Add a key purpose parameter to Certificate PathBuilder.

net/cert/internal/verify_certificate_chain_typed_unittest.h

Index: net/cert/internal/verify_certificate_chain_typed_unittest.h
diff --git a/net/cert/internal/verify_certificate_chain_typed_unittest.h b/net/cert/internal/verify_certificate_chain_typed_unittest.h
index 1861241e574dbc271c2afdffde4919f4514b20ab..08f95ff0f0722188420770aecee29f2bf70b7fa5 100644
--- a/net/cert/internal/verify_certificate_chain_typed_unittest.h
+++ b/net/cert/internal/verify_certificate_chain_typed_unittest.h
@@ -8,6 +8,7 @@
 #include "net/cert/internal/parsed_certificate.h"
 #include "net/cert/internal/test_helpers.h"
 #include "net/cert/internal/trust_store.h"
+#include "net/cert/internal/verify_certificate_chain.h"
 #include "net/cert/pem_tokenizer.h"
 #include "net/der/input.h"
 #include "testing/gtest/include/gtest/gtest.h"
@@ -214,6 +215,31 @@ TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
   this->RunTest("constrained-non-self-signed-root.pem");
 }
 
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetLacksEku) {
+  this->RunTest("target-lacks-eku.pem");
+}
+
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetRestrictsEkuFail) {
+  this->RunTest("target-restricts-eku-fail.pem");
+}
+
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
+             IntermediateRestrictsEkuFail) {
+  this->RunTest("intermediate-restricts-eku-fail.pem");
+}
+
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediateRestrictsEkuOk) {
+  this->RunTest("intermediate-restricts-eku-ok.pem");
+}
+
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediateSetsEkuAny) {
+  this->RunTest("intermediate-sets-eku-any.pem");
+}
+
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetSetsEkuAny) {
+  this->RunTest("target-sets-eku-any.pem");
+}
+
 // TODO(eroman): Add test that invalid validity dates where the day or month
 // ordinal not in range, like "March 39, 2016" are rejected.
 
@@ -256,7 +282,13 @@ REGISTER_TYPED_TEST_CASE_P(VerifyCertificateChainSingleRootTest,
                            UnconstrainedRootBasicConstraintsCaFalse,
                            ConstrainedRootBasicConstraintsCaFalse,
                            UnconstrainedNonSelfSignedRoot,
-                           ConstrainedNonSelfSignedRoot);
+                           ConstrainedNonSelfSignedRoot,
+                           TargetLacksEku,
+                           TargetRestrictsEkuFail,
+                           IntermediateRestrictsEkuFail,
+                           IntermediateRestrictsEkuOk,
+                           IntermediateSetsEkuAny,
+                           TargetSetsEkuAny);
 
 }  // namespace net