Add policies support to VerifyCertificateChain().

Add policies support to VerifyCertificateChain().

Support is compliant with RFC 5280 and supports all the policy
extensions specified therein:

 * Inhibit Any Policy
 * Policy Constraints
 * Policies
 * Policy Mappings

Testing is done solely using the PKITS test suite, which has fairly good
coverage of these extensions:

  4.8 (Certificate Policies)
  4.9 (Require Explicit Policy)
  4.10 (Policy Mappings)
  4.11 (Inhibit Policy Mapping)
  4.12 (Inhibit Any Policy)

This is a re-land of: https://codereview.chromium.org/2903283002

BUG=634456, 634453, 634452
Review-Url: https://codereview.chromium.org/2920013003
Cr-Commit-Position: refs/heads/master@{#476773}
Committed: https://chromium.googlesource.com/chromium/src/+/0507e9f17c57e79a10f61eee6c815368977ade54

[eroman, 2017-06-02 18:52:01]

The CQ bit was checked by eroman@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-06-02 18:52:28]

Dry run: CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[eroman, 2017-06-02 18:53:09]

eroman@chromium.org changed reviewers:
+ mattm@chromium.org

[eroman, 2017-06-02 18:53:09]

This is a re-land of earlier CL (https://codereview.chromium.org/2903283002)

The only change from the earlier version is in patchset #2.

[mattm, 2017-06-02 19:23:57]

lgtm

[eroman, 2017-06-02 19:41:00]

The CQ bit was unchecked by eroman@chromium.org

[eroman, 2017-06-02 19:41:03]

The CQ bit was checked by eroman@chromium.org

[commit-bot: I haz the power, 2017-06-02 19:41:18]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-02 20:39:23]

CQ is committing da patch.

Bot data: {"patchset_id": 20001, "attempt_start_ts": 1496432463703060,
"parent_rev": "e4f9108cb1e95e813387cf0b7eca98992530fdb1", "commit_rev":
"0507e9f17c57e79a10f61eee6c815368977ade54"}

[commit-bot: I haz the power, 2017-06-02 20:39:34]

Description was changed from

==========
Add policies support to VerifyCertificateChain().

Support is compliant with RFC 5280 and supports all the policy
extensions specified therein:

 * Inhibit Any Policy
 * Policy Constraints
 * Policies
 * Policy Mappings

Testing is done solely using the PKITS test suite, which has fairly good
coverage of these extensions:

  4.8 (Certificate Policies)
  4.9 (Require Explicit Policy)
  4.10 (Policy Mappings)
  4.11 (Inhibit Policy Mapping)
  4.12 (Inhibit Any Policy)

This is a re-land of: https://codereview.chromium.org/2903283002

BUG=634456, 634453, 634452
==========

to

==========
Add policies support to VerifyCertificateChain().

Support is compliant with RFC 5280 and supports all the policy
extensions specified therein:

 * Inhibit Any Policy
 * Policy Constraints
 * Policies
 * Policy Mappings

Testing is done solely using the PKITS test suite, which has fairly good
coverage of these extensions:

  4.8 (Certificate Policies)
  4.9 (Require Explicit Policy)
  4.10 (Policy Mappings)
  4.11 (Inhibit Policy Mapping)
  4.12 (Inhibit Any Policy)

This is a re-land of: https://codereview.chromium.org/2903283002

BUG=634456, 634453, 634452

Review-Url: https://codereview.chromium.org/2920013003
Cr-Commit-Position: refs/heads/master@{#476773}
Committed:
https://chromium.googlesource.com/chromium/src/+/0507e9f17c57e79a10f61eee6c81...
==========

[commit-bot: I haz the power, 2017-06-02 20:39:36]

Committed patchset #2 (id:20001) as
https://chromium.googlesource.com/chromium/src/+/0507e9f17c57e79a10f61eee6c81...