public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/chromium] epel9-next: - Update to 133.0.6943.53
@ 2026-08-07 16:07 Than Ngo
  0 siblings, 0 replies; only message in thread
From: Than Ngo @ 2026-08-07 16:07 UTC (permalink / raw)
  To: git-commits

          A new commit has been pushed.

          Repo   : rpms/chromium
          Branch : epel9-next
          Commit : 21faf47e5dbbc12d703273ee3efa008eb0635524
          Author : Than Ngo <than@redhat.com>
          Date   : 2025-02-05T18:17:03+01:00
          Stats  : +1393/-4317 in 13 file(s)
          URL    : https://src.fedoraproject.org/rpms/chromium/c/21faf47e5dbbc12d703273ee3efa008eb0635524?branch=epel9-next

          Log:
          - Update to 133.0.6943.53
* CVE-2025-0444: Use after free in Skia
* CVE-2025-0445: Use after free in V8
* CVE-2025-0451: Inappropriate implementation in Extensions API

---
diff --git a/0001-Add-PPC64-support-for-boringssl.patch b/0001-Add-PPC64-support-for-boringssl.patch
index ee6cb89..cf36646 100644
--- a/0001-Add-PPC64-support-for-boringssl.patch
+++ b/0001-Add-PPC64-support-for-boringssl.patch
@@ -1,7 +1,7 @@
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/abi_self_test.cc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/abi_self_test.cc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/abi_self_test.cc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/abi_self_test.cc
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/abi_self_test.cc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/abi_self_test.cc
 @@ -521,3 +521,289 @@ TEST(ABITest, AArch64) {
    CHECK_ABI_NO_UNWIND(abi_test_clobber_v15_upper);
  }
@@ -292,10 +292,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/abi_self_test.cc
 +  CHECK_ABI_NO_UNWIND(abi_test_clobber_lr);
 +}
 +#endif   // OPENSSL_PPC64LE && SUPPORTS_ABI_TEST
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/cpu_ppc64le.c
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/cpu_ppc64le.cc
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/cpu_ppc64le.c
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/cpu_ppc64le.cc
 @@ -0,0 +1,38 @@
 +/* Copyright (c) 2016, Google Inc.
 + *
@@ -335,11 +335,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/cpu_ppc64le.c
 +}
 +
 +#endif  // OPENSSL_PPC64LE
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/crypto.c
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/crypto.cc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/crypto.c
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/crypto.c
-@@ -66,6 +66,10 @@ uint32_t OPENSSL_get_ia32cap(int idx) {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/crypto.cc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/crypto.cc
+@@ -67,6 +67,10 @@ uint32_t OPENSSL_get_ia32cap(int idx) {
    return OPENSSL_ia32cap_P[idx];
  }
  
@@ -350,10 +350,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/crypto.c
  #elif defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64)
  
  #include <openssl/arm_arch.h>
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/asm/aesp8-ppc.pl
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/aes/asm/aesp8-ppc.pl
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/asm/aesp8-ppc.pl
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/aes/asm/aesp8-ppc.pl
 @@ -0,0 +1,3809 @@
 +#! /usr/bin/env perl
 +# Copyright 2014-2018 The OpenSSL Project Authors. All Rights Reserved.
@@ -4164,12 +4164,12 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/as
 +}
 +
 +close STDOUT or die "error closing STDOUT: $!";
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
-@@ -61,6 +61,12 @@ OPENSSL_INLINE int vpaes_capable(void) {
- OPENSSL_INLINE int vpaes_capable(void) { return CRYPTO_is_NEON_capable(); }
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/aes/internal.h
+@@ -82,6 +82,12 @@ inline int vpaes_capable(void) { return
+ inline int vpaes_capable(void) { return CRYPTO_is_NEON_capable(); }
  #endif
  
 +#elif defined(OPENSSL_PPC64LE)
@@ -4181,23 +4181,23 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/aes/in
  #endif
  
  #endif  // !NO_ASM
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/bcm.c
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/bcm.cc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/bcm.c
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/bcm.c
-@@ -101,6 +101,7 @@
- #include "self_check/fips.c.inc"
- #include "self_check/self_check.c.inc"
- #include "service_indicator/service_indicator.c.inc"
-+#include "sha/sha1-altivec.c.inc"
- #include "sha/sha1.c.inc"
- #include "sha/sha256.c.inc"
- #include "sha/sha512.c.inc"
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/bn/bn.c.inc
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/bcm.cc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/bcm.cc
+@@ -105,6 +105,7 @@
+ #include "self_check/fips.cc.inc"
+ #include "self_check/self_check.cc.inc"
+ #include "service_indicator/service_indicator.cc.inc"
++#include "sha/sha1-altivec.cc.inc"
+ #include "sha/sha1.cc.inc"
+ #include "sha/sha256.cc.inc"
+ #include "sha/sha512.cc.inc"
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/bn/bn.cc.inc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/bn/bn.c.inc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/bn/bn.c.inc
-@@ -384,6 +384,23 @@ int bn_expand(BIGNUM *bn, size_t bits) {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/bn/bn.cc.inc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/bn/bn.cc.inc
+@@ -325,6 +325,23 @@ int bn_expand(BIGNUM *bn, size_t bits) {
  }
  
  int bn_resize_words(BIGNUM *bn, size_t words) {
@@ -4221,11 +4221,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/bn/bn.
    if ((size_t)bn->width <= words) {
      if (!bn_wexpand(bn, words)) {
        return 0;
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.c.inc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.cc.inc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.c.inc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.c.inc
-@@ -1456,6 +1456,8 @@ int EVP_has_aes_hardware(void) {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.cc.inc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/cipher/e_aes.cc.inc
+@@ -1230,6 +1230,8 @@ int EVP_has_aes_hardware(void) {
    return hwaes_capable() && crypto_gcm_clmul_enabled();
  #elif defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64)
    return hwaes_capable() && CRYPTO_is_ARMv8_PMULL_capable();
@@ -4234,10 +4234,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/cipher
  #else
    return 0;
  #endif
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/asm/ghashp8-ppc.pl
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/asm/ghashp8-ppc.pl
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/asm/ghashp8-ppc.pl
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/asm/ghashp8-ppc.pl
 @@ -0,0 +1,671 @@
 +#! /usr/bin/env perl
 +# Copyright 2014-2016 The OpenSSL Project Authors. All Rights Reserved.
@@ -4910,10 +4910,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/
 +}
 +
 +close STDOUT or die "error closing STDOUT: $!"; # enforce flush
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.c.inc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.cc.inc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.c.inc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.c.inc
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.cc.inc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/gcm.cc.inc
 @@ -228,6 +228,13 @@ void CRYPTO_ghash_init(gmult_func *out_m
      *out_hash = gcm_ghash_neon;
      return;
@@ -4928,11 +4928,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/
  #endif
  
    gcm_init_nohw(out_table, H);
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
-@@ -209,5 +209,15 @@ TEST(GCMTest, ABI) {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/gcm_test.cc
+@@ -170,5 +170,15 @@ TEST(GCMTest, ABI) {
      }
    }
  #endif
@@ -4948,11 +4948,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/
 +#endif  // GHASH_ASM_PPC64LE
  }
  #endif  // SUPPORTS_ABI_TEST && !OPENSSL_NO_ASM
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
-@@ -325,6 +325,13 @@ void aes_gcm_dec_kernel(const uint8_t *i
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/modes/internal.h
+@@ -260,6 +260,13 @@ void aes_gcm_dec_kernel(const uint8_t *i
                          const u128 Htable[16]);
  #endif
  
@@ -4966,10 +4966,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/modes/
  #endif
  #endif  // OPENSSL_NO_ASM
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/rand_extra/getrandom_fillin.h
 @@ -30,6 +30,8 @@
  #define EXPECTED_NR_getrandom 278
  #elif defined(OPENSSL_ARM)
@@ -4979,11 +4979,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/rand_extra/getran
  #elif defined(OPENSSL_RISCV64)
  #define EXPECTED_NR_getrandom 278
  #endif
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/rand/rand.c.inc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/rand/rand.cc.inc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/rand/rand.c.inc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/rand/rand.c.inc
-@@ -427,6 +427,11 @@ bcm_infallible BCM_rand_bytes_with_addit
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/rand/rand.cc.inc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/rand/rand.cc.inc
+@@ -431,6 +431,11 @@ bcm_infallible BCM_rand_bytes_with_addit
      // Take a read lock around accesses to |state->drbg|. This is needed to
      // avoid returning bad entropy if we race with
      // |rand_thread_state_clear_all|.
@@ -4995,10 +4995,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/rand/r
      CRYPTO_MUTEX_lock_read(&state->clear_drbg_lock);
  #endif
      if (!CTR_DRBG_reseed(&state->drbg, seed, reseed_additional_data,
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/internal.h
 @@ -23,6 +23,16 @@
  extern "C" {
  #endif
@@ -5016,16 +5016,16 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/in
  // Define SHA{n}[_{variant}]_ASM if sha{n}_block_data_order[_{variant}] is
  // defined in assembly.
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sha1-altivec.c.inc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/sha1-altivec.cc.inc
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sha1-altivec.c.inc
-@@ -0,0 +1,361 @@
-+/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/sha1-altivec.cc.inc
+@@ -0,0 +1,369 @@
++/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.ccom)
 + * All rights reserved.
 + *
 + * This package is an SSL implementation written
-+ * by Eric Young (eay@cryptsoft.com).
++ * by Eric Young (eay@cryptsoft.ccom).
 + * The implementation was written so as to conform with Netscapes SSL.
 + *
 + * This library is free for commercial and non-commercial use as long as
@@ -5033,7 +5033,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 + * apply to all code found in this distribution, be it the RC4, RSA,
 + * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 + * included with this distribution is covered by the same copyright terms
-+ * except that the holder is Tim Hudson (tjh@cryptsoft.com).
++ * except that the holder is Tim Hudson (tjh@cryptsoft.ccom).
 + *
 + * Copyright remains Eric Young's, and as such any Copyright notices in
 + * the code are not to be removed.
@@ -5053,12 +5053,12 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 + * 3. All advertising materials mentioning features or use of this software
 + *    must display the following acknowledgement:
 + *    "This product includes cryptographic software written by
-+ *     Eric Young (eay@cryptsoft.com)"
++ *     Eric Young (eay@cryptsoft.ccom)"
 + *    The word 'cryptographic' can be left out if the rouines from the library
 + *    being used are not cryptographic related :-).
 + * 4. If you include any Windows specific code (or a derivative thereof) from
 + *    the apps directory (application code) you must include an acknowledgement:
-+ *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
++ *    "This product includes software written by Tim Hudson (tjh@cryptsoft.ccom)"
 + *
 + * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
@@ -5080,7 +5080,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 +// Altivec-optimized SHA1 in C. This is tested on ppc64le only.
 +//
 +// References:
-+// https://software.intel.com/en-us/articles/improving-the-performance-of-the-secure-hash-algorithm-1
++// https://software.intel.ccom/en-us/articles/improving-the-performance-of-the-secure-hash-algorithm-1
 +// http://arctic.org/~dean/crypto/sha1.html
 +//
 +// This code used the generic SHA-1 from OpenSSL as a basis and AltiVec
@@ -5090,6 +5090,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 +
 +#if defined(OPENSSL_PPC64LE)
 +
++#if defined(__cplusplus)
++extern "C" {
++#endif
++
 +#include <altivec.h>
 +
 +void sha1_block_data_order_ppc64(uint32_t *state, const uint8_t *data, size_t num);
@@ -5175,7 +5179,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 +  return w;
 +}
 +
-+// As pointed out by Wei Dai <weidai@eskimo.com>, F() below can be simplified
++// As pointed out by Wei Dai <weidai@eskimo.ccom>, F() below can be simplified
 +// to the code in F_00_19. Wei attributes these optimisations to Peter
 +// Gutmann's SHS code, and he attributes it to Rich Schroeppel. #define
 +// F(x,y,z) (((x) & (y))  |  ((~(x)) & (z))) I've just become aware of another
@@ -5368,6 +5372,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 +  }
 +}
 +
++#if defined(__cplusplus)
++}
++#endif
++
 +#endif  // OPENSSL_PPC64LE
 +
 +#undef K_00_19
@@ -5382,11 +5390,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
 +#undef BODY_20_39
 +#undef BODY_40_59
 +#undef BODY_60_79
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/internal.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/internal.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/internal.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/internal.h
-@@ -183,8 +183,9 @@ extern "C" {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/internal.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/internal.h
+@@ -56,8 +56,9 @@ extern "C" {
  #if !defined(OPENSSL_NO_ASM) && !defined(OPENSSL_STATIC_ARMCAP) && \
      (defined(OPENSSL_X86) || defined(OPENSSL_X86_64) ||            \
       defined(OPENSSL_ARM) || defined(OPENSSL_AARCH64))
@@ -5398,7 +5406,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/internal.h
  #define NEED_CPUID
  
