Support trust anchor constraints, by specifying them as a certificate.

net/net.gypi

Index: net/net.gypi
diff --git a/net/net.gypi b/net/net.gypi
index eb8e686295017bae48647a98a1ca933e211d36fd..7fd1ff54e26c8f27577037c2c7f83dc586bbbd24 100644
--- a/net/net.gypi
+++ b/net/net.gypi
@@ -2473,10 +2473,14 @@
       'data/url_request_unittest/with-headers.html',
       'data/url_request_unittest/with-headers.html.mock-http-headers',
       'data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem',
+      'data/verify_certificate_chain_unittest/constrained-non-self-signed-root.pem',
+      'data/verify_certificate_chain_unittest/constrained-root-basic-constraints-ca-false.pem',
+      'data/verify_certificate_chain_unittest/constrained-root-lacks-basic-constraints.pem',
+      'data/verify_certificate_chain_unittest/expired-constrained-root.pem',
       'data/verify_certificate_chain_unittest/expired-intermediate.pem',
-      'data/verify_certificate_chain_unittest/expired-root.pem',
       'data/verify_certificate_chain_unittest/expired-target-notBefore.pem',
       'data/verify_certificate_chain_unittest/expired-target.pem',
+      'data/verify_certificate_chain_unittest/expired-unconstrained-root.pem',
       'data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem',
       'data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem',
       'data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem',
@@ -2500,9 +2504,13 @@
       'data/verify_certificate_chain_unittest/target-signed-with-md5.pem',
       'data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem',
       'data/verify_certificate_chain_unittest/target-wrong-signature.pem',
+      'data/verify_certificate_chain_unittest/unconstrained-non-self-signed-root.pem',
+      'data/verify_certificate_chain_unittest/unconstrained-root-basic-constraints-ca-false.pem',
+      'data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem',
       'data/verify_certificate_chain_unittest/unknown-root.pem',
       'data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem',
-      'data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem',
+      'data/verify_certificate_chain_unittest/violates-pathlen-1-constrained-root.pem',
+      'data/verify_certificate_chain_unittest/violates-pathlen-1-unconstrained-root.pem',
       'data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-dupe_attr.pem',
       'data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_attr.pem',
       'data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_rdn.pem',