Certificate path builder for new certificate verification library

net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem

Index: net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
new file mode 100644
index 0000000000000000000000000000000000000000..55945578ff1d75675701f70f597191d3fb741d5c
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
@@ -0,0 +1,311 @@
+[Created by: ./generate-key-rollover.py]
+
+A certificate tree with two self-signed root certificates(oldroot, newroot),
+and a third root certificate (newrootrollover) which has the same key as newroot
+but is signed by oldroot, all with the same subject and issuer.
+There are two intermediates with the same key, subject and issuer
+(oldintermediary signed by oldroot, and newintermediary signed by newroot).
+The target certificate is signed by the intermediate key.
+
+
+In graphical form:
+
+   oldroot-------->newrootrollover  newroot
+      |                      |        |
+      v                      v        v
+oldintermediary           newintermediary
+      |                          |
+      +------------+-------------+
+                   |
+                   v
+                 target
+
+
+Several chains are output:
+  key-rollover-oldchain.pem:
+    target<-oldintermediary<-oldroot
+  key-rollover-rolloverchain.pem:
+    target<-newintermediary<-newrootrollover<-oldroot
+  key-rollover-longrolloverchain.pem:
+    target<-newintermediary<-newroot<-newrootrollover<-oldroot
+  key-rollover-newchain.pem:
+    target<-newintermediary<-newroot
+
+All of these chains should verify successfully.
+
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e0:75:a4:9a:ce:70:cc:22:41:4b:d4:cd:76:ae:
+                    35:80:a5:38:11:fa:47:a0:a2:5a:86:d3:9e:48:10:
+                    24:b0:23:7e:69:5c:fc:96:b2:ef:6f:fa:24:45:e4:
+                    de:4e:dd:e4:0d:43:78:5a:51:49:5d:21:53:e1:91:
+                    7f:7a:4c:60:64:81:8e:fe:bc:6f:e6:f4:59:a6:ce:
+                    9c:2a:0f:97:a4:79:77:87:c7:6e:b5:24:44:e0:43:
+                    fa:39:47:46:71:01:92:c4:db:3c:35:5d:dd:38:02:
+                    5c:2a:27:cb:ca:0c:16:f9:72:31:61:d2:7c:df:c2:
+                    cb:06:b0:77:bc:42:48:07:af:ef:7b:81:50:dd:70:
+                    b0:cd:50:6c:2d:09:6e:56:98:56:09:b9:70:e0:10:
+                    a2:b7:d4:71:47:15:6b:53:f8:82:1a:58:76:dc:67:
+                    2a:9b:84:0b:a7:7f:d5:ba:96:34:3b:cb:72:88:e8:
+                    c5:d7:d1:0d:2e:4d:32:2f:58:e6:ff:16:94:22:5b:
+                    61:5d:4d:86:31:0d:cb:2a:62:7c:5b:fa:34:79:83:
+                    06:49:f5:15:92:de:b7:19:30:52:47:03:4e:ff:46:
+                    d6:cc:30:f8:86:a8:4c:59:cc:31:16:61:28:11:3e:
+                    ae:1e:a9:74:ed:07:74:a9:93:bb:24:de:06:06:1f:
+                    2d:3b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                45:5B:76:CB:6D:E0:6D:3A:63:9A:BA:E6:9A:18:CD:8A:9D:17:EE:44
+            X509v3 Authority Key Identifier: 
+                keyid:95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         7e:20:1b:56:3d:05:91:c1:d0:e7:23:5c:79:43:4a:07:70:6a:
+         77:b2:ee:c4:f2:ee:b2:d0:b9:c6:1c:e5:f3:cf:7b:af:93:3e:
+         d9:5f:fa:57:73:7e:31:75:e4:77:38:af:b0:df:dd:db:11:f5:
+         e4:25:cf:3d:51:fa:1b:b5:78:76:61:97:7c:37:26:ce:3d:f3:
+         96:9c:b6:bb:e2:be:d6:71:b6:2e:41:f9:31:d5:2f:de:4f:ad:
+         27:93:1f:ab:79:9c:5a:61:b9:f8:6c:d1:24:6f:2d:9e:68:5f:
+         64:30:ac:dd:5a:0f:9e:1f:97:c6:99:5f:2f:e3:ad:3f:2d:4c:
+         68:d3:08:68:c5:39:18:0f:87:ce:a1:4a:25:c7:35:52:3f:a5:
+         f7:03:4a:09:5f:10:8a:84:f1:c6:ab:fa:b6:f2:23:f7:e4:60:
+         87:c7:79:24:4d:73:bb:f4:19:b8:8d:02:1a:47:09:fb:21:8b:
+         77:3c:08:05:88:c1:a5:c8:55:a5:ed:9f:88:9f:2a:db:78:dc:
+         0f:bc:87:ac:b3:30:5b:f5:06:c9:0e:c3:6d:e3:6b:aa:bf:56:
+         98:da:ce:c5:32:36:1a:1e:79:9f:3c:ab:af:86:87:7a:e9:8c:
+         c1:d0:ae:5a:9a:3c:7e:49:d0:cd:18:77:05:b4:d4:67:61:d8:
+         73:06:52:79
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  2 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bd:f6:aa:4f:a5:b1:3a:df:2a:b2:9b:04:74:fc:
+                    f1:0f:c5:d4:1f:d3:b6:93:7e:be:17:c1:60:cd:da:
+                    d1:a0:2e:f9:05:51:35:54:2a:51:14:41:28:ce:f9:
+                    0b:7b:fb:d8:df:61:ff:16:f2:00:ce:7c:20:cd:af:
+                    92:15:2e:32:e9:77:1e:81:b7:0f:86:61:3b:83:d7:
+                    1d:40:13:66:9f:83:8c:1f:51:cf:b3:d4:af:53:b9:
+                    0a:dc:52:71:ec:53:ad:0e:36:2d:aa:20:59:5c:3c:
+                    3b:5d:84:fc:e9:3f:90:8b:9c:24:e3:25:60:01:84:
+                    3c:ec:a7:48:66:da:b2:e2:32:f6:0d:d7:99:8d:b6:
+                    97:f7:d1:92:5d:57:26:f7:f4:fe:a8:2e:92:a7:6f:
+                    a6:84:59:f4:b2:66:ac:73:a4:de:27:8d:9c:a7:4a:
+                    67:6c:64:7d:92:36:1a:e7:62:bf:34:9f:12:97:f2:
+                    77:2b:8e:f6:5e:28:a0:52:3d:01:5c:c4:11:77:78:
+                    59:db:c2:76:da:f6:9c:f8:27:55:4c:4c:3f:55:c8:
+                    3c:34:f4:98:9e:2e:c8:f5:6a:69:ff:75:66:e4:25:
+                    e8:d0:85:76:16:0a:df:7a:53:f7:40:e0:11:28:1f:
+                    cc:cd:0b:d4:ce:fa:7f:41:f2:54:47:fa:bd:6d:07:
+                    a8:85
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+            X509v3 Authority Key Identifier: 
+                keyid:D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         cc:4e:fc:f2:a4:0f:2e:b3:6a:8d:c0:0b:27:1c:88:7c:0f:88:
+         9a:bf:ea:a4:0d:50:83:ad:f4:40:25:09:85:26:69:38:c5:a8:
+         4f:d8:1b:d7:40:40:3e:f5:5c:ec:13:0c:87:ff:39:f8:b3:ba:
+         1f:a2:e6:f6:89:ef:cc:16:e5:94:e9:e6:b3:f8:78:ea:46:95:
+         3e:13:50:04:21:29:83:75:c4:fa:e1:a0:36:f1:8b:46:25:73:
+         93:c4:85:37:5c:30:d0:5b:41:10:a8:e6:d1:28:cc:4b:32:6c:
+         6a:12:25:6b:55:36:ae:48:1f:53:fc:59:5b:34:fb:90:c3:e8:
+         fd:32:a7:fe:32:39:68:97:41:97:5c:b7:e9:eb:d7:8a:e8:6a:
+         f4:41:ea:38:be:d7:af:be:33:d6:82:1f:5e:eb:68:a0:a5:65:
+         d2:21:2c:91:01:02:98:3b:ad:fe:69:e5:8f:55:e3:74:98:46:
+         5d:27:cd:22:2e:7c:a8:da:78:4d:4c:88:90:cc:d4:49:10:28:
+         a3:1b:5f:c1:0d:88:40:3b:65:b0:dd:ac:f4:7f:31:17:a3:9e:
+         a5:45:37:fe:f0:40:d5:cb:02:40:ac:14:44:21:68:74:fa:a6:
+         99:dd:66:8d:ab:45:4b:c5:b1:d9:ab:59:28:d8:7e:48:10:83:
+         49:87:87:a6
+-----BEGIN CERTIFICATE-----
+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfaqT6Wx
+Ot8qspsEdPzxD8XUH9O2k36+F8FgzdrRoC75BVE1VCpRFEEozvkLe/vY32H/FvIA