  // OPENSSL_cpuid_setup initializes the platform-specific feature cache. This
-@@ -1723,6 +1724,16 @@ OPENSSL_INLINE int CRYPTO_is_ARMv8_SHA51
+@@ -1397,6 +1398,16 @@ inline int CRYPTO_is_ARMv8_SHA512_capabl
  
  #endif  // OPENSSL_ARM || OPENSSL_AARCH64
  
@@ -5415,10 +5423,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/internal.h
  #if defined(BORINGSSL_DISPATCH_TEST)
  // Runtime CPU dispatch testing support
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/perlasm/ppc-xlate.pl
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/perlasm/ppc-xlate.pl
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/perlasm/ppc-xlate.pl
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/perlasm/ppc-xlate.pl
 @@ -0,0 +1,320 @@
 +#! /usr/bin/env perl
 +# Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
@@ -5501,7 +5509,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/perlasm/ppc-xlate
 +    $ret;
 +};
 +my $text = sub {
-+    my $ret = ($flavour =~ /aix/) ? ".csect\t.text[PR],7" : ".text";
++    my $ret = ($flavour =~ /aix/) ? ".ccsect\t.text[PR],7" : ".text";
 +    $ret = ".abiversion	2\n".$ret	if ($flavour =~ /linux.*64le/);
 +    $ret;
 +};
@@ -5734,16 +5742,16 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/perlasm/ppc-xlate
 +print <<___;
 +#endif  // !OPENSSL_NO_ASM && __powerpc64__ && __ELF__
 +#if defined(__ELF__)
-+// See https://www.airs.com/blog/archives/518.
++// See https://www.airs.ccom/blog/archives/518.
 +.section .note.GNU-stack,"",\%progbits
 +#endif
 +___
 +
 +close STDOUT or die "error closing STDOUT: $!";
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/abi_test.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/test/abi_test.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/test/abi_test.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/abi_test.h
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/test/abi_test.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/test/abi_test.h
 @@ -179,7 +179,78 @@ struct alignas(16) Reg128 {
    CALLER_STATE_REGISTER(uint64_t, x28)                               \
    CALLER_STATE_REGISTER(uint64_t, x29)
@@ -5850,10 +5858,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/abi_test.h
    static_assert(sizeof...(args) <= 8,
                  "too many arguments for abi_test_trampoline");
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/asm/trampoline-ppc.pl
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/test/asm/trampoline-ppc.pl
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/asm/trampoline-ppc.pl
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/test/asm/trampoline-ppc.pl
 @@ -0,0 +1,262 @@
 +#!/usr/bin/env perl
 +# Copyright (c) 2019, Google Inc.
@@ -6117,10 +6125,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/test/asm/trampoli
 +
 +print $code;
 +close STDOUT or die "error closing STDOUT: $!";
-Index: chromium-130.0.6723.44/third_party/boringssl/src/include/openssl/target.h
+Index: chromium-133.0.6943.35/third_party/boringssl/src/include/openssl/target.h
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/include/openssl/target.h
-+++ chromium-130.0.6723.44/third_party/boringssl/src/include/openssl/target.h
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/include/openssl/target.h
++++ chromium-133.0.6943.35/third_party/boringssl/src/include/openssl/target.h
 @@ -34,6 +34,9 @@
  #elif defined(__ARMEL__) || defined(_M_ARM)
  #define OPENSSL_32_BIT
@@ -6131,11 +6139,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/include/openssl/target.h
  #elif defined(__MIPSEL__) && !defined(__LP64__)
  #define OPENSSL_32_BIT
  #define OPENSSL_MIPS
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
-@@ -37,6 +37,8 @@ int main(int argc, char **argv) {
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/acvp/modulewrapper/main.cc
+@@ -38,6 +38,8 @@ int main(int argc, char **argv) {
      puts("ARM (32-bit)");
  #elif defined(OPENSSL_AARCH64)
      puts("aarch64 (64-bit)");
@@ -6144,10 +6152,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/acvp/modu
  #else
  #error "FIPS build not supported on this architecture"
  #endif
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate.go
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate.go
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/util/fipstools/delocate/delocate.go
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate.go
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/util/fipstools/delocate/delocate.go
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate.go
 @@ -54,7 +54,8 @@ type stringWriter interface {
  type processorType int
  
@@ -6306,13 +6314,13 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +func (d *delocation) isPPC64LEAPair(statement *node32) (target, source, relative string, ok bool) {
 +	instruction := skipWS(statement.up).up
 +	assertNodeType(instruction, ruleInstructionName)
-+	name1 := d.contents(instruction)
++	name1 := d.ccontents(instruction)
 +	args1 := instructionArgs(instruction.next)
 +
 +	statement = statement.next
 +	instruction = skipWS(statement.up).up
 +	assertNodeType(instruction, ruleInstructionName)
-+	name2 := d.contents(instruction)
++	name2 := d.ccontents(instruction)
 +	args2 := instructionArgs(instruction.next)
 +
 +	if name1 != "addis" ||
@@ -6322,16 +6330,16 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +		return "", "", "", false
 +	}
 +
-+	target = d.contents(args1[0])
-+	relative = d.contents(args1[1])
-+	source1 := d.contents(args1[2])
-+	source2 := d.contents(args2[2])
++	target = d.ccontents(args1[0])
++	relative = d.ccontents(args1[1])
++	source1 := d.ccontents(args1[2])
++	source2 := d.ccontents(args2[2])
 +
 +	if !strings.HasSuffix(source1, "@ha") ||
 +		!strings.HasSuffix(source2, "@l") ||
 +		source1[:len(source1)-3] != source2[:len(source2)-2] ||
-+		d.contents(args2[0]) != target ||
-+		d.contents(args2[1]) != target {
++		d.ccontents(args2[0]) != target ||
++		d.ccontents(args2[1]) != target {
 +		return "", "", "", false
 +	}
 +
@@ -6404,7 +6412,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
  
 +func (d *delocation) processPPCInstruction(statement, instruction *node32) (*node32, error) {
 +	assertNodeType(instruction, ruleInstructionName)
-+	instructionName := d.contents(instruction)
++	instructionName := d.ccontents(instruction)
 +	isBranch := instructionName[0] == 'b'
 +
 +	argNodes := instructionArgs(instruction.next)
@@ -6425,7 +6433,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +
 +		switch arg.pegRule {
 +		case ruleRegisterOrConstant, ruleLocalLabelRef:
-+			args = append(args, d.contents(fullArg))
++			args = append(args, d.ccontents(fullArg))
 +
 +		case ruleTOCRefLow:
 +			return nil, errors.New("Found low TOC reference outside preamble pattern")
@@ -6583,7 +6591,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +			}
 +
 +			for ; memRef != nil; memRef = memRef.next {
-+				argStr += d.contents(memRef)
++				argStr += d.ccontents(memRef)
 +			}
 +
 +			args = append(args, argStr)
@@ -6629,7 +6637,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
  		forEachPath(input.ast.up, func(node *node32) {
 +			node = node.up
 +			assertNodeType(node, ruleLabelContainingDirectiveName)
-+			directive := input.contents[node.begin:node.end]
++			directive := input.ccontents[node.begin:node.end]
 +			if directive != ".localentry" {
 +				return
 +			}
@@ -6638,7 +6646,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +			assertNodeType(node, ruleSymbolArgs)
 +			node = node.up
 +			assertNodeType(node, ruleSymbolArg)
-+			symbol := input.contents[node.begin:node.end]
++			symbol := input.ccontents[node.begin:node.end]
 +			if _, ok := localEntrySymbols[symbol]; ok {
 +				panic(fmt.Sprintf("Duplicate .localentry directive found: %q in %q", symbol, input.path))
 +			}
@@ -6738,7 +6746,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
  func isSynthesized(symbol string) bool {
  	return strings.HasSuffix(symbol, "_bss_get") ||
  		symbol == "OPENSSL_ia32cap_get" ||
-@@ -1858,6 +2334,8 @@ func detectProcessor(input inputFile) pr
+@@ -1894,6 +2370,8 @@ func detectProcessor(input inputFile) pr
  		switch instructionName {
  		case "movq", "call", "leaq":
  			return x86_64
@@ -6747,23 +6755,27 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
  		case "str", "bl", "ldr", "st1":
  			return aarch64
  		}
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
-@@ -12,7 +12,7 @@
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate.peg
+@@ -12,9 +12,9 @@
  # OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
  # CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
  
 -# This is a rough parser for x86-64 and aarch64 assembly designed to work with
-+# This is a rough parser for x86-64 and ppc64le assembly designed to work with
- # https://github.com/pointlander/peg. delocate.go has a go:generate line for
- # rebuilding delocate.peg.go from this file.
+-# https://github.com/pointlander/peg. delocate.go has a go:generate line for
+-# rebuilding delocate.peg.go from this file.
++# This is a rough parser for x86-64, ppc64el, and aarch64 assembly designed
++# to work with https://github.com/pointlander/peg. delocate.go has a
++# go:generate line for rebuilding delocate.peg.go from this file.
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
+ # To regenerate delocate.peg.go:
+ #
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/delocate_test.go
 @@ -39,6 +39,11 @@ func (test *delocateTest) Path(file stri
  
