Add extra path validation tests for EKU processing

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 3564 matching lines @@
     "data/verify_certificate_chain_unittest/expired-root/not-before.test",
     "data/verify_certificate_chain_unittest/expired-target/chain.pem",
     "data/verify_certificate_chain_unittest/expired-target/not-after.test",
     "data/verify_certificate_chain_unittest/expired-target/not-before.test",
     "data/verify_certificate_chain_unittest/incorrect-trust-anchor/chain.pem",
     "data/verify_certificate_chain_unittest/incorrect-trust-anchor/main.test",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/main.test",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/main.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/any.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/chain.pem",
+    "data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-clientauth/any.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-clientauth/chain.pem",
+    "data/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth.test",
+    "data/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth.test",
     "data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/main.test",
     "data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/main.test",
-    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-fail/chain.pem",
-    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-fail/main.test",
-    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-ok/chain.pem",
-    "data/verify_certificate_chain_unittest/intermediate-restricts-eku-ok/main.test",
-    "data/verify_certificate_chain_unittest/intermediate-sets-eku-any/chain.pem",
-    "data/verify_certificate_chain_unittest/intermediate-sets-eku-any/main.test",
     "data/verify_certificate_chain_unittest/intermediate-signed-with-md5/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-signed-with-md5/main.test",
     "data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/main.test",
     "data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/chain.pem",
     "data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/main.test",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.pem",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.test",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.pem",
     "data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.test",
@@ skipping 93 matching lines @@
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.4.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.5.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.6.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.7.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.8.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.8.9.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.9.3.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.9.5.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.9.7.txt",
     "data/verify_certificate_chain_unittest/pkits_errors/4.9.8.txt",
-    "data/verify_certificate_chain_unittest/root-bad-eku/chain.pem",
-    "data/verify_certificate_chain_unittest/root-bad-eku/main.test",
-    "data/verify_certificate_chain_unittest/root-bad-eku/ta-with-constraints.test",
     "data/verify_certificate_chain_unittest/root-basic-constraints-ca-false/chain.pem",
     "data/verify_certificate_chain_unittest/root-basic-constraints-ca-false/main.test",
     "data/verify_certificate_chain_unittest/root-basic-constraints-ca-false/ta-with-constraints.test",
+    "data/verify_certificate_chain_unittest/root-eku-clientauth/chain.pem",
+    "data/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-constraints.test",
+    "data/verify_certificate_chain_unittest/root-eku-clientauth/serverauth.test",
     "data/verify_certificate_chain_unittest/root-lacks-basic-constraints/chain.pem",
     "data/verify_certificate_chain_unittest/root-lacks-basic-constraints/main.test",
     "data/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-constraints.test",
     "data/verify_certificate_chain_unittest/target-and-intermediate/chain.pem",
     "data/verify_certificate_chain_unittest/target-and-intermediate/distrusted-root.test",
     "data/verify_certificate_chain_unittest/target-and-intermediate/main.test",
     "data/verify_certificate_chain_unittest/target-and-intermediate/unspecified-trust-root.test",
+    "data/verify_certificate_chain_unittest/target-eku-clientauth/any.test",
+    "data/verify_certificate_chain_unittest/target-eku-clientauth/chain.pem",
+    "data/verify_certificate_chain_unittest/target-eku-clientauth/clientauth.test",
+    "data/verify_certificate_chain_unittest/target-eku-clientauth/serverauth.test",
+    "data/verify_certificate_chain_unittest/target-eku-none/any.test",
+    "data/verify_certificate_chain_unittest/target-eku-none/chain.pem",
+    "data/verify_certificate_chain_unittest/target-eku-none/clientauth.test",
+    "data/verify_certificate_chain_unittest/target-eku-none/serverauth.test",
     "data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/chain.pem",
     "data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/main.test",
     "data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/chain.pem",
     "data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/main.test",
-    "data/verify_certificate_chain_unittest/target-lacks-eku/chain.pem",
-    "data/verify_certificate_chain_unittest/target-lacks-eku/main.test",
     "data/verify_certificate_chain_unittest/target-not-end-entity/chain.pem",
     "data/verify_certificate_chain_unittest/target-not-end-entity/main.test",
-    "data/verify_certificate_chain_unittest/target-restricts-eku-fail/chain.pem",
-    "data/verify_certificate_chain_unittest/target-restricts-eku-fail/main.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.test",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.pem",
     "data/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.test",
-    "data/verify_certificate_chain_unittest/target-sets-eku-any/chain.pem",
-    "data/verify_certificate_chain_unittest/target-sets-eku-any/main.test",
     "data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/main.test",
     "data/verify_certificate_chain_unittest/target-signed-using-ecdsa/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-using-ecdsa/main.test",
     "data/verify_certificate_chain_unittest/target-signed-with-md5/chain.pem",
     "data/verify_certificate_chain_unittest/target-signed-with-md5/main.test",
     "data/verify_certificate_chain_unittest/target-unknown-critical-extension/chain.pem",
     "data/verify_certificate_chain_unittest/target-unknown-critical-extension/main.test",
     "data/verify_certificate_chain_unittest/target-wrong-signature/chain.pem",
     "data/verify_certificate_chain_unittest/target-wrong-signature/main.test",
@@ skipping 2274 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }