Add policies support to VerifyCertificateChain().

net/third_party/nist-pkits/pkits_testcases-inl.h

 // Autogenerated by generate_tests.py, do not edit
 
 // Hack to allow disabling type parameterized test cases.
 // See https://github.com/google/googletest/issues/389
 #define WRAPPED_TYPED_TEST_P(CaseName, TestName) \
   TYPED_TEST_P(CaseName, TestName)
 #define WRAPPED_REGISTER_TYPED_TEST_CASE_P(CaseName, ...) \
   REGISTER_TYPED_TEST_CASE_P(CaseName, __VA_ARGS__)
 
 template <typename PkitsTestDelegate>
@@ skipping 2095 matching lines @@
 // 4.10.7 Invalid Mapping From anyPolicy Test7
 WRAPPED_TYPED_TEST_P(PkitsTest10PolicyMappings,
                      Section10InvalidMappingFromanyPolicyTest7) {
   const char* const certs[] = {"TrustAnchorRootCertificate",
                                "MappingFromanyPolicyCACert",
                                "InvalidMappingFromanyPolicyTest7EE"};
   const char* const crls[] = {"TrustAnchorRootCRL",
                               "MappingFromanyPolicyCACRL"};
   PkitsTestInfo info;
   info.should_validate = false;
+  info.SetUserConstrainedPolicySet("");
 
   this->RunTest(certs, crls, info);
 }
 
 // 4.10.8 Invalid Mapping To anyPolicy Test8
 WRAPPED_TYPED_TEST_P(PkitsTest10PolicyMappings,
                      Section10InvalidMappingToanyPolicyTest8) {
   const char* const certs[] = {"TrustAnchorRootCertificate",
                                "MappingToanyPolicyCACert",
                                "InvalidMappingToanyPolicyTest8EE"};
@@ skipping 1777 matching lines @@
   PkitsTestInfo info;
   info.should_validate = false;
 
   this->RunTest(certs, crls, info);
 }
 
 WRAPPED_REGISTER_TYPED_TEST_CASE_P(
     PkitsTest16PrivateCertificateExtensions,
     Section16ValidUnknownNotCriticalCertificateExtensionTest1,
     Section16InvalidUnknownCriticalCertificateExtensionTest2);