Add parsing for RFC 5280's InhibitAnyPolicy.

net/cert/internal/certificate_policies.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <algorithm>
 
 #include "net/cert/internal/certificate_policies.h"
 
 #include "net/der/input.h"
 #include "net/der/parse_values.h"
@@ skipping 68 matching lines @@
   //
   // id-ce-certificatePolicies OBJECT IDENTIFIER ::=  { id-ce 32 }
   //
   // anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 }
   //
   // In dotted decimal form: 2.5.29.32.0
   static const uint8_t any_policy[] = {0x55, 0x1D, 0x20, 0x00};
   return der::Input(any_policy);
 }
 
+der::Input InhibitAnyPolicyOid() {
+  // From RFC 5280:
+  //
+  //     id-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::=  { id-ce 54 }
+  //
+  // In dotted notation: 2.5.29.54
+  static const uint8_t oid[] = {0x55, 0x1d, 0x36};
+  return der::Input(oid);
+}
+
 // RFC 5280 section 4.2.1.4.  Certificate Policies:
 //
 // certificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation
 //
 // PolicyInformation ::= SEQUENCE {
 //      policyIdentifier   CertPolicyId,
 //      policyQualifiers   SEQUENCE SIZE (1..MAX) OF
 //                              PolicyQualifierInfo OPTIONAL }
 //
 // CertPolicyId ::= OBJECT IDENTIFIER
@@ skipping 133 matching lines @@
     out->inhibit_policy_mapping = 0;
   }
 
   // There should be no remaining data.
   if (sequence_parser.HasMore() || parser.HasMore())
     return false;
 
   return true;
 }
 
+// From RFC 5280:
+//
+//   InhibitAnyPolicy ::= SkipCerts
+//
+//   SkipCerts ::= INTEGER (0..MAX)
+bool ParseInhibitAnyPolicy(const der::Input& inhibit_any_policy_tlv,
+                           uint8_t* num_certs) {
+  der::Parser parser(inhibit_any_policy_tlv);
+
+  // TODO(eroman): Surface reason for failure if length was longer than uint8.
+  if (!parser.ReadUint8(num_certs))
+    return false;
+
+  // There should be no remaining data.
+  if (parser.HasMore())
+    return false;
+
+  return true;
+}
+
 }  // namespace net