Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
new file mode 100644
index 0000000000000000000000000000000000000000..957e4dba2d94fab4a871c4b61b8d7e0285af2f9c
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediary-basic-constraints-ca-false.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary has a basic constraints extension that indicates it is
+NOT a CA
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:f6:69:0f:38:4e:11:2d:bc:de:88:6c:75:57:bd:
+                    ef:54:93:e7:81:e7:74:b0:f4:2f:05:1c:d5:1c:87:
+                    4e:4b:dc:2b:45:58:af:b4:22:26:a8:4d:96:6a:cd:
+                    18:46:d3:0c:d1:21:a3:2c:9a:e3:6e:ab:7e:cb:50:
+                    92:ff:32:66:88:ee:05:16:6d:dd:79:73:84:ff:fe:
+                    c6:5b:dd:fb:59:36:8c:3e:8d:9e:ae:38:fc:2d:ce:
+                    8e:b5:9a:56:9d:cc:36:ca:25:bb:93:b2:5f:07:07:
+                    23:a0:73:e5:b4:13:36:a9:31:c5:e0:89:56:15:18:
+                    d4:99:8e:1b:ea:e3:df:79:ad:50:7b:18:a3:fb:ce:
+                    4a:4c:39:4e:33:fa:a2:59:09:5f:40:b3:36:a4:30:
+                    0e:93:b6:30:30:be:25:8c:46:14:da:b6:25:28:db:
+                    d6:af:cf:97:d1:fb:ca:d5:2e:2b:34:3a:9a:55:1f:
+                    a8:06:6b:38:c2:64:60:2e:95:f1:04:e8:32:ee:77:
+                    28:0c:3a:57:05:a8:4b:bc:bb:c8:53:e1:a1:94:58:
+                    50:68:40:24:b7:04:ae:35:d1:5f:9c:f5:cd:d0:af:
+                    22:c7:0e:50:4d:09:90:b4:04:0b:53:88:c4:f5:96:
+                    8c:8c:a8:2c:28:8e:09:4a:06:3c:4e:42:5a:14:9a:
+                    81:b9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                68:8C:09:72:06:24:9B:28:31:63:68:0C:E9:26:92:23:FF:20:16:A8
+            X509v3 Authority Key Identifier: 
+                keyid:9F:52:B6:C9:8C:12:3B:02:68:53:3A:A9:87:60:71:E1:82:7A:8C:55
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         57:3f:ab:3b:14:08:71:64:ad:9c:ff:73:a2:9e:9e:97:f3:d1:
+         2f:f1:b8:d6:34:48:c4:3b:a3:af:06:f1:6d:e4:4e:df:8a:54:
+         91:36:e1:17:12:cb:79:22:7c:a8:02:58:06:f1:58:81:0f:b0:
+         77:41:ae:81:8a:0e:7b:e1:0c:83:fb:65:39:cc:d3:bc:a8:67:
+         70:b4:c5:03:9b:79:87:9b:a8:b6:99:66:e7:96:dd:cc:c2:6d:
+         e6:ac:f1:4a:14:0e:9e:b9:25:05:71:52:95:5b:eb:73:35:e8:
+         d8:82:73:26:bd:f9:28:05:72:48:c0:08:85:4a:1d:f0:20:36:
+         a6:a2:61:fe:1e:37:79:c7:a9:66:76:7c:08:e0:a2:0a:d8:0d:
+         3b:a8:2c:d6:aa:06:9f:29:b7:f4:ab:23:99:d9:54:84:79:0d:
+         e7:69:6e:a2:f5:4f:89:3a:4a:01:e1:95:86:06:4b:fd:d1:7e:
+         f1:2f:a4:21:52:0a:34:1d:45:c4:56:b1:59:81:c6:e0:57:bc:
