Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem

Index: net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
diff --git a/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
new file mode 100644
index 0000000000000000000000000000000000000000..86ccbded8b4565c555a35e24097c0bf7ee010a63
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
@@ -0,0 +1,370 @@
+[Created by: generate-basic-constraints-pathlen-0-self-issued.py]
+
+Certificate chain with 2 intermediaries. The first
+intermediary has a basic constraints path length of 0. The second one is
+self-issued so does not count against the path length.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d2:b9:11:12:b9:41:75:a9:33:31:1b:f2:6e:84:
+                    d3:24:5e:d7:79:5e:57:a3:48:12:d1:0d:fd:4c:8a:
+                    f1:a7:31:20:e5:f3:7a:21:f5:6e:7b:3b:d4:6a:ad:
+                    9d:f3:9b:05:50:ed:c6:0f:92:88:29:41:f8:2c:9d:
+                    1e:5a:23:fd:eb:0d:d2:64:31:81:02:cc:a8:c7:4d:
+                    04:5a:12:d5:c9:e3:c2:dd:23:8f:50:d6:c5:ca:01:
+                    9e:18:ec:8a:5d:64:ca:34:6e:54:a3:b2:17:fe:cc:
+                    b0:3a:d8:40:72:04:46:1a:af:dd:67:8a:93:86:53:
+                    70:39:0c:04:f1:0e:3c:b5:93:0f:b7:f8:9d:52:78:
+                    57:59:a6:c0:1a:d8:b7:ca:0c:3c:50:0c:47:1a:aa:
+                    ae:b5:43:4b:0c:25:c6:cd:01:c9:1b:34:81:37:6f:
+                    7a:a2:83:38:96:7e:26:d1:83:ea:64:00:68:28:00:
+                    d1:81:62:c0:f9:03:e3:77:a6:51:79:14:ca:89:63:
+                    22:4b:48:f6:63:ba:cc:cb:c1:7f:a6:ed:0a:3e:6e:
+                    3b:33:14:1b:f9:63:83:d5:78:02:24:ee:1a:83:d2:
+                    e5:ef:de:b2:e3:39:42:39:a7:3a:43:f8:52:2c:3d:
+                    26:af:f0:0f:f9:d0:c2:f7:51:5a:d2:50:a1:f2:d2:
+                    1f:d7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                08:3B:5B:BB:1E:8B:E6:8C:EE:50:E5:62:12:09:C7:02:AF:B0:23:A1
+            X509v3 Authority Key Identifier: 
+                keyid:8C:8A:89:76:DB:F8:3A:67:BB:7D:DE:22:6C:6D:63:0B:B8:AB:B0:F8
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         77:0f:84:5c:a3:25:89:6c:5e:71:05:7e:83:b0:3c:4f:6d:65:
+         6f:2d:fa:b7:00:bb:74:99:7a:95:9b:6c:59:a3:93:22:a4:c0:
+         99:78:80:f3:94:28:b8:2d:cd:52:66:9f:08:d9:46:ba:7c:78:
+         cf:2d:04:05:21:05:8e:98:e6:18:be:4d:62:c3:34:59:17:18:
+         1d:d6:dc:96:f8:5c:ca:34:d5:11:24:09:55:f9:b5:a6:18:0d:
+         5b:40:fb:57:f5:80:ff:0d:40:84:68:f7:16:74:22:50:03:03:
+         43:8d:a4:f8:96:82:37:a6:f0:28:e4:fc:93:1c:24:94:d2:de:
+         37:d2:4f:67:a8:64:dc:d4:77:b8:1f:23:fe:57:3d:f8:75:63:
+         65:ee:f9:8c:28:0f:bf:16:c5:5f:0c:b9:54:97:f3:85:36:f8:
+         51:8d:60:95:b7:05:f4:42:f7:da:f8:28:11:b9:7e:2c:2a:36:
+         f0:ba:9a:99:04:a3:4c:66:5e:b4:ca:bb:f9:38:0e:22:d6:af:
+         0f:ef:ef:5a:d4:71:bf:d5:32:db:8c:11:71:51:4c:65:ff:16:
+         18:72:52:06:ce:8d:62:34:c5:b0:30:0d:61:0f:b8:3b:56:36:
+         c3:ed:f9:cb:41:fa:e4:84:52:bf:ce:5c:b3:b9:ee:c1:f6:eb:
+         6d:16:6b:34
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c0:af:33:a1:7d:f0:49:07:2c:0f:07:8c:b3:eb:
+                    9c:7d:f5:e8:38:ba:fe:83:ac:00:f4:20:09:75:71:
+                    a1:48:b8:ec:c3:71:62:c9:c4:ce:6e:0c:ad:69:24:
+                    ce:b1:37:79:1e:d1:a5:ed:12:40:79:ec:89:ce:50:
+                    95:bc:af:21:7d:56:d4:4c:85:b5:b7:cb:38:00:cb:
+                    c7:fd:96:58:4d:bd:0f:3c:c8:dd:3a:40:30:4b:99:
+                    99:6f:78:3b:50:a7:41:c2:c8:bc:9e:53:cd:c3:7c:
+                    48:8e:28:51:f8:50:5b:ba:5e:73:e3:72:d1:d8:e9:
+                    85:03:34:ba:71:60:51:9e:d6:49:77:1e:08:b8:3f:
+                    1f:6e:14:b4:a0:c9:88:05:09:f9:02:85:51:32:c8:
+                    04:98:a3:32:6f:6b:ab:8e:d9:41:7d:14:cf:7c:7f:
+                    95:5f:56:28:96:b1:e8:bd:7b:d4:c0:cb:2b:9e:b3:
+                    d7:2a:b9:3b:8a:09:1f:c9:8c:97:2f:a0:93:83:28:
+                    60:68:9a:6b:e7:c5:39:29:36:26:0c:e4:84:b3:e2:
+                    83:d5:87:44:6b:26:1d:45:d5:94:06:dd:fb:b4:26:
+                    24:08:4d:14:c8:6f:88:8e:16:85:72:35:90:51:7f:
+                    c9:73:ad:1b:98:3f:ef:d3:f8:f4:bd:03:3f:3c:58:
+                    3e:af
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                8C:8A:89:76:DB:F8:3A:67:BB:7D:DE:22:6C:6D:63:0B:B8:AB:B0:F8
+            X509v3 Authority Key Identifier: 
+                keyid:64:44:E9:19:9B:7F:79:ED:B7:7C:1D:7C:B1:0C:6F:BF:56:DD:EC:63
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+    Signature Algorithm: sha256WithRSAEncryption
+         5a:b9:56:29:0c:9b:26:8b:0e:34:80:c8:c8:4f:32:26:b9:5c:
+         18:6f:ae:d7:25:43:e5:d5:d0:aa:45:43:25:ea:fd:91:7d:d9:
+         25:26:3f:21:e0:76:63:ba:6e:a2:78:6f:76:79:68:27:9c:54:
+         29:e8:a2:a0:50:f1:59:a6:0d:87:c3:b8:51:89:6e:6a:db:fa:
+         e3:2a:4b:79:2b:f3:76:6d:77:86:3d:a5:26:f1:1e:53:96:2e:
+         f7:38:90:06:a9:53:5d:3e:9e:73:f0:ec:85:d3:78:bf:57:0d:
+         37:7c:e3:c4:45:8e:41:79:be:10:4a:f8:57:ec:07:e1:72:26:
+         67:d4:1d:af:d0:4e:42:4a:10:84:db:61:5c:47:bd:9a:fd:41:
+         89:b5:a6:16:31:2c:0c:b7:be:76:32:18:16:0e:8b:c4:9b:a5:
+         59:fa:c4:e1:e9:f0:82:7e:e9:c9:57:f1:1e:57:8e:a4:08:58:
+         7b:a9:02:39:20:e9:40:e6:b7:a7:35:5d:fe:53:4e:3c:e8:60:
+         36:69:b6:80:87:90:d4:93:ad:c4:0a:a9:ab:2f:e1:60:88:60:
+         48:42:92:a6:53:87:e6:7f:f7:a8:31:46:38:d8:1c:62:0d:be:
+         bc:86:95:1e:b2:24:15:ad:86:66:7a:ed:d5:51:5b:8a:5d:71:
+         9e:7f:11:18
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ce:04:9d:41:17:b4:8e:4a:bf:8f:40:0b:41:89:
+                    82:30:44:21:7c:c9:a9:c9:c5:66:76:82:83:4b:4b:
+                    56:7f:df:a3:3a:39:4b:fb:f4:50:b3:68:8a:dc:a3:
+                    e5:8d:44:f1:40:b4:5f:aa:13:a0:c7:48:b2:9a:90:
+                    2e:86:17:76:7d:19:99:95:dc:9a:62:41:7e:a7:4c:
+                    82:a0:04:8c:08:d3:32:b8:04:18:93:13:63:45:f5:
+                    ab:a7:48:7a:1b:d6:18:01:51:99:06:07:88:3b:7b:
+                    93:f1:e1:d7:2f:f1:c2:ce:2d:fe:b0:c1:60:ce:e7:
+                    c2:8f:18:48:e6:06:89:49:ea:0e:55:d2:b1:aa:48:
+                    a1:2a:57:58:32:a6:12:b1:c6:9e:8d:db:5b:f2:49:
+                    7e:07:64:85:32:ca:5b:dc:56:b1:d6:d8:f8:c7:41:
+                    2f:14:16:6c:79:20:4f:f9:4a:9e:66:75:fb:b3:a2:
+                    82:5b:ea:15:cf:8a:e7:09:8d:57:3c:12:e5:fe:f4:
+                    89:79:8b:6d:2c:d0:f9:47:7c:5f:b9:65:8f:06:c0:
+                    a0:f4:90:80:32:d2:37:15:4b:b3:87:c1:c0:73:0b:
+                    29:89:2c:7b:3d:7d:4c:d6:b9:cc:20:59:fb:d3:71:
+                    d1:92:12:22:f8:ea:b2:bc:6f:83:90:ce:6b:4d:6a:
+                    92:bf
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                64:44:E9:19:9B:7F:79:ED:B7:7C:1D:7C:B1:0C:6F:BF:56:DD:EC:63
+            X509v3 Authority Key Identifier: 
+                keyid:B7:41:DA:DC:C6:78:50:8A:4A:02:D9:05:11:1A:B8:AA:0F:E5:2A:CE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+    Signature Algorithm: sha256WithRSAEncryption
+         9d:e7:a3:9c:a2:84:65:ea:10:ff:c3:53:b4:4c:4c:68:8a:0a:
+         ab:b7:26:f2:5a:4a:4a:27:c5:05:fe:d2:3e:3c:4e:37:15:b9:
+         28:8e:38:56:c9:77:c2:b8:38:a3:75:6d:a7:b4:ff:ca:07:06:
+         40:b0:99:60:90:5e:a0:49:42:4a:38:50:1d:ea:cb:e3:83:f6:
+         38:fe:2b:36:0c:6d:e1:c6:5e:47:78:45:fb:86:5a:89:05:9c:
+         1e:4e:03:85:f8:ce:a1:7b:fc:41:62:07:38:73:1a:e6:24:30:
+         f3:9e:a5:88:52:09:0a:e6:7d:84:0f:60:bd:54:4b:79:49:77:
+         ca:13:af:43:3e:7d:cd:a7:87:0c:20:8f:b5:68:08:e2:b9:48:
+         c0:32:27:2f:5f:df:af:31:5b:ea:5f:4d:1a:38:bf:6c:db:76:
+         a8:6b:4f:b2:ea:77:9f:db:4a:e4:bd:3d:7c:c1:d9:e9:73:f5:
+         85:51:fe:c7:ba:1f:fe:8c:b5:c9:cb:ff:55:36:cb:56:96:ca:
+         da:56:89:9b:53:27:54:5d:fd:b4:63:72:75:c4:56:4e:e7:0f:
+         bd:e1:97:8d:d6:ca:b9:a4:ed:eb:5b:43:1f:fc:8a:25:31:17:
+         fb:c9:1e:60:b4:28:0e:4e:91:bd:ef:29:6c:73:55:42:e1:a4:
+         dd:d3:47:1e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a6:72:af:46:2f:0b:0f:d6:b7:b5:bd:42:e4:24:
+                    a2:9c:0a:71:9a:38:6b:5c:82:b4:9e:18:d8:d5:b8:
+                    b3:e5:c9:ad:fc:09:ba:a6:f0:38:c4:e2:75:0b:1c:
+                    5b:77:e5:41:86:d0:c1:80:60:b9:eb:29:06:51:d1:
+                    cb:8e:ff:64:eb:11:7a:94:e0:38:31:8b:77:3f:ca:
+                    b7:63:14:1b:7e:37:ed:a0:9b:bf:e4:e8:a8:64:1c:
+                    da:27:1e:c4:2b:76:f1:56:69:b3:fb:54:76:87:45:
+                    f4:aa:a3:9a:47:2b:16:b8:1d:47:28:09:30:4c:48:
+                    55:9c:10:c7:95:d6:1a:96:25:b6:30:25:66:a3:de:
+                    32:1e:f7:79:f1:d3:10:5b:28:92:65:b5:46:e8:aa:
+                    d7:02:10:45:f8:b1:47:10:98:13:c9:4c:fa:32:8c:
+                    84:55:60:d3:1b:7e:76:0b:e4:62:03:88:05:64:51:
+                    c9:85:1c:df:2c:76:84:43:f3:0b:03:0b:19:b6:d2:
+                    33:e0:6a:73:c2:0d:e0:71:57:0d:18:cd:48:ca:43:
+                    de:a3:19:d2:c9:63:c9:aa:f7:05:61:66:fa:4a:70:
+                    24:5b:40:e0:55:0e:ea:ea:0e:d1:43:14:eb:97:4e:
+                    16:3b:a3:96:b0:f4:8f:c4:db:d0:fd:87:f5:db:58:
+                    0e:97
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B7:41:DA:DC:C6:78:50:8A:4A:02:D9:05:11:1A:B8:AA:0F:E5:2A:CE
+            X509v3 Authority Key Identifier: 
+                keyid:B7:41:DA:DC:C6:78:50:8A:4A:02:D9:05:11:1A:B8:AA:0F:E5:2A:CE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         4a:f0:95:d8:ec:f0:84:37:62:cc:2e:ef:9b:c5:fd:3f:6b:d7:
+         43:b3:f0:ee:46:b3:4a:6d:6b:1b:13:fb:88:aa:f6:98:09:9e:
+         81:1c:79:77:de:36:e5:7c:3a:94:31:7e:20:e7:24:e7:d8:50:
+         50:8a:16:99:fd:b3:a0:38:14:36:52:25:7a:aa:bd:40:63:25:
+         1c:0f:0a:f0:84:98:5c:9b:21:ee:4a:a6:eb:e4:8d:bf:6d:61:
+         e5:cb:de:69:65:15:7e:ce:20:f7:cd:78:b6:75:bb:91:7c:97:
+         8a:d7:e3:21:31:38:8e:4b:22:49:c5:69:61:cf:b1:91:64:12:
+         2a:4e:23:c4:4f:7d:e4:65:a9:3d:60:06:99:75:f3:9b:b1:3b:
+         c0:cc:a6:08:bb:ca:9f:a8:c3:3b:4c:47:92:5f:a2:08:c5:c0:
+         59:d9:25:18:a4:ec:a5:3a:9b:ae:b0:8f:87:ab:0d:61:59:06:
+         19:f7:60:45:bc:cc:b6:7a:9e:26:ea:2e:3a:b8:db:31:63:8e:
+         a2:a5:85:e8:b8:4a:9e:3b:87:02:f0:44:28:bd:a2:76:85:96:
+         95:fb:19:2b:42:4f:80:8d:89:17:47:b2:a2:fd:e9:00:eb:05:
+         a3:9a:c7:88:15:b0:19:d3:a5:55:95:01:c1:79:fe:f6:63:ba:
+         36:68:ba:2d
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----