Reject certificates that contain unknown policy qualifiers if the

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 3762 matching lines @@
     "data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/main.test",
     "data/verify_certificate_chain_unittest/target-signed-using-ecdsa/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-using-ecdsa/main.test",
     "data/verify_certificate_chain_unittest/target-signed-with-md5/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-with-md5/main.test",
     "data/verify_certificate_chain_unittest/target-unknown-critical-extension/chain.pem",
     "data/verify_certificate_chain_unittest/target-unknown-critical-extension/main.test",
     "data/verify_certificate_chain_unittest/target-wrong-signature/chain.pem",
     "data/verify_certificate_chain_unittest/target-wrong-signature/main.test",
+    "data/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/chain.pem",
+    "data/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/main.test",
+    "data/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/chain.pem",
+    "data/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/main.test",
     "data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/chain.pem",
     "data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/main.test",
     "data/verify_certificate_chain_unittest/violates-pathlen-1-from-root/chain.pem",
     "data/verify_certificate_chain_unittest/violates-pathlen-1-from-root/main.test",
     "data/verify_certificate_chain_unittest/violates-pathlen-1-from-root/ta-with-constraints.test",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-dupe_attr.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_attr.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_rdn.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap.pem",
     "data/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-dupe_attr.pem",
@@ skipping 2280 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }