Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
new file mode 100644
index 0000000000000000000000000000000000000000..b5e6988adb5d47292092cf2b26fdf1b950ce6985
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediary-basic-constraints-not-critical.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary has a basic constraints extension but does not mark it
+as critical.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a7:ae:2c:f1:eb:33:aa:38:3d:e0:b6:3b:22:15:
+                    27:71:51:e1:12:a1:70:98:57:85:37:25:72:f6:82:
+                    5f:a5:aa:c0:69:2d:51:85:fe:dd:be:a3:00:d0:ce:
+                    e0:57:e3:e2:41:7c:2f:f1:4d:19:6f:98:47:f0:42:
+                    d8:0b:5c:62:76:a8:ec:f9:f5:e1:b4:62:18:5e:07:
+                    bb:9c:88:1b:52:3c:47:06:d2:71:bf:ae:5c:f6:23:
+                    09:1e:a5:7b:8a:7a:41:00:93:c0:f6:91:df:cc:ea:
+                    94:79:7c:3f:f1:98:fa:76:c8:fb:d5:69:4f:89:ca:
+                    73:d9:23:b9:eb:87:d0:fd:8f:b8:16:59:3a:bf:bb:
+                    c5:99:d7:c0:cb:b8:33:89:2a:de:62:25:ad:91:0f:
+                    f0:51:b3:d9:02:74:b8:85:37:05:17:7c:e0:2c:34:
+                    c3:b3:c0:30:98:c1:40:fe:79:14:44:32:d1:f3:90:
+                    11:c3:20:5d:c7:34:18:81:4e:d7:f5:34:85:53:42:
+                    cc:a9:35:dd:5b:ec:a9:34:35:04:77:c9:87:54:f7:
+                    10:39:69:c0:1a:96:29:35:1b:2a:8e:f6:fb:03:b6:
+                    d8:59:02:5e:17:3d:f0:e8:aa:c2:51:f7:d5:8d:2f:
+                    c6:da:2d:9e:a4:3e:32:4f:0b:74:3c:98:b2:12:e4:
+                    97:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                3E:D5:05:73:85:5D:06:D1:46:62:21:23:EA:DA:E9:B9:CE:43:EC:28
+            X509v3 Authority Key Identifier: 
+                keyid:7E:D6:F8:B8:23:3D:5C:04:99:2D:02:F3:5C:6D:37:53:BE:12:11:DC
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         4a:81:72:44:7a:d2:9e:2e:75:cc:5f:0e:8e:6a:29:ac:fb:d3:
+         76:89:06:b6:00:ce:85:cf:43:2b:fd:09:c1:83:fc:c0:57:b0:
+         fc:4a:93:25:a4:4d:4b:80:81:6e:14:28:8b:c0:e0:c6:6a:de:
+         39:34:1f:e8:40:ff:a3:d5:bd:c9:64:dd:eb:1d:37:5e:e8:db:
+         fa:90:90:4e:15:72:b4:c3:08:0a:82:ae:b6:59:1e:cb:78:16:
+         2d:02:f7:b4:fd:1e:64:ec:ba:2d:24:0c:81:0b:a8:5a:16:06:
+         9b:15:4e:cf:fd:c7:10:d1:08:14:b6:7e:1a:b0:5c:dd:3f:45:
+         c3:08:51:71:c9:83:bc:0a:d7:64:75:ff:e5:e5:36:01:0d:84:
+         36:c0:18:b0:aa:63:ea:ec:c0:29:2f:8c:48:87:9c:07:5a:05:
+         46:8b:73:f3:98:72:b5:a4:b3:38:dc:c3:2e:de:0c:15:72:fc:
+         1d:ef:05:77:b8:9f:19:75:fa:97:a4:d5:11:90:06:5e:88:b0:
