Add unittests for net::TestRootCerts and regenerate test certificates

chrome/browser/chromeos/policy/policy_cert_verifier_browsertest.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/policy_cert_verifier.h"
 
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/message_loop.h"
 #include "base/run_loop.h"
@@ skipping 134 matching lines @@
 
   // The profile is not tainted.
   base::RunLoop().RunUntilIdle();
   EXPECT_FALSE(
       profile_->GetPrefs()->GetBoolean(prefs::kUsedPolicyCertificatesOnce));
 }
 
 TEST_F(PolicyCertVerifierTest, VerifyTrustedCert) {
   // |ca_cert| is the issuer of |cert|.
   scoped_refptr<net::X509Certificate> ca_cert =
-      LoadCertificate("root_ca_cert.crt", net::CA_CERT);
+      LoadCertificate("root_ca_cert.pem", net::CA_CERT);
   ASSERT_TRUE(ca_cert.get());
   scoped_refptr<net::X509Certificate> cert =
       LoadCertificate("ok_cert.pem", net::SERVER_CERT);
   ASSERT_TRUE(cert.get());
 
   // Make the database trust |ca_cert|.
   net::CertificateList import_list;
   import_list.push_back(ca_cert);
   net::NSSCertDatabase::ImportCertFailureList failure_list;
   ASSERT_TRUE(cert_db_->ImportCACerts(
@@ skipping 33 matching lines @@
 }
 
 TEST_F(PolicyCertVerifierTest, VerifyUsingAdditionalTrustAnchor) {
   if (!SupportsAdditionalTrustAnchors()) {
     LOG(INFO) << "Test skipped on this platform. NSS >= 3.14.2 required.";
     return;
   }
 
   // |ca_cert| is the issuer of |cert|.
   scoped_refptr<net::X509Certificate> ca_cert =
-      LoadCertificate("root_ca_cert.crt", net::CA_CERT);
+      LoadCertificate("root_ca_cert.pem", net::CA_CERT);
   ASSERT_TRUE(ca_cert.get());
   scoped_refptr<net::X509Certificate> cert =
       LoadCertificate("ok_cert.pem", net::SERVER_CERT);
   ASSERT_TRUE(cert.get());
 
   net::CertificateList additional_trust_anchors;
   additional_trust_anchors.push_back(ca_cert);
 
   // Verify() successfully verifies |cert|, using |ca_cert| from the list of
   // |additional_trust_anchors|.
@@ skipping 24 matching lines @@
 }
 
 TEST_F(PolicyCertVerifierTest, ProfileRemainsTainted) {
   if (!SupportsAdditionalTrustAnchors()) {
     LOG(INFO) << "Test skipped on this platform. NSS >= 3.14.2 required.";
     return;
   }
 
   // |ca_cert| is the issuer of |cert|.
   scoped_refptr<net::X509Certificate> ca_cert =
-      LoadCertificate("root_ca_cert.crt", net::CA_CERT);
+      LoadCertificate("root_ca_cert.pem", net::CA_CERT);
   ASSERT_TRUE(ca_cert.get());
   scoped_refptr<net::X509Certificate> cert =
       LoadCertificate("ok_cert.pem", net::SERVER_CERT);
   ASSERT_TRUE(cert.get());
 
   net::CertificateList additional_trust_anchors;
   additional_trust_anchors.push_back(ca_cert);
 
   // |cert| is untrusted, so Verify() fails.
   net::CertVerifyResult verify_result;
@@ skipping 58 matching lines @@
   // Note: this hits the cached result from the first Verify() in this test.
   EXPECT_EQ(net::ERR_CERT_AUTHORITY_INVALID, error);
 
   // The profile is still tainted.
   base::RunLoop().RunUntilIdle();
   EXPECT_TRUE(
       profile_->GetPrefs()->GetBoolean(prefs::kUsedPolicyCertificatesOnce));
 }
 
 }  // namespace policy