  var delocateTests = []delocateTest{
@@ -6776,10 +6788,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
  	{"x86_64-Basic", []string{"in.s"}, "out.s"},
  	{"x86_64-BSS", []string{"in.s"}, "out.s"},
  	{"x86_64-GOTRewrite", []string{"in.s"}, "out.s"},
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/in.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/in.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/in.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/in.s
 @@ -0,0 +1,9 @@
 +	.text
 +foo:
@@ -6790,13 +6802,13 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +	.localentry foo,.-foo
 +.LVL0:
 +	bl
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/out.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/out.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/out.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-GlobalEntry/out.s
 @@ -0,0 +1,62 @@
 +.text
-+.file 1 "inserted_by_delocate.c"
++.file 1 "inserted_by_delocate.cc"
 +.loc 1 1 0
 +BORINGSSL_bcm_text_start:
 +	.text
@@ -6857,22 +6869,22 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +.byte 0xff
 +.byte 0x31
 +.byte 0x80
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/in.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/in.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/in.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/in.s
 @@ -0,0 +1,4 @@
 +	.text
 +foo:
 +	addis 22,2,bar@toc@ha
 +	ld 0,bar@toc@l(22)
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/out.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/out.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/out.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-LoadToR0/out.s
 @@ -0,0 +1,72 @@
 +.text
-+.file 1 "inserted_by_delocate.c"
++.file 1 "inserted_by_delocate.cc"
 +.loc 1 1 0
 +BORINGSSL_bcm_text_start:
 +	.text
@@ -6943,12 +6955,12 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +.byte 0xff
 +.byte 0x31
 +.byte 0x80
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/in.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/in.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/in.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/in.s
 @@ -0,0 +1,161 @@
-+	.file	"foo.c"
++	.file	"foo.cc"
 +	.abiversion 2
 +	.section	".toc","aw"
 +	.section	".text"
@@ -7109,16 +7121,16 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +	.size	exported_function,.-exported_function
 +	.ident	"GCC: (Ubuntu 4.9.2-10ubuntu13) 4.9.2"
 +	.section	.note.GNU-stack,"",@progbits
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/out.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/out.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/out.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample/out.s
 @@ -0,0 +1,552 @@
 +.text
-+.file 1 "inserted_by_delocate.c"
++.file 1 "inserted_by_delocate.cc"
 +.loc 1 1 0
 +BORINGSSL_bcm_text_start:
-+	.file	"foo.c"
++	.file	"foo.cc"
 +	.abiversion 2
 +	.section	".toc","aw"
 +# WAS .section	".text"
@@ -7666,12 +7678,12 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +.byte 0xff
 +.byte 0x31
 +.byte 0x80
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/in.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/in.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/in.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/in.s
 @@ -0,0 +1,226 @@
-+	.file	"foo.c"
++	.file	"foo.cc"
 +	.abiversion 2
 +	.section	".toc","aw"
 +	.section	".text"
@@ -7897,16 +7909,16 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +	.zero	20
 +	.ident	"GCC: (Ubuntu 4.9.2-10ubuntu13) 4.9.2"
 +	.section	.note.GNU-stack,"",@progbits
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/out.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/out.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/out.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-Sample2/out.s
 @@ -0,0 +1,677 @@
 +.text
-+.file 1 "inserted_by_delocate.c"
++.file 1 "inserted_by_delocate.cc"
 +.loc 1 1 0
 +BORINGSSL_bcm_text_start:
-+	.file	"foo.c"
++	.file	"foo.cc"
 +	.abiversion 2
 +	.section	".toc","aw"
 +# WAS .section	".text"
@@ -8579,10 +8591,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +.byte 0xff
 +.byte 0x31
 +.byte 0x80
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/in.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/in.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/in.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/in.s
 @@ -0,0 +1,23 @@
 +	.text
 +foo:
@@ -8607,13 +8619,13 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +
 +	addis 4, 2, 1+foo-2@toc@ha+3
 +	addi 4, 4, 1+foo-2@toc@l+3
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/out.s
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/out.s
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/out.s
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/fipstools/delocate/testdata/ppc64le-TOCWithOffset/out.s
 @@ -0,0 +1,178 @@
 +.text
-+.file 1 "inserted_by_delocate.c"
++.file 1 "inserted_by_delocate.cc"
 +.loc 1 1 0
 +BORINGSSL_bcm_text_start:
 +	.text
@@ -8790,11 +8802,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/fipstools/delocate/
 +.byte 0xff
 +.byte 0x31
 +.byte 0x80
-Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.c.inc
+Index: chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.cc.inc
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.c.inc
-+++ chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.c.inc
