Add a key purpose parameter to Certificate PathBuilder.

net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem

Index: net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem
diff --git a/net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem b/net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem
new file mode 100644
index 0000000000000000000000000000000000000000..5c47ad5f4805340ad32efb401eca2b516cac3339
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem
@@ -0,0 +1,291 @@
+[Created by: generate-unconstrained-root-bad-eku.py]
+
+Certificate chain with 1 intermediate and a trust anchor. The trust anchor
+has an EKU that restricts it to clientAuth. Verification is expected to fail as
+the end-entity is verified for serverAuth, and the trust anchor enforces
+constraints.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c0:64:a7:01:b2:83:6c:47:bc:2d:30:01:f9:43:
+                    8c:fc:cc:6b:7c:a4:c7:1c:78:fa:a8:8c:be:1e:9a:
+                    72:d0:34:1a:56:80:67:67:76:48:8a:9f:c5:3a:68:
+                    9e:53:c2:35:ce:69:7e:4f:d5:c4:fb:0b:91:3c:af:
+                    00:26:f4:bf:77:ca:cd:ec:87:f9:6e:05:9b:0c:93:
+                    1b:f2:6e:c8:10:32:4e:7b:51:1c:22:77:4c:b8:a3:
+                    bd:d6:dc:95:29:9b:4b:b5:d9:ce:ae:91:d8:05:c5:
+                    c5:bf:4a:9c:b7:94:db:d5:a5:e6:b1:44:e1:02:4a:
+                    1a:dc:21:e5:e6:a6:ba:54:2e:2c:3f:40:f5:fd:5c:
+                    79:dd:55:6d:9e:e2:ab:db:3c:67:b4:84:db:ba:86:
+                    fd:a0:b5:d8:8b:d0:b8:bc:8b:77:e9:32:31:51:68:
+                    ee:18:17:09:e2:f1:27:79:ca:3c:72:a8:f3:96:25:
+                    31:24:3a:05:53:d4:89:0a:48:7a:9c:2d:6d:6a:84:
+                    97:df:34:c9:22:7f:d5:05:f2:2c:91:e9:c4:7f:ab:
+                    d0:ae:76:22:64:ae:be:e2:7f:97:08:ec:86:8a:92:
+                    bf:57:f0:22:f7:91:ff:86:17:62:92:e3:80:8b:19:
+                    84:14:60:19:00:91:d6:fe:51:96:77:5b:22:0d:32:
+                    50:07
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                E8:27:22:F1:C3:94:E3:48:C4:4C:45:0D:D6:4E:1C:6E:CF:9D:1B:1B
+            X509v3 Authority Key Identifier: 
+                keyid:8F:7C:F8:3A:27:33:C2:AB:96:9E:BD:0F:68:E0:C9:58:BB:0B:7C:F2
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         2f:90:79:f0:49:4b:78:96:64:2e:4b:6b:b7:4c:09:60:c8:33:
+         24:24:f9:7e:e0:f8:2c:e7:ba:b9:41:93:97:c6:1f:ab:fa:95:
+         79:9e:23:64:6f:0a:26:d8:91:78:30:13:b3:ae:40:27:19:6e:
+         b6:49:a4:08:27:fa:0f:c8:cb:b9:9d:34:56:d6:d9:80:fc:df:
+         24:2d:e5:0f:b3:4e:22:c4:f3:da:90:4a:fb:e9:b3:37:c1:8f:
+         d1:2b:18:d4:9b:f1:0d:10:e5:98:9c:0b:4d:0a:90:92:4f:50:
+         39:87:be:52:79:39:db:c1:aa:bc:df:a8:33:66:87:cb:4f:91:
+         d8:00:21:8d:84:7b:ba:b4:d9:fa:6a:b5:06:33:cc:ef:5a:31:
+         c3:4f:c7:49:f7:59:05:b7:c4:76:58:f6:78:8c:bb:4e:95:5d:
+         a0:b7:da:e3:74:6d:4b:0f:c5:f1:c0:fd:e4:d4:68:3e:18:80:
+         2a:f1:82:6b:c8:d7:b5:70:85:4a:1e:71:ed:d2:69:7e:57:ff:
+         19:41:b5:64:aa:57:9d:08:0f:b2:74:90:d6:15:fd:9e:f0:06:
+         55:91:e9:f8:87:a1:85:9e:1f:dc:9f:33:52:c6:aa:16:a2:12:
+         b5:87:b3:9f:5c:52:f7:45:54:11:41:f0:64:1d:43:0e:9b:17:
+         00:4a:ea:21
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a8:e7:5f:fa:d0:9d:f1:e1:e4:87:7f:62:7e:1c:
+                    89:02:66:64:9e:d5:a0:81:f3:65:68:d7:8d:02:37:
+                    99:da:e8:85:00:51:b4:69:e9:57:29:09:51:c2:78:
+                    c8:ee:bb:87:62:4a:a8:46:c3:d4:06:e5:f0:c2:33:
+                    68:13:f7:55:c5:44:42:14:1e:d7:65:a4:a1:b6:67:
+                    38:e0:c2:72:65:ee:ad:f5:94:34:93:4f:e9:d8:a5:
+                    93:98:05:34:e5:f6:0f:3b:71:84:39:71:9b:b6:10:
+                    47:37:ef:87:d2:98:29:a4:f1:18:e7:f4:3b:52:af:
+                    34:b1:39:34:9a:49:b4:7a:ed:21:2c:60:b2:01:e8:
+                    cb:b6:ad:f8:00:95:85:a9:87:91:90:05:54:0b:2e:
+                    9d:4c:79:c4:c8:6d:72:ab:23:5b:d0:2b:90:3c:5b:
+                    53:ed:da:56:39:38:37:45:43:17:3d:81:d5:49:97:
+                    23:88:83:9f:bf:86:8d:52:af:3d:86:45:f1:1e:e8:
+                    dd:8f:4f:fe:da:b5:35:cb:e0:02:ba:8e:6b:61:4a:
+                    f2:c6:5d:d7:02:95:71:23:9e:7b:99:96:cf:ac:df:
+                    20:2a:2d:fe:0c:42:72:c6:b8:c3:81:81:3e:a0:8d:
+                    62:41:17:14:f5:24:67:f1:6c:af:c6:0c:94:09:fb:
+                    56:07
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                8F:7C:F8:3A:27:33:C2:AB:96:9E:BD:0F:68:E0:C9:58:BB:0B:7C:F2
+            X509v3 Authority Key Identifier: 
+                keyid:91:69:0D:94:34:B5:BA:AF:F1:DD:99:22:88:15:2B:83:B1:37:B2:54
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         ad:25:a4:2d:f2:86:a4:d2:af:47:2c:0f:9d:8f:8b:a8:39:c1:
+         3f:32:d3:62:dc:02:69:1e:2d:ce:43:63:0f:78:19:73:da:49:
+         13:9e:32:e8:5f:61:cd:02:64:1b:b5:3c:c9:00:8d:26:ef:d2:
+         90:db:61:a9:19:59:70:e6:70:0b:d9:2b:ee:8f:00:3c:1b:50:
+         ce:07:35:3c:49:af:74:6a:36:24:1a:6c:4b:56:99:9c:ac:88:
+         79:a0:a7:56:87:35:66:c2:22:1d:79:19:a0:d8:f3:27:25:a3:
+         92:c8:49:ce:3f:06:a1:49:02:9b:09:d4:9a:1c:c7:b5:19:26:
+         31:95:6c:c4:7e:c3:fb:54:0e:62:8e:d4:13:bd:47:8e:64:be:
+         20:c5:f8:4d:c0:51:3b:2d:ca:e6:0e:b6:4e:26:38:91:aa:87:
+         5f:c9:41:2f:93:45:b8:5c:71:47:06:6f:6e:d6:ac:dd:84:b3:
+         cc:4d:c8:8d:dd:dd:41:7e:d8:24:a7:d4:48:74:4a:fe:d1:61:
+         2d:8b:9b:ad:08:40:78:cb:13:9d:67:25:9a:d8:c7:46:a2:71:
+         a0:81:b5:8f:67:f5:04:84:c3:8f:0f:6b:33:8a:2b:21:a3:1c:
+         5a:f4:5d:66:21:50:9d:a4:51:2a:2a:e9:39:c8:44:2c:f3:1f:
+         52:02:b4:0a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:af:9d:d7:d1:a5:91:6e:5d:17:d4:89:85:95:b8:
+                    cf:e3:e3:fb:94:dd:cc:c0:99:59:24:ac:c0:4d:cc:
+                    4b:37:88:38:3c:a1:60:06:96:8d:1b:6b:e7:2b:b8:
+                    71:9e:54:4b:cd:c4:4d:93:b6:3b:3f:7a:a2:c6:3b:
+                    ea:9f:36:8d:e5:b0:0f:9e:27:58:7c:f8:fb:6f:e8:
+                    ae:0c:bb:69:02:60:21:d1:bd:dc:e1:33:23:8d:c5:
+                    5f:dc:ff:33:71:95:98:77:07:69:c0:71:2a:bf:62:
+                    eb:b6:e5:cc:2e:3a:98:1c:7b:a4:a7:cb:ba:e5:ab:
+                    22:32:fb:d5:03:1a:03:b7:d1:9f:d9:56:69:ae:b1:
+                    51:e7:8d:06:ca:2a:f9:25:43:af:92:a1:f7:40:60:
+                    85:5a:33:67:2a:62:ad:6e:4a:9a:02:1b:c4:e3:89:
+                    38:d3:06:eb:a3:8c:ce:a8:c8:49:5a:4e:08:b2:7e:
+                    00:16:92:60:4b:ff:77:2d:53:e7:2c:f3:2c:51:b3:
+                    16:87:67:28:43:10:d3:6c:d6:c2:96:97:a3:c8:8e:
+                    0b:ae:f1:56:13:bb:1b:ca:7f:2d:59:cc:37:fc:47:
+                    9d:f7:c9:0a:66:19:87:3d:13:66:50:0b:52:0d:13:
+                    33:6c:0b:fc:fb:88:cf:34:7b:9f:6f:6e:7e:36:ac:
+                    ec:39
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                91:69:0D:94:34:B5:BA:AF:F1:DD:99:22:88:15:2B:83:B1:37:B2:54
+            X509v3 Authority Key Identifier: 
+                keyid:91:69:0D:94:34:B5:BA:AF:F1:DD:99:22:88:15:2B:83:B1:37:B2:54
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         99:8a:58:6e:00:02:f6:8e:69:28:b4:58:15:27:8e:10:aa:46:
+         74:32:17:23:b4:06:c5:c6:71:8e:2a:f7:9d:03:97:9a:82:93:
+         a3:a0:f2:39:ee:2c:e8:ed:d6:d2:d5:bd:b0:87:c1:94:e8:66:
+         2d:01:af:9f:9b:90:88:66:3d:19:be:c8:ad:5b:53:7a:01:f1:
+         db:7e:3a:d3:aa:af:16:cc:fb:eb:b0:45:c0:2d:ab:b3:1b:65:
+         d4:94:b6:71:5d:84:3b:0a:81:07:00:14:c5:e9:b9:3e:db:6d:
+         cf:b0:5f:46:73:51:8c:5f:3f:44:45:26:28:b6:1b:53:eb:c3:
+         0b:52:58:71:21:0d:e3:7c:60:cb:86:10:64:96:ca:e4:02:b3:
+         7a:94:57:c8:1e:d5:df:b6:64:06:8b:42:3e:3c:e4:44:09:2e:
+         fe:bc:cd:60:f6:f8:e0:d5:93:d1:8d:36:8f:31:11:53:25:8e:
+         0d:e5:52:4b:b6:05:35:ee:7f:a4:a1:d5:75:26:79:de:e0:71:
+         19:13:b6:45:e7:b5:e3:66:e8:6a:35:51:b9:88:56:0b:b6:d9:
+         b7:8b:38:13:3a:ca:52:b8:02:4f:01:5c:52:aa:d0:f5:c2:1c:
+         bf:ed:60:12:30:fa:c8:ce:86:91:8a:c2:eb:30:88:53:15:e8:
+         7f:14:93:1a
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----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+-----END TRUST_ANCHOR_UNCONSTRAINED-----
+
+150302120000Z
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+SUCCESS
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----