Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_audioonly.pem

Index: components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_audioonly.pem
diff --git a/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_audioonly.pem b/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_audioonly.pem
new file mode 100644
index 0000000000000000000000000000000000000000..6f48ce9f25f322afa10ec686ebf82ea641c2ab1b
--- /dev/null
+++ b/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_audioonly.pem
@@ -0,0 +1,281 @@
+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={anyPolicy}
+  Leaf:           policies={audioOnly}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 10 (0xa)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:aa:66:11:71:cd:d4:a2:2e:2a:41:e4:75:b8:33:
+                    b5:d8:22:c5:0a:fd:e3:07:8b:fb:2a:41:10:f3:2d:
+                    50:96:99:8f:ef:b1:f0:44:cc:fb:b2:b8:79:03:7a:
+                    0e:2e:73:8d:78:19:bc:d1:de:35:0e:02:e9:bb:a3:
+                    a1:5b:77:6c:5c:c3:76:5d:68:f9:16:70:52:8a:e4:
+                    7c:7d:f0:c8:5b:6d:1b:8e:5d:29:30:47:cd:30:7a:
+                    3f:4b:e4:95:aa:56:84:d6:25:4e:04:13:b5:6c:97:
+                    15:73:37:49:44:e6:00:1d:24:e3:b9:92:ba:5e:c5:
+                    58:83:7d:8b:82:e1:9d:10:45:4b:72:9a:9b:54:0e:
+                    1a:a5:a1:b5:5d:05:79:27:8d:25:f7:f6:b3:b3:d5:
+                    f6:cc:30:d3:da:64:6a:fd:fd:77:78:8c:ff:90:c8:
+                    10:40:57:e0:1d:e1:77:2d:f2:74:06:d4:e7:a1:2e:
+                    b2:47:c9:f6:12:78:1b:d0:54:8f:4b:7e:64:80:18:
+                    33:c3:f5:ab:d1:d6:18:e4:b7:71:35:64:17:91:99:
+                    42:fb:23:34:57:4f:8b:df:ee:ba:6a:98:5f:3f:d1:
+                    40:51:f9:54:a1:16:09:35:4a:00:81:80:9c:54:51:
+                    5e:6b:d5:fb:9f:8b:2f:80:55:d7:21:14:d9:05:f3:
+                    a4:37
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                42:53:CC:AE:2D:B6:E4:12:B4:D0:66:2E:0E:94:4E:0D:85:E1:78:BA
+            X509v3 Authority Key Identifier: 
+                keyid:0C:C6:27:71:90:39:99:18:30:64:4C:47:3A:12:85:F8:6A:06:DD:51
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.11129.2.5.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         34:6a:30:41:b6:eb:36:6f:ac:bd:f2:84:ef:da:2c:79:33:e6:
+         a9:de:a5:78:e7:68:29:cd:52:11:37:fe:87:1a:c6:a3:1a:8f:
+         4a:3b:ca:2b:5c:c5:6d:a7:f5:72:41:17:9f:41:a3:3c:fd:5a:
+         9c:fe:10:af:93:96:1e:ca:79:b2:97:c3:3f:89:c8:91:96:fe:
+         2a:fa:5f:67:bd:56:0f:b6:e2:53:0f:d7:6b:89:16:30:46:59:
+         97:b0:b9:f3:09:8f:7d:94:73:70:b4:1c:27:de:72:39:14:bb:
+         e1:9b:72:07:53:e5:99:0b:df:12:9d:aa:d0:74:03:31:09:4e:
+         d2:c6:59:c9:29:2a:cd:72:6a:9a:80:ff:15:76:68:ce:37:df:
+         b5:e8:77:6c:51:1b:77:c3:0a:37:79:a9:ab:12:28:cd:98:01:
+         b8:bd:23:64:1f:25:e3:52:cf:c4:7b:ce:16:be:11:5e:9c:30:
+         81:ec:17:2d:a0:ab:74:a2:ff:a4:06:cf:1d:d9:ab:c0:d5:d9:
+         eb:6b:a7:01:1e:c6:0b:0d:05:0f:3d:de:b1:06:e5:7f:fc:66:
+         17:26:ab:b7:fe:e7:5a:c4:ae:3a:17:09:e7:4d:45:d2:57:2a:
+         fd:f4:c9:6e:84:5a:d4:b4:df:7f:92:fe:67:76:60:81:96:36:
+         c8:8a:5a:47
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 20 (0x14)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b3:7f:10:e7:62:fd:d6:aa:1f:7c:3a:51:70:cd:
+                    3c:9e:99:f9:32:1e:7d:7e:8a:98:86:26:72:15:7a:
+                    cf:28:f2:f6:84:ad:37:51:67:b9:b5:92:f3:5e:2f:
+                    92:40:a1:3d:8e:08:8a:f7:76:28:17:21:86:4c:14:
+                    0a:0d:47:98:49:82:e1:e3:2f:53:76:a2:4c:2a:c1:
+                    e8:36:0f:33:26:c6:19:b8:13:9a:a5:3b:d3:4e:91:
+                    b5:15:d3:44:96:36:68:4c:40:6b:7c:ab:c9:e7:9b:
+                    fd:7b:3f:47:18:6e:29:39:4a:2d:ab:e2:9d:68:15:
+                    0e:3f:a4:09:e4:0a:6f:c0:29:5e:10:71:0f:0f:33:
+                    46:00:95:ce:69:9b:0c:a2:d6:59:89:9f:ea:e5:99:
+                    58:23:2c:9a:de:02:75:bc:ea:e6:e1:30:98:19:d8:
+                    e1:96:58:0d:ac:88:09:40:37:0d:e4:0d:47:a0:40:
+                    69:66:da:26:f6:3c:0a:3a:ff:76:7c:88:27:4f:f3:
+                    1e:04:ba:5f:dc:08:15:a8:8b:1d:2a:8d:0d:31:be:
+                    1f:55:19:3e:5e:76:4c:8f:b8:6f:79:7e:6d:c6:da:
+                    7d:ac:10:b3:e9:d3:40:e1:0d:35:ed:c5:a9:e4:4e:
+                    41:15:e1:ee:e1:cf:05:f2:64:61:15:d5:ad:1f:14:
+                    0f:c3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                0C:C6:27:71:90:39:99:18:30:64:4C:47:3A:12:85:F8:6A:06:DD:51
+            X509v3 Authority Key Identifier: 
+                keyid:88:AD:0A:25:DB:A4:38:B4:C2:61:7D:D3:DD:5E:ED:57:50:B5:11:1E
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         9f:22:58:d3:d7:92:4a:a6:63:c2:cc:e8:d7:c3:45:d6:3a:10:
+         a1:50:38:e8:f7:c3:b7:f9:46:95:68:4e:e7:6b:52:24:3f:27:
+         db:3a:34:a6:10:91:92:86:75:a2:09:16:6e:0f:2f:01:1b:a4:
+         01:23:0c:16:35:f2:a5:30:72:af:e3:0e:20:d6:ff:32:76:fc:
+         86:d7:08:11:6a:21:77:e3:19:d6:30:d1:f7:70:29:94:09:ca:
+         a7:ed:ce:b2:7c:0a:d9:43:89:a2:3d:bc:6b:02:35:51:bf:0a:
+         1e:7b:8d:8b:82:80:7f:43:70:8b:e3:58:bd:d9:01:6b:0a:12:
+         ac:a1:cc:92:e7:3b:55:95:dc:03:b2:63:b0:29:a3:86:7d:5f:
+         db:a5:98:89:c1:59:9a:40:40:bf:79:22:cd:3b:8b:38:a6:98:
+         06:1f:1f:66:79:f9:b9:a4:51:bc:48:54:f9:d9:1e:cf:ec:1f:
+         30:d9:6c:41:d5:15:fb:07:b4:a3:ca:56:52:dd:ff:75:07:02:
+         8c:28:9c:2b:31:2a:04:59:18:1c:7d:2f:98:a0:2d:23:bc:36:
+         55:88:00:04:cd:07:01:a8:71:ff:a1:52:ce:f4:25:a0:02:b8:
+         d6:f5:3a:37:a1:20:24:84:da:f4:94:60:96:ea:75:93:d4:91:
+         fe:e7:a7:d5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 19 (0x13)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a4:63:1e:fa:9f:47:22:9a:2c:8f:27:ae:15:a2:
+                    15:21:73:02:44:7f:9b:62:7b:d6:47:1c:21:1c:66:
+                    01:95:c5:28:6a:b7:bf:3d:3a:03:7e:82:b1:ca:08:
+                    28:ef:c7:03:e6:2b:37:70:d0:54:11:09:0d:a3:3c:
+                    c5:08:ec:f3:5b:1d:2f:ce:62:6b:17:fb:da:e9:39:
+                    4a:4b:a8:14:fa:ea:c3:f8:29:e4:35:e8:85:0a:31:
+                    fb:ce:7c:ae:20:37:d2:c2:9e:e8:fa:0f:ad:59:d5:
+                    0c:f0:7f:f1:9c:56:23:f4:62:0d:54:16:7a:bf:83:
+                    d1:07:c0:60:8e:7c:9a:72:44:75:87:cc:a2:31:bc:
+                    3e:81:80:e6:ae:8b:ae:2a:c7:d4:31:29:03:d8:71:
+                    12:f2:3b:cc:62:22:ff:03:42:2a:ca:4a:50:11:9e:
+                    64:cb:ce:26:87:fc:80:39:5c:53:97:93:c8:e2:9b:
+                    ce:99:e6:c6:db:09:f7:be:84:b3:37:b1:ce:45:89:
+                    32:1b:5d:b1:70:10:b4:45:73:92:94:3b:46:9e:3f:
+                    ab:80:30:6d:a3:f4:26:9d:be:9c:cd:da:fd:b9:80:
+                    87:95:97:e7:bd:de:07:2c:2e:6c:c4:c5:3f:0f:b2:
+                    58:7a:22:cf:72:96:e2:13:95:e9:06:50:b6:be:fa:
+                    c4:e7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                88:AD:0A:25:DB:A4:38:B4:C2:61:7D:D3:DD:5E:ED:57:50:B5:11:1E
+            X509v3 Authority Key Identifier: 
+                keyid:88:AD:0A:25:DB:A4:38:B4:C2:61:7D:D3:DD:5E:ED:57:50:B5:11:1E
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         34:c3:8e:fb:f4:47:10:2f:d1:74:7f:71:97:24:80:94:aa:27:
+         a7:e1:be:1b:d3:f9:65:0e:97:49:c8:df:1f:e7:07:3c:56:ad:
+         00:2a:52:b0:85:72:f2:9c:3b:3e:39:3d:80:76:b9:8e:44:da:
+         66:4d:4a:7a:9d:be:a6:a6:d7:ff:42:f3:66:1b:14:2d:6d:37:
+         68:5f:55:3e:85:fe:a6:e6:7f:0d:21:eb:6f:86:49:b8:0e:e2:
+         3d:26:7c:39:34:ab:66:db:62:ab:42:55:b8:ba:60:b4:ae:bc:
+         05:5b:1a:4f:82:de:ec:ae:a0:ca:1d:01:6e:b5:d5:9e:ef:6a:
+         17:0e:d2:c6:50:2e:27:09:6e:c4:cf:45:50:94:92:0a:ea:7b:
+         d2:1b:db:ab:30:8f:1e:5c:14:8b:1f:f5:90:0f:38:00:82:df:
+         28:99:5a:20:86:30:e6:6f:1b:16:92:ec:02:0b:41:be:b4:01:
+         fe:1c:ee:3a:14:0b:9c:70:33:87:05:e7:61:f2:ff:9b:d5:45:
+         8c:9e:04:85:43:a0:8a:42:ae:e4:5d:17:74:bf:9e:02:f3:c4:
+         fb:48:ae:67:b3:25:5c:38:f7:e8:62:ed:1f:90:4c:ec:c8:9d:
+         81:59:9a:50:22:bf:3f:4b:03:27:6d:2b:3c:80:92:fc:a5:7f:
+         1a:05:1e:07
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----