-@@ -408,6 +408,10 @@ static void sha1_block_data_order(uint32
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.cc.inc
++++ chromium-133.0.6943.35/third_party/boringssl/src/crypto/fipsmodule/sha/sha1.cc.inc
+@@ -362,6 +362,10 @@ static void sha1_block_data_order(uint32
      return;
    }
  #endif
@@ -8805,11 +8817,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/crypto/fipsmodule/sha/sh
    sha1_block_data_order_nohw(state, data, num);
  }
  
-Index: chromium-130.0.6723.44/third_party/boringssl/src/build.json
+Index: chromium-133.0.6943.35/third_party/boringssl/src/build.json
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/build.json
-+++ chromium-130.0.6723.44/third_party/boringssl/src/build.json
-@@ -118,6 +118,10 @@
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/build.json
++++ chromium-133.0.6943.35/third_party/boringssl/src/build.json
+@@ -126,6 +126,10 @@
              {"src": "crypto/fipsmodule/sha/asm/sha512-armv4.pl"},
              {"src": "crypto/fipsmodule/aes/asm/vpaes-armv7.pl"}
          ],
@@ -8820,15 +8832,15 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/build.json
          "perlasm_x86": [
              {"src": "crypto/fipsmodule/aes/asm/aesni-x86.pl"},
              {"src": "crypto/fipsmodule/bn/asm/bn-586.pl"},
-@@ -219,6 +223,7 @@
-             "crypto/cpu_arm_freebsd.c",
-             "crypto/cpu_arm_linux.c",
-             "crypto/cpu_intel.c",
-+            "crypto/cpu_ppc64le.c",
-             "crypto/crypto.c",
-             "crypto/curve25519/curve25519.c",
-             "crypto/curve25519/curve25519_64_adx.c",
-@@ -799,6 +804,9 @@
+@@ -229,6 +233,7 @@
+             "crypto/cpu_arm_freebsd.cc",
+             "crypto/cpu_arm_linux.cc",
+             "crypto/cpu_intel.cc",
++            "crypto/cpu_ppc64le.cc",
+             "crypto/crypto.cc",
+             "crypto/curve25519/curve25519.cc",
+             "crypto/curve25519/curve25519_64_adx.cc",
+@@ -786,6 +791,9 @@
          "perlasm_arm": [
              {"src": "crypto/test/asm/trampoline-armv4.pl"}
          ],
@@ -8838,10 +8850,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/build.json
          "perlasm_x86": [
              {"src": "crypto/test/asm/trampoline-x86.pl"}
          ],
-Index: chromium-130.0.6723.44/third_party/boringssl/src/util/pregenerate/build.go
+Index: chromium-133.0.6943.35/third_party/boringssl/src/util/pregenerate/build.go
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/util/pregenerate/build.go
-+++ chromium-130.0.6723.44/third_party/boringssl/src/util/pregenerate/build.go
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/util/pregenerate/build.go
++++ chromium-133.0.6943.35/third_party/boringssl/src/util/pregenerate/build.go
 @@ -38,6 +38,7 @@ type InputTarget struct {
  	// architecture.
  	PerlasmAarch64 []PerlasmSource `json:"perlasm_aarch64,omitempty"`
@@ -8860,10 +8872,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/util/pregenerate/build.g
  	for _, p := range in.PerlasmX86 {
  		addPerlasmTask(&out.Asm, &p, "-apple.S", []string{"macosx", "-fPIC"})
  		addPerlasmTask(&out.Asm, &p, "-linux.S", []string{"elf", "-fPIC"})
-Index: chromium-130.0.6723.44/third_party/boringssl/README.ppc64le
+Index: chromium-133.0.6943.35/third_party/boringssl/README.ppc64le
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/README.ppc64le
++++ chromium-133.0.6943.35/third_party/boringssl/README.ppc64le
 @@ -0,0 +1,8 @@
 +==============================================================
 +To recreate boringssl pregenerated files patch for ppc64le:
@@ -8873,11 +8885,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/README.ppc64le
 +go run ./util/pregenerate
 +cd ../../../../
 +diff -urN chromium-*/third_party/boringssl/src/gen.orig chromium-*/third_party/boringssl/src/gen
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.gni
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.gni
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/gen/sources.gni
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.gni
-@@ -107,6 +107,7 @@ bcm_sources_asm = [
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/gen/sources.gni
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.gni
+@@ -119,6 +119,7 @@ bcm_sources_asm = [
    "gen/bcm/aesv8-gcm-armv8-apple.S",
    "gen/bcm/aesv8-gcm-armv8-linux.S",
    "gen/bcm/aesv8-gcm-armv8-win.S",
@@ -8885,7 +8897,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.gni
    "gen/bcm/armv4-mont-linux.S",
    "gen/bcm/armv8-mont-apple.S",
    "gen/bcm/armv8-mont-linux.S",
-@@ -123,6 +124,7 @@ bcm_sources_asm = [
+@@ -135,6 +136,7 @@ bcm_sources_asm = [
    "gen/bcm/ghash-neon-armv8-apple.S",
    "gen/bcm/ghash-neon-armv8-linux.S",
    "gen/bcm/ghash-neon-armv8-win.S",
@@ -8893,11 +8905,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.gni
    "gen/bcm/ghash-ssse3-x86-apple.S",
    "gen/bcm/ghash-ssse3-x86-linux.S",
    "gen/bcm/ghash-ssse3-x86_64-apple.S",
-@@ -314,6 +316,7 @@ crypto_sources = [
-   "crypto/cpu_arm_freebsd.c",
-   "crypto/cpu_arm_linux.c",
-   "crypto/cpu_intel.c",
-+  "crypto/cpu_ppc64le.c",
-   "crypto/crypto.c",
-   "crypto/curve25519/curve25519.c",
-   "crypto/curve25519/curve25519_64_adx.c",
+@@ -328,6 +330,7 @@ crypto_sources = [
+   "crypto/cpu_arm_freebsd.cc",
+   "crypto/cpu_arm_linux.cc",
+   "crypto/cpu_intel.cc",
++  "crypto/cpu_ppc64le.cc",
+   "crypto/crypto.cc",
+   "crypto/curve25519/curve25519.cc",
+   "crypto/curve25519/curve25519_64_adx.cc",

diff --git a/0001-third-party-hwy-wrong-include.patch b/0001-third-party-hwy-wrong-include.patch
new file mode 100644
index 0000000..c9aa77b
--- /dev/null
+++ b/0001-third-party-hwy-wrong-include.patch
@@ -0,0 +1,11 @@
+--- a/third_party/highway/src/hwy/targets.cc
++++ b/third_party/highway/src/hwy/targets.cc
+@@ -35,7 +35,7 @@
+     HWY_OS_LINUX
+ // sys/auxv.h does not always include asm/hwcap.h, or define HWCAP*, hence we
+ // still include this directly. See #1199.
+-#ifndef TOOLCHAIN_MISS_ASM_HWCAP_H
++#if !defined(TOOLCHAIN_MISS_ASM_HWCAP_H) && !defined(HWY_ARCH_PPC)
+ #include <asm/hwcap.h>
+ #endif
+ #if HWY_HAVE_AUXV

diff --git a/0002-Add-PPC64-generated-files-for-boringssl.patch b/0002-Add-PPC64-generated-files-for-boringssl.patch
index 535a0d6..bd2d9e4 100644
--- a/0002-Add-PPC64-generated-files-for-boringssl.patch
+++ b/0002-Add-PPC64-generated-files-for-boringssl.patch
@@ -1,7 +1,7 @@
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/aesp8-ppc-linux.S
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/bcm/aesp8-ppc-linux.S
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/aesp8-ppc-linux.S
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/bcm/aesp8-ppc-linux.S
 @@ -0,0 +1,3673 @@
 +// This file is generated from a similarly-named Perl script in the BoringSSL
 +// source tree. Do not edit by hand.
@@ -3673,13 +3673,13 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/aesp8-ppc-linux.
 +.byte	0,12,0x14,0,0,0,0,0
 +#endif  // !OPENSSL_NO_ASM && __powerpc64__ && __ELF__
 +#if defined(__ELF__)
-+// See https://www.airs.com/blog/archives/518.
++// See https://www.airs.ccom/blog/archives/518.
 +.section .note.GNU-stack,"",%progbits
 +#endif
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/ghashp8-ppc-linux.S
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/bcm/ghashp8-ppc-linux.S
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/ghashp8-ppc-linux.S
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/bcm/ghashp8-ppc-linux.S
 @@ -0,0 +1,590 @@
 +// This file is generated from a similarly-named Perl script in the BoringSSL
 +// source tree. Do not edit by hand.
@@ -4268,14 +4268,14 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/bcm/ghashp8-ppc-linu
 +.align	2
 +#endif  // !OPENSSL_NO_ASM && __powerpc64__ && __ELF__
 +#if defined(__ELF__)
-+// See https://www.airs.com/blog/archives/518.
++// See https://www.airs.ccom/blog/archives/518.
 +.section .note.GNU-stack,"",%progbits
 +#endif
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.cmake
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.cmake
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/gen/sources.cmake
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.cmake
-@@ -106,6 +106,7 @@ set(
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/gen/sources.cmake
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.cmake
+@@ -118,6 +118,7 @@ set(
    gen/bcm/aesni-x86-linux.S
    gen/bcm/aesni-x86_64-apple.S
    gen/bcm/aesni-x86_64-linux.S
@@ -4283,7 +4283,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.cmake
    gen/bcm/aesv8-armv7-linux.S
    gen/bcm/aesv8-armv8-apple.S
    gen/bcm/aesv8-armv8-linux.S
-@@ -137,6 +138,7 @@ set(
+@@ -149,6 +150,7 @@ set(
    gen/bcm/ghash-x86-linux.S
    gen/bcm/ghash-x86_64-apple.S
    gen/bcm/ghash-x86_64-linux.S
@@ -4291,1467 +4291,15 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.cmake
    gen/bcm/ghashv8-armv7-linux.S
    gen/bcm/ghashv8-armv8-apple.S
    gen/bcm/ghashv8-armv8-linux.S
-@@ -328,6 +330,7 @@ set(
-   crypto/cpu_arm_freebsd.c
-   crypto/cpu_arm_linux.c
-   crypto/cpu_intel.c
-+  crypto/cpu_ppc64le.c
-   crypto/crypto.c
-   crypto/curve25519/curve25519.c
-   crypto/curve25519/curve25519_64_adx.c
-@@ -805,37 +808,6 @@ set(
-   CRYPTO_TEST_DATA
- 
-   crypto/blake2/blake2b256_tests.txt
--  crypto/cipher_extra/test/aes_128_cbc_sha1_tls_implicit_iv_tests.txt
--  crypto/cipher_extra/test/aes_128_cbc_sha1_tls_tests.txt
--  crypto/cipher_extra/test/aes_128_ccm_bluetooth_8_tests.txt
--  crypto/cipher_extra/test/aes_128_ccm_bluetooth_tests.txt
--  crypto/cipher_extra/test/aes_128_ccm_matter_tests.txt
--  crypto/cipher_extra/test/aes_128_ctr_hmac_sha256.txt
--  crypto/cipher_extra/test/aes_128_gcm_randnonce_tests.txt
--  crypto/cipher_extra/test/aes_128_gcm_siv_tests.txt
--  crypto/cipher_extra/test/aes_128_gcm_tests.txt
--  crypto/cipher_extra/test/aes_192_gcm_tests.txt
--  crypto/cipher_extra/test/aes_256_cbc_sha1_tls_implicit_iv_tests.txt
--  crypto/cipher_extra/test/aes_256_cbc_sha1_tls_tests.txt
--  crypto/cipher_extra/test/aes_256_ctr_hmac_sha256.txt
--  crypto/cipher_extra/test/aes_256_gcm_randnonce_tests.txt
--  crypto/cipher_extra/test/aes_256_gcm_siv_tests.txt
--  crypto/cipher_extra/test/aes_256_gcm_tests.txt
--  crypto/cipher_extra/test/chacha20_poly1305_tests.txt
--  crypto/cipher_extra/test/cipher_tests.txt
--  crypto/cipher_extra/test/des_ede3_cbc_sha1_tls_implicit_iv_tests.txt
--  crypto/cipher_extra/test/des_ede3_cbc_sha1_tls_tests.txt
--  crypto/cipher_extra/test/nist_cavp/aes_128_cbc.txt
--  crypto/cipher_extra/test/nist_cavp/aes_128_ctr.txt
--  crypto/cipher_extra/test/nist_cavp/aes_128_gcm.txt
--  crypto/cipher_extra/test/nist_cavp/aes_192_cbc.txt
--  crypto/cipher_extra/test/nist_cavp/aes_192_ctr.txt
--  crypto/cipher_extra/test/nist_cavp/aes_256_cbc.txt
--  crypto/cipher_extra/test/nist_cavp/aes_256_ctr.txt
--  crypto/cipher_extra/test/nist_cavp/aes_256_gcm.txt
--  crypto/cipher_extra/test/nist_cavp/tdes_cbc.txt
--  crypto/cipher_extra/test/nist_cavp/tdes_ecb.txt
--  crypto/cipher_extra/test/xchacha20_poly1305_tests.txt
-   crypto/curve25519/ed25519_tests.txt
-   crypto/dilithium/dilithium_tests.txt
-   crypto/dilithium/edge_cases_draft_dilithium3_sign.txt
-@@ -1279,1413 +1251,6 @@ set(
- set(
-   PKI_TEST_DATA
- 
--  pki/testdata/cert_issuer_source_static_unittest/c1.pem
--  pki/testdata/cert_issuer_source_static_unittest/c2.pem
--  pki/testdata/cert_issuer_source_static_unittest/d.pem
--  pki/testdata/cert_issuer_source_static_unittest/e1.pem
--  pki/testdata/cert_issuer_source_static_unittest/e2.pem
--  pki/testdata/cert_issuer_source_static_unittest/i1_1.pem
--  pki/testdata/cert_issuer_source_static_unittest/i1_2.pem
--  pki/testdata/cert_issuer_source_static_unittest/i2.pem
--  pki/testdata/cert_issuer_source_static_unittest/i3_1.pem
--  pki/testdata/cert_issuer_source_static_unittest/i3_2.pem
--  pki/testdata/cert_issuer_source_static_unittest/root.pem