+znwgza+SFS4y6XcegbcPhmE7g9cdQBNmn4OMH1HPs9SvU7kK3FJx7FOtDjYtqiBZ
+XDw7XYT86T+Qi5wk4yVgAYQ87KdIZtqy4jL2DdeZjbaX99GSXVcm9/T+qC6Sp2+m
+hFn0smasc6TeJ42cp0pnbGR9kjYa52K/NJ8Sl/J3K472XiigUj0BXMQRd3hZ28J2
+2vac+CdVTEw/Vcg8NPSYni7I9Wpp/3Vm5CXo0IV2FgrfelP3QOARKB/MzQvUzvp/
+QfJUR/q9bQeohQIDAQABo4HLMIHIMB0GA1UdDgQWBBSVIYceuqkwE1thwKkMTHaO
+qFM1JjAfBgNVHSMEGDAWgBTXMlZKVXc2Ks24GW4yE0CXVIfBQTA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
+AMxO/PKkDy6zao3ACycciHwPiJq/6qQNUIOt9EAlCYUmaTjFqE/YG9dAQD71XOwT
+DIf/Ofizuh+i5vaJ78wW5ZTp5rP4eOpGlT4TUAQhKYN1xPrhoDbxi0Ylc5PEhTdc
+MNBbQRCo5tEozEsybGoSJWtVNq5IH1P8WVs0+5DD6P0yp/4yOWiXQZdct+nr14ro
+avRB6ji+16++M9aCH17raKClZdIhLJEBApg7rf5p5Y9V43SYRl0nzSIufKjaeE1M
+iJDM1EkQKKMbX8ENiEA7ZbDdrPR/MRejnqVFN/7wQNXLAkCsFEQhaHT6ppndZo2r
+RUvFsdmrWSjYfkgQg0mHh6Y=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  2 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:df:90:f5:53:a4:c4:b3:97:68:4a:37:9b:1f:fc:
+                    9c:24:e5:b5:ec:8d:f6:64:30:70:92:24:a6:07:8b:
+                    28:a2:3b:81:93:79:97:40:28:a5:da:6c:99:5a:35:
+                    93:7e:17:8e:89:85:a3:ef:41:be:15:27:c1:9b:b6:
+                    1d:e4:83:4a:d6:59:6f:88:95:23:d8:71:6a:7e:fb:
+                    8d:29:3c:f3:bd:76:51:eb:50:d1:83:ac:cd:90:87:
+                    b5:85:50:5e:0b:bf:77:29:53:ca:7b:4f:7b:da:e4:
+                    0e:9d:be:5a:47:44:e3:50:8e:2c:7e:bc:6a:08:e3:
+                    bc:ee:64:31:04:84:24:e9:e0:e0:d9:57:86:d6:57:
+                    dd:c9:fa:cd:a5:f3:d8:86:8b:84:31:c7:e7:c6:81:
+                    42:52:2d:ac:b2:ac:a8:b2:d4:32:c5:b2:c4:0a:47:
+                    5c:00:0c:b9:d3:d8:04:65:dd:1c:4b:7e:1f:5b:81:
+                    e1:85:17:be:70:4b:a8:1c:0d:15:54:c2:db:65:78:
+                    18:15:15:57:73:a8:3a:31:36:5b:6f:c3:38:17:32:
+                    ce:05:17:69:53:f4:9b:f3:d0:18:93:b9:e9:a1:de:
+                    4a:79:d6:95:ac:f7:dd:eb:15:75:13:73:0d:47:4d:
+                    1f:0b:fd:15:88:26:be:71:59:23:d0:d7:55:4a:5d:
+                    73:21
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+            X509v3 Authority Key Identifier: 
+                keyid:D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         50:9a:6c:34:e9:18:50:04:54:f3:7a:6c:a7:52:e7:cd:fe:19:
+         58:f1:a7:a0:ea:60:59:87:a7:aa:19:cf:c3:df:05:2f:01:a1:
+         c7:25:98:0e:89:b9:3e:b3:f7:94:36:9c:ed:6e:45:51:cc:37:
+         1c:36:9a:80:b4:6a:05:ef:91:a3:31:d0:9a:34:2f:bd:60:50:
+         f9:ba:03:0b:08:30:d5:8b:d4:f1:d7:14:08:c9:ad:82:f3:7e:
+         13:0b:f5:c9:82:1e:e5:0e:60:c5:d9:8b:8d:94:32:87:03:4e:
+         44:44:ff:af:4a:2f:e3:13:ab:ca:8a:ce:26:72:90:97:c4:7e:
+         38:29:7b:fc:d2:8b:2f:75:35:92:48:c4:78:71:a4:6e:7e:e0:
+         c6:f1:42:a9:63:d5:61:bf:a5:8c:5c:fa:8a:6d:c3:23:72:55:
+         fe:68:4e:21:d7:ad:76:38:cc:26:05:d0:a8:50:f0:63:46:25:
+         62:76:d4:74:c9:50:db:47:e5:ad:4f:93:fc:62:35:db:18:16:
+         6d:27:d2:92:94:6d:a9:83:ae:f7:1e:1e:f9:3e:82:f9:40:e4:
+         96:3a:4d:23:90:98:43:8b:f0:36:07:8e:0b:4e:87:ec:37:8d:
+         47:0f:f7:e8:06:92:65:3f:eb:8b:df:44:1a:2b:8b:c4:54:2d:
+         bc:61:d7:bc
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----