Add errors per ResultPath for CertPathBuilder.

net/cert/internal/verify_certificate_chain.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_VERIFY_CERTIFICATE_CHAIN_H_
 #define NET_CERT_INTERNAL_VERIFY_CERTIFICATE_CHAIN_H_
 
 #include <vector>
 
 #include "base/compiler_specific.h"
@@ skipping 29 matching lines @@
 //
 //   cert_chain:
 //     A non-empty chain of N DER-encoded certificates, listed in the
 //     "forward" direction.
 //
 //      * cert_chain[0] is the target certificate to verify.
 //      * cert_chain[i+1] holds the certificate that issued cert_chain[i].
 //      * cert_chain[N-1] must be issued by the trust anchor.
 //
 //   trust_anchor:
-//     Contains the trust anchor (root) used to verify the chain. Must be
-//     non-null.
+//     Contains the trust anchor (root) used to verify the chain. Should be
+//     non-null (null is allowed however will result in a failure).
 //
 //   signature_policy:
 //     The policy to use when verifying signatures (what hash algorithms are
 //     allowed, what length keys, what named curves, etc).
 //
 //   time:
 //     The UTC time to use for expiration checks.
 //
 // ---------
 // Outputs
@@ skipping 28 matching lines @@
 extern CertErrorType kKeyCertSignBitNotSet;
 extern CertErrorType kMaxPathLengthViolated;
 extern CertErrorType kBasicConstraintsIndicatesNotCa;
 extern CertErrorType kMissingBasicConstraints;
 extern CertErrorType kNotPermittedByNameConstraints;
 extern CertErrorType kSubjectDoesNotMatchIssuer;
 extern CertErrorType kSignatureVerificationFailed;
 extern CertErrorType kValidityFailedNotAfter;
 extern CertErrorType kValidityFailedNotBefore;
 extern CertErrorType kSignatureAlgorithmsDifferentEncoding;
+extern CertErrorType kNullTrustAnchor;
 
 }  // namespace verify_certificate_chain_errors
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_VERIFY_CERTIFICATE_CHAIN_H_