Add a key purpose parameter to Certificate PathBuilder.

net/data/verify_certificate_chain_unittest/target-lacks-eku.pem

Index: net/data/verify_certificate_chain_unittest/target-lacks-eku.pem
diff --git a/net/data/verify_certificate_chain_unittest/target-lacks-eku.pem b/net/data/verify_certificate_chain_unittest/target-lacks-eku.pem
new file mode 100644
index 0000000000000000000000000000000000000000..fd8b77486c7fc920b6a137282cf1536213a2881a
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-lacks-eku.pem
@@ -0,0 +1,285 @@
+[Created by: generate-target-lacks-eku.py]
+
+Certificate chain with 1 intermediate and a trusted root. The target has no
+Extended Key Usage extension (meaning it is unrestricted). Verification is
+expected to succeed.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:df:a4:d7:5c:5e:b2:1b:0e:ab:71:a6:54:ea:63:
+                    b9:1b:c6:f0:ba:d4:a0:22:fd:f9:31:14:98:ad:d2:
+                    79:a4:a1:75:9f:ae:82:65:21:d8:06:05:8c:91:f6:
+                    b8:6f:f2:ed:5b:a6:a7:63:64:1c:9b:13:9e:0b:42:
+                    16:01:dd:da:3e:dc:34:56:2a:c3:35:e8:79:e7:e8:
+                    30:51:d9:64:f9:5c:24:ef:57:1d:1c:2f:42:1b:29:
+                    59:d3:da:c3:b2:30:66:5e:07:b0:44:d9:60:bd:21:
+                    c8:c4:e5:45:8a:ad:3a:e4:7f:11:c8:de:30:b1:07:
+                    b8:9d:c8:d7:c1:ca:9b:40:a3:31:9e:22:be:de:87:
+                    82:2f:be:76:1b:06:aa:7a:29:e4:cb:a6:d6:a6:cb:
+                    ee:6d:a9:52:98:be:17:d8:c8:9a:bf:16:3c:ee:eb:
+                    8c:d6:e7:31:ea:43:82:f8:f1:f4:6e:5d:7e:49:38:
+                    04:cb:03:e4:b2:eb:5c:f2:c2:2b:87:ca:5c:a0:78:
+                    6b:23:a6:44:6d:c9:57:a2:1e:63:92:d5:23:44:83:
+                    61:ab:b1:7d:99:37:1e:97:eb:74:be:94:29:29:9b:
+                    d7:50:3f:13:e5:a0:d9:9d:af:8f:90:9b:c3:e0:de:
+                    17:ea:8c:8d:53:66:90:70:30:43:14:78:7d:ad:00:
+                    0c:07
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                A5:17:52:10:3A:55:F0:92:E0:FF:D3:12:F7:D2:D1:11:CD:C9:4C:FE
+            X509v3 Authority Key Identifier: 
+                keyid:D9:E3:8F:73:75:80:95:5E:3F:0E:E5:B7:A5:44:AE:0B:69:B5:29:1C
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+    Signature Algorithm: sha256WithRSAEncryption
+         16:ee:c5:75:39:a0:9b:31:db:4d:31:a5:87:c6:11:8e:c1:02:
+         c8:7d:52:ae:0c:74:d4:ab:ee:f7:55:3e:c4:49:e0:44:76:55:
+         f1:f4:fc:42:99:8c:d1:82:94:b9:8c:1b:47:1b:8f:13:b3:b3:
+         af:ae:a3:e5:0e:a4:9c:b3:b9:50:34:99:d9:f7:46:53:38:6e:
+         62:1c:11:e1:71:d0:65:c0:df:ba:6c:b6:c2:b0:ff:b0:0a:ff:
+         f7:6f:35:c8:d7:e7:a2:7f:b4:f9:5b:3c:31:b2:7c:6c:4e:6f:
+         b5:89:e2:11:91:78:73:95:f2:55:c2:fa:f1:46:75:f0:8b:e0:
+         b9:9b:ac:75:65:73:c0:e4:b3:5e:41:40:dd:73:43:76:ac:49:
+         7b:90:b3:a6:52:f6:7e:38:c7:73:e9:33:67:e6:d4:5f:6e:2e:
+         d8:5a:2b:f9:0b:80:81:4f:d9:a2:91:7f:14:1d:4a:0c:04:73:
+         a2:30:1b:56:38:75:f9:a4:00:b2:e2:b3:b6:ee:39:f4:53:1a:
+         7b:3c:17:61:79:04:60:84:4c:a5:1a:a2:4a:60:09:b4:45:0d:
+         06:d4:c9:18:ab:90:9c:0d:29:6f:ee:ae:10:66:09:e1:e1:f9:
+         5a:54:5b:19:d5:e9:d8:ce:95:58:e5:04:c1:86:d3:98:da:4d:
+         b8:03:74:59
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a7:de:a6:a8:1e:3a:20:fb:41:7d:00:fa:b0:35:
+                    67:68:49:76:d1:b5:be:69:81:44:a3:40:af:fa:de:
+                    36:1c:5e:79:28:e4:fc:27:ab:e3:2b:83:9f:46:d8:
+                    f2:1c:1b:f4:a8:21:b8:32:91:eb:a8:4a:c0:b0:d9:
+                    8c:ba:c7:d3:94:25:53:59:0f:0b:d1:42:8c:82:93:
+                    05:30:2a:b2:97:2d:ca:c1:27:70:1b:9f:b5:ee:87:
+                    aa:c8:79:8d:73:f8:38:e9:a5:c1:06:23:2e:f3:7c:
+                    c9:1c:0e:ff:83:69:0e:da:9a:6c:df:81:ed:c5:30:
+                    5e:83:22:64:ff:87:2f:72:a6:1b:80:e6:26:92:7f:
+                    78:ac:39:0d:b9:4a:e7:91:c7:1a:54:05:23:52:d1:
+                    d5:d8:0d:4b:d5:06:8a:3d:04:6a:2e:89:05:d4:81:
+                    60:09:6b:eb:75:78:dc:ee:e6:69:77:f6:73:43:6d:
+                    94:f8:fa:1e:ef:76:95:79:3f:fb:1a:bb:d3:b7:13:
+                    52:cd:4d:10:75:77:6a:68:cf:1f:cb:7c:bf:a5:79:
+                    d2:d0:a7:d2:ee:6e:ce:fe:2f:83:f2:13:aa:42:f6:
+                    b1:f3:75:14:01:c8:6b:78:40:99:b0:8e:af:a9:b6:
+                    87:71:28:68:34:2d:e6:4f:81:65:c9:b9:ff:8c:ca:
+                    cd:fb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D9:E3:8F:73:75:80:95:5E:3F:0E:E5:B7:A5:44:AE:0B:69:B5:29:1C
+            X509v3 Authority Key Identifier: 
+                keyid:0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:EE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         6a:37:12:a0:a2:5a:9d:ba:65:35:10:9b:eb:da:20:f9:49:c1:
+         e0:66:63:b7:b4:4e:2f:52:d7:b4:a6:4d:ed:d6:5a:9e:a1:e1:
+         bf:d7:00:36:98:90:82:7c:a0:17:6f:20:f5:7a:44:2f:76:5e:
+         18:5a:e9:fa:43:09:5c:0e:b3:a5:a6:28:da:20:d4:ff:12:d8:
+         96:84:4c:7e:b6:88:e4:3f:4d:06:75:2a:c5:5a:01:a0:e5:c6:
+         6c:9e:34:e9:67:de:09:03:3c:bd:ff:74:5d:bb:6c:5b:cd:27:
+         cd:b8:66:59:84:b2:40:19:7b:1b:33:96:07:47:8b:4d:7e:61:
+         55:5e:1c:11:94:cc:39:b7:12:9a:04:c6:26:1c:80:b5:fd:a3:
+         54:5e:f7:f4:cf:4d:8c:3b:7b:77:cb:6c:31:8e:b0:c2:34:30:
+         e8:f0:30:70:26:74:f3:f1:a2:80:00:7a:72:33:12:e9:03:e4:
+         96:a9:f6:b8:17:f6:5f:30:ce:c3:a9:4a:1d:2a:3a:04:71:bf:
+         b2:ee:73:38:64:15:61:90:9d:ed:f5:f0:86:75:90:59:f9:22:
+         aa:6a:ad:be:ea:97:f2:52:92:8b:82:e7:0e:7f:bd:84:89:d5:
+         db:36:97:9c:aa:43:7c:5b:9a:44:41:33:dc:b9:a4:24:15:27:
+         16:19:e3:ed
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ce:87:b7:d1:e7:fc:87:30:97:91:7e:32:d7:a1:
+                    90:b2:90:1b:66:30:55:55:9b:6f:85:98:32:59:29:
+                    0b:aa:c9:17:79:96:72:74:85:6a:36:a0:84:5d:5b:
+                    6b:f9:17:3b:90:e2:27:1f:34:ee:29:da:c4:d6:ba:
+                    7b:e2:5b:22:a4:9e:d8:71:59:07:4c:ff:8b:54:20:
+                    e1:98:12:37:a6:4d:c8:6b:7d:79:c8:fb:31:84:fb:
+                    9f:71:3a:6c:36:f6:38:32:d3:83:22:67:f0:d9:9e:
+                    33:57:12:a0:0c:c4:b6:fe:ff:17:87:94:63:ee:52:
+                    b4:5f:1e:1f:d8:2f:28:dd:64:fe:ab:29:18:6f:68:
+                    87:e9:96:75:b9:ef:1b:d3:ee:8e:96:23:fb:ef:cc:
+                    3c:30:1a:01:73:10:d9:68:2b:f8:93:62:2f:a5:e1:
+                    eb:75:3c:58:aa:10:0e:38:e1:f7:76:98:96:9f:be:
+                    22:94:fd:7f:f6:bc:59:81:6e:c9:a4:0d:0b:fc:2d:
+                    dd:75:1a:8a:fa:bc:ed:1d:f0:67:17:06:21:b4:3c:
+                    94:56:b0:cb:be:81:6b:6f:a6:81:ed:e3:5c:1c:85:
+                    ae:ec:e7:82:59:0e:85:ab:e8:44:73:34:3a:5d:41:
+                    ef:81:03:9c:f4:2b:6e:cd:d4:8e:89:aa:75:fa:5b:
+                    5c:d1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:EE
+            X509v3 Authority Key Identifier: 
+                keyid:0D:D5:B0:95:F4:FE:66:87:22:1D:15:88:95:5A:4E:62:71:AE:C7:EE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         1e:fa:dd:4d:c4:09:e1:b3:94:0d:de:e9:ad:f9:38:12:bc:38:
+         ab:0d:86:bf:4f:d1:d3:e8:61:ab:28:47:e6:b7:6b:b1:e2:ca:
+         cb:9f:cb:71:ef:cf:ab:38:19:18:af:27:9b:99:32:09:74:b4:
+         03:0e:b3:b7:f2:bb:46:ed:41:37:c5:b5:3b:2c:c5:d9:ab:65:
+         0e:fd:b9:f5:12:ee:59:d7:fc:5b:7a:9c:05:69:44:26:bf:da:
+         76:1c:94:3e:9a:a8:c6:0b:38:ff:ae:16:2f:43:fe:fb:2e:ab:
+         4e:86:97:64:0e:10:bb:02:70:37:2b:f3:4e:d6:1f:97:e1:1e:
+         67:f5:46:12:7f:8d:41:5f:1c:dc:5b:d6:ad:15:4e:5a:4e:35:
+         47:ef:12:21:18:cf:9b:91:9b:ef:8b:01:5b:57:6c:1a:11:cb:
+         42:e4:3c:ad:7d:2c:96:3b:27:92:67:04:30:0d:55:47:29:db:
+         a0:6e:03:b1:45:7b:49:d7:d6:84:46:4b:6b:e9:31:29:50:f9:
+         f7:eb:3d:71:10:c0:20:2b:12:42:4a:d5:38:83:ac:d4:40:1e:
+         35:eb:b1:08:e2:bf:45:c0:d1:e3:17:53:4a:07:81:b1:07:8d:
+         71:54:65:9f:7a:fd:6b:0c:4e:2a:a2:55:e1:8a:af:26:8b:2a:
+         9a:d3:39:f3
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6Ht9Hn/Icwl5F+Mteh
+kLKQG2YwVVWbb4WYMlkpC6rJF3mWcnSFajaghF1ba/kXO5DiJx807inaxNa6e+Jb
+IqSe2HFZB0z/i1Qg4ZgSN6ZNyGt9ecj7MYT7n3E6bDb2ODLTgyJn8NmeM1cSoAzE
+tv7/F4eUY+5StF8eH9gvKN1k/qspGG9oh+mWdbnvG9PujpYj++/MPDAaAXMQ2Wgr
++JNiL6Xh63U8WKoQDjjh93aYlp++IpT9f/a8WYFuyaQNC/wt3XUaivq87R3wZxcG
+IbQ8lFawy76Ba2+mge3jXByFruznglkOhavoRHM0Ol1B74EDnPQrbs3Ujomqdfpb
+XNECAwEAAaOByzCByDAdBgNVHQ4EFgQUDdWwlfT+ZociHRWIlVpOYnGux+4wHwYD
+VR0jBBgwFoAUDdWwlfT+ZociHRWIlVpOYnGux+4wNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAe+t1NxAnh
+s5QN3umt+TgSvDirDYa/T9HT6GGrKEfmt2ux4srLn8tx78+rOBkYryebmTIJdLQD
+DrO38rtG7UE3xbU7LMXZq2UO/bn1Eu5Z1/xbepwFaUQmv9p2HJQ+mqjGCzj/rhYv
+Q/77LqtOhpdkDhC7AnA3K/NO1h+X4R5n9UYSf41BXxzcW9atFU5aTjVH7xIhGM+b
+kZvviwFbV2waEctC5DytfSyWOyeSZwQwDVVHKdugbgOxRXtJ19aERktr6TEpUPn3
+6z1xEMAgKxJCStU4g6zUQB4167EI4r9FwNHjF1NKB4GxB41xVGWfev1rDE4qolXh
+iq8miyqa0znz
+-----END TRUST_ANCHOR_UNCONSTRAINED-----
+
+150302120000Z
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+SUCCESS
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----