Update CertVerifyProcTest.LargeKey for Sierra (Mac OS 10.12)

Update CertVerifyProcTest.LargeKey for Sierra (Mac OS 10.12)

On 10.12 a large key causes a recoverable error instead of a fatal error,
and one of the chain status codes is CSSMERR_TP_NOT_TRUSTED, so the
cert_status is now (CERT_STATUS_AUTHORITY_INVALID | CERT_STATUS_INVALID).
Update the test to just check if CERT_STATUS_INVALID is present in
cert_status so that it will pass on any version of mac.

BUG=629712
Committed: https://crrev.com/99c0d7490554f43ed1b14d315a39be5f4c5e3fc0
Cr-Commit-Position: refs/heads/master@{#436714}

[mattm, 2016-12-06 02:34:31]

The CQ bit was checked by mattm@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-12-06 02:35:12]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[mattm, 2016-12-06 02:35:44]

mattm@chromium.org changed reviewers:
+ davidben@chromium.org

[commit-bot: I haz the power, 2016-12-06 02:56:02]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-12-06 02:56:03]

Dry run: This issue passed the CQ dry run.

[davidben, 2016-12-06 19:47:49]

lgtm

https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
File net/cert/cert_verify_proc_unittest.cc (right):

https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
net/cert/cert_verify_proc_unittest.cc:1952: // on 10.12.
Perhaps a certificate with a garbage key type?

[mattm, 2016-12-06 20:40:15]

The CQ bit was checked by mattm@chromium.org

[commit-bot: I haz the power, 2016-12-06 20:41:17]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[mattm, 2016-12-06 20:42:45]

https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
File net/cert/cert_verify_proc_unittest.cc (right):

https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
net/cert/cert_verify_proc_unittest.cc:1952: // on 10.12.
On 2016/12/06 19:47:49, davidben wrote:
> Perhaps a certificate with a garbage key type?

Thanks for the suggestion. I'll give that a try once I've finished with the
other sierra unittest issues.

[commit-bot: I haz the power, 2016-12-06 20:53:27]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1481056815175790, "parent_rev":
"e969a6e4a9a26e81496089249940f2e632415c14", "commit_rev":
"efc84f1e3903e04f0fd2677e58b2bba9aceefd36"}

[commit-bot: I haz the power, 2016-12-06 20:53:51]

Committed patchset #1 (id:1)

[davidben, 2016-12-06 20:56:43]

On 2016/12/06 20:42:45, mattm wrote:
>
https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
> File net/cert/cert_verify_proc_unittest.cc (right):
> 
>
https://codereview.chromium.org/2550333003/diff/1/net/cert/cert_verify_proc_u...
> net/cert/cert_verify_proc_unittest.cc:1952: // on 10.12.
> On 2016/12/06 19:47:49, davidben wrote:
> > Perhaps a certificate with a garbage key type?
> 
> Thanks for the suggestion. I'll give that a try once I've finished with the
> other sierra unittest issues.

If you can't convince OpenSSL to emit one of those things, one possibility is to
integrate some variant of these instructions into the generate script.
https://github.com/google/der-ascii/blob/master/samples/certificates.md

Check-in a TBSCertificate assembled by der-ascii, run the openssl dgst command,
and then [???] to put together the combined structure. Question marks because
probably making the generate script depend on der-ascii will cause
teeth-gnashing.

[commit-bot: I haz the power, 2016-12-06 20:57:10]

Description was changed from

==========
Update CertVerifyProcTest.LargeKey for Sierra (Mac OS 10.12)

On 10.12 a large key causes a recoverable error instead of a fatal error,
and one of the chain status codes is CSSMERR_TP_NOT_TRUSTED, so the
cert_status is now (CERT_STATUS_AUTHORITY_INVALID | CERT_STATUS_INVALID).
Update the test to just check if CERT_STATUS_INVALID is present in
cert_status so that it will pass on any version of mac.

BUG=629712
==========

to

==========
Update CertVerifyProcTest.LargeKey for Sierra (Mac OS 10.12)

On 10.12 a large key causes a recoverable error instead of a fatal error,
and one of the chain status codes is CSSMERR_TP_NOT_TRUSTED, so the
cert_status is now (CERT_STATUS_AUTHORITY_INVALID | CERT_STATUS_INVALID).
Update the test to just check if CERT_STATUS_INVALID is present in
cert_status so that it will pass on any version of mac.

BUG=629712

Committed: https://crrev.com/99c0d7490554f43ed1b14d315a39be5f4c5e3fc0
Cr-Commit-Position: refs/heads/master@{#436714}
==========

[commit-bot: I haz the power, 2016-12-06 20:57:10]

Patchset 1 (id:??) landed as
https://crrev.com/99c0d7490554f43ed1b14d315a39be5f4c5e3fc0
Cr-Commit-Position: refs/heads/master@{#436714}