Add a key purpose parameter to Certificate PathBuilder.

net/data/verify_certificate_chain_unittest/intermediate-sets-eku-any.pem

+[Created by: generate-intermediate-sets-eku-any.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+restricts the EKU to clientAuth + any, and the target has serverAuth +
+clientAuth. Verification is expected to succeed because intermediate will match
+the "any".
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:bf:dc:f6:da:98:b0:1d:bf:e7:dc:74:c1:62:
+                    c2:4f:8b:6b:b5:67:21:cd:70:22:a6:3f:8f:1a:35:
+                    34:e5:7f:1e:5f:08:2c:91:3a:12:0c:94:74:df:b6:
+                    93:e6:a3:6c:f7:a3:e0:a3:d8:6a:10:f3:18:60:c5:
+                    5f:24:2e:00:b7:d6:85:68:69:32:eb:d6:22:3d:ba:
+                    bf:d2:0e:63:86:ff:0b:c1:7e:90:48:06:a0:1b:49:
+                    92:91:a6:e7:b2:f5:cf:c1:c0:74:61:8a:33:7a:cc:
+                    54:17:82:9f:0f:d7:1f:33:75:93:dd:98:91:da:05:
+                    bb:6d:e9:7f:fc:30:80:6f:23:65:34:d0:5e:0b:46:
+                    41:a8:a3:1c:6f:9b:45:80:16:69:8f:74:71:c4:ab:
+                    8c:d7:8d:78:15:98:70:d8:62:b3:75:da:a4:20:54:
+                    dd:b1:3f:b7:08:65:63:58:72:95:ec:f6:a4:09:57:
+                    62:e6:71:da:14:b9:9a:5e:72:f9:0c:07:b2:12:ec:
+                    64:bd:42:7f:9b:1b:0c:a6:0c:d2:18:d9:78:cb:0f:
+                    20:66:46:49:2a:2e:da:80:0e:82:5f:fc:6e:d4:9c:
+                    1e:88:a5:1c:a3:8c:00:ac:41:ff:d0:69:c5:fa:db:
+                    c1:3a:7a:b9:86:6e:53:47:86:ca:36:1c:db:f4:9e:
+                    68:c9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                8D:B5:19:11:7D:E5:62:57:A0:72:4B:7A:F3:93:43:3C:50:D3:7D:7F
+            X509v3 Authority Key Identifier: 
+                keyid:89:EE:51:41:06:7A:EB:F0:CB:6F:96:5A:6C:7F:4D:6D:28:C8:0D:6B
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         4f:a4:5a:d8:8a:d2:a6:82:b0:0e:88:c6:35:1e:0b:2a:7e:ef:
+         0b:08:e8:79:64:06:d9:2a:73:cd:66:bf:d2:ba:de:9e:54:3d:
+         c0:5c:5a:eb:ed:17:ab:c7:7b:3e:65:1a:db:8c:b1:c6:64:a0:
+         be:8c:40:e5:5a:a7:1b:29:62:fd:17:c4:03:be:02:e1:4e:df:
+         0d:a0:b8:ce:24:1c:d5:79:f7:98:95:30:cf:ea:17:5a:43:41:
+         cd:41:5f:6e:95:c1:12:41:0c:0d:8f:23:ec:ca:20:48:80:06:
+         bf:f3:6b:c2:73:07:d4:73:37:75:7c:4f:6e:33:16:82:88:2d:
+         23:bf:4d:13:ef:d0:f0:4a:0a:c3:87:d7:21:97:22:2e:ea:68:
+         57:f0:44:c1:b1:ae:b3:d9:c6:75:b8:51:62:da:d8:9c:28:40:
+         7a:dc:29:e5:57:db:fd:b8:6c:52:ef:39:be:f4:dd:04:d4:a1:
+         b6:bf:c1:5f:05:79:ca:ca:00:4d:ea:b9:ec:e0:fc:c8:d7:42:
+         02:4b:66:79:d8:e6:61:12:a2:a3:d9:92:e8:31:59:65:b0:ac:
