Add a key purpose parameter to Certificate PathBuilder.

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 3363 matching lines @@
     "data/url_request_unittest/redirect308-to-https",
     "data/url_request_unittest/redirect308-to-https.mock-http-headers",
     "data/url_request_unittest/simple.html",
     "data/url_request_unittest/simple.html.mock-http-headers",
     "data/url_request_unittest/two-content-lengths.html",
     "data/url_request_unittest/two-content-lengths.html.mock-http-headers",
     "data/url_request_unittest/with-headers.html",
     "data/url_request_unittest/with-headers.html.mock-http-headers",
     "data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem",
     "data/verify_certificate_chain_unittest/constrained-non-self-signed-root.pem",
+    "data/verify_certificate_chain_unittest/constrained-root-bad-eku.pem",
     "data/verify_certificate_chain_unittest/constrained-root-basic-constraints-ca-false.pem",
     "data/verify_certificate_chain_unittest/constrained-root-lacks-basic-constraints.pem",
     "data/verify_certificate_chain_unittest/expired-constrained-root.pem",
     "data/verify_certificate_chain_unittest/expired-intermediate.pem",
     "data/verify_certificate_chain_unittest/expired-target-notBefore.pem",
     "data/verify_certificate_chain_unittest/expired-target.pem",
     "data/verify_certificate_chain_unittest/expired-unconstrained-root.pem",
     "data/verify_certificate_chain_unittest/incorrect-trust-anchor.pem",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem",
     "data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem",
     "data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem",
+    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-fail.pem",
+    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-ok.pem",
+    "data/verify_certificate_chain_unittest/intermediate-sets-eku-any.pem",
     "data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem",
     "data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem",
     "data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal-anchor.pem",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal.pem",
     "data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem",
     "data/verify_certificate_chain_unittest/key-rollover-newchain.pem",
     "data/verify_certificate_chain_unittest/key-rollover-oldchain.pem",
     "data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem",
     "data/verify_certificate_chain_unittest/non-self-signed-root.pem",
     "data/verify_certificate_chain_unittest/target-and-intermediate.pem",
     "data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem",
     "data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem",
+    "data/verify_certificate_chain_unittest/target-lacks-eku.pem",
     "data/verify_certificate_chain_unittest/target-not-end-entity.pem",
+    "data/verify_certificate_chain_unittest/target-restricts-eku-fail.pem",
+    "data/verify_certificate_chain_unittest/target-sets-eku-any.pem",
     "data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem",
     "data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem",
     "data/verify_certificate_chain_unittest/target-signed-with-md5.pem",
     "data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem",
     "data/verify_certificate_chain_unittest/target-wrong-signature.pem",
     "data/verify_certificate_chain_unittest/unconstrained-non-self-signed-root.pem",
+    "data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem",
     "data/verify_certificate_chain_unittest/unconstrained-root-basic-constraints-ca-false.pem",
     "data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem",
     "data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem",
     "data/verify_certificate_chain_unittest/violates-pathlen-1-constrained-root.pem",
     "data/verify_certificate_chain_unittest/violates-pathlen-1-unconstrained-root.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-dupe_attr.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_attr.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_rdn.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-dupe_attr.pem",
@@ skipping 2342 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }