net: allow EV indication on Windows when the local OCSP/CRL cache is stale.

BUG=116984
TEST=On a Windows machine, run `certutil -urlcache * delete` on the command line. Then start Chrome and ensure that https://www.paypal.com shows a green EV indication in the URL bar.


Review URL: http://codereview.chromium.org/9619007

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@125468 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 312 insertions, 0 deletions

diff --git a/net/data/ssl/certificates/comodo.chain.pem b/net/data/ssl/certificates/comodo.chain.pem
new file mode 100644
index 0000000..0f542f9
--- /dev/null
+++ b/net/data/ssl/certificates/comodo.chain.pem
@@ -0,0 +1,312 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            12:a3:c4:cb:1d:17:a7:52:27:67:cd:7a:30:c9:dd:49
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Extended Validation Secure Server CA
+        Validity
+            Not Before: Jun 22 00:00:00 2011 GMT
+            Not After : Jun 21 23:59:59 2013 GMT
+        Subject: serialNumber=04058690/1.3.6.1.4.1.311.60.2.1.3=GB/2.5.4.15=Private Organization, C=GB/postalCode=M5 3EQ, ST=Greater Manchester, L=Salford,/streetAddress=Exchange Quay,  Trafford Road/streetAddress=26 Office Village,/streetAddress=3rd Floor,, O=Comodo CA Ltd, OU=Comodo EV SGC SSL, OU=Hosted by Comodo Group Inc., OU=Comodo EV SGC SSL, CN=www.comodo.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:a7:ad:ff:5f:d0:7d:1d:97:78:f7:da:f8:77:da:
+                    86:d2:11:ec:83:b1:4b:fd:8d:75:f2:44:9c:18:db:
+                    d5:fa:ca:3e:17:8c:a3:23:36:e9:03:7d:04:6f:2f:
+                    e2:c0:f8:74:23:b6:f6:47:a5:b0:91:b4:78:49:64:
+                    91:10:71:19:63:4c:9d:19:90:1d:1e:b8:92:cf:93:
+                    9f:5f:f6:53:db:68:b5:07:29:a2:82:92:3a:cd:c0:
+                    a4:02:2a:87:c3:38:36:e5:86:6d:e6:d7:bd:73:97:
+                    64:b8:a7:1e:9d:a0:58:11:42:73:5e:7e:1e:5e:96:
+                    a2:0d:1b:b9:56:56:bd:2a:ce:52:b7:b2:a2:e8:1b:
+                    d7:75:f7:32:80:58:b4:04:96:ae:b7:be:f5:b5:7b:
+                    df:46:94:28:f1:36:80:d1:f2:78:65:55:d8:6d:fa:
+                    8b:f6:1d:69:5a:a3:ba:40:41:f2:17:a0:5c:9b:81:
+                    6a:56:e4:02:7f:0c:63:40:8c:b2:26:d8:16:f3:55:
+                    f8:a1:00:db:71:60:95:b3:7d:f6:b1:1c:a9:1d:76:
+                    90:41:72:1e:11:2a:83:16:98:e0:a3:61:69:a8:39:
+                    4a:a7:1e:14:de:b4:07:9f:59:53:e3:6f:88:61:2b:
+                    1d:22:c4:92:bf:ba:65:23:ee:e8:76:f3:32:40:b0:
+                    f0:c7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:88:44:51:FF:50:2A:69:5E:2D:88:F4:21:BA:D9:0C:F2:CE:CB:EA:7C
+
+            X509v3 Subject Key Identifier: 
+                B2:E0:EB:4A:E7:C6:1C:27:0A:54:4F:C4:00:AA:E1:6A:2C:14:91:C3
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication, Microsoft Server Gated Crypto, Netscape Server Gated Crypto
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.1.5.1
+                  CPS: https://secure.comodo.com/CPS
+
+            X509v3 CRL Distribution Points: 
