commit bcca0368ac116828cecc6c68a381bfc5147f8c98
author eroman <eroman@chromium.org> Fri Jun 02 01:27:06 2017
committer Commit Bot <commit-bot@chromium.org> Fri Jun 02 01:27:06 2017
tree df555fa09b2d71030567d9fdd4a0b5220083d516
parent 0bf4bd3f8a3111af1a7194607248a3649a1b7baf

Add policies support to VerifyCertificateChain().

Support is compliant with RFC 5280 and supports all the policy
extensions specified therein:

 * Inhibit Any Policy
 * Policy Constraints
 * Policies
 * Policy Mappings

Testing is done solely using the PKITS test suite, which has fairly good
coverage of these extensions:

  4.8 (Certificate Policies)
  4.9 (Require Explicit Policy)
  4.10 (Policy Mappings)
  4.11 (Inhibit Policy Mapping)
  4.12 (Inhibit Any Policy)

BUG=634456,634453,634452

Review-Url: https://codereview.chromium.org/2903283002
Cr-Commit-Position: refs/heads/master@{#476513}