GitLab

The approach taken is to generate the certificate chain from C++,
and have any URLs point at an instance of the EmbeddedTestServer.

Using live URLs for the certificate has the advantage of working for platform
verifiers, for which we can't directly mock network responses.

Bug: 845652
Change-Id: Id38df93b81b4380256dbc11e9a46345c37c99c90
Reviewed-on: https://chromium-review.googlesource.com/1093736
Commit-Queue: Eric Roman <eroman@chromium.org>
Reviewed-by: Matt Mueller <mattm@chromium.org>
Cr-Commit-Position: refs/heads/master@{#571609}