+                URI:http://crl.comodoca.com/COMODOExtendedValidationSecureServerCA.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.comodoca.com/COMODOExtendedValidationSecureServerCA.crt
+                OCSP - URI:http://ocsp.comodoca.com
+
+            X509v3 Subject Alternative Name: 
+                DNS:www.comodo.com, DNS:comodo.com
+    Signature Algorithm: sha1WithRSAEncryption
+        c6:35:d6:98:61:9a:91:cf:d6:02:1e:83:92:0a:ac:eb:a7:38:
+        57:ee:69:f1:3a:35:d5:fe:8e:02:b8:6f:ee:f9:19:47:46:85:
+        57:7f:0c:bc:4b:ea:fb:b3:7b:10:87:e7:57:7a:8a:f1:72:9a:
+        f6:dd:e5:6d:91:e2:92:12:c4:1f:76:13:2b:7d:4e:b8:a3:ad:
+        67:0a:e8:35:00:ab:76:a8:48:cb:9d:02:62:ba:01:2c:4c:c9:
+        8d:7b:65:c8:72:d3:c3:c1:1d:6d:50:72:f4:b8:98:58:9a:13:
+        71:38:65:b0:62:f2:30:dc:e7:bd:10:7a:95:ad:e2:43:30:f0:
+        0e:83:d5:1b:12:71:33:0f:f2:05:e4:35:18:78:bc:1b:e2:95:
+        11:c9:40:48:35:c4:8f:e1:3b:43:1a:b8:39:9b:72:b3:d8:dc:
+        0c:39:f5:8b:1a:e7:90:12:34:ce:9c:0f:63:46:26:42:3d:c8:
+        90:e7:90:8e:c3:db:0a:eb:59:51:21:7e:3d:af:40:a6:e3:d9:
+        4c:ad:bb:6b:b9:bf:f2:c9:08:ec:91:c9:f2:c5:13:a1:e4:1a:
+        a5:53:6e:6d:72:61:f5:7b:94:b8:3e:bc:11:83:ca:51:88:92:
+        aa:5f:85:1c:ca:80:86:01:34:8e:df:4b:f0:0c:a3:64:20:12:
+        19:34:4c:95
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            11:a3:b4:d0:ec:8d:b7:7f:9d:a0:cd:5d:2d:51:2f:42
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
+        Validity
+            Not Before: May 24 00:00:00 2010 GMT
+            Not After : May 30 10:48:38 2020 GMT
+        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Extended Validation Secure Server CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:cc:4a:96:33:cd:25:8d:67:ee:28:96:37:87:46:
+                    f0:f6:04:a2:84:7f:53:aa:96:e6:1f:b1:02:1c:6e:
+                    ed:7d:21:d4:d7:3c:1e:a2:d8:69:2f:a8:b7:f5:a2:
+                    ed:64:58:64:e1:44:65:36:49:41:20:01:8d:3b:13:
+                    e2:08:f3:0c:f2:57:39:93:37:b7:1c:93:44:83:8e:
+                    bf:2d:f1:a1:05:75:da:6e:ee:7b:6f:1b:ea:76:83:
+                    28:74:4a:1c:2b:d3:f5:c4:03:72:93:af:86:ce:09:
+                    8c:3c:75:d4:c9:0a:2f:72:f3:ad:bd:0e:30:3c:84:
+                    a1:73:1f:03:25:14:a5:8f:c3:d6:f4:b5:e4:dd:86:
+                    7a:f5:19:ba:68:f2:85:54:a2:30:11:ca:d1:92:cb:
+                    3b:74:06:12:a0:37:ab:6a:d8:54:11:df:6c:9a:16:
+                    94:b9:b4:a7:65:c6:74:2d:31:f3:4d:52:e9:55:51:
+                    9f:cb:3e:a2:8d:76:98:70:d2:6f:a6:65:45:2f:1b:
+                    85:bb:5b:6d:f9:f2:c0:04:66:13:84:7a:9d:ce:27:
+                    d8:f4:44:9e:bf:ac:be:99:db:6b:4f:db:58:21:b0:
+                    89:27:b4:8f:32:d6:4b:5e:72:91:5e:df:05:9d:d9:
+                    49:2f:f4:b6:6f:50:1f:75:cb:80:9d:e6:d3:e4:d1:
+                    f2:d3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
+
+            X509v3 Subject Key Identifier: 
+                88:44:51:FF:50:2A:69:5E:2D:88:F4:21:BA:D9:0C:F2:CE:CB:EA:7C
