Certificate path builder for new certificate verification library

net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem

+[Created by: ./generate-key-rollover.py]
+
+A certificate tree with two self-signed root certificates(oldroot, newroot),
+and a third root certificate (newrootrollover) which has the same key as newroot
+but is signed by oldroot, all with the same subject and issuer.
+There are two intermediates with the same key, subject and issuer
+(oldintermediary signed by oldroot, and newintermediary signed by newroot).
+The target certificate is signed by the intermediate key.
+
+
+In graphical form:
+
+   oldroot-------->newrootrollover  newroot
+      |                      |        |
+      v                      v        v
+oldintermediary           newintermediary
+      |                          |
+      +------------+-------------+
+                   |
+                   v
+                 target
+
+
+Several chains are output:
+  key-rollover-oldchain.pem:
+    target<-oldintermediary<-oldroot
+  key-rollover-rolloverchain.pem:
+    target<-newintermediary<-newrootrollover<-oldroot
+  key-rollover-longrolloverchain.pem:
+    target<-newintermediary<-newroot<-newrootrollover<-oldroot
+  key-rollover-newchain.pem:
+    target<-newintermediary<-newroot
+
+All of these chains should verify successfully.
+
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e0:75:a4:9a:ce:70:cc:22:41:4b:d4:cd:76:ae:
+                    35:80:a5:38:11:fa:47:a0:a2:5a:86:d3:9e:48:10:
+                    24:b0:23:7e:69:5c:fc:96:b2:ef:6f:fa:24:45:e4:
+                    de:4e:dd:e4:0d:43:78:5a:51:49:5d:21:53:e1:91:
+                    7f:7a:4c:60:64:81:8e:fe:bc:6f:e6:f4:59:a6:ce:
+                    9c:2a:0f:97:a4:79:77:87:c7:6e:b5:24:44:e0:43:
+                    fa:39:47:46:71:01:92:c4:db:3c:35:5d:dd:38:02:
+                    5c:2a:27:cb:ca:0c:16:f9:72:31:61:d2:7c:df:c2:
+                    cb:06:b0:77:bc:42:48:07:af:ef:7b:81:50:dd:70:
+                    b0:cd:50:6c:2d:09:6e:56:98:56:09:b9:70:e0:10:
+                    a2:b7:d4:71:47:15:6b:53:f8:82:1a:58:76:dc:67:
+                    2a:9b:84:0b:a7:7f:d5:ba:96:34:3b:cb:72:88:e8:
+                    c5:d7:d1:0d:2e:4d:32:2f:58:e6:ff:16:94:22:5b:
+                    61:5d:4d:86:31:0d:cb:2a:62:7c:5b:fa:34:79:83:
+                    06:49:f5:15:92:de:b7:19:30:52:47:03:4e:ff:46:
+                    d6:cc:30:f8:86:a8:4c:59:cc:31:16:61:28:11:3e:
+                    ae:1e:a9:74:ed:07:74:a9:93:bb:24:de:06:06:1f:
+                    2d:3b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                45:5B:76:CB:6D:E0:6D:3A:63:9A:BA:E6:9A:18:CD:8A:9D:17:EE:44
+            X509v3 Authority Key Identifier: 
+                keyid:95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         7e:20:1b:56:3d:05:91:c1:d0:e7:23:5c:79:43:4a:07:70:6a:
