Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem

Index: net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
new file mode 100644
index 0000000000000000000000000000000000000000..c31ceb95ca57af0fc298820e56b8adb5a9d59ee8
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
@@ -0,0 +1,283 @@
+[Created by: generate-intermediary-unknown-critical-extension.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary has an unknown X.509 extension that is marked as
+critical
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a3:20:17:e5:10:36:58:e8:95:f6:4b:7f:ea:be:
+                    0e:cd:55:9a:23:b7:ed:c5:fb:ea:13:56:2c:ba:37:
+                    ac:5b:3e:af:77:46:61:53:75:0e:b1:9c:d0:50:26:
+                    72:90:c7:77:02:72:e2:08:db:59:c6:23:d6:76:a3:
+                    d6:48:7e:d4:5f:67:09:83:e1:be:3a:85:02:99:b2:
+                    49:e2:ea:8c:30:92:ee:83:ba:03:36:43:5c:a2:56:
+                    8f:a8:7c:e3:01:38:5e:cc:32:ec:01:82:eb:65:e4:
+                    25:16:fc:ad:5a:b6:9b:03:98:5d:cf:94:31:a0:85:
+                    e9:2f:c3:3f:2e:a2:ba:6d:a1:fd:ca:d2:57:5b:c4:
+                    78:1d:20:60:72:d8:f7:c3:6c:e5:92:03:55:25:d4:
+                    5a:9f:aa:2d:b7:e6:a2:c3:0b:f6:f8:85:00:44:a5:
+                    6b:3a:ef:35:f6:3e:ba:90:ac:5c:b1:d8:2e:c1:c1:
+                    fc:1d:e6:2e:f2:20:93:f5:5b:ec:a6:e4:b9:84:a3:
+                    6a:8e:b4:a1:19:3f:4d:b5:d3:a5:b6:c1:fb:92:6b:
+                    06:aa:9f:28:32:8e:42:ff:64:18:75:1c:a2:1d:6e:
+                    82:fe:3b:94:be:b5:1b:24:81:78:ab:c7:b2:f7:48:
+                    bd:c3:3b:eb:89:32:e6:be:cc:62:35:48:44:07:13:
+                    e2:7d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                49:6E:9F:15:C0:05:8D:0A:97:E8:62:61:F2:F2:5D:2A:F5:17:18:63
+            X509v3 Authority Key Identifier: 
+                keyid:7D:1F:3F:0E:9C:77:CB:8E:31:B7:AE:B1:F2:03:B5:74:B6:35:D9:9B
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         1c:76:1a:6d:fc:fa:55:3b:ae:2a:ab:3d:ff:90:6f:e1:97:b6:
+         00:84:f5:bb:be:48:6b:c0:f2:92:1f:e6:fc:83:51:35:80:78:
+         81:f9:3e:59:08:d6:4d:ed:2e:bc:ed:26:99:0b:c4:60:6d:4c:
+         f3:24:46:7c:c4:42:75:29:6f:5d:bb:bb:29:ec:38:39:d9:f0:
+         64:b6:14:02:79:e9:91:0b:ac:9c:ac:52:bf:99:41:d2:91:f6:
+         59:8d:bb:3f:1b:3c:6d:d4:8b:bf:81:1a:69:e4:8e:a5:93:3a:
+         f5:39:b0:ad:de:bd:ae:7a:00:65:52:13:11:d8:c7:69:d3:54:
+         cb:63:4a:4e:5f:61:d8:50:d3:08:5a:41:bc:09:d5:5f:f9:15:
+         9f:60:8a:65:16:d5:20:37:11:08:82:56:de:41:a3:59:1a:02:
+         24:d3:96:59:e6:28:38:10:f5:48:75:f1:28:0d:6e:f6:bc:a8:
+         07:a3:78:da:2a:dc:80:3d:30:b5:77:54:0d:42:b0:bc:da:02:
+         c7:f2:31:fb:89:b2:00:c9:ec:54:0e:76:21:b0:84:18:dc:91:
+         5d:b0:c1:43:fc:bc:69:9b:fd:b6:0e:56:42:88:f9:3f:3c:db:
+         93:b3:14:ac:df:3c:b6:2f:9e:85:53:ba:71:99:ac:dc:b0:58:
+         e2:eb:63:b9
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIBfl
+EDZY6JX2S3/qvg7NVZojt+3F++oTViy6N6xbPq93RmFTdQ6xnNBQJnKQx3cCcuII
+21nGI9Z2o9ZIftRfZwmD4b46hQKZskni6owwku6DugM2Q1yiVo+ofOMBOF7MMuwB
+gutl5CUW/K1atpsDmF3PlDGghekvwz8uorptof3K0ldbxHgdIGBy2PfDbOWSA1Ul
+1Fqfqi235qLDC/b4hQBEpWs67zX2PrqQrFyx2C7Bwfwd5i7yIJP1W+ym5LmEo2qO
+tKEZP02106W2wfuSawaqnygyjkL/ZBh1HKIdboL+O5S+tRskgXirx7L3SL3DO+uJ
+Mua+zGI1SEQHE+J9AgMBAAGjgekwgeYwHQYDVR0OBBYEFElunxXABY0Kl+hiYfLy
+XSr1FxhjMB8GA1UdIwQYMBaAFH0fPw6cd8uOMbeusfIDtXS2NdmbMD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAHHYabfz6VTuuKqs9/5Bv
+4Ze2AIT1u75Ia8Dykh/m/INRNYB4gfk+WQjWTe0uvO0mmQvEYG1M8yRGfMRCdSlv
+Xbu7Kew4OdnwZLYUAnnpkQusnKxSv5lB0pH2WY27Pxs8bdSLv4EaaeSOpZM69Tmw
+rd69rnoAZVITEdjHadNUy2NKTl9h2FDTCFpBvAnVX/kVn2CKZRbVIDcRCIJW3kGj
+WRoCJNOWWeYoOBD1SHXxKA1u9ryoB6N42ircgD0wtXdUDUKwvNoCx/Ix+4myAMns
+VA52IbCEGNyRXbDBQ/y8aZv9tg5WQoj5Pzzbk7MUrN88ti+ehVO6cZms3LBY4utj
+uQ==
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ea:94:fc:30:3c:77:7e:2e:25:39:d1:e1:52:78:
+                    49:9b:7b:3c:bb:b1:12:34:56:8f:8b:2e:dc:d3:a5:
+                    00:d6:02:a5:b7:10:32:de:41:ff:e5:8a:73:44:f3:
+                    1a:e3:f3:e5:b3:d5:1d:46:58:d9:1a:ef:66:08:7e:
+                    7b:99:99:09:b6:34:18:e7:f5:ad:51:a6:07:98:95:
+                    e8:33:a1:c4:84:ff:4d:66:91:c9:d3:a0:ae:16:61:
+                    c9:20:ff:a1:0d:98:84:cf:23:3b:0a:04:eb:da:35:
+                    26:03:76:ca:09:43:fe:89:d1:fa:15:05:4f:ac:08:
+                    4d:31:cb:61:3c:28:84:c1:8b:f0:9e:a1:65:d2:c4:
+                    25:09:70:32:39:62:20:53:1e:1e:fd:81:aa:e9:1b:
+                    f5:25:7f:2e:36:ff:88:73:59:2d:91:53:5f:3d:d1:
+                    c8:a3:ee:0a:82:cb:47:e1:b0:47:ba:85:68:88:4a:
+                    c9:9c:7e:84:e4:12:95:3b:7f:9f:ab:80:be:e1:cd:
+                    4c:d0:b3:3b:e9:74:1b:e5:4f:4f:be:a7:34:9c:fa:
+                    77:00:4c:2a:4d:0b:3f:3c:f3:9f:2f:af:6a:d0:7d:
+                    c0:b5:c0:e9:ba:d2:15:75:b6:7f:d1:0e:2d:aa:a9:
+                    5a:d7:78:5d:45:95:b2:77:59:e1:38:bb:55:6f:ec:
+                    6e:81
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                7D:1F:3F:0E:9C:77:CB:8E:31:B7:AE:B1:F2:03:B5:74:B6:35:D9:9B
+            X509v3 Authority Key Identifier: 
+                keyid:68:94:66:72:65:E6:32:D3:C7:EE:38:5C:9D:7C:7C:03:DC:66:69:3A
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            1.2.3.4: critical
+                ....
+    Signature Algorithm: sha256WithRSAEncryption
+         6d:c4:3d:fc:4e:4a:c0:f6:c6:45:5c:98:38:0b:e6:b9:86:df:
+         3f:d1:01:09:3f:70:6f:6f:b5:97:02:e9:cf:6d:47:cb:fa:a6:
+         bf:75:63:e2:a3:ff:33:f6:ee:8d:10:f7:9b:04:57:52:66:61:
+         d1:b4:2c:b6:4d:30:b7:47:f1:ff:9b:1e:d1:2d:3c:d5:7a:62:
+         f9:7d:74:c8:a3:6b:8f:cf:9e:be:97:b0:0a:e7:54:6f:5b:bf:
+         d9:e1:e9:9c:cb:a2:00:37:32:8d:39:fb:a5:ff:e7:76:6b:e8:
+         fb:81:f0:5e:fb:fb:b1:b5:0f:74:b0:e0:0b:d1:62:18:a0:ae:
+         b8:d3:86:2e:ed:1a:b3:73:c3:d1:17:32:b7:7f:5a:5e:c5:53:
+         99:83:37:fa:b0:28:81:4f:66:91:7a:c9:c0:ce:10:73:25:5c:
+         4f:82:87:6e:82:e5:bb:37:2f:28:47:51:2d:68:b5:21:53:29:
+         d9:81:9a:6e:72:37:74:20:90:34:25:e1:17:3e:2c:3b:90:34:
+         d7:8f:dc:66:6a:de:70:2e:d3:89:2c:c9:f8:9e:62:a7:a8:30:
+         27:4f:e3:1b:46:7c:8c:60:5a:53:21:50:2d:20:ba:80:7e:31:
+         be:78:95:29:4e:36:34:fa:1d:c5:4f:c4:45:36:28:a1:e8:6a:
+         e6:9c:bc:a3
+-----BEGIN CERTIFICATE-----
+MIIDfTCCAmWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pT8MDx3
+fi4lOdHhUnhJm3s8u7ESNFaPiy7c06UA1gKltxAy3kH/5YpzRPMa4/Pls9UdRljZ
+Gu9mCH57mZkJtjQY5/WtUaYHmJXoM6HEhP9NZpHJ06CuFmHJIP+hDZiEzyM7CgTr
+2jUmA3bKCUP+idH6FQVPrAhNMcthPCiEwYvwnqFl0sQlCXAyOWIgUx4e/YGq6Rv1
+JX8uNv+Ic1ktkVNfPdHIo+4KgstH4bBHuoVoiErJnH6E5BKVO3+fq4C+4c1M0LM7
+6XQb5U9Pvqc0nPp3AEwqTQs/PPOfL69q0H3AtcDputIVdbZ/0Q4tqqla13hdRZWy
+d1nhOLtVb+xugQIDAQABo4HbMIHYMB0GA1UdDgQWBBR9Hz8OnHfLjjG3rrHyA7V0
+tjXZmzAfBgNVHSMEGDAWgBRolGZyZeYy08fuOFydfHwD3GZpOjA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDgYDKgMEAQH/BAQBAgMEMA0G
+CSqGSIb3DQEBCwUAA4IBAQBtxD38TkrA9sZFXJg4C+a5ht8/0QEJP3Bvb7WXAunP
+bUfL+qa/dWPio/8z9u6NEPebBFdSZmHRtCy2TTC3R/H/mx7RLTzVemL5fXTIo2uP
+z56+l7AK51RvW7/Z4emcy6IANzKNOful/+d2a+j7gfBe+/uxtQ90sOAL0WIYoK64
+04Yu7Rqzc8PRFzK3f1pexVOZgzf6sCiBT2aResnAzhBzJVxPgoduguW7Ny8oR1Et
+aLUhUynZgZpucjd0IJA0JeEXPiw7kDTXj9xmat5wLtOJLMn4nmKnqDAnT+MbRnyM
+YFpTIVAtILqAfjG+eJUpTjY0+h3FT8RFNiih6GrmnLyj
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:de:9d:24:94:f9:1e:92:77:d1:9a:fb:02:f6:c8:
+                    55:09:fd:3b:b6:2e:bb:95:71:82:ed:07:ea:71:b3:
+                    f4:20:4b:19:cb:ec:09:74:91:10:24:96:1e:c1:b2:
+                    21:b8:67:25:69:e1:17:58:94:48:36:58:1f:1c:ef:
+                    52:48:fd:a8:c3:32:05:74:56:10:ef:94:ad:80:1b:
+                    65:ec:1f:31:65:a2:f1:98:15:08:92:39:bd:c9:02:
+                    da:fc:86:fc:76:eb:fc:13:1b:ac:d3:03:3b:51:80:
+                    87:f5:a3:f6:54:71:df:24:ec:f4:82:69:eb:ab:54:
+                    1d:89:6e:50:57:b1:c1:2a:73:41:f5:d6:90:84:76:
+                    4c:62:53:29:d7:6e:2f:d5:34:ef:a3:44:d8:50:fe:
+                    57:e3:a8:b1:85:8b:70:8d:e4:50:95:c6:09:05:25:
+                    cb:04:ed:0d:1a:bf:fc:90:84:1b:3d:12:54:a1:1e:
+                    42:ba:8c:45:68:52:90:26:d1:62:28:e1:5c:f7:f1:
+                    94:c3:e5:ff:41:b6:33:80:c8:17:e8:34:2c:ff:4b:
+                    15:1c:ea:b3:bd:36:db:d0:97:5d:12:93:3b:4b:60:
+                    3f:e5:6c:64:a5:5b:d0:b7:68:db:87:03:f8:a6:28:
+                    6e:bf:8d:48:5c:24:67:eb:2e:56:73:0c:aa:76:79:
+                    39:b3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                68:94:66:72:65:E6:32:D3:C7:EE:38:5C:9D:7C:7C:03:DC:66:69:3A
+            X509v3 Authority Key Identifier: 
+                keyid:68:94:66:72:65:E6:32:D3:C7:EE:38:5C:9D:7C:7C:03:DC:66:69:3A
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         bf:46:e1:0f:1c:48:58:78:a7:c7:b1:3f:dd:5a:8f:d4:7b:e4:
+         38:a6:9b:9d:e9:e3:44:48:b4:32:e0:e7:29:93:8e:c4:67:5b:
+         04:18:ca:25:ea:61:1f:97:5c:66:4a:79:36:56:0b:d6:6a:7c:
+         4b:c1:61:73:28:87:54:2d:18:00:15:7e:d3:c6:4c:60:b4:9b:
+         70:7c:94:a9:4c:a3:43:6d:5b:ea:ea:6d:f3:e5:14:62:e6:26:
+         7b:e7:d1:af:20:fc:e9:d7:87:17:48:4b:63:c5:4c:23:47:b2:
+         08:d9:65:29:86:0a:45:c1:25:fd:60:8d:6f:07:e6:79:48:dd:
+         41:bc:b2:99:c5:69:45:94:0b:ca:3d:a6:ba:63:83:72:9b:87:
+         90:25:30:53:22:0d:ad:6e:d5:1b:1b:e6:b7:11:a9:2b:f7:5d:
+         2a:b2:3e:aa:fa:ef:50:7b:b9:34:9c:b0:7e:b6:1f:ab:c7:ab:
+         ee:ea:4b:da:cf:df:e7:a6:d8:ae:f0:3d:e9:3a:1f:67:73:31:
+         49:43:99:a9:52:6e:08:c6:2d:f3:f1:ca:75:a7:44:79:19:a3:
+         f1:2f:b3:6b:e3:70:51:ba:8a:0c:fc:12:85:a5:2d:bf:c7:8d:
+         f7:94:0e:80:73:3c:bb:9a:d9:ae:b2:b5:26:5f:d4:c1:70:99:
+         9d:c2:22:ee
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----