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+                  CPS: https://secure.comodo.com/CPS
+
+            X509v3 CRL Distribution Points: 
+                URI:http://crl.comodoca.com/COMODOCertificationAuthority.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.comodoca.com/COMODOAddTrustServerCA.crt
+                OCSP - URI:http://ocsp.comodoca.com
+
+    Signature Algorithm: sha1WithRSAEncryption
+        9a:43:bf:af:a4:72:5e:cd:7d:6f:7f:f4:fc:3d:8c:bb:70:e6:
+        1e:dd:04:fd:3f:dc:9d:9f:bf:89:76:9b:f2:86:31:fc:7f:b3:
+        ed:2a:91:53:2c:e2:aa:b0:e3:c8:2c:71:f7:15:8a:23:1c:f1:
+        69:2e:81:fb:b1:bc:62:0b:ab:1a:54:1c:d9:22:5e:34:4c:a5:
+        f6:23:0f:5d:7a:3d:db:43:cd:69:7e:17:37:52:cd:53:a1:c2:
+        11:d4:53:78:27:64:d5:89:41:4d:16:55:bb:90:cb:f0:d8:e4:
+        dd:dd:d3:09:64:48:28:ff:32:23:84:2f:8c:7b:55:2f:cf:29:
+        88:37:34:78:0f:33:aa:ff:b7:f2:96:a4:9b:44:80:b5:be:6c:
+        56:54:ab:a4:81:9e:25:18:28:54:3a:7f:2c:63:cf:59:20:8c:
+        18:6b:38:2c:b4:dd:ed:e3:40:de:0c:36:25:57:9a:c0:d1:60:
+        9e:5e:03:68:97:ae:1a:3b:ea:45:d7:51:99:49:ee:44:59:56:
+        0b:5e:b1:8f:68:ea:8a:9e:ca:d2:c9:a0:03:7e:70:25:f4:32:
+        c9:4e:50:83:87:a2:34:48:3d:4f:35:77:fc:d8:88:ea:f6:7d:
+        1e:ce:43:b6:d5:c2:6a:7e:38:66:63:4d:e7:ee:32:ef:0f:24:
+        e8:2a:67:fa
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            6f:25:dc:15:af:df:5e:a3:08:56:0c:3b:7a:4f:c7:f8
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
+        Validity
+            Not Before: May 30 10:48:38 2000 GMT
+            Not After : May 30 10:48:38 2020 GMT
+        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04:
+                    98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d:
+                    e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57:
+                    b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a:
+                    86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf:
+                    da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1:
+                    d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16:
+                    7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46:
+                    9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72:
+                    30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89:
+                    77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62:
+                    02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b:
+                    c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab:
+                    00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1:
+                    0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f:
+                    2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73:
+                    47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb:
+                    26:f7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
+
+            X509v3 Subject Key Identifier: 
