Add a key purpose parameter to Certificate PathBuilder.

net/data/verify_certificate_chain_unittest/target-lacks-eku.pem

+[Created by: generate-target-lacks-eku.py]
+
+Certificate chain with 1 intermediate and a trusted root. The target has no
+Extended Key Usage extension (meaning it is unrestricted). Verification is
+expected to succeed.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c0:9e:a5:77:70:28:bc:8f:18:ce:a2:39:65:81:
+                    18:d9:31:0a:ee:23:09:81:cd:82:36:98:a5:82:2e:
+                    b1:fc:59:a8:46:49:06:16:60:eb:12:46:2c:85:a8:
+                    c0:75:7b:2d:45:0f:09:ba:d6:a9:fd:88:0f:d6:97:
+                    78:1e:5d:51:cc:1a:94:1e:2e:b8:82:4e:e3:0c:aa:
+                    58:1b:c6:dd:fd:d2:a3:92:6c:0a:ae:5e:ca:56:87:
+                    9a:6c:bd:89:32:99:5b:da:33:dd:7a:ed:a7:c5:e1:
+                    02:de:25:5b:17:6a:f5:15:8a:31:71:c7:c0:24:7c:
+                    55:c4:8e:cf:4c:03:fd:7f:f4:e1:90:cc:1a:5e:b5:
+                    f1:4b:2e:7a:2f:69:06:2a:86:76:33:88:ef:b2:e0:
+                    84:52:98:03:eb:98:7b:16:25:65:6a:a6:5a:fa:37:
+                    b5:a1:70:74:5e:96:87:62:78:a4:d4:05:60:97:3a:
+                    f9:4c:86:49:0d:54:db:79:8d:68:56:58:83:ee:8f:
+                    1a:da:d7:3a:06:78:6e:75:f0:a9:99:3a:22:a3:06:
+                    ee:58:a2:2b:d1:ea:4a:a7:8a:c8:bd:43:f8:b1:70:
+                    4f:fb:51:b6:22:78:cf:5c:c6:dc:80:33:3d:f5:92:
+                    6d:91:c9:1b:7e:87:37:28:76:b4:ff:7f:6d:52:9b:
+                    c7:e5
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                49:EA:B2:99:05:EC:D6:35:F4:11:A5:DD:F1:99:31:AE:C0:D8:B8:08
+            X509v3 Authority Key Identifier: 
+                keyid:7C:05:F1:0D:0B:C4:F8:8E:33:4C:F1:AE:78:6A:2C:16:AD:79:D0:A6
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         81:53:9e:26:eb:d2:fc:1c:8b:d7:28:cd:57:e4:54:ac:c6:f4:
+         ed:66:1e:a4:8d:52:6f:2d:bd:91:e1:10:b5:92:53:26:32:a2:
+         de:19:34:6b:b3:af:ab:87:71:ed:4a:5f:51:db:0d:51:b5:33:
+         b8:99:ca:c3:ac:2b:82:64:bb:44:5d:df:cb:69:04:f1:b4:08:
+         af:fa:89:c3:69:44:25:f5:fa:1e:29:77:a9:dd:db:27:18:20:
+         fa:7a:5a:33:55:e4:cc:83:05:d4:72:8c:1d:e7:34:42:4d:9c:
+         cc:7e:7c:54:35:8f:db:be:dd:36:84:01:7c:e1:e1:b0:79:ef:
+         b0:6c:9a:27:c8:f2:e5:dc:48:57:15:da:d4:31:d9:8c:f7:38:
+         03:40:85:8f:23:06:87:2b:ee:45:8f:24:52:15:0c:89:d2:80:
+         74:5c:9f:58:d9:68:b4:10:fe:56:78:19:4d:a6:8e:56:46:35:
+         65:1f:29:2e:29:7b:9b:24:83:7a:e9:e9:7e:02:4c:4a:40:56:
+         77:2c:ed:dd:d2:ae:0c:9d:9c:b2:5b:88:b5:8a:df:ac:55:b0:
+         ad:e1:cf:63:8d:65:c7:bd:2b:15:dd:34:35:29:cb:9e:2d:00:
+         92:55:eb:d9:71:6d:29:82:8e:be:3f:93:cf:b5:de:43:4f:c0:
+         7d:94:96:29
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:96:3d:06:43:c1:e6:7e:de:e8:e7:d0:e0:3e:d5:
+                    a8:1f:08:fe:98:ef:b9:a3:3d:0f:14:a5:3e:85:27:
+                    6a:a2:aa:8c:3b:f6:21:43:12:2d:c8:9c:b3:cf:a8:
+                    ee:4f:8c:b7:3f:7f:49:49:a3:dc:17:3b:4b:28:2a:
+                    93:ae:e1:df:7e:22:b2:1d:9c:5f:43:59:a5:4e:55:
+                    dd:db:55:46:55:83:6d:48:76:ef:3f:77:24:58:d3:
+                    7b:78:28:05:7c:66:7c:79:90:99:61:b6:cc:2d:b6:
+                    ef:36:ca:11:3b:b5:65:c8:73:91:b0:10:12:17:a3:
+                    e1:1c:ea:c7:dc:9c:b3:66:3d:ec:bb:a3:3e:99:e0:
+                    04:98:4d:9c:b5:62:ad:16:71:22:00:68:ef:e6:42:
+                    f6:05:28:4d:88:16:05:51:82:f6:d8:83:91:0c:13:
+                    4c:3c:6e:d6:22:2a:52:da:37:56:a9:24:18:ba:8f:
+                    2e:65:d9:3a:4b:e0:a3:69:94:3b:16:5e:4a:cc:a8:
+                    6e:32:6d:f8:74:15:32:c8:9f:af:06:11:81:db:9a:
+                    65:cf:01:05:2f:65:4b:71:4e:92:1c:06:51:7f:29:
+                    57:e9:24:9f:89:f9:80:63:25:97:90:42:56:f8:e1:
+                    26:61:b2:48:b3:20:9b:9a:9b:34:4e:2f:03:06:a7:
+                    dc:11
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                7C:05:F1:0D:0B:C4:F8:8E:33:4C:F1:AE:78:6A:2C:16:AD:79:D0:A6
+            X509v3 Authority Key Identifier: 
+                keyid:F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         67:35:59:8e:50:f3:67:61:84:47:e2:66:a4:1a:96:63:91:79:
+         f6:80:f7:23:ea:2c:de:22:ca:1f:4a:4b:a9:c2:80:54:8d:d9:
+         e0:bf:c7:e6:38:cf:66:b5:8a:a9:7c:25:bf:39:f5:16:1f:de:
+         4d:52:01:67:69:7a:e6:92:a0:98:20:e6:be:bc:f8:a5:8d:46:
+         02:a8:6b:13:69:97:ee:ac:46:a4:36:cc:b2:9c:af:2a:0b:18:
+         87:48:22:a9:d7:87:5d:5f:50:35:e0:ab:3d:1f:2f:88:56:58:
+         e0:7b:3c:38:21:72:23:dc:6c:e7:c9:83:59:e1:c9:a7:44:bf:
+         40:3e:3b:00:a5:8a:44:d2:ee:66:37:f9:b4:a0:18:bf:39:9f:
+         76:3e:4c:cd:95:02:c7:44:f6:21:f0:42:15:8a:0b:0d:0f:94:
+         87:e2:d9:47:d4:33:0e:a3:fe:b4:a2:92:19:9d:8e:52:3c:aa:
+         d3:0f:6c:1b:2c:af:7f:c4:16:6f:13:b7:53:ee:dd:e4:1b:06:
+         f0:c9:8b:44:1e:cc:9c:85:d9:d7:b8:59:7a:31:71:46:dc:48:
+         4d:bf:6b:37:fb:a0:89:f0:96:b3:96:07:f6:62:a5:90:75:32:
+         0e:39:31:f0:9f:53:a7:01:0b:07:62:ba:6f:7b:93:4d:57:9a:
+         b5:2d:22:ff
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cd:e5:09:a9:89:90:93:c8:33:6e:5b:db:e8:8e:
+                    12:b1:4a:dd:a2:3a:60:ad:e7:26:98:bc:5f:63:12:
+                    8d:39:97:38:53:96:ef:65:d9:43:06:fb:e7:1f:8d:
+                    ac:32:87:84:ae:50:cc:8f:48:fa:b2:e2:7e:58:32:
+                    2c:78:a0:c6:82:41:3c:4d:a1:01:43:0f:c4:a7:9d:
+                    5d:24:16:39:b4:13:7b:09:b1:dc:3f:e5:ac:3b:d7:
+                    53:b6:59:52:80:87:b2:12:65:6c:9c:fe:24:92:88:
+                    ca:5a:ec:e4:04:81:a4:88:b2:3f:39:e1:4d:6b:91:
+                    db:17:76:c3:0e:67:a4:5d:c8:e4:76:16:44:f7:76:
+                    ae:db:63:7f:37:70:d0:e5:fc:df:08:0f:2e:f9:08:
+                    72:f6:65:4f:af:15:97:a3:4c:03:f9:8f:5f:69:f8:
+                    97:d8:dd:fe:e7:2c:1d:a3:d8:53:46:df:5c:c5:8e:
+                    d8:38:41:ce:d7:ea:7f:f1:3b:0c:dd:13:dd:e7:2f:
+                    44:24:aa:25:e3:eb:a1:8e:43:b1:5b:e3:b8:ad:aa:
+                    1e:49:f0:77:40:64:ef:90:ad:72:a4:a0:d3:95:69:
+                    96:4b:6d:08:34:97:cc:5e:5c:a5:08:c9:fa:66:60:
+                    ec:f9:aa:86:d8:bc:21:b7:78:bf:f2:28:01:41:3d:
+                    a4:9d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE
+            X509v3 Authority Key Identifier: 
+                keyid:F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         7d:7d:1b:68:17:cb:34:c5:15:3a:84:51:3b:d5:d2:66:a5:08:
+         0d:66:b0:a3:14:7a:28:4f:88:44:1e:a0:0a:db:77:c9:f0:72:
+         c2:63:2c:2c:75:1a:64:dc:ca:f8:93:38:8f:86:17:40:d1:1f:
+         99:97:91:6b:1d:e2:c6:60:21:bb:5c:46:d3:be:e2:22:4d:f8:
+         87:24:78:c0:94:70:98:dc:c2:8d:c0:1b:4c:65:c4:6b:89:c2:
+         bc:da:8f:39:91:b3:74:78:75:ca:cf:21:82:5e:6b:ae:97:30:
+         26:47:fb:33:32:19:ec:88:4f:24:28:cb:d0:22:de:21:cd:f4:
+         cd:11:53:ce:ca:0f:55:a0:a5:74:a6:59:7e:e0:9d:b6:79:26:
+         a1:3a:48:2b:de:56:af:b8:62:be:24:10:be:c3:fa:f3:c5:9f:
+         7f:1e:a7:fe:99:5d:aa:30:0f:f6:61:29:1d:a1:8f:9e:97:4f:
+         f7:92:a2:ab:a3:1d:76:5a:f1:c7:de:b7:b9:da:61:69:69:4e:
+         f4:5a:69:b2:0f:5e:6b:4a:4a:52:68:08:bf:ef:61:9b:06:3e:
+         93:82:cd:af:30:f1:d9:c6:d7:cf:a6:0b:b4:76:a1:72:48:de:
+         f9:6c:8a:28:58:56:10:ed:d9:67:cf:a0:77:9c:e6:2d:ba:36:
+         31:ef:5c:a8
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----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+-----END TRUST_ANCHOR_UNCONSTRAINED-----
+
+150302120000Z
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+SUCCESS
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----