Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/target-not-end-entity.pem

Index: net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
diff --git a/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
new file mode 100644
index 0000000000000000000000000000000000000000..ff830a5e1e723912e947656dacb855b01335dfef
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
@@ -0,0 +1,280 @@
+[Created by: generate-target-not-end-entity.py]
+
+Certificate chain with 1 intermediary, a trusted root, and a target
+certificate that is also a CA. Verification is expected to fail on account of
+the target certificate being a signing certificate.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bf:33:0d:11:28:2c:a6:b9:bf:fb:a3:3c:3c:2c:
+                    b1:5d:f4:87:1b:e8:fa:b6:73:f7:dc:c2:8a:87:fe:
+                    32:4c:af:68:9b:96:7a:b6:6e:90:e1:1b:c0:c7:db:
+                    65:06:9e:77:38:a4:a3:20:cf:e3:1c:74:b3:7f:35:
+                    03:69:9d:28:89:92:95:c4:d1:99:93:95:7e:53:6c:
+                    2f:be:96:fa:af:18:7d:86:4c:d5:78:f5:47:77:25:
+                    88:e1:58:45:9c:d6:70:c5:f5:db:fc:5c:5a:e0:8f:
+                    8b:2c:3f:4f:6f:ed:20:0d:96:cb:7a:ac:8b:b4:d9:
+                    c4:1e:54:05:b5:1e:a0:56:68:7c:27:8e:0a:dd:c0:
+                    ae:78:8c:02:77:1e:8b:3d:89:3c:d8:1c:06:37:5b:
+                    0d:85:d1:58:bd:3c:4c:b6:c2:38:c8:76:07:bb:8e:
+                    fb:ae:f1:7c:d1:c1:84:d1:5c:03:a8:d4:f7:47:8a:
+                    80:61:37:67:38:a4:85:00:bd:64:64:e5:67:80:c3:
+                    89:8b:0b:52:58:6e:ff:32:a3:d2:e2:00:f4:4f:70:
+                    53:d6:c9:be:54:a6:94:3c:b1:f7:a4:27:33:47:2d:
+                    6f:66:8c:7e:aa:07:96:d3:20:5d:28:e7:09:38:5f:
+                    89:96:14:97:a0:47:cc:40:75:96:33:65:b1:24:8a:
+                    dd:7f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D8:45:2E:CB:2D:EF:1A:FB:83:A4:8B:DD:14:F0:2E:D1:A8:DE:BD:C4
+            X509v3 Authority Key Identifier: 
+                keyid:EE:1D:B4:89:C4:A7:F9:4E:E7:4F:5C:4A:E7:85:8F:20:7B:DF:D0:B4
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         49:47:2e:87:ab:55:c6:47:0d:98:5a:41:f3:9c:6c:09:2d:50:
+         da:5b:a9:e0:b0:51:a7:09:75:f7:6f:82:30:f9:22:70:b2:74:
+         73:c8:d9:ff:5f:5b:ff:8f:3a:90:93:36:f7:d9:bd:89:0a:4a:
+         84:1c:0c:4e:5d:b9:27:97:02:77:e4:ca:d1:ef:e6:25:30:d8:
+         dc:43:56:c3:ef:24:1d:4f:aa:a5:dc:eb:cd:d1:5b:8f:9d:ce:
+         76:d4:06:21:50:d7:e6:fe:1e:2f:bb:08:77:b7:21:dd:ae:c1:
+         93:1a:51:de:e3:17:9e:4a:87:e0:6b:ea:9e:30:ba:f4:71:ec:
+         cb:b3:88:39:bc:6f:7d:bf:23:07:62:a2:ff:3f:0d:25:f2:3d:
+         17:e9:83:0e:d4:d1:b6:d8:03:1e:48:d3:51:9a:e6:cf:58:b3:
+         3b:79:f2:b1:8c:9a:00:c2:08:79:c5:b6:5f:d1:27:f1:21:cd:
+         55:95:bd:33:0f:7a:85:15:ef:3f:08:98:3d:0a:b2:2a:be:c2:
+         5f:94:45:bb:93:2d:ad:c6:c1:6d:4b:b1:07:ca:ec:77:ed:3c:
+         80:e7:07:22:9a:d2:1d:03:d3:9b:85:9f:11:a0:e7:c6:4d:03:
+         06:b2:e7:ef:4d:67:2a:20:c6:30:9e:4d:fc:63:de:11:ec:15:
+         54:32:51:f8
+-----BEGIN CERTIFICATE-----
+MIIDfzCCAmegAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Mw0R
+KCymub/7ozw8LLFd9Icb6Pq2c/fcwoqH/jJMr2iblnq2bpDhG8DH22UGnnc4pKMg
+z+McdLN/NQNpnSiJkpXE0ZmTlX5TbC++lvqvGH2GTNV49Ud3JYjhWEWc1nDF9dv8
+XFrgj4ssP09v7SANlst6rIu02cQeVAW1HqBWaHwnjgrdwK54jAJ3Hos9iTzYHAY3
+Ww2F0Vi9PEy2wjjIdge7jvuu8XzRwYTRXAOo1PdHioBhN2c4pIUAvWRk5WeAw4mL
+C1JYbv8yo9LiAPRPcFPWyb5UppQ8sfekJzNHLW9mjH6qB5bTIF0o5wk4X4mWFJeg
+R8xAdZYzZbEkit1/AgMBAAGjgdswgdgwHQYDVR0OBBYEFNhFLsst7xr7g6SL3RTw
+LtGo3r3EMB8GA1UdIwQYMBaAFO4dtInEp/lO509cSueFjyB739C0MD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
+DQYJKoZIhvcNAQELBQADggEBAElHLoerVcZHDZhaQfOcbAktUNpbqeCwUacJdfdv
+gjD5InCydHPI2f9fW/+POpCTNvfZvYkKSoQcDE5duSeXAnfkytHv5iUw2NxDVsPv
+JB1PqqXc683RW4+dznbUBiFQ1+b+Hi+7CHe3Id2uwZMaUd7jF55Kh+Br6p4wuvRx
+7MuziDm8b32/Iwdiov8/DSXyPRfpgw7U0bbYAx5I01Ga5s9Yszt58rGMmgDCCHnF
+tl/RJ/EhzVWVvTMPeoUV7z8ImD0Ksiq+wl+URbuTLa3GwW1LsQfK7HftPIDnByKa
+0h0D05uFnxGg58ZNAway5+9NZyogxjCeTfxj3hHsFVQyUfg=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cf:9f:fa:81:fd:2f:bb:e2:86:eb:3f:37:4e:95:
+                    e4:33:47:e9:e1:59:36:d1:67:6b:6f:38:fb:53:f8:
+                    6e:f0:4a:c2:75:dc:c6:cd:74:b8:bc:da:6b:67:29:
+                    02:04:e4:bc:e1:12:50:7d:37:e0:62:72:a9:ec:56:
+                    23:70:f3:bb:41:8b:3b:6b:2a:29:88:d8:b9:3b:62:
+                    4d:48:cb:13:62:33:17:83:83:0b:c1:87:b6:23:c5:
+                    6e:3a:f4:ea:8e:ec:20:14:68:41:33:6b:cd:91:52:
+                    df:65:69:2a:e3:81:9d:55:0a:c1:5e:8f:ea:87:35:
+                    7d:d1:3f:28:d2:f1:52:1d:0e:db:cb:8a:4d:b4:a0:
+                    0f:ee:76:8f:03:56:f7:f6:76:48:12:ae:ef:ab:18:
+                    73:c0:01:83:1e:0a:33:50:26:5c:14:67:84:0a:67:
+                    f2:cf:4a:12:e3:da:14:bf:ba:6b:a6:5d:ec:38:36:
+                    87:f8:ef:ed:61:a4:03:70:58:71:39:a0:f3:81:52:
+                    9e:cb:9b:e2:33:fe:35:e9:b5:d1:39:93:86:64:b2:
+                    4d:aa:cb:73:76:b9:59:bb:f6:4d:2b:60:09:70:32:
+                    9a:21:50:f4:1b:23:e9:75:d0:bc:a3:8b:3f:e2:a1:
+                    87:38:c4:af:dd:6e:39:7e:2f:a8:e5:0c:10:8d:9c:
+                    c5:8d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                EE:1D:B4:89:C4:A7:F9:4E:E7:4F:5C:4A:E7:85:8F:20:7B:DF:D0:B4
+            X509v3 Authority Key Identifier: 
+                keyid:BB:39:C5:18:95:3B:6A:3C:A0:B1:52:B1:87:37:EE:7B:8A:FC:08:C7
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         99:9c:30:fa:be:fc:d7:6a:5b:7e:9a:d5:97:5a:e2:ea:c3:f1:
+         31:70:00:9c:ed:b5:8e:95:bd:70:6f:44:13:39:6f:ba:17:d8:
+         10:9a:4e:ca:26:f8:58:f7:09:60:4e:80:60:2d:8b:28:ea:53:
+         73:96:75:58:dc:54:45:25:c1:2d:3c:23:28:92:8b:b3:b9:86:
+         ca:fb:0a:7e:37:66:67:ee:d4:8a:4d:ee:0d:f9:e5:89:5d:70:
+         6f:39:a0:37:85:29:5e:b2:93:ca:b8:9f:ec:96:65:c5:34:73:
+         c7:59:bc:6b:f5:67:25:19:ee:b1:21:4c:6f:9d:2c:be:fe:57:
+         f5:7e:b9:ba:67:de:7b:fb:c5:19:0a:66:37:10:61:cc:8d:3f:
+         20:1f:8b:c4:4e:00:04:50:61:70:c9:60:97:2d:28:3c:7d:21:
+         66:78:29:75:f5:31:26:f0:b7:f9:d5:75:ef:4b:ca:44:90:12:
+         bd:01:8c:6e:12:1a:04:64:b8:a1:65:34:9f:46:09:c5:24:4f:
+         ff:d3:37:44:74:66:c9:78:f3:e1:61:ba:fd:01:6d:74:0f:c4:
+         45:f9:a4:f8:b7:90:7c:6d:6f:81:e2:97:8a:1a:1c:7a:d2:0e:
+         c0:87:76:9e:d8:a9:a9:5c:3e:23:32:ff:1e:51:68:6c:42:ce:
+         18:b7:50:0f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bf:0d:89:69:aa:3c:a6:c5:50:18:db:5f:06:bd:
+                    69:47:91:b8:be:c7:22:97:0d:10:cc:a7:9c:ef:a4:
+                    70:69:d3:d2:b2:b1:44:60:1a:b2:f5:c9:14:ea:e5:
+                    6f:f9:12:8f:cb:e8:ed:6d:67:fa:17:a3:57:4c:d8:
+                    2d:2f:fd:9a:9c:dc:70:84:14:a6:be:fe:ce:41:1b:
+                    d8:08:b6:6e:fb:6d:74:1e:52:e5:3d:1b:2c:56:fe:
+                    1b:6b:1e:b2:e6:25:72:dd:ac:02:32:dc:5c:a3:1f:
+                    e4:46:18:0a:3a:63:c2:07:d5:29:61:e0:a3:b2:65:
+                    2b:a6:86:39:32:af:63:3b:ab:d1:5d:bb:f9:4f:46:
+                    6f:2a:26:41:bc:f0:b8:73:43:d0:de:7f:12:e1:d6:
+                    36:54:39:24:1b:80:6a:b3:c2:3a:44:a2:1a:f7:47:
+                    d1:78:9e:b1:75:00:ce:40:d2:b1:72:0a:06:04:b2:
+                    ff:68:04:02:2d:21:3c:cc:bc:2c:e1:7d:cb:48:70:
+                    98:18:d8:99:03:88:70:97:e2:87:6e:3f:68:ee:23:
+                    1d:cd:ee:a8:6a:0b:e8:94:d3:a7:9e:ac:51:85:a0:
+                    84:2f:e7:a2:3c:8c:ff:bd:91:27:c5:82:70:83:83:
+                    41:07:d8:6b:7a:55:35:88:6c:d3:39:df:80:e9:98:
+                    e7:b3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                BB:39:C5:18:95:3B:6A:3C:A0:B1:52:B1:87:37:EE:7B:8A:FC:08:C7
+            X509v3 Authority Key Identifier: 
+                keyid:BB:39:C5:18:95:3B:6A:3C:A0:B1:52:B1:87:37:EE:7B:8A:FC:08:C7
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         82:be:c5:9d:67:63:e1:77:42:eb:47:ac:c9:af:95:3b:2e:5b:
+         6a:e6:73:1d:78:f1:c1:1d:43:b8:03:e3:f2:77:24:79:c3:a0:
+         d0:b6:5a:ff:c7:0e:91:04:67:1e:53:46:e3:72:5c:90:2b:5b:
+         58:2f:12:8e:d8:ab:11:93:4d:d0:f6:27:c6:25:ef:03:85:d2:
+         58:e6:a2:ac:a3:fb:33:d1:3b:92:bf:31:43:46:aa:24:bf:cd:
+         b4:d0:75:ae:51:43:ff:b7:50:b9:4a:d3:34:81:24:de:95:59:
+         05:9d:8f:da:10:35:96:cb:08:05:f7:88:dd:b6:20:b5:ec:bd:
+         ab:9d:e6:42:17:7d:86:7a:78:9f:e8:5e:bc:2e:03:80:17:ad:
+         94:0c:a4:7e:c5:7d:3a:6a:ab:84:b0:0f:43:a4:17:eb:e8:38:
+         32:37:09:7c:50:bf:b6:5f:42:ed:2c:19:85:13:ab:29:4f:5f:
+         06:a6:b8:bd:18:95:0e:e8:9e:0c:d6:ac:ff:15:99:6c:5c:f1:
+         df:13:22:5c:41:f8:f5:66:8a:46:49:a2:c5:19:a1:ed:dc:d2:
+         ab:9b:40:f8:1a:81:a9:af:19:3b:6c:42:1f:06:7a:60:2e:bc:
+         4b:16:94:ee:45:69:f8:7e:92:68:e7:44:d9:42:56:73:2c:a6:
+         f4:40:6e:88
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----