+         8b:11:ab:90:5b:46:3f:d3:f3:ff:ab:6b:64:10:e1:be:80:ae:
+         78:da:9f:12:0a:c9:4d:b4:39:25:10:a9:06:be:d7:48:17:3e:
+         f0:20:11:a7:36:b3:c8:89:c5:78:f4:6d:49:21:5a:16:10:70:
+         cc:73:ba:48
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e8:91:a9:dd:8b:46:ac:a9:66:51:37:33:31:5a:
+                    8d:05:80:8f:f3:8d:21:89:94:d3:fe:e1:6b:a6:9b:
+                    e8:d9:a8:f0:8f:f2:35:c7:16:ec:ac:ba:c1:c9:7d:
+                    6f:12:64:13:5a:bc:e5:77:4f:cb:fc:03:19:38:a1:
+                    d5:58:2a:41:04:35:e9:15:38:5d:13:30:22:40:c8:
+                    0c:25:e9:3c:56:9c:4c:cb:e8:65:6e:d1:7b:c7:27:
+                    10:ca:9d:52:2f:b2:b0:6e:eb:86:dd:d3:e9:71:53:
+                    ce:ed:61:6d:d6:7a:09:2d:13:10:cb:6f:fb:0d:30:
+                    61:f1:fa:b9:63:99:ce:20:41:36:c5:b1:42:23:af:
+                    d8:22:50:0d:ff:15:93:67:00:af:5c:77:88:36:73:
+                    5e:35:6d:09:55:ac:11:b1:f6:71:68:ec:95:09:76:
+                    43:dc:c8:98:69:f5:fd:4e:46:a8:49:15:67:27:43:
+                    18:06:89:24:1e:41:ec:0f:de:19:6c:10:18:11:0c:
+                    11:ce:97:59:9f:2c:82:09:a3:28:4f:ab:ca:d7:38:
+                    21:fb:0b:45:47:92:f8:f3:36:cb:d8:57:94:e5:a9:
+                    ba:6f:6a:9f:fb:33:53:b5:f7:1d:c4:e9:49:93:aa:
+                    98:bd:c8:c2:1e:71:c8:7a:b7:5f:3e:97:b6:d9:e6:
+                    fb:85
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                7E:D6:F8:B8:23:3D:5C:04:99:2D:02:F3:5C:6D:37:53:BE:12:11:DC
+            X509v3 Authority Key Identifier: 
+                keyid:C9:21:7A:C1:3C:51:76:AA:D3:B9:29:EF:02:0C:7E:D0:02:74:62:FB
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: 
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         23:00:85:24:90:52:da:71:04:87:ac:ee:81:fd:1d:2e:7d:26:
+         3e:78:9a:c4:da:91:82:15:5f:c1:b4:df:58:ad:a7:b0:1f:2b:
+         01:85:7a:c2:ca:dd:72:e7:ec:28:14:d0:3a:ee:69:b0:90:19:
+         4e:53:80:03:63:f2:99:2b:db:c2:4e:c9:17:bf:7c:fc:e4:84:
+         37:a6:b0:df:ff:5d:01:c6:16:fe:fb:93:fa:45:a9:4c:2e:6a:
+         50:7d:22:11:aa:ff:d9:d1:7d:56:a0:10:b1:99:1f:85:d5:35:
+         62:f7:0e:28:7e:68:20:1b:0e:4a:f6:e4:3b:f1:e8:c7:a3:8b:
+         b1:40:13:bb:1d:89:fe:48:c1:d0:2c:38:a9:8f:06:17:45:b0:
+         37:7a:ea:6e:2a:91:4d:ca:c1:f6:df:3e:f5:53:c6:e2:d1:47:
+         fb:88:f5:71:b1:d7:a1:3c:4f:31:57:c0:38:87:37:fc:02:4b:
+         7e:95:eb:52:78:f0:88:3a:fd:b2:8d:c9:f1:ee:f6:80:2e:3a:
+         c2:94:fd:88:0d:73:23:ca:da:44:64:45:53:a7:64:e0:05:14:
+         ec:6d:2a:87:a5:a8:5f:08:8b:17:89:16:50:e3:89:ef:bd:94:
+         55:1a:7c:ce:79:be:b3:4f:2e:45:96:06:28:3b:ff:fc:91:a4:
+         41:1f:5a:98
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b7:1a:2a:d3:5f:7d:f9:8c:36:83:3a:3e:76:2f:
+                    c2:0b:00:1a:63:83:81:a5:22:f7:77:f8:76:14:ff:
+                    2c:a9:79:e9:fd:d7:e8:d0:b6:77:19:eb:ad:ab:0d:
+                    cd:cd:d0:c2:aa:44:09:0d:ce:5e:2e:c8:61:e7:13:
+                    0e:82:d0:22:79:3e:13:cf:ba:a0:de:ba:4e:08:7c:
+                    5f:58:13:53:75:c4:4f:16:3b:fe:20:15:aa:67:b2:
+                    9a:1d:93:5b:17:63:ec:92:c3:28:96:a8:55:57:85:
+                    e6:45:8c:fb:ec:ea:93:3c:27:44:14:1f:57:7f:72:
+                    79:90:9d:a5:90:f8:ea:ca:3a:4a:9f:8a:6a:39:fd:
+                    6b:fc:ff:aa:10:92:d6:39:71:5c:74:57:ba:f2:27:
+                    ec:dc:81:44:a3:64:2e:62:00:ce:f0:e1:ac:9f:68:
+                    d0:9f:4a:d5:23:ab:df:34:67:51:fd:0b:50:7a:96:
+                    c8:6f:f8:83:bc:a4:db:bd:7a:87:6c:17:a8:f8:83:
+                    1e:89:55:a4:8f:e3:aa:69:ea:2d:a8:a6:2c:cb:90:
+                    a8:68:ac:8e:dc:aa:05:25:a3:c6:8f:6f:60:fc:5c:
+                    fb:b8:94:80:db:fc:5a:76:b3:7c:b1:a7:d2:18:78:
+                    72:5c:47:bc:0b:04:de:a2:9e:5b:df:8b:6d:db:50:
+                    9e:0d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                C9:21:7A:C1:3C:51:76:AA:D3:B9:29:EF:02:0C:7E:D0:02:74:62:FB
+            X509v3 Authority Key Identifier: 
+                keyid:C9:21:7A:C1:3C:51:76:AA:D3:B9:29:EF:02:0C:7E:D0:02:74:62:FB
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         56:30:1a:d5:5d:ba:28:4e:71:6e:44:98:ff:cf:00:bf:20:e5:
+         ef:fc:7c:20:55:a7:a8:42:22:8e:a2:80:de:e2:37:2d:7b:eb:
+         85:19:4d:11:1b:fd:2a:43:db:39:56:c5:6d:ec:db:e7:e6:8d:
+         01:7d:c9:f8:fc:d8:f2:68:d1:45:6b:02:2f:2f:cb:0e:8f:0b:
+         59:37:87:fa:39:a9:72:cc:bb:37:d0:78:3c:31:d9:1d:4c:6c:
+         03:a3:21:6a:80:cc:10:d6:85:4d:e3:ed:d2:b6:35:98:c8:04:
+         92:0c:05:a0:df:f0:7e:80:0c:15:47:6d:76:9a:f7:5a:82:05:
+         7b:33:92:29:9e:43:91:98:9f:eb:12:9e:98:dc:46:9e:15:f4:
+         f6:6e:28:37:54:10:d7:c3:7b:24:3e:f3:e0:26:4c:40:f9:98:
+         01:1a:80:2d:f4:15:23:7e:43:e0:40:d4:98:67:a1:ca:27:73:
+         62:59:a3:3e:3a:61:da:38:64:95:46:1c:f7:6d:29:cd:83:6c:
+         3e:ef:21:af:90:dd:5b:cb:80:ec:29:87:5e:4f:6b:2c:28:e4:
+         1f:4b:c6:db:1d:23:61:cb:95:ac:38:88:47:bf:c0:36:f0:84:
+         3e:fe:82:70:66:2c:60:7d:6b:42:05:f6:59:a4:e4:5b:73:c6:
+         92:e4:73:00
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----