This is not part of RFC 5280, but is described in the following threads: https://bugzilla.mozilla.org/show_bug.cgi?id=725351 https://www.ietf.org/mail-archive/web/pkix/current/msg06821.html https://www.ietf.org/mail-archive/web/pkix/current/msg06785.html https://wiki.mozilla.org/CA:CertificatePolicyV2.1#Frequently_Asked_Questions
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/ab15aa6c043139c2f88bda31d8003823c9d16004 commit ab15aa6c043139c2f88bda31d8003823c9d16004 Author: eroman <eroman@chromium.org> Date: Wed Apr 05 22:11:15 2017 Remove ParsedCertificate::unparsed_extensions(). This was an awkard abstraction that better belongs in the verification code. In the process, also added Extended Key Usage and Policies into ParsedCertificate. BUG= 634442 Review-Url: https://codereview.chromium.org/2803513003 Cr-Commit-Position: refs/heads/master@{#462240} [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/components/cast_certificate/cast_cert_validator.cc [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/net/cert/cert_verify_proc_mac.cc [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/net/cert/internal/parsed_certificate.cc [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/net/cert/internal/parsed_certificate.h [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/net/cert/internal/parsed_certificate_unittest.cc [modify] https://crrev.com/ab15aa6c043139c2f88bda31d8003823c9d16004/net/cert/internal/verify_certificate_chain.cc
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/594aac0a801ab81711785cffcf101c6ec1e33723 commit 594aac0a801ab81711785cffcf101c6ec1e33723 Author: eroman <eroman@chromium.org> Date: Fri Apr 07 23:51:11 2017 Refactor VerifyCertificateChain test data to include a key purpose parameter. BUG= 634442 Review-Url: https://codereview.chromium.org/2801813004 Cr-Commit-Position: refs/heads/master@{#463055} [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/path_builder_unittest.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/path_builder_verify_certificate_chain_unittest.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/test_helpers.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/test_helpers.h [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/trust_store_collection_unittest.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/trust_store_nss_unittest.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/verify_certificate_chain_typed_unittest.h [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/cert/internal/verify_certificate_chain_unittest.cc [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/common.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/constrained-non-self-signed-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/constrained-root-basic-constraints-ca-false.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/constrained-root-lacks-basic-constraints.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/expired-constrained-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/expired-intermediate.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/expired-target.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-constrained-non-self-signed-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-constrained-root-basic-constraints-ca-false.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-constrained-root-lacks-basic-constraints.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-expired-constrained-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-expired-target.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-expired-unconstrained-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-incorrect-trust-anchor.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-key-rollover.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-unconstrained-non-self-signed-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-unconstrained-root-basic-constraints-ca-false.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-unconstrained-root-lacks-basic-constraints.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-constrained-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-unconstrained-root.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/incorrect-trust-anchor.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal-anchor.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/rebase-errors.py [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/unconstrained-non-self-signed-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/unconstrained-root-basic-constraints-ca-false.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/violates-pathlen-1-constrained-root.pem [modify] https://crrev.com/594aac0a801ab81711785cffcf101c6ec1e33723/net/data/verify_certificate_chain_unittest/violates-pathlen-1-unconstrained-root.pem
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/5d358265af599429828297cab308b27fc4f1e8aa commit 5d358265af599429828297cab308b27fc4f1e8aa Author: eroman <eroman@chromium.org> Date: Tue Apr 11 19:13:48 2017 Add a key purpose parameter to Certificate PathBuilder. In this CL it is used to verify the Extended Key Usage. (A subsequent CL will add Key Usage checks.) BUG= 634442 Review-Url: https://codereview.chromium.org/2800993002 Cr-Commit-Position: refs/heads/master@{#463714} [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/components/cast_certificate/cast_cert_validator.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/components/cast_certificate/cast_crl.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/BUILD.gn [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/cert_verify_proc_builtin.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/cert_verify_proc_unittest.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/path_builder.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/path_builder.h [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/path_builder_pkits_unittest.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/path_builder_unittest.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/path_builder_verify_certificate_chain_unittest.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/test_helpers.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/test_helpers.h [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/trust_store.h [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/verify_certificate_chain.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/verify_certificate_chain.h [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/verify_certificate_chain_pkits_unittest.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/verify_certificate_chain_typed_unittest.h [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/cert/internal/verify_certificate_chain_unittest.cc [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/constrained-root-bad-eku.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-constrained-root-bad-eku.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-intermediate-restricts-eku-fail.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-intermediate-restricts-eku-ok.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-intermediate-sets-eku-any.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-target-lacks-eku.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-target-restricts-eku-fail.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-target-sets-eku-any.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/generate-unconstrained-root-bad-eku.py [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/intermediate-restricts-eku-fail.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/intermediate-restricts-eku-ok.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/intermediate-sets-eku-any.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/constrained-root-bad-eku/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/constrained-root-bad-eku/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/constrained-root-bad-eku/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-fail/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-fail/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-fail/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-ok/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-ok/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-restricts-eku-ok/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-sets-eku-any/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-sets-eku-any/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/intermediate-sets-eku-any/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-lacks-eku/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-lacks-eku/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-lacks-eku/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-restricts-eku-fail/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-restricts-eku-fail/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-restricts-eku-fail/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-sets-eku-any/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-sets-eku-any/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/target-sets-eku-any/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/unconstrained-root-bad-eku/Intermediate.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/unconstrained-root-bad-eku/Root.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/keys/unconstrained-root-bad-eku/Target.key [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/target-lacks-eku.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/target-restricts-eku-fail.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/target-sets-eku-any.pem [add] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/data/verify_certificate_chain_unittest/unconstrained-root-bad-eku.pem [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/tools/cert_verify_tool/cert_verify_tool.cc [modify] https://crrev.com/5d358265af599429828297cab308b27fc4f1e8aa/net/tools/cert_verify_tool/verify_using_path_builder.cc
Comment 1 by eroman@chromium.org
, Aug 4 2016