Add parsing for RFC 5280's InhibitAnyPolicy.

net/cert/internal/parsed_certificate_unittest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/parsed_certificate.h"
 
 #include "net/cert/internal/cert_errors.h"
 #include "net/cert/internal/parse_certificate.h"
 #include "net/cert/internal/test_helpers.h"
 #include "net/der/input.h"
@@ skipping 407 matching lines @@
   ASSERT_TRUE(cert);
 
   static const uint8_t expected_serial[37] = {
       0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
       0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14,
       0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e,
       0x1f, 0x20, 0x21, 0x22, 0x23, 0x24, 0x25};
   EXPECT_EQ(der::Input(expected_serial), cert->tbs().serial_number);
 }
 
+// Tests parsing a certificate that has an inhibitAnyPolicy extension.
+TEST(ParsedCertificateTest, InhibitAnyPolicy) {
+  scoped_refptr<ParsedCertificate> cert =
+      ParseCertificateFromFile("inhibit_any_policy.pem", {});
+  ASSERT_TRUE(cert);
+
+  ParsedExtension extension;
+  ASSERT_TRUE(cert->GetExtension(InhibitAnyPolicyOid(), &extension));
+
+  uint8_t skip_count;
+  ASSERT_TRUE(ParseInhibitAnyPolicy(extension.value, &skip_count));
+  EXPECT_EQ(3, skip_count);
+}
+
 }  // namespace
 
 }  // namespace net