Allow Cast certificates to have serial numbers greater than 20 bytes.

components/cast_certificate/cast_cert_validator_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cast_certificate/cast_cert_validator.h"
 
 #include "components/cast_certificate/cast_cert_validator_test_helpers.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace cast_certificate {
@@ skipping 261 matching lines @@
 //
 // This device certificate has a policy that means it is valid only for audio
 // devices.
 TEST(VerifyCastDeviceCertTest, AudioRefDevTestChain3) {
   RunTest(RESULT_SUCCESS, "Audio Reference Dev Test",
           CastDeviceCertPolicy::AUDIO_ONLY,
           "certificates/audio_ref_dev_test_chain_3.pem", AprilFirst2016(),
           "signeddata/AudioReferenceDevTest.pem");
 }
 
+// Tests verifying a valid certificate chain of length 3. Note that the first
+// intermediate has a serial number that is 21 octets long, which violates RFC
+// 5280. However cast verification accepts this certificate for compatibility
+// reasons.
+//
+//  0: 8C579B806FFC8A9DFFFF F8:8F:CA:6B:E6:DA
+//  1: Sony so16vic CA
+//  2: Cast Audio Sony CA
+//
+// Chains to trust anchor:
+//   Cast Root CA     (not included)
+//
+// This device certificate has a policy that means it is valid only for audio
+// devices.
+TEST(VerifyCastDeviceCertTest, IntermediateSerialNumberTooLong) {
+  RunTest(RESULT_SUCCESS, "8C579B806FFC8A9DFFFF F8:8F:CA:6B:E6:DA",
+          CastDeviceCertPolicy::AUDIO_ONLY,
+          "certificates/intermediate_serialnumber_toolong.pem",
+          AprilFirst2016(), "");
+}
+
 // ------------------------------------------------------
 // Valid signature using 1024-bit RSA key
 // ------------------------------------------------------
 
 // This test vector comes from the NIST test vectors (pkcs1v15sign-vectors.txt),
 // PKCS#1 v1.5 Signature Example 1.2.
 //
 // It is a valid signature using a 1024 bit key and SHA-1.
 
 const uint8_t kEx1Message[] = {
@@ skipping 115 matching lines @@
   auto context =
       CertVerificationContextImplForTest(CreateString(kEx2PublicKeySpki));
 
   EXPECT_TRUE(context->VerifySignatureOverData(CreateString(kEx2Signature),
                                                CreateString(kEx2Message)));
 }
 
 }  // namespace
 
 }  // namespace cast_certificate