+         13:6e:ed:7f:a5:80:ac:b1:2f:70:89:49:68:df:26:7f:78:7c:
+         4c:57:cf:f6:28:5a:1e:a5:06:93:8c:fb:2a:a3:df:df:b5:5b:
+         bf:77:ca:68
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d6:ae:40:da:98:6c:b4:38:4a:32:59:c0:1c:85:
+                    f5:ce:e9:fa:fa:6e:40:0d:cd:a9:3a:ce:38:71:93:
+                    63:7b:72:52:03:7c:fb:0c:43:62:40:5b:0a:02:be:
+                    aa:c0:2d:f9:53:c0:70:47:7a:c4:dd:a6:19:91:92:
+                    b2:7a:c9:4d:f3:e7:3b:38:b3:42:49:d7:de:40:db:
+                    7f:30:9d:23:3d:29:0e:c1:f6:ec:e5:26:0e:17:30:
+                    c5:6f:35:26:60:06:d4:5d:97:13:b5:cf:87:82:de:
+                    60:99:e1:18:20:09:37:9d:89:60:f5:6d:4a:b8:8c:
+                    98:7b:04:ca:06:a4:a1:0d:05:8a:f8:c0:fc:8c:36:
+                    d3:32:87:72:8d:31:81:92:cd:4f:4e:37:8b:3c:75:
+                    cb:49:77:19:0b:67:d1:e5:9c:ef:15:d8:2d:0f:ac:
+                    7a:6e:78:d6:ca:a0:82:3f:68:b3:81:b9:31:6e:07:
+                    e3:9a:ca:c3:ff:2f:f1:a5:aa:4a:bb:23:fe:1c:45:
+                    67:5b:f0:5a:f7:b9:e7:82:bc:5b:92:1b:29:e4:ad:
+                    8d:a7:08:cf:75:58:f2:20:6d:36:44:ad:ce:4c:82:
+                    05:12:aa:36:c9:b7:d7:3c:f5:b6:36:30:31:96:f0:
+                    98:b3:62:18:ff:26:bf:52:b9:41:98:4c:60:de:2c:
+                    c6:2f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                89:EE:51:41:06:7A:EB:F0:CB:6F:96:5A:6C:7F:4D:6D:28:C8:0D:6B
+            X509v3 Authority Key Identifier: 
+                keyid:4D:26:ED:02:F7:AE:64:F5:B8:97:E6:6F:E8:05:9C:A5:11:83:04:EF
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, Any Extended Key Usage
+    Signature Algorithm: sha256WithRSAEncryption
+         47:8e:11:4f:c4:06:55:9b:87:ec:d8:f7:c7:36:4a:83:19:b8:
+         d8:e8:2e:7a:e0:af:03:94:7f:e5:83:f4:a6:f9:36:f2:e0:e5:
+         db:8f:33:17:b7:85:bd:08:2f:53:65:91:1c:6f:e6:93:1e:40:
+         2e:a7:21:b2:8a:f4:28:43:dd:6d:70:7e:d6:a3:e5:06:cb:66:
+         2a:3c:f3:67:c8:e7:c8:3e:c8:28:df:43:0c:b3:b6:2b:7f:31:
+         d2:c6:b9:81:ed:66:65:41:84:d9:40:bb:5f:74:d6:a7:e3:d4:
+         56:b1:56:75:00:71:a1:fc:0e:e9:61:09:eb:db:7a:af:93:50:
+         ae:00:c1:d5:f2:e6:05:a8:84:7c:41:cb:77:ba:f4:a8:e1:d6:
+         a7:d3:7e:51:51:19:8f:ef:8d:86:f7:26:d7:d1:76:31:4b:8d:
+         eb:46:fd:9b:d4:56:4e:a1:95:10:45:50:1e:ed:78:ea:9e:46:
+         38:21:93:95:34:28:15:9a:63:ac:73:9c:4d:6a:21:fc:ae:40:
+         e3:bc:71:38:53:40:d1:39:72:7d:22:41:87:fb:40:92:dd:22:
+         ed:0f:31:16:5a:0a:64:dc:20:b3:a7:72:09:37:15:e5:6d:57:
+         25:12:13:d7:a7:b8:67:4f:37:20:39:d8:34:d7:56:cd:8a:61:
+         a0:07:19:87
