GitLab

According to the spec [1], the basic constraints extension MUST have the
CA component set to false for packed attestation certificates. This
patch adds the basic constraints extension to attestation returned by
virtual authenticators and sets CA to false.

[1] https://www.w3.org/TR/webauthn/#packed-attestation-cert-requirements

Fixed: 1090015
Change-Id: I780f2f2482be9c6c5168ed60df23dbf75ce2e2a0
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2264578
Commit-Queue: Nina Satragno <nsatragno@chromium.org>
Commit-Queue: Martin Kreichgauer <martinkr@google.com>
Auto-Submit: Nina Satragno <nsatragno@chromium.org>
Reviewed-by: Martin Kreichgauer <martinkr@google.com>
Cr-Commit-Position: refs/heads/master@{#781987}