*WIP* Store NSS slots per profile. Move keygen to chrome.

net/base/keygen_handler_test_util.cc

Index: net/base/keygen_handler_test_util.cc
diff --git a/net/base/keygen_handler_test_util.cc b/net/base/keygen_handler_test_util.cc
new file mode 100644
index 0000000000000000000000000000000000000000..78d75000516a7a995620ea0070363305f485369f
--- /dev/null
+++ b/net/base/keygen_handler_test_util.cc
@@ -0,0 +1,49 @@
+// Copyright (c) 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "net/base/keygen_handler_test_util.h"
+
+#include "base/base64.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+namespace net {
+
+void AssertValidSignedPublicKeyAndChallenge(const std::string& result,
+                                            int key_size_in_bits,
+                                            const std::string& challenge) {
+  ASSERT_GT(result.length(), 0U);
+  // Assertions assume 768 bit key size.
+  ASSERT_EQ(key_size_in_bits, 768);
+
+  // Verify it's valid base64:
+  std::string spkac;
+  ASSERT_TRUE(base::Base64Decode(result, &spkac));
+  // In lieu of actually parsing and validating the DER data,
+  // just check that it exists and has a reasonable length.
+  // (It's almost always 590 bytes, but the DER encoding of the random key
+  // and signature could sometimes be a few bytes different.)
+  ASSERT_GE(spkac.length(), 200U);
+  ASSERT_LE(spkac.length(), 300U);
+
+  // NOTE:
+  // The value of |result| can be validated by prefixing 'SPKAC=' to it
+  // and piping it through
+  //   openssl spkac -verify
+  // whose output should look like:
+  //   Netscape SPKI:
+  //     Public Key Algorithm: rsaEncryption
+  //     RSA Public Key: (2048 bit)
+  //     Modulus (2048 bit):
+  //         00:b6:cc:14:c9:43:b5:2d:51:65:7e:11:8b:80:9e: .....
+  //     Exponent: 65537 (0x10001)
+  //     Challenge String: some challenge
+  //     Signature Algorithm: md5WithRSAEncryption
+  //         92:f3:cc:ff:0b:d3:d0:4a:3a:4c:ba:ff:d6:38:7f:a5:4b:b5: .....
+  //   Signature OK
+  //
+  // The value of |spkac| can be ASN.1-parsed with:
+  //    openssl asn1parse -inform DER
+}
+
+}  // namespace net