+                0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+            X509v3 CRL Distribution Points: 
+                URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.usertrust.com/AddTrustExternalCARoot.p7c
+                CA Issuers - URI:http://crt.usertrust.com/AddTrustUTNSGCCA.crt
+                OCSP - URI:http://ocsp.usertrust.com
+
+    Signature Algorithm: sha1WithRSAEncryption
+        07:60:93:99:aa:ce:d0:d3:47:d0:37:33:de:3f:64:b7:e5:2e:
+        a3:25:0c:d5:33:1d:0d:8d:ab:f6:7e:46:7b:59:06:92:e3:82:
+        c4:e7:f5:f6:f3:d9:05:cf:49:34:2d:37:5f:f4:25:c7:f0:fb:
+        6b:23:77:f1:f1:40:d7:4c:bb:49:45:31:dd:00:28:67:b7:29:
+        4c:75:a8:1f:79:31:c9:36:37:0f:ca:35:4f:8c:f1:7e:de:fc:
+        46:ab:bf:68:9b:70:23:30:2e:b7:c5:5c:7b:8a:fb:18:13:79:
+        4b:92:42:8c:dc:2c:ab:6c:22:b7:28:53:b3:1a:4a:ce:1b:fb:
+        28:0e:b7:3a:a4:da:0d:f7:40:32:4f:df:6f:bb:01:50:fc:87:
+        d3:76:d9:fc:fb:b6:84:03:ca:c9:36:18:f7:dd:6c:db:bb:ba:
+        81:1c:a6:ad:fe:28:f9:cf:b9:a2:71:5d:19:05:ea:4a:46:dc:
+        73:41:ef:89:94:42:b1:43:88:6f:35:17:af:1e:60:83:ac:7a:
+        8c:10:7b:9f:c9:f6:83:6d:9e:fa:88:ee:3e:dd:ee:9e:b0:bf:
+        e0:6a:b9:d0:9f:07:b2:09:13:9a:f5:a4:e5:c8:5b:79:a7:47:
+        35:33:68:e5:55:9e:aa:5b:cb:30:0b:9d:c7:0f:bf:68:44:81:
+        97:8b:51:4a
+-----BEGIN CERTIFICATE-----
+MIIE8TCCA9mgAwIBAgIQbyXcFa/fXqMIVgw7ek/H+DANBgkqhkiG9w0BAQUFADBv
+MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk
+ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF
+eHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFow
+gYExCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
+BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMScwJQYD
+VQQDEx5DT01PRE8gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQDQQIuLcuORG/dRwRtUBJjTqb/B5opdO4f7u4jO
+DeMvPwaW8KIpUJmu2zuhV7B0UXHN7UKRTUH+qcjYaoZ3RLtZZpdQXrTULHBEz9o3
+lUJpPDDEcbNS8CFNodi6OXwcnqMknfKDFpiqFnxDmxVbt640kf7UYiYYRpo/68H5
+8ZBX66x6DYvbcjBqZtXgRqNw3GjZ/wRIiXfeten7Z21B6bw5vTLZYgLxsag9bjec
+4i/i06Imi8a4VUOI4SM+pdIkOWpHqwDUobOpJf4NP6cdutNRwQuk2qw471VQJAVl
+RpM0Ty2NrcbUIRnSjsoFYXEHc0flihkSvQRNzk6cpUisuyb3AgMBAAGjggF0MIIB
+cDAfBgNVHSMEGDAWgBStvZh6NLQm9/rEJlTvA73gJMtUGjAdBgNVHQ4EFgQUC1jl
+i8ZMFTekQKkwqSG+RzZaVv8wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMB
+Af8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9j
+cmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFsQ0FSb290LmNybDCBswYI
+KwYBBQUHAQEEgaYwgaMwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0
+LmNvbS9BZGRUcnVzdEV4dGVybmFsQ0FSb290LnA3YzA5BggrBgEFBQcwAoYtaHR0
+cDovL2NydC51c2VydHJ1c3QuY29tL0FkZFRydXN0VVROU0dDQ0EuY3J0MCUGCCsG
+AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBBQUA
+A4IBAQAHYJOZqs7Q00fQNzPeP2S35S6jJQzVMx0Njav2fkZ7WQaS44LE5/X289kF
+z0k0LTdf9CXH8PtrI3fx8UDXTLtJRTHdAChntylMdagfeTHJNjcPyjVPjPF+3vxG
+q79om3AjMC63xVx7ivsYE3lLkkKM3CyrbCK3KFOzGkrOG/soDrc6pNoN90AyT99v
+uwFQ/IfTdtn8+7aEA8rJNhj33Wzbu7qBHKat/ij5z7micV0ZBepKRtxzQe+JlEKx
+Q4hvNRevHmCDrHqMEHufyfaDbZ76iO4+3e6esL/garnQnweyCROa9aTlyFt5p0c1
+M2jlVZ6qW8swC53HD79oRIGXi1FK
+-----END CERTIFICATE-----