+         77:b2:ee:c4:f2:ee:b2:d0:b9:c6:1c:e5:f3:cf:7b:af:93:3e:
+         d9:5f:fa:57:73:7e:31:75:e4:77:38:af:b0:df:dd:db:11:f5:
+         e4:25:cf:3d:51:fa:1b:b5:78:76:61:97:7c:37:26:ce:3d:f3:
+         96:9c:b6:bb:e2:be:d6:71:b6:2e:41:f9:31:d5:2f:de:4f:ad:
+         27:93:1f:ab:79:9c:5a:61:b9:f8:6c:d1:24:6f:2d:9e:68:5f:
+         64:30:ac:dd:5a:0f:9e:1f:97:c6:99:5f:2f:e3:ad:3f:2d:4c:
+         68:d3:08:68:c5:39:18:0f:87:ce:a1:4a:25:c7:35:52:3f:a5:
+         f7:03:4a:09:5f:10:8a:84:f1:c6:ab:fa:b6:f2:23:f7:e4:60:
+         87:c7:79:24:4d:73:bb:f4:19:b8:8d:02:1a:47:09:fb:21:8b:
+         77:3c:08:05:88:c1:a5:c8:55:a5:ed:9f:88:9f:2a:db:78:dc:
+         0f:bc:87:ac:b3:30:5b:f5:06:c9:0e:c3:6d:e3:6b:aa:bf:56:
+         98:da:ce:c5:32:36:1a:1e:79:9f:3c:ab:af:86:87:7a:e9:8c:
+         c1:d0:ae:5a:9a:3c:7e:49:d0:cd:18:77:05:b4:d4:67:61:d8:
+         73:06:52:79
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bd:f6:aa:4f:a5:b1:3a:df:2a:b2:9b:04:74:fc:
+                    f1:0f:c5:d4:1f:d3:b6:93:7e:be:17:c1:60:cd:da:
+                    d1:a0:2e:f9:05:51:35:54:2a:51:14:41:28:ce:f9:
+                    0b:7b:fb:d8:df:61:ff:16:f2:00:ce:7c:20:cd:af:
+                    92:15:2e:32:e9:77:1e:81:b7:0f:86:61:3b:83:d7:
+                    1d:40:13:66:9f:83:8c:1f:51:cf:b3:d4:af:53:b9:
+                    0a:dc:52:71:ec:53:ad:0e:36:2d:aa:20:59:5c:3c:
+                    3b:5d:84:fc:e9:3f:90:8b:9c:24:e3:25:60:01:84:
+                    3c:ec:a7:48:66:da:b2:e2:32:f6:0d:d7:99:8d:b6:
+                    97:f7:d1:92:5d:57:26:f7:f4:fe:a8:2e:92:a7:6f:
+                    a6:84:59:f4:b2:66:ac:73:a4:de:27:8d:9c:a7:4a:
+                    67:6c:64:7d:92:36:1a:e7:62:bf:34:9f:12:97:f2:
+                    77:2b:8e:f6:5e:28:a0:52:3d:01:5c:c4:11:77:78:
+                    59:db:c2:76:da:f6:9c:f8:27:55:4c:4c:3f:55:c8:
+                    3c:34:f4:98:9e:2e:c8:f5:6a:69:ff:75:66:e4:25:
+                    e8:d0:85:76:16:0a:df:7a:53:f7:40:e0:11:28:1f:
+                    cc:cd:0b:d4:ce:fa:7f:41:f2:54:47:fa:bd:6d:07:
+                    a8:85
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+            X509v3 Authority Key Identifier: 
+                keyid:3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         32:06:3f:67:40:01:96:e4:77:c4:f2:71:25:28:0e:fd:cf:9b:
+         6b:71:bc:7a:84:e5:0e:08:98:4f:f9:12:be:6f:1b:0f:18:de:
+         d6:bd:5a:49:8c:aa:40:90:1a:04:3a:41:b9:8f:fd:d6:ea:1c:
+         84:aa:44:f7:05:a5:3e:18:fc:7a:f3:7e:37:8e:30:e5:f0:e8:
+         07:e9:53:8a:7c:54:52:ef:5d:1a:f2:c4:09:e0:a6:ca:13:09:
+         a0:1b:64:81:1b:49:91:68:c1:9c:ea:81:b3:ff:73:cc:c8:fa:
+         c3:bb:fb:d8:31:bd:ee:1f:ab:7b:3b:e9:ad:8e:3b:f3:d1:c3:
+         8a:3f:75:eb:d6:9d:fa:7b:00:3c:78:4a:3f:a3:ca:ba:96:c5:
+         fb:62:62:fb:8c:d4:d6:7c:47:57:38:16:93:f5:b1:4b:55:27:
+         10:6a:75:b7:83:12:42:0b:d2:ac:77:14:a3:37:aa:0e:25:98:
+         d7:c5:d1:a4:3b:67:0f:4d:b2:98:8a:e3:94:3c:53:61:69:be:
+         dd:c4:2d:65:4a:ae:b3:2e:81:6d:92:d6:cf:ec:9f:9f:9d:a0:
+         aa:88:89:d9:86:80:c0:9a:74:99:9e:ae:a7:86:e0:1e:25:cb:
+         e9:a6:62:d5:d1:38:cb:09:c9:7a:71:6d:44:3f:42:d2:6c:c0:
+         bb:34:0a:3a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bd:ad:c8:5d:2d:85:2d:00:39:01:33:f2:03:b2:
+                    e4:87:7c:e5:45:35:fa:80:8c:99:92:fb:ba:8c:f8:
+                    d7:e6:3a:51:1d:a3:b3:67:9f:14:fe:8c:27:c3:82:
+                    30:b3:c5:12:9d:7a:7e:c0:13:3c:a3:73:29:ec:f5:
+                    6a:d0:68:0d:e8:35:13:01:00:c9:f9:6a:f2:53:50:
+                    a4:12:82:82:d4:1a:30:45:6d:b1:a0:d8:56:5b:36:
+                    98:59:4c:28:78:88:21:e6:44:34:af:55:12:89:5e:
+                    6a:a3:8b:27:a3:65:b1:f0:0b:67:49:d8:41:ca:0a:
+                    0e:63:48:5f:4a:2f:12:3f:5a:37:85:4d:70:80:9e:
+                    8c:d0:54:e8:3e:09:fe:99:b5:51:67:0a:5d:8a:0e:
+                    97:a5:36:55:cf:10:9d:45:07:44:c7:4a:60:4e:13:
+                    25:99:0f:6c:7d:f9:7a:99:52:2a:e2:7b:b5:7a:50:
+                    21:72:24:e7:52:cf:4a:27:6c:60:a0:a9:2c:c7:70:
+                    3e:6e:0b:4e:21:c6:0a:30:a6:a9:73:a0:08:66:ab:
+                    99:3e:03:92:44:89:23:2d:03:f4:13:5f:42:55:ef:
+                    80:03:5a:aa:34:84:ae:e4:b7:b7:cc:51:1a:d0:ec:
+                    04:ab:e5:bb:f1:d1:80:8d:6a:ab:e6:80:2c:7d:0e:
+                    fe:f3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+            X509v3 Authority Key Identifier: 
+                keyid:3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         9a:45:ef:29:2f:b6:bf:98:7d:f0:e1:b4:ac:5c:7e:f4:3f:2b:
+         87:76:19:32:b0:f1:b0:ff:32:05:c4:c6:d4:9d:bf:22:31:30:
+         79:a3:a1:ec:66:c5:02:bd:7f:cc:47:e0:39:7f:fd:19:d5:4f:
+         2b:a7:0a:b7:5b:3f:a9:54:51:1d:d7:dd:8f:72:7d:b7:1a:a1:
+         16:5e:80:d0:d0:83:9f:87:13:c5:66:79:cf:26:5e:38:c6:0c:
+         f8:76:2e:ff:8b:68:95:d8:f6:84:f2:13:13:59:d3:b3:a6:93:
+         73:f8:5d:e7:f3:75:9a:42:30:74:ed:c0:a5:84:cf:30:eb:9c:
+         89:ee:26:6c:a3:9a:b4:01:e2:f4:21:94:eb:69:3d:6b:82:dd:
+         f9:88:57:37:64:0a:09:8c:fd:29:73:2d:85:ca:fa:f0:38:76:
+         cc:65:c3:52:50:8d:0e:2e:f5:9f:fe:a0:5a:b3:7a:dc:c6:ee:
+         e8:a6:0a:95:23:ab:0c:86:89:87:aa:ff:6b:88:49:ef:eb:63:
+         d8:ea:d1:86:b0:c8:3c:eb:f3:d3:ff:5f:95:a0:68:dc:52:a1:
+         26:e5:f2:60:c5:fd:9d:fa:03:fd:5f:c9:33:21:c8:9e:3f:e7:
+         75:b4:c5:43:3b:7c:65:38:82:87:76:1d:aa:7b:48:81:27:03:
+         93:cb:81:50
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----