:5d:66:70:68:11:69:83:dc:40:01:
+         6f:02:be:56:a0:86:c7:1c:df:d9:14:09:5e:39:a7:17:50:3b:
+         4b:be:c6:73:cd:af:f6:c8:bb:8d:bf:a7:b6:11:e1:d2:34:89:
+         db:36:0c:a9:f0:8f:62:73:df:a8:c1:b1:8e:5f:ae:81:8a:16:
+         62:10:96:4f:fa:2d:70:b9:96:d2:6e:7d:aa:91:e9:ea:19:ee:
+         86:57:76:c5:1f:c3:cc:f8:41:b8:c0:ad:2b:6c:3b:76:ba:df:
+         6f:1e:74:25:57:74:9d:13:c7:69:5a:59:82:ea:33:3f:f2:d1:
+         15:af:a3:91
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----