Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/expired-intermediary.pem

Index: net/data/verify_certificate_chain_unittest/expired-intermediary.pem
diff --git a/net/data/verify_certificate_chain_unittest/expired-intermediary.pem b/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
new file mode 100644
index 0000000000000000000000000000000000000000..3af04bc0597193fd64478c1c7cc4c1b1b6114b8b
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
@@ -0,0 +1,280 @@
+[Created by: generate-expired-intermediary.py]
+
+Simple certificate chain with 1 intermediary, where the
+intermediary is expired (violates validity.notAfter)
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e3:ec:da:c5:87:53:d8:de:f0:87:eb:38:77:51:
+                    61:e4:0f:78:f7:41:67:09:b1:ae:8c:5e:b4:2e:c4:
+                    0c:cb:c8:a1:77:c5:83:3f:40:37:88:bf:42:d5:6f:
+                    f1:84:08:0e:0c:8f:45:87:c3:f2:4a:7b:a0:78:7a:
+                    be:0d:49:a0:52:20:28:9d:79:4a:14:7f:fb:19:3f:
+                    dd:aa:99:6c:9d:a4:1a:5b:5e:2a:de:32:86:cb:d4:
+                    9f:20:52:2d:a2:7c:76:51:b3:35:ab:b4:8a:93:2a:
+                    89:8f:80:d8:05:01:3e:a3:3a:bd:eb:f5:fc:b9:65:
+                    96:fd:54:35:2f:29:89:fd:23:7c:dc:d3:d8:59:23:
+                    b3:4c:a3:12:9a:0e:87:33:9c:e5:75:fe:92:bc:df:
+                    e2:c9:20:9c:83:50:41:f1:99:27:f4:db:20:ef:8f:
+                    ef:c2:1f:11:48:0f:65:f9:79:a3:4b:ee:0f:c8:df:
+                    a4:1f:95:ca:20:05:88:45:44:8e:ea:11:01:8a:14:
+                    80:42:1b:e0:40:3b:4c:77:2f:24:fd:c2:00:3a:8c:
+                    2a:32:ac:ad:d2:f3:12:cb:9c:9d:74:78:6d:03:1a:
+                    30:e4:49:0a:ee:fa:81:bc:a6:77:be:ca:31:47:72:
+                    e9:0d:d6:e4:e2:9e:6a:25:02:8d:9c:ed:00:b8:a4:
+                    cc:6b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                E7:83:37:F5:07:9A:CF:05:4C:55:BB:58:62:27:7B:71:F9:CB:1D:CD
+            X509v3 Authority Key Identifier: 
+                keyid:49:2A:CE:0E:05:98:4C:AF:AF:72:0C:9B:77:77:16:F4:DE:DD:03:78
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         24:9a:c0:a4:9b:d4:f7:28:fe:77:36:5f:a2:12:7c:4d:d6:26:
+         36:1c:31:9c:20:8a:44:51:09:92:7d:ea:ae:1b:69:3b:4f:27:
+         a5:70:90:77:5b:21:04:8f:41:79:d5:61:59:b9:d5:77:fb:b8:
+         20:17:3e:14:bc:97:62:10:11:97:72:54:34:55:62:b8:81:d4:
+         57:4e:c5:e9:ba:4a:90:76:09:56:2f:5d:16:46:37:dc:69:03:
+         d9:f0:fe:fa:a1:03:f1:1b:a2:e3:df:a1:3e:6c:93:6e:cd:50:
+         e6:23:75:ab:7e:0b:6f:8a:60:df:db:8a:3f:2b:0e:e7:77:66:
+         da:92:76:d1:c8:19:3b:25:57:6c:7b:41:35:9a:50:d7:74:ea:
+         43:ec:d0:c8:db:a2:2d:b0:3b:6d:a4:c4:4d:cd:23:b6:a3:1e:
+         f5:03:0b:85:bc:47:3e:91:ae:42:49:91:4f:9f:39:e6:88:3a:
+         d7:09:e0:cd:aa:fc:79:5f:50:18:21:1a:0f:c4:92:f6:f5:ff:
+         b1:b9:93:a3:85:4b:3c:42:16:7f:12:a3:a8:4d:0c:ad:63:6d:
+         7e:cb:42:4f:4f:c9:69:b9:59:99:9c:d5:fb:bb:e9:ad:0f:93:
+         dc:60:80:3e:b5:71:34:94:03:1f:48:4b:00:65:7c:c6:bd:cc:
+         e5:d4:a6:b0
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b3:76:ac:11:ce:e7:7a:68:1b:1e:21:03:23:44:
+                    dc:3f:a8:cc:d1:d7:14:25:78:28:e9:e7:0e:f3:92:
+                    81:07:b2:b2:ec:84:9b:2d:8d:76:78:86:1a:8f:65:
+                    ea:c5:7d:2e:24:45:4d:d7:67:42:d9:3a:a8:80:d5:
+                    de:2e:38:c2:58:2c:14:db:e0:82:70:3a:6f:c0:b4:
+                    4a:bd:c8:ee:dd:e2:35:24:05:48:6d:b1:c3:7c:c5:
+                    1b:0f:a4:ae:fa:fb:4b:2c:e3:fb:e9:21:15:0f:db:
+                    20:26:18:10:01:98:75:e4:4d:58:98:ae:54:29:c5:
+                    bd:ff:93:9b:d1:e3:db:92:68:29:13:0a:62:62:fd:
+                    65:af:86:9c:dd:3c:60:61:cd:75:2a:a8:68:b0:9b:
+                    c3:08:10:90:db:2c:a9:cd:db:99:31:99:f0:b9:61:
+                    1d:62:f0:22:73:43:22:be:5d:2b:42:27:a8:95:6b:
+                    0c:bf:ba:a6:74:c6:05:47:09:43:88:f3:87:71:93:
+                    cf:d6:f2:2b:b1:24:44:31:f1:40:64:dc:85:8b:d2:
+                    0b:62:01:9b:91:09:81:bb:c8:a4:02:03:39:95:c6:
+                    8a:55:22:ce:7c:ed:de:37:12:6b:87:39:06:90:1d:
+                    49:85:0c:8f:e6:c9:48:ec:b9:f9:af:79:22:bb:97:
+                    23:b3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                49:2A:CE:0E:05:98:4C:AF:AF:72:0C:9B:77:77:16:F4:DE:DD:03:78
+            X509v3 Authority Key Identifier: 
+                keyid:B4:1A:22:00:70:2D:7E:8A:AC:3B:D3:DD:93:9A:A8:F8:10:01:8C:1D
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         24:4e:c6:7a:11:96:eb:57:7b:7b:3a:ac:95:1a:fd:70:04:a9:
+         66:12:54:ef:4f:89:92:3a:03:34:35:c1:d8:06:4b:ac:25:b2:
+         9e:63:37:fb:90:91:85:99:1c:30:8a:1f:27:ac:4b:e1:cb:f2:
+         97:27:00:c4:af:0f:c9:f1:ab:c8:0a:83:f4:ac:28:73:7f:e0:
+         b3:c7:1c:b9:ff:28:a2:b9:9a:07:0d:71:77:32:22:c4:15:43:
+         b3:8f:e6:39:f6:5f:3d:48:5d:00:e4:3f:47:f5:8b:46:44:ba:
+         89:ff:db:35:86:f8:80:f9:c2:8c:05:c6:20:2d:1d:8c:36:74:
+         90:b4:83:04:17:bf:19:35:ca:13:af:84:a7:05:3f:cc:21:39:
+         4e:2e:0b:8f:d6:e1:ce:bf:fb:95:4f:bf:20:13:64:cb:e6:b8:
+         f2:ec:c5:c2:64:65:5a:93:f2:bd:9b:a4:90:15:3a:69:8f:c8:
+         b6:d9:05:d2:99:de:e1:b3:0c:21:b0:af:f1:6c:49:07:dc:b3:
+         3e:96:62:ae:71:44:9c:da:28:7e:86:50:b1:43:45:9f:f8:da:
+         6b:bd:c7:8b:b9:43:90:5d:72:a4:89:c7:8d:e0:7b:95:b4:0c:
+         5d:2d:d5:48:e1:d1:58:2c:06:44:14:0e:e9:d5:ad:11:94:2b:
+         64:6e:14:69
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c3:a2:1e:16:d9:11:e3:08:29:27:5a:51:2d:dd:
+                    20:df:e4:e6:a8:32:6c:65:12:49:70:f0:2e:6e:57:
+                    58:f0:f2:82:ba:88:1a:03:ad:db:a2:bc:da:18:e9:
+                    b7:f5:14:c1:74:9f:22:c8:f0:5a:25:72:bb:64:63:
+                    b6:52:78:d7:ee:5b:96:1f:9b:25:60:5f:f6:9e:a0:
+                    65:b5:dd:04:8e:49:9b:ca:9b:bf:de:c1:24:28:57:
+                    13:e1:42:ba:ca:fc:6e:b2:69:88:d4:d3:60:b5:71:
+                    77:0f:86:97:41:72:69:53:de:07:c7:79:95:ae:7f:
+                    e4:d9:c5:ab:a9:e2:92:9d:b7:f5:37:76:fd:70:6c:
+                    c3:49:52:3e:b8:d5:32:2e:07:d4:b4:0c:09:51:91:
+                    95:51:77:24:8f:23:41:90:c8:5e:19:d2:bb:a0:95:
+                    7b:20:96:27:ae:d8:86:fa:42:c7:23:03:51:12:27:
+                    10:4d:09:97:31:a2:4e:62:49:84:de:95:6b:75:e8:
+                    ab:d8:3b:0e:cd:42:88:53:b3:de:94:7f:b8:cf:f0:
+                    b2:23:a2:82:6c:79:55:1c:27:98:26:63:e3:01:e8:
+                    ee:9a:46:55:8e:c5:11:a0:b0:42:8c:2d:52:00:9a:
+                    7d:14:47:14:c1:24:81:04:2e:d0:ab:2c:5e:c6:36:
+                    37:b9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B4:1A:22:00:70:2D:7E:8A:AC:3B:D3:DD:93:9A:A8:F8:10:01:8C:1D
+            X509v3 Authority Key Identifier: 
+                keyid:B4:1A:22:00:70:2D:7E:8A:AC:3B:D3:DD:93:9A:A8:F8:10:01:8C:1D
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         88:5d:4b:c6:1d:c5:cb:37:88:2e:3e:33:7d:01:cf:eb:13:67:
+         9b:d8:cb:49:f4:ac:a3:76:6b:c7:9c:5e:67:f2:07:b0:a0:49:
+         c6:dd:74:e3:3a:38:34:3c:9b:a6:a1:dd:a2:92:45:ce:94:25:
+         f8:3b:e5:bb:35:b9:34:63:db:37:53:70:e7:16:81:13:13:a6:
+         dc:82:65:d9:c1:67:82:12:dd:36:c9:5c:87:4e:84:33:34:5e:
+         5d:f7:a4:0e:b2:40:d4:0d:5e:5f:c6:bc:96:82:ae:ee:33:2d:
+         05:78:9a:fd:6e:3c:2b:e7:e0:3e:f2:77:6b:30:0b:07:32:2a:
+         4a:bf:e2:33:5e:60:f5:52:ce:e0:00:92:ed:39:59:62:0f:03:
+         7b:c4:10:8f:6b:b0:04:8c:c3:15:1c:f6:98:98:0d:eb:96:54:
+         e5:06:3c:56:c0:96:44:60:86:06:2e:5a:cf:f9:8e:17:61:46:
+         97:56:1b:2a:e5:e3:d5:9d:43:50:ba:08:26:dc:55:c2:a5:fe:
+         9b:ae:dd:84:c0:82:77:37:45:12:38:56:95:32:2e:d0:37:2f:
+         d1:d2:3c:98:80:7d:0f:ea:7d:4d:94:0c:e3:36:be:aa:4b:c5:
+         1f:6d:9c:c7:db:2a:8a:f4:fc:7d:3a:89:db:ee:26:2b:35:34:
+         ed:7c:b2:5b
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----