Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
new file mode 100644
index 0000000000000000000000000000000000000000..8ac38c3ccf756029b70e90ab2d8a61eae4657095
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
@@ -0,0 +1,277 @@
+[Created by: generate-intermediary-lacks-basic-constraints.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary lacks the basic constraints extension.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b9:c6:5b:b5:df:fb:f1:ec:06:ff:e1:b2:1b:9d:
+                    78:5e:f7:03:29:a0:05:0b:c2:50:62:0a:b7:0f:5b:
+                    de:aa:71:09:38:1c:4c:93:c5:b9:98:f9:1e:47:61:
+                    32:c4:7d:d4:a4:f3:e6:0e:2e:64:9c:c8:74:94:d9:
+                    f9:47:25:b3:55:6b:bd:5a:fa:bb:a5:d7:ef:19:aa:
+                    28:9f:23:77:eb:f3:36:87:0c:50:4f:0d:43:0b:7a:
+                    87:56:32:9a:9d:a1:0b:2c:79:13:bb:7a:51:4b:21:
+                    cc:93:60:14:68:b7:8d:f0:6f:34:c1:3a:8e:78:23:
+                    55:38:5f:cd:45:77:76:ca:4b:16:de:11:2f:99:47:
+                    d7:a1:7a:c3:e1:6b:51:1e:22:da:ef:b8:c6:0b:1c:
+                    04:b5:46:d7:63:be:a0:2d:c3:78:77:ef:05:53:87:
+                    aa:dc:0f:5a:1a:20:0a:43:53:b8:45:15:7b:ef:5f:
+                    e8:05:9d:9c:f6:69:c8:4c:2e:40:e7:b4:e3:cb:51:
+                    54:59:ab:1f:15:0f:1e:fd:99:80:0e:ef:dd:b4:32:
+                    41:32:2e:67:86:04:80:2f:7c:da:65:cd:dc:37:fb:
+                    ef:57:e7:38:b2:d8:0f:a9:02:5a:e7:d8:1b:a4:9d:
+                    cf:a7:cf:4b:1f:4b:b5:26:2f:05:af:ad:66:cd:5b:
+                    d3:a5
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                C4:96:59:72:C5:97:C7:08:2B:07:FA:AB:35:0E:7C:25:61:3A:2B:57
+            X509v3 Authority Key Identifier: 
+                keyid:F7:3D:52:4F:32:87:55:0C:99:AA:75:85:61:DC:B7:70:1D:EE:8D:5E
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         1d:d6:9a:7c:37:c1:ea:24:cb:ba:82:4d:8e:8a:c4:7c:aa:f4:
+         0f:e5:71:fb:ab:69:62:ed:de:df:dd:2f:fc:bc:af:af:05:74:
+         20:d4:da:08:34:7a:5c:29:e7:d9:32:a5:3b:6a:ff:21:72:49:
+         6f:7f:6d:03:42:c2:c1:24:88:f8:42:3e:9e:37:4d:9e:ed:00:
+         d2:5e:43:3d:a3:53:3b:39:b3:42:96:69:fa:f7:ee:f8:3f:fa:
+         74:68:a9:db:92:11:96:94:c4:e0:fd:9b:60:cc:06:2e:0c:aa:
+         81:37:7b:09:c7:b8:0d:06:10:91:25:5b:c7:f5:15:00:5e:b0:
+         9e:e0:35:89:14:cd:8e:ba:de:3a:f8:37:20:c6:01:68:e9:b4:
+         1e:bb:1a:f8:bc:2a:a6:49:78:a1:2d:17:ef:17:47:f3:a7:e8:
+         96:56:6f:4d:39:96:bc:70:7e:ad:f0:85:27:46:12:5d:01:f6:
+         5f:b8:d5:42:97:9e:26:ab:e4:c7:0d:96:80:69:06:70:49:96:
+         03:bc:a7:3d:50:4d:5a:61:80:79:a6:e3:8e:11:27:5f:4e:5f:
+         b9:91:eb:be:2d:be:35:df:37:6a:6a:55:53:c5:b4:46:e8:b6:
+         a4:54:70:c7:0b:95:99:a7:33:0f:65:65:3d:de:26:ee:70:2e:
+         29:c4:4c:35
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a3:d5:2b:c8:3e:b2:67:d1:c8:61:df:28:2a:f3:
+                    66:a3:c2:a6:07:61:91:9d:99:49:b2:41:e0:7e:8f:
+                    15:9d:78:11:68:eb:ac:1b:00:1c:d3:6b:64:42:8b:
+                    43:84:64:f5:eb:50:39:75:b9:57:b7:68:96:96:cf:
+                    43:96:49:d0:dd:be:d3:98:dc:e6:2e:73:c3:7c:56:
+                    f3:8a:bb:80:f9:69:c1:29:2f:87:d9:20:8b:9c:e7:
+                    bc:f8:dd:0e:94:b4:51:bd:dc:6b:09:5c:df:52:f5:
+                    79:6f:20:d1:0a:cf:be:7a:e3:d0:38:ff:77:4b:ee:
+                    25:0f:7e:3d:d6:10:cc:08:b5:35:cd:fe:4e:f8:c3:
+                    cd:6b:42:a9:ec:ef:3f:1c:2a:15:b4:c3:41:1c:fd:
+                    55:34:f1:d1:29:1b:87:06:b7:a3:a8:86:d2:28:cd:
+                    68:57:69:8a:77:66:eb:05:70:f0:8f:de:47:34:02:
+                    8e:c9:63:a4:27:9e:8e:8d:61:03:22:fb:2f:1b:93:
+                    d0:d2:2c:b3:a4:e0:6f:63:05:49:41:0e:46:07:09:
+                    09:38:ed:96:d3:25:26:45:5f:39:d7:5f:c1:07:21:
+                    52:a5:a8:56:6d:b4:fd:b8:33:a6:6c:98:aa:0b:b8:
+                    19:cd:1b:77:00:f1:e4:fe:87:61:e2:44:63:77:f6:
+                    03:e7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                F7:3D:52:4F:32:87:55:0C:99:AA:75:85:61:DC:B7:70:1D:EE:8D:5E
+            X509v3 Authority Key Identifier: 
+                keyid:78:1F:76:57:B9:B5:43:11:ED:E8:AC:E4:61:6E:B1:99:6B:AC:A8:D0
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha256WithRSAEncryption
+         07:0f:25:e4:d3:2e:7f:06:e0:d0:3e:a9:8b:cc:9f:ca:3c:fc:
+         08:6e:91:bf:b6:3e:6e:ef:6b:0e:13:56:3f:d2:88:cf:ad:44:
+         b3:6b:f8:5f:40:a0:1d:2b:ad:a2:1e:58:20:62:7b:96:7c:c9:
+         21:7a:3e:3e:9d:f3:75:7d:eb:b5:59:59:0d:01:7d:cc:d9:e6:
+         d1:2f:e9:9a:69:a2:24:71:68:49:69:46:d0:b9:61:4f:9f:b7:
+         45:39:20:44:a2:4f:e1:85:a7:d8:7e:6e:eb:53:58:ff:ea:91:
+         3d:27:4d:19:09:c8:24:e2:ee:02:eb:42:8b:20:e1:5c:06:f1:
+         63:7a:04:62:d2:57:5f:f6:51:a9:81:4b:36:ae:4d:ff:fd:11:
+         1f:ea:55:d3:ff:19:ce:87:e7:84:31:45:68:7b:67:89:e0:e2:
+         7e:95:a2:8f:5c:86:3b:4e:29:8d:65:c8:55:c4:ab:38:26:45:
+         27:e5:91:da:d5:c7:f7:c5:95:9f:b7:a0:aa:bf:94:2b:6d:72:
+         24:fd:e8:93:72:03:1e:72:95:54:4d:77:36:4f:11:d9:54:71:
+         23:df:cf:33:b8:97:75:86:b6:c3:fd:e7:2c:2c:e4:86:fb:7a:
+         a0:5b:20:b3:f3:dc:8e:f1:0b:07:75:b0:93:de:e2:1f:19:a3:
+         f2:10:50:be
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b7:38:40:d4:75:9f:4a:c9:1c:53:9c:97:7e:50:
+                    76:f4:44:cc:bc:43:63:2a:44:fa:62:f2:5a:48:f4:
+                    d1:57:8f:af:19:ef:ba:34:9a:19:7f:08:b3:5e:31:
+                    c3:d0:3f:00:5b:de:fd:7f:1b:72:41:85:6c:57:ea:
+                    f8:74:95:58:25:25:75:48:c4:37:92:6a:80:83:94:
+                    5b:64:b6:fe:09:f1:f6:2d:08:bf:c7:eb:f9:73:25:
+                    21:55:6e:fa:28:9c:1b:ff:87:b8:e3:4e:07:5b:67:
+                    38:eb:f5:e4:b4:e1:a6:be:56:b2:d5:64:d1:91:cc:
+                    43:69:aa:00:47:ed:ed:e7:9b:a3:22:63:d2:e0:7b:
+                    22:b7:b6:05:cb:9d:23:ae:51:29:f1:08:78:f2:11:
+                    8e:79:28:46:4f:37:91:e1:ad:af:e4:10:15:36:10:
+                    98:85:4b:ed:00:e3:34:7e:05:9b:db:0a:5c:6f:be:
+                    59:f9:63:59:43:75:b9:0c:0a:50:e2:57:e6:e0:b1:
+                    e8:70:49:cd:5b:37:ff:1c:ee:3f:fb:e3:6a:89:26:
+                    91:a0:2a:52:50:9c:f8:77:59:53:df:a9:1e:a1:82:
+                    c4:d4:7a:f3:dd:3b:95:4b:dd:8c:f8:a6:05:1f:5d:
+                    a1:29:71:65:e7:07:4b:ed:28:5b:97:6d:25:7e:33:
+                    33:51
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                78:1F:76:57:B9:B5:43:11:ED:E8:AC:E4:61:6E:B1:99:6B:AC:A8:D0
+            X509v3 Authority Key Identifier: 
+                keyid:78:1F:76:57:B9:B5:43:11:ED:E8:AC:E4:61:6E:B1:99:6B:AC:A8:D0
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         a9:e8:a6:14:a7:66:ac:54:25:13:a7:ce:6c:35:e5:37:c1:04:
+         be:2c:2b:59:bb:a3:ac:e6:eb:2b:63:ba:82:6a:7f:38:7a:a3:
+         3c:82:4a:9d:cb:fa:3b:62:50:fb:83:9b:2a:23:ea:38:cf:5b:
+         4c:35:c4:8c:21:b3:ee:00:d5:90:1a:1b:c3:af:cf:bc:1e:38:
+         6c:ec:88:a3:32:66:2e:51:2c:73:c0:81:ac:ad:0e:23:78:a1:
+         09:3a:d0:35:c0:82:22:6d:cd:ff:d2:7c:95:1b:2c:69:19:59:
+         6b:db:58:ed:6d:8f:d2:25:91:fa:6b:7a:85:24:e0:e5:ac:9e:
+         28:56:e2:73:e4:c3:b8:f5:6e:76:44:e5:56:98:3a:69:36:74:
+         07:fc:49:f8:56:34:a9:dd:95:fd:6d:25:d1:c3:12:10:70:a0:
+         a5:6c:8f:20:56:3b:ad:8b:c9:7f:16:54:f0:a2:99:7f:ba:5b:
+         2e:05:4c:db:52:de:40:68:c9:98:6b:1a:a5:28:03:ba:60:ee:
+         6a:cf:2d:7c:57:49:d4:d7:c1:d0:b6:7a:c9:e0:59:74:bc:77:
+         f5:2a:42:b5:57:ea:e7:30:90:c0:76:dd:43:e2:9b:67:ff:9e:
+         4b:4a:9b:b7:18:30:0b:70:39:cb:00:98:da:59:a1:90:72:db:
+         97:da:51:cb
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----