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ae:f5:d1:26:38:b0:34:63:be:98:08:7f:00:ce:
+                    e4:32:20:1b:ea:8c:f4:88:e4:93:3a:b3:f1:26:4c:
+                    b3:de:98:a0:38:ba:6c:e1:ab:a5:ea:e7:f3:a9:44:
+                    1e:78:d4:eb:d7:2f:59:bd:5c:7b:ff:f6:41:6a:23:
+                    49:6a:a9:57:02:b1:45:3a:82:61:66:9c:64:de:25:
+                    68:49:91:3e:f7:ae:d4:13:0c:c3:3a:9a:b7:9f:95:
+                    e8:44:e0:a8:cc:36:45:6c:43:c0:f8:4b:0b:f7:c6:
+                    c3:4e:e5:1a:b6:6a:21:99:c2:cd:fc:e2:73:ed:8c:
+                    45:e8:8d:e5:88:d1:14:c9:bc:cb:73:bc:83:2e:69:
+                    03:e4:fe:b2:a5:ec:bb:e7:5a:8c:1b:06:b6:15:59:
+                    15:e4:59:8b:1b:8f:5a:79:34:ae:b5:95:5b:07:ee:
+                    00:4b:4f:7b:09:e9:2f:ef:7a:05:2c:31:69:6c:41:
+                    dd:95:d0:0a:4e:9a:8f:8f:f9:a4:47:38:bb:f1:dd:
+                    e8:47:54:00:b9:3a:0b:27:33:52:9f:04:d7:36:2b:
+                    d1:d1:25:4b:9c:e5:06:8c:e9:2a:c6:1e:c3:12:4b:
+                    67:f7:96:34:7d:49:fa:bc:65:a7:fa:09:0d:24:38:
+                    08:98:9a:e8:a9:f5:29:95:ad:48:eb:ec:ae:99:7d:
+                    9c:75
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                4D:26:ED:02:F7:AE:64:F5:B8:97:E6:6F:E8:05:9C:A5:11:83:04:EF
+            X509v3 Authority Key Identifier: 
+                keyid:4D:26:ED:02:F7:AE:64:F5:B8:97:E6:6F:E8:05:9C:A5:11:83:04:EF
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         4d:8e:85:1f:d9:87:02:d0:7c:3a:f8:34:3b:f3:15:e1:ee:96:
+         6b:39:1f:c1:6e:fb:c7:c6:4e:5f:14:f4:1f:90:dd:d8:49:db:
+         8c:21:b3:61:84:01:6c:4a:96:86:64:20:b0:26:7d:b5:6c:d1:
+         f7:f7:6a:10:22:08:cb:e1:1f:af:45:78:44:d5:2d:86:55:4d:
+         17:e2:6a:04:38:c6:43:5c:0d:09:fd:85:0c:37:5f:91:f4:7c:
+         57:b5:6c:50:df:51:b8:1a:fe:06:c1:a1:d5:85:05:54:60:59:
+         fe:93:a8:99:e0:06:7a:f1:d4:c3:96:02:b5:a3:9c:11:a4:56:
+         14:98:77:6d:96:1d:5f:36:3e:2b:89:64:c1:30:6d:d3:e3:7d:
+         27:a1:c8:b4:3e:09:0e:06:dd:7a:6f:7c:bc:06:b7:91:eb:60:
+         14:4d:7b:3f:e4:ea:53:df:6b:89:0a:fc:be:3d:be:17:40:3f:
+         59:78:fa:39:ba:e3:dd:54:5e:3c:14:6c:3b:bd:72:56:7d:1a:
+         c5:64:ea:1e:04:04:78:2d:4b:de:6b:6b:e7:ae:18:0f:b5:7e:
+         e8:3f:0f:bb:7a:20:5f:cb:eb:4b:40:e0:39:03:19:13:30:e9:
+         4c:80:ae:25:99:44:69:7b:48:09:25:32:93:a4:c0:4a:ed:09:
+         ed:03:3a:ee
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----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+-----END TRUST_ANCHOR_UNCONSTRAINED-----
+
+150302120000Z
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+SUCCESS
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----