Add parsing for RFC 5280's InhibitAnyPolicy.

net/cert/internal/parse_certificate.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_PARSE_CERTIFICATE_H_
 #define NET_CERT_INTERNAL_PARSE_CERTIFICATE_H_
 
 #include <stdint.h>
 
 #include <map>
@@ skipping 339 matching lines @@
 // In dotted notation: 1.3.6.1.5.5.7.48.2
 NET_EXPORT der::Input AdCaIssuersOid();
 
 // From RFC 5280:
 //
 //     id-ad-ocsp OBJECT IDENTIFIER ::= { id-ad 1 }
 //
 // In dotted notation: 1.3.6.1.5.5.7.48.1
 NET_EXPORT der::Input AdOcspOid();
 
+// From RFC 5280:
+//
+//     id-ce-inhibitAnyPolicy OBJECT IDENTIFIER ::=  { id-ce 54 }
+//
+// In dotted notation: 2.5.29.54
+NET_EXPORT der::Input InhibitAnyPolicyOid();
+
 // Parses the Extensions sequence as defined by RFC 5280. Extensions are added
 // to the map |extensions| keyed by the OID. Parsing guarantees that each OID
 // is unique. Note that certificate verification must consume each extension
 // marked as critical.
 //
 // Returns true on success and fills |extensions|. The output will reference
 // bytes in |extensions_tlv|, so that data must be kept alive.
 // On failure |extensions| may be partially written to and should not be used.
 NET_EXPORT bool ParseExtensions(
     const der::Input& extensions_tlv,
@@ skipping 94 matching lines @@
   bool has_inhibit_policy_mapping = false;
   uint8_t inhibit_policy_mapping = 0;
 };
 
 // Parses a PolicyConstraints SEQUENCE as defined by RFC 5280. Returns true on
 // success, and sets |out|.
 NET_EXPORT bool ParsePolicyConstraints(const der::Input& policy_constraints_tlv,
                                        ParsedPolicyConstraints* out)
     WARN_UNUSED_RESULT;
 
+// Parses an InhibitAnyPolicy as defined by RFC 5280. Returns true on success,
+// and sets |out|.
+NET_EXPORT bool ParseInhibitAnyPolicy(const der::Input& inhibit_any_policy_tlv,

[mattm, 2017/05/10 20:11:31]

same question as other CL: should these go in certificate_policies instead of
parse_certificate?

[eroman, 2017/05/15 22:44:05]

Done.

+                                      uint8_t* out) WARN_UNUSED_RESULT;
+
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_PARSE_CERTIFICATE_H_