GitLab

Process OCSP ResponseData and SingleResponse extensions, and
return OCSPRevocationStatus::UNKNOWN if unhandled extensions
marked critical are found.

Updated PEM-file generation code to explicitly set the OCSP
extension's critical flag, which resulted in changes to
existing PEM files. Without setting the flag, the code
parsing the OCSP extensions appears to see critical=true.

Bug: 944269
Change-Id: Ib04a9a5c39aba2edc70a6be7ea98981ec8f5360f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1732706Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Matt Mueller <mattm@chromium.org>
Commit-Queue: Kaustubha Govind <kaustubhag@chromium.org>
Cr-Commit-Position: refs/heads/master@{#686394}