Add a key purpose parameter to Certificate PathBuilder.

net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem

+[Created by: generate-target-sets-eku-any.py]
+
+Certificate chain with 1 intermediate and a trusted root. The target
+restricts EKU to clientAuth+any and requests serverAuth during verification.
+This should succeed.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c4:15:f5:ba:65:cf:01:b2:f0:6d:a4:e2:c9:43:
+                    7f:47:6f:66:53:a8:88:79:6f:2d:1b:4b:57:80:d2:
+                    3f:39:a1:69:f5:80:56:e3:f3:97:5d:e4:5e:4e:be:
+                    1e:1c:53:3d:cc:e3:ba:ad:e8:26:9c:c9:c7:38:99:
+                    c1:3a:8f:4c:d0:ba:38:f8:29:72:ff:8b:7b:31:be:
+                    7f:58:6f:1e:1b:35:49:ba:6f:ba:46:d3:42:3c:e8:
+                    9f:a3:b6:7a:82:c5:d2:23:23:74:4e:a1:fc:01:c4:
+                    50:42:ab:0b:16:c8:02:68:69:31:36:73:60:b6:c1:
+                    48:94:3a:31:b2:d6:02:46:44:ad:4c:85:05:b3:4c:
+                    4b:6d:43:f5:09:af:51:a3:2a:b7:d3:8d:da:7d:b4:
+                    c8:bc:72:9a:af:95:ff:bb:bb:18:b6:d1:be:57:4c:
+                    06:83:c7:8c:dc:87:3f:b0:54:51:e1:82:01:bc:0b:
+                    a8:1e:c8:a5:b7:be:10:f3:bf:c1:1c:18:1b:ce:0a:
+                    86:4a:59:ca:93:d5:c3:f3:ba:71:52:2b:ab:8d:a8:
+                    98:13:d9:3a:f5:8f:4f:3f:b6:33:b4:0a:90:f6:fe:
+                    be:f1:ac:c0:7d:11:80:80:be:d7:b7:27:69:72:4a:
+                    40:65:e8:76:8c:51:82:37:2b:fb:b0:5e:71:98:09:
+                    5e:5d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                DC:17:6A:AB:F7:C4:03:6A:3A:D3:2A:7B:42:B3:83:31:EC:F2:14:C1
+            X509v3 Authority Key Identifier: 
+                keyid:3D:1E:BE:E7:85:A0:B5:09:FE:2C:60:FB:8E:B6:B8:18:E7:FB:12:55
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, Any Extended Key Usage
+    Signature Algorithm: sha256WithRSAEncryption
+         59:0e:23:07:02:df:e6:52:02:8e:e4:1a:b7:5f:1e:55:19:8e:
+         1d:d2:ab:08:2c:de:e3:05:15:4a:32:d3:b4:f0:b7:62:20:61:
+         89:6e:cf:61:f0:4c:84:8c:14:fa:7f:91:83:8c:f3:eb:f6:66:
+         bc:ed:c7:1f:7e:0d:1d:ae:15:f8:b4:9d:6a:9e:0c:40:3f:76:
+         7e:4f:67:76:2b:92:60:7e:fb:e6:31:f4:c1:e6:60:ec:c4:5b:
+         82:f3:9a:5a:41:46:bb:e5:98:62:3a:3b:f4:3c:f5:cc:70:e6:
+         80:c0:19:84:be:01:73:44:bb:7f:5c:c5:43:0b:3a:c9:56:ab:
+         34:59:ae:be:42:0d:54:7c:6d:e9:13:07:1e:f0:36:61:14:a1:
+         19:c9:d2:d1:32:07:17:e7:8f:c7:42:fa:66:1b:9a:1a:e9:1c:
+         89:fa:3b:f9:4f:11:20:2b:de:36:a3:a2:73:63:88:f6:31:68:
+         8b:f6:d1:c1:fa:4a:f9:d9:46:b0:be:7a:20:0d:1f:a6:38:a4:
+         9c:17:f4:49:3f:f3:61:c2:70:b9:f6:16:7a:f6:23:e7:31:b8:
+         50:3b:11:28:54:19:d0:be:69:06:79:26:5a:62:14:27:4c:58:
+         e5:18:47:d0:d4:34:6f:99:eb:cf:c4:ba:20:44:ca:5e:cf:3f:
+         48:cd:80:46
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b6:dd:15:62:8f:88:17:e1:a9:cb:74:0c:fd:e9:
+                    9d:94:50:36:32:2f:01:2f:df:18:5f:a6:2b:3e:b3:
+                    c4:c3:44:50:d1:9b:0c:1d:32:31:3b:86:ce:82:81:
+                    00:2d:54:17:51:ea:2f:ec:19:71:ab:00:d5:0b:9b:
+                    7f:d6:cf:2b:5e:cc:14:f7:3e:a7:2b:c4:38:22:90:
+                    26:7f:4b:7f:48:d8:32:98:52:b1:60:52:e6:5a:90:
+                    a9:e1:e3:f4:d2:b5:68:96:fc:7b:29:34:1b:f8:26:
+                    b1:bb:51:2d:f4:c9:38:56:66:ad:fe:ad:10:38:24:
+                    1b:aa:98:dc:62:fe:00:7d:18:6a:c4:c5:2e:1e:9b:
+                    77:5d:19:e1:ad:fa:c0:17:1e:18:40:51:d7:53:3e:
+                    2f:3f:5e:ff:be:58:b7:dd:5b:4f:b0:01:3b:7a:80:
+                    76:23:e8:4a:0e:2c:a8:a8:49:1a:d7:cf:84:f4:67:
+                    00:7a:ec:12:30:b0:77:a9:4d:2a:9f:9c:f5:fe:10:
+                    d0:49:6d:5c:1d:44:33:05:fc:d1:fb:f3:91:07:55:
+                    be:89:4e:6b:af:4f:86:34:27:e6:a3:ab:ae:04:9b:
+                    b1:df:fe:a5:5c:64:76:d3:ff:2c:bc:09:c4:8f:4d:
+                    77:f9:48:43:14:99:31:8d:f0:6b:dd:4d:cb:42:a4:
+                    d3:f7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                3D:1E:BE:E7:85:A0:B5:09:FE:2C:60:FB:8E:B6:B8:18:E7:FB:12:55
+            X509v3 Authority Key Identifier: 
+                keyid:B3:1E:99:01:90:6B:7B:59:63:DD:5D:17:6E:52:DE:41:1B:CF:00:15
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         9c:4c:33:7a:da:e5:5f:05:0b:56:86:c4:8c:b5:a8:63:26:3d:
+         c7:16:56:43:19:fa:60:47:72:fa:e7:6b:f8:2d:00:25:c3:d3:
+         c2:63:b6:a3:c5:94:df:cf:ab:b4:fe:c2:25:05:8e:51:82:61:
+         ef:11:1f:c2:0a:92:4b:06:e1:de:4c:1a:e0:11:1b:fe:5d:2e:
+         15:45:9a:4e:d6:19:a5:1d:f8:8b:31:5e:ba:b4:77:62:90:71:
+         fc:4f:91:e3:4f:96:10:d9:fc:b7:0f:48:d6:1e:60:1d:3c:b0:
+         02:1b:69:f4:8a:21:0c:a3:a0:b1:b8:a9:5a:d8:5e:dd:e6:3e:
+         a5:b6:a5:96:29:a5:12:38:ed:c8:ce:e6:89:6b:a2:ba:ad:1b:
+         e3:02:e8:75:84:8b:80:f8:d9:c9:43:54:16:5f:cf:d6:dd:37:
+         31:ac:40:5b:d6:41:72:bf:af:c5:c4:67:f2:e0:20:ca:77:12:
+         2c:bf:36:e2:50:d0:bc:47:c8:ff:03:9f:e4:06:49:d4:a3:5d:
+         0c:3c:b0:c5:c2:d1:69:07:d8:59:b2:93:4b:d4:e6:2c:84:3c:
+         1a:f9:15:a7:b3:95:f3:fb:72:e7:72:9f:57:da:9b:c9:63:2d:
+         c6:7a:65:69:fa:53:4c:d9:e8:7f:9c:27:e4:bb:fd:36:68:c0:
+         e9:0b:66:f8
+-----BEGIN CERTIFICATE-----
+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt0VYo+I
+F+Gpy3QM/emdlFA2Mi8BL98YX6YrPrPEw0RQ0ZsMHTIxO4bOgoEALVQXUeov7Blx
+qwDVC5t/1s8rXswU9z6nK8Q4IpAmf0t/SNgymFKxYFLmWpCp4eP00rVolvx7KTQb
++Caxu1Et9Mk4Vmat/q0QOCQbqpjcYv4AfRhqxMUuHpt3XRnhrfrAFx4YQFHXUz4v
+P17/vli33VtPsAE7eoB2I+hKDiyoqEka18+E9GcAeuwSMLB3qU0qn5z1/hDQSW1c
+HUQzBfzR+/ORB1W+iU5rr0+GNCfmo6uuBJux3/6lXGR20/8svAnEj013+UhDFJkx
+jfBr3U3LQqTT9wIDAQABo4HLMIHIMB0GA1UdDgQWBBQ9Hr7nhaC1Cf4sYPuOtrgY
+5/sSVTAfBgNVHSMEGDAWgBSzHpkBkGt7WWPdXRduUt5BG88AFTA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
+AJxMM3ra5V8FC1aGxIy1qGMmPccWVkMZ+mBHcvrna/gtACXD08JjtqPFlN/Pq7T+
