Add policies support to VerifyCertificateChain().

net/cert/internal/path_builder.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/path_builder.h"
 
 #include <set>
 #include <unordered_set>
 
 #include "base/logging.h"
@@ skipping 586 matching lines @@
 
 void CertPathBuilder::DoGetNextPathComplete() {
   if (next_path_.IsEmpty()) {
     // No more paths to check, signal completion.
     next_state_ = STATE_NONE;
     return;
   }
 
   // Verify the entire certificate chain.
   auto result_path = base::MakeUnique<ResultPath>();
+
+  // TODO(eroman): Make these inputs parameters to the path builder.
+  const bool initial_explicit_policy = false;
+  const std::set<der::Input> user_initial_policy_set{AnyPolicy()};
+  const bool initial_policy_mapping_inhibit = false;
+  const bool initial_any_policy_inhibit = false;
+
   VerifyCertificateChain(next_path_.certs, next_path_.last_cert_trust,
                          signature_policy_, time_, key_purpose_,
-                         &result_path->errors);
+                         initial_explicit_policy, user_initial_policy_set,
+                         initial_policy_mapping_inhibit,
+                         initial_any_policy_inhibit, &result_path->errors);
   bool verify_result = !result_path->errors.ContainsHighSeverityErrors();
 
   DVLOG(1) << "CertPathBuilder VerifyCertificateChain result = "
            << verify_result << "\n"
            << result_path->errors.ToDebugString(next_path_.certs);
   result_path->path = next_path_;
   AddResultPath(std::move(result_path));
 
   if (verify_result) {
     // Found a valid path, return immediately.
@@ skipping 10 matching lines @@
 
 void CertPathBuilder::AddResultPath(std::unique_ptr<ResultPath> result_path) {
   // TODO(mattm): set best_result_index based on number or severity of errors.
   if (result_path->IsValid())
     out_result_->best_result_index = out_result_->paths.size();
   // TODO(mattm): add flag to only return a single path or all attempted paths?
   out_result_->paths.push_back(std::move(result_path));
 }
 
 }  // namespace net