Add extra path validation tests for EKU processing

net/data/verify_certificate_chain_unittest/target-eku-clientauth/chain.pem

 [Created by: generate-chains.py]
 
 Certificate chain with 1 intermediate and a trusted root. The target
-restricts EKU to clientAuth+any and requests serverAuth during verification.
-This should succeed.
+certificate has only clientAuth EKU, so is expected to fail when verifying for
+serverAuth.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
@@ skipping 31 matching lines @@
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, Any Extended Key Usage
+                TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         e9:be:ed:82:c2:ea:51:5e:9d:c9:4f:2c:e3:ca:6e:0b:be:18:
-         5c:c3:1e:3f:6c:1a:de:9d:cc:8c:45:b5:87:2e:b2:38:9a:84:
-         a6:e1:ef:93:ac:f1:b6:d0:ba:d6:87:59:5d:e8:a7:1b:3e:14:
-         3a:9d:0b:50:c3:29:51:65:62:66:9e:a2:68:e8:be:f0:1a:e2:
-         57:0e:dc:7e:28:94:d9:c3:a9:0e:9c:d6:b0:76:d8:ec:b9:fe:
-         e6:35:b5:8a:27:3f:1d:6a:4e:66:d5:ac:d8:05:b2:4d:47:16:
-         ff:09:88:7e:23:70:dc:6b:b2:14:38:97:d8:4c:5d:ee:41:aa:
-         ac:b3:6b:5f:d7:2f:39:93:19:5f:e6:b7:15:c9:2b:5b:2c:c0:
-         b6:81:84:49:0b:5f:df:e9:e1:01:4f:82:ad:35:0b:00:d3:ff:
-         47:55:67:20:aa:3e:f9:b0:84:09:8d:e0:7b:16:b0:11:a5:16:
-         a7:27:81:85:ec:2d:47:73:48:e4:92:9d:b0:81:27:32:28:89:
-         de:cb:c2:fb:bd:60:09:2e:9a:99:ef:9b:cb:9c:2b:fc:b5:a2:
-         cc:01:73:bd:42:28:00:d4:d8:b2:8d:94:6b:5e:bf:1e:8e:93:
-         13:89:65:6b:2f:af:92:37:a3:b4:98:14:f4:b1:ff:44:aa:c1:
-         79:83:48:f7
+         e7:28:91:00:72:b6:21:2a:89:6d:a3:da:31:06:54:c4:7d:62:
+         de:f2:e7:75:76:60:69:38:c1:a3:b9:3e:24:3a:fa:61:89:40:
+         c6:a2:3e:b3:fd:4a:d1:be:ba:d7:fd:b4:b1:e6:f1:3f:43:b1:
+         21:cb:1d:df:72:6c:22:ec:bd:6f:b5:26:80:0e:be:d4:75:1c:
+         23:8c:dd:23:3d:d3:22:42:11:d8:de:f1:1c:82:0c:8e:b1:9c:
+         fc:e2:34:b1:a5:62:f9:5b:bb:3e:e6:38:d9:be:89:f9:fd:17:
+         45:78:8f:39:4f:30:53:86:a3:60:ad:5a:a7:97:1e:89:df:2c:
+         cf:9d:bf:a1:bf:91:82:0b:25:c5:c5:23:30:f7:ff:0e:98:60:
+         4d:dd:a3:ec:5c:c3:bf:6f:29:e7:4f:11:80:94:44:68:f3:c3:
+         84:db:14:a5:0d:1e:3f:3d:b7:e4:e7:0e:af:30:f1:f0:a4:7e:
+         cb:53:17:35:89:f0:fa:c1:d8:eb:93:11:44:18:f0:19:49:1e:
+         fd:3e:f0:b1:4f:33:99:e5:a9:6b:60:ac:6b:1c:1d:b3:59:ad:
+         01:ce:3e:03:a0:b5:31:1b:6e:07:ae:7e:29:86:ea:5e:42:df:
+         ba:c2:3a:a7:3d:ab:d5:bf:da:a0:25:67:2f:01:46:a5:0d:20:
+         3e:65:80:02
 -----BEGIN CERTIFICATE-----
-MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+MIIDgzCCAmugAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
 VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDghNk
 DjUzDKxEvm2S9eSX2Jq9ZPG1Z2IBewyYV0pjZLCdanuEopH+cwtMgc6J+Y2NikEY
 yNhkJzYy5jYmRBYTLqGtOAYLGzliapSsoFm+UstH10sACZGOFGmpYt9J2LZ5c95g
 1Lh2iaRTih1LgIgx6AVGgRt7XVLQaztTDSU8lZstmYM8A4y1c/tDbIKzSFc4PP+3
 edgTdAbQF3ipOAl2yvm3WqWKboV/JzR5gu+iAZOu+gsYR9QU/2d4K1OS9qwnQsd/
 jv0GSja5epheDZTvGvoIrY1kKMfBA3ZjuTNanxa+0+Bc6UN7m4OzkDHnWSsc0oxz
-FaI6lDUDgJf4XaMTAgMBAAGjgeUwgeIwHQYDVR0OBBYEFFoWnAaFtvR3rXJYok+h
+FaI6lDUDgJf4XaMTAgMBAAGjgd8wgdwwHQYDVR0OBBYEFFoWnAaFtvR3rXJYok+h
 /inPl4orMB8GA1UdIwQYMBaAFCS5kUE58TBe+MU7wFHMEVimE3OzMD8GCCsGAQUF
 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMBkGA1UdJQQSMBAGCCsGAQUF
-BwMCBgRVHSUAMA0GCSqGSIb3DQEBCwUAA4IBAQDpvu2CwupRXp3JTyzjym4Lvhhc
-wx4/bBrencyMRbWHLrI4moSm4e+TrPG20LrWh1ld6KcbPhQ6nQtQwylRZWJmnqJo
-6L7wGuJXDtx+KJTZw6kOnNawdtjsuf7mNbWKJz8dak5m1azYBbJNRxb/CYh+I3Dc
-a7IUOJfYTF3uQaqss2tf1y85kxlf5rcVyStbLMC2gYRJC1/f6eEBT4KtNQsA0/9H
-VWcgqj75sIQJjeB7FrARpRanJ4GF7C1Hc0jkkp2wgScyKIney8L7vWAJLpqZ75vL
-nCv8taLMAXO9QigA1NiyjZRrXr8ejpMTiWVrL6+SN6O0mBT0sf9EqsF5g0j3
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF
+BwMCMA0GCSqGSIb3DQEBCwUAA4IBAQDnKJEAcrYhKolto9oxBlTEfWLe8ud1dmBp
+OMGjuT4kOvphiUDGoj6z/UrRvrrX/bSx5vE/Q7Ehyx3fcmwi7L1vtSaADr7UdRwj
+jN0jPdMiQhHY3vEcggyOsZz84jSxpWL5W7s+5jjZvon5/RdFeI85TzBThqNgrVqn
+lx6J3yzPnb+hv5GCCyXFxSMw9/8OmGBN3aPsXMO/bynnTxGAlERo88OE2xSlDR4/
+Pbfk5w6vMPHwpH7LUxc1ifD6wdjrkxFEGPAZSR79PvCxTzOZ5alrYKxrHB2zWa0B
+zj4DoLUxG24Hrn4phupeQt+6wjqnPavVv9qgJWcvAUalDSA+ZYAC
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
@@ skipping 159 matching lines @@
 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAZbWvsYvBI
 +EoaWJtxzt89PhkjFBir2foSf7jtpwAuqHVtEbGZZSlE/pJbeEwd5SKSFRaBldkN
 1A9Q6mKAXiV7bnAQRjz4JFTTnvLMMGhj9RmJ7wAvV4EYidRyU3aymhwwGac3+T/B
 vjXqlesjfmbBgYJ9ZIhkuyN67e4UrgXAAylpBMNM6MpNeIfhn5iLRc9wmMtR4tME
 AxPpoYLSuBPwViBv9Vkf+ZZ+effJU2hy5ZS/n4RMfOkB9OkfFEyDB8JjZRB1MOW4
 7h503Sl4Zpt5RjsnRcRdqaqi7ZUo4Vm5t+KFaefEEjbEYAD7o3Rpz6DuRna9RcQk
 aVtbVS5DPrIc
 -----END CERTIFICATE-----