+wiUFjlGCYe8RH8IKkksG4d5MGuARG/5dLhVFmk7WGaUd+IsxXrq0d2KQcfxPkeNP
+lhDZ/LcPSNYeYB08sAIbafSKIQyjoLG4qVrYXt3mPqW2pZYppRI47cjO5olrorqt
+G+MC6HWEi4D42clDVBZfz9bdNzGsQFvWQXK/r8XEZ/LgIMp3Eiy/NuJQ0LxHyP8D
+n+QGSdSjXQw8sMXC0WkH2Fmyk0vU5iyEPBr5FaezlfP7cudyn1fam8ljLcZ6ZWn6
+U0zZ6H+cJ+S7/TZowOkLZvg=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b2:1e:4d:8a:65:3b:d8:0a:ed:c1:e0:b2:46:a1:
+                    9a:cc:10:08:9f:3d:98:44:e8:c5:e1:37:1e:83:76:
+                    8d:06:b6:cc:ab:97:5f:82:f5:a1:78:f0:5e:51:cd:
+                    c6:63:50:58:f5:39:5e:4f:45:ff:bc:cb:ae:76:ce:
+                    d1:90:05:c1:ff:32:09:a8:68:b7:be:d4:fc:9c:1c:
+                    8a:d3:6c:6a:80:17:56:52:1f:ea:a0:ef:b6:98:f2:
+                    55:24:3d:b5:c0:58:10:98:63:9a:ee:ab:3c:a4:f1:
+                    1d:d9:08:b9:33:69:63:a3:67:c0:b9:c7:11:bb:30:
+                    5b:95:30:b6:65:b3:0c:4d:ed:27:af:ee:44:59:ab:
+                    57:43:29:fb:a6:85:ed:74:86:b0:9c:ec:8c:7b:ae:
+                    12:bb:3b:9f:c7:ec:e7:2e:b2:bc:2f:60:92:45:0e:
+                    0b:d0:84:2a:cf:8a:6a:b6:4f:ec:c3:3c:1e:36:36:
+                    5a:cb:67:ce:dc:5c:8f:49:b1:2b:0f:60:55:e5:50:
+                    a5:02:05:90:31:8a:8d:a4:6f:36:ff:5a:1f:bd:a3:
+                    0f:17:8c:b4:bb:6e:ca:2f:fa:5e:48:e2:9a:15:51:
+                    95:9f:a3:de:48:7d:24:3a:dd:b2:dd:0b:46:e4:19:
+                    c3:de:6b:8d:6c:44:b0:b1:79:ea:df:06:96:50:33:
+                    67:9d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B3:1E:99:01:90:6B:7B:59:63:DD:5D:17:6E:52:DE:41:1B:CF:00:15
+            X509v3 Authority Key Identifier: 
+                keyid:B3:1E:99:01:90:6B:7B:59:63:DD:5D:17:6E:52:DE:41:1B:CF:00:15
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         a2:de:fc:71:26:8f:b9:67:65:74:c8:24:89:8d:2c:fb:a4:b1:
+         64:0d:90:9b:04:c0:a1:90:d9:1d:f9:de:32:6b:14:10:76:84:
+         74:ba:b5:33:cf:17:c1:e4:36:8c:08:4d:bf:42:05:d9:06:18:
+         dd:04:4a:85:50:d3:76:69:54:72:d9:a0:21:29:9a:da:5d:4b:
+         e6:52:06:a1:fb:56:72:56:c1:05:4d:75:b2:6b:b4:d0:b6:cf:
+         03:44:e5:81:b8:be:d4:24:b5:07:b3:d1:74:b6:b0:9e:52:c4:
+         64:87:13:35:f4:fb:e3:88:d0:07:4f:05:54:7a:6d:f0:0e:d8:
+         e9:72:c8:4e:a6:35:f8:73:96:a8:74:74:7b:b8:81:88:5d:bd:
+         ef:60:24:53:70:42:82:1c:5b:81:0b:70:9d:47:94:61:07:7e:
+         06:30:d3:b7:8f:12:43:6e:46:56:d0:d9:3e:dd:a4:6e:f3:1e:
+         eb:8c:04:8a:d9:87:75:90:16:00:67:73:44:c2:8e:c8:a5:ab:
+         37:f0:78:9f:d2:a3:2c:9d:5e:e2:a2:ca:8b:8e:d3:9b:54:27:
+         70:d6:7f:c5:2b:41:65:dc:eb:30:1a:c6:d5:3e:7d:c5:21:22:
+         85:2f:94:02:44:d8:92:38:90:35:91:17:2b:7e:eb:ea:bf:35:
+         93:75:fb:f9
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----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+-----END TRUST_ANCHOR_UNCONSTRAINED-----
+
+150302120000Z
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+SUCCESS
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----