+         0e:bb:79:24:1b:02:a8:c1:bc:1f:b8:b9:e1:99:25:89:ab:d4:
+         b8:20:56:1f:6e:7f:6e:d3:97:67:09:3b:be:ca:5d:95:f2:8d:
+         f1:db:1f:ef:d3:f3:72:cd:a9:6b:d4:f0:f0:e2:06:b6:a1:cf:
+         54:82:4c:0f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a1:7f:2c:2e:8c:a3:47:f3:98:90:89:f3:47:5e:
+                    9c:ae:5a:4e:8a:30:f2:3b:f5:10:e3:2f:18:2e:39:
+                    f6:dd:10:23:f5:81:89:35:e5:3c:a9:60:7c:b0:af:
+                    f2:78:fd:f2:42:a5:26:db:a5:78:b6:6e:6d:b0:99:
+                    43:72:91:45:46:cc:90:de:9c:75:81:f8:b3:98:c2:
+                    eb:48:c6:23:35:f9:30:a0:de:40:88:da:1b:9d:f2:
+                    65:59:09:fc:c0:ed:67:99:8d:74:c8:89:e6:a6:00:
+                    e3:cf:0b:08:0a:79:1d:a8:10:79:da:1e:fa:f3:78:
+                    ae:f0:b6:5c:9f:fa:5e:31:a7:9a:4e:f9:da:8e:18:
+                    b6:b1:c5:e7:81:f6:6c:09:61:8b:48:76:a0:98:26:
+                    4c:a5:71:31:7b:82:88:27:5c:96:ec:51:17:9e:5d:
+                    11:02:95:b7:bb:20:42:db:ac:f1:68:f3:ef:a6:fd:
+                    6d:9e:4f:3b:f3:8c:59:b6:05:69:d9:1b:5e:98:24:
+                    6f:91:12:57:6d:db:78:34:14:9d:f1:49:4d:6f:53:
+                    26:19:a3:ee:25:f8:55:c9:55:57:ee:31:01:d6:da:
+                    c0:74:ed:6a:d5:48:23:32:0b:aa:98:ca:a1:b6:26:
+                    31:20:42:6d:d6:6a:bf:a4:5d:89:88:68:f5:50:61:
+                    15:03
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                9F:52:B6:C9:8C:12:3B:02:68:53:3A:A9:87:60:71:E1:82:7A:8C:55
+            X509v3 Authority Key Identifier: 
+                keyid:A7:E2:EF:51:92:5D:03:42:2E:87:44:1B:F9:37:5C:BD:5B:1A:D0:E8
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+    Signature Algorithm: sha256WithRSAEncryption
+         5f:b9:3f:bd:63:fe:ac:dc:68:6a:24:f0:c8:ad:4b:63:29:e2:
+         9c:47:a2:13:8f:fa:00:c3:c3:76:99:fa:de:e7:eb:20:a8:76:
+         8e:e7:29:b6:12:e6:98:02:65:7c:86:05:2e:07:c1:89:ba:f1:
+         fb:8e:48:2c:a9:1f:0f:0e:b4:fe:2c:f6:0b:15:a6:29:78:90:
+         87:8b:5d:e6:cd:90:e3:92:6c:a1:ef:0d:ed:81:31:91:9c:fb:
+         28:4a:b7:4f:92:8d:96:30:f5:f5:67:55:ef:1c:20:17:0f:69:
+         93:eb:0e:52:cc:f6:29:5c:5a:60:ee:66:83:48:74:e3:9e:40:
+         99:d4:d9:2f:80:27:0b:46:88:e7:04:84:31:d0:33:d6:8f:a9:
+         b0:af:d1:77:39:92:e5:cc:1a:d6:0b:db:39:40:31:20:26:e0:
+         91:7e:de:a3:88:6b:33:2e:0c:64:fe:b7:26:98:39:60:26:c7:
+         17:b8:c0:bd:57:60:57:83:95:2a:ea:7f:63:cc:79:34:2e:c2:
+         a6:f8:15:1f:4f:94:c3:51:36:f5:b3:22:4d:9f:45:c8:e3:0a:
+         e9:ab:cb:7b:7d:5a:4d:b8:5b:ef:fa:8b:06:4b:60:5f:3f:b9:
+         2b:1f:18:b2:f1:7d:c4:55:6d:4d:67:3a:b6:ea:db:b3:45:c8:
+         b5:30:72:b4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c0:7e:b1:cf:25:29:12:06:30:2a:9a:f7:3a:2c:
+                    50:cc:92:56:0b:0d:8c:2e:95:e7:9b:0f:02:b0:6e:
+                    9c:bb:12:c7:37:00:c3:8b:e2:e5:7e:a2:31:07:70:
+                    fb:e0:b9:c4:c2:99:d3:ea:d3:56:fa:e0:29:92:d4:
+                    12:bf:d3:f4:b9:0b:06:ba:37:90:ec:1d:53:66:a9:
+                    1b:a0:1e:48:3c:2a:91:d0:7e:ee:c3:fb:dc:28:c4:
+                    83:19:9b:ba:63:70:7c:09:c5:3e:cb:62:59:4b:c1:
+                    b5:e8:90:05:0b:fc:16:fb:39:5e:7f:04:18:8d:1a:
+                    7b:f5:00:5c:1e:67:72:d4:b4:2a:fb:38:1a:87:53:
+                    4e:8d:bb:d3:83:51:5a:01:53:cc:c9:d6:0b:c2:20:
+                    c3:ce:6f:06:38:61:99:8d:a1:45:7c:61:76:38:8f:
+                    96:14:c1:4e:3c:a7:c3:8d:cf:24:62:f1:fb:46:42:
+                    eb:19:5d:62:df:39:34:fc:dc:1f:37:a8:5b:dd:d1:
+                    b1:02:1d:4a:e3:58:da:2e:2a:11:59:08:7f:19:fa:
+                    b9:fa:a3:7c:5f:e1:48:80:2e:a6:09:de:5f:7e:42:
+                    48:50:bb:39:ce:02:c7:51:7b:7c:15:4e:0f:af:22:
+                    10:e0:88:03:e4:e2:e6:7b:91:68:ee:ec:a1:f8:8a:
+                    39:77
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                A7:E2:EF:51:92:5D:03:42:2E:87:44:1B:F9:37:5C:BD:5B:1A:D0:E8
+            X509v3 Authority Key Identifier: 
+                keyid:A7:E2:EF:51:92:5D:03:42:2E:87:44:1B:F9:37:5C:BD:5B:1A:D0:E8
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         be:06:ff:3a:df:ff:39:4d:b5:f9:7b:27:bf:c5:c2:52:e8:13:
+         96:7f:3a:1b:96:63:08:f9:99:0b:51:21:d3:85:30:31:24:1c:
+         ef:fd:97:49:7f:e4:1f:36:7c:f4:c7:e1:4a:f1:90:6d:a5:72:
+         4b:ec:b5:2b:43:a3:63:f6:6e:09:b9:e6:d0:c7:6d:c3:5b:19:
+         94:b2:64:0e:fd:ac:a4:7d:14:ec:c0:71:ba:7f:0c:22:96:6c:
+         36:86:06:6c:aa:84:91:db:b8:4a:b3:e8:20:22:48:d4:fb:f8:
+         cc:77:6f:c5:e5:a3:ef:ca:0a:f3:1e:82:89:fc:8c:17:5a:20:
+         f7:82:05:e7:3f:e4:ef:5a:b9:88:32:24:c6:4e:45:b4:b9:a6:
+         fd:f8:a1:f9:7d:9f:42:d7:0d:c2:01:75:bf:00:58:3b:eb:52:
+         07:ba:af:83:8f:bc:8a:4d:7f:de:c5:d6:d5:61:98:19:3e:bc:
+         72:db:96:9f:d1:cb:75:01:c9:d0:36:48:93:0f:b4:1b:ee:8b:
+         84:9c:b9:07:0c:65:c7:24:33:eb:d9:3f:24:77:cb:7e:46:2f:
+         73:40:49:1d:88:d4:90:7d:34:5a:c4:01:a7:d4:23:38:85:eb:
+         08:a7:c2:98:14:71:7f:e8:4c:7a:fc:a9:1f:3c:6c:ae:08:ac:
+         cc:dc:f8:6e
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----