--  pki/testdata/certificate_policies_unittest/anypolicy.pem
--  pki/testdata/certificate_policies_unittest/anypolicy_with_qualifier.pem
--  pki/testdata/certificate_policies_unittest/invalid-anypolicy_with_custom_qualifier.pem
--  pki/testdata/certificate_policies_unittest/invalid-empty.pem
--  pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_dupe.pem
--  pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_policyinformation_unconsumed_data.pem
--  pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_policyqualifierinfo_unconsumed_data.pem
--  pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_with_empty_qualifiers_sequence.pem
--  pki/testdata/certificate_policies_unittest/invalid-policy_identifier_not_oid.pem
--  pki/testdata/certificate_policies_unittest/policy_1_2_3.pem
--  pki/testdata/certificate_policies_unittest/policy_1_2_3_and_1_2_4.pem
--  pki/testdata/certificate_policies_unittest/policy_1_2_3_and_1_2_4_with_qualifiers.pem
--  pki/testdata/certificate_policies_unittest/policy_1_2_3_with_custom_qualifier.pem
--  pki/testdata/certificate_policies_unittest/policy_1_2_3_with_qualifier.pem
--  pki/testdata/crl_unittest/bad_crldp_has_crlissuer.pem
--  pki/testdata/crl_unittest/bad_fake_critical_crlentryextension.pem
--  pki/testdata/crl_unittest/bad_fake_critical_extension.pem
--  pki/testdata/crl_unittest/bad_idp_contains_wrong_uri.pem
--  pki/testdata/crl_unittest/bad_idp_indirectcrl.pem
--  pki/testdata/crl_unittest/bad_idp_onlycontainscacerts.pem
--  pki/testdata/crl_unittest/bad_idp_onlycontainscacerts_no_basic_constraints.pem
--  pki/testdata/crl_unittest/bad_idp_onlycontainsusercerts.pem
--  pki/testdata/crl_unittest/bad_idp_uri_and_onlycontainscacerts.pem
--  pki/testdata/crl_unittest/bad_idp_uri_and_onlycontainsusercerts.pem
--  pki/testdata/crl_unittest/bad_key_rollover_signature.pem
--  pki/testdata/crl_unittest/bad_nextupdate_too_old.pem
--  pki/testdata/crl_unittest/bad_signature.pem
--  pki/testdata/crl_unittest/bad_thisupdate_in_future.pem
--  pki/testdata/crl_unittest/bad_thisupdate_too_old.pem
--  pki/testdata/crl_unittest/bad_wrong_issuer.pem
--  pki/testdata/crl_unittest/good.pem
--  pki/testdata/crl_unittest/good_fake_extension.pem
--  pki/testdata/crl_unittest/good_fake_extension_no_nextupdate.pem
--  pki/testdata/crl_unittest/good_generalizedtime.pem
--  pki/testdata/crl_unittest/good_idp_contains_uri.pem
--  pki/testdata/crl_unittest/good_idp_onlycontainscacerts.pem
--  pki/testdata/crl_unittest/good_idp_onlycontainsusercerts.pem
--  pki/testdata/crl_unittest/good_idp_onlycontainsusercerts_no_basic_constraints.pem
--  pki/testdata/crl_unittest/good_idp_uri_and_onlycontainscacerts.pem
--  pki/testdata/crl_unittest/good_idp_uri_and_onlycontainsusercerts.pem
--  pki/testdata/crl_unittest/good_issuer_name_normalization.pem
--  pki/testdata/crl_unittest/good_issuer_no_keyusage.pem
--  pki/testdata/crl_unittest/good_key_rollover.pem
--  pki/testdata/crl_unittest/good_no_crldp.pem
--  pki/testdata/crl_unittest/good_no_nextupdate.pem
--  pki/testdata/crl_unittest/good_no_version.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_crlentryextensions.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_extensions.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_nextupdate.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_revocationdate.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_revokedcerts.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_signaturevalue.pem
--  pki/testdata/crl_unittest/invalid_garbage_after_thisupdate.pem
--  pki/testdata/crl_unittest/invalid_garbage_crlentry.pem
--  pki/testdata/crl_unittest/invalid_garbage_issuer_name.pem
--  pki/testdata/crl_unittest/invalid_garbage_revocationdate.pem
--  pki/testdata/crl_unittest/invalid_garbage_revoked_serial_number.pem
--  pki/testdata/crl_unittest/invalid_garbage_signaturealgorithm.pem
--  pki/testdata/crl_unittest/invalid_garbage_signaturevalue.pem
--  pki/testdata/crl_unittest/invalid_garbage_tbs_signature_algorithm.pem
--  pki/testdata/crl_unittest/invalid_garbage_tbscertlist.pem
--  pki/testdata/crl_unittest/invalid_garbage_thisupdate.pem
--  pki/testdata/crl_unittest/invalid_garbage_version.pem
--  pki/testdata/crl_unittest/invalid_idp_dpname_choice_extra_data.pem
--  pki/testdata/crl_unittest/invalid_idp_empty_sequence.pem
--  pki/testdata/crl_unittest/invalid_idp_onlycontains_user_and_ca_certs.pem
--  pki/testdata/crl_unittest/invalid_idp_onlycontainsusercerts_v1_leaf.pem
--  pki/testdata/crl_unittest/invalid_issuer_keyusage_no_crlsign.pem
--  pki/testdata/crl_unittest/invalid_key_rollover_issuer_keyusage_no_crlsign.pem
--  pki/testdata/crl_unittest/invalid_mismatched_signature_algorithm.pem
--  pki/testdata/crl_unittest/invalid_revoked_empty_sequence.pem
--  pki/testdata/crl_unittest/invalid_v1_explicit.pem
--  pki/testdata/crl_unittest/invalid_v1_with_crlentryextension.pem
--  pki/testdata/crl_unittest/invalid_v1_with_extension.pem
--  pki/testdata/crl_unittest/invalid_v3.pem
--  pki/testdata/crl_unittest/revoked.pem
--  pki/testdata/crl_unittest/revoked_fake_crlentryextension.pem
--  pki/testdata/crl_unittest/revoked_generalized_revocationdate.pem
--  pki/testdata/crl_unittest/revoked_key_rollover.pem
--  pki/testdata/crl_unittest/revoked_no_nextupdate.pem
--  pki/testdata/name_constraints_unittest/directoryname-excludeall.pem
--  pki/testdata/name_constraints_unittest/directoryname-excluded.pem
--  pki/testdata/name_constraints_unittest/directoryname.pem
--  pki/testdata/name_constraints_unittest/directoryname_and_dnsname.pem
--  pki/testdata/name_constraints_unittest/directoryname_and_dnsname_and_ipaddress.pem
--  pki/testdata/name_constraints_unittest/dnsname-exclude_dot.pem
--  pki/testdata/name_constraints_unittest/dnsname-excludeall.pem
--  pki/testdata/name_constraints_unittest/dnsname-excluded.pem
--  pki/testdata/name_constraints_unittest/dnsname-excluded_with_leading_dot.pem
--  pki/testdata/name_constraints_unittest/dnsname-permitted_two_dot.pem
--  pki/testdata/name_constraints_unittest/dnsname-permitted_with_leading_dot.pem
--  pki/testdata/name_constraints_unittest/dnsname-with_max.pem
--  pki/testdata/name_constraints_unittest/dnsname-with_min_0.pem
--  pki/testdata/name_constraints_unittest/dnsname-with_min_0_and_max.pem
--  pki/testdata/name_constraints_unittest/dnsname-with_min_1.pem
--  pki/testdata/name_constraints_unittest/dnsname-with_min_1_and_max.pem
--  pki/testdata/name_constraints_unittest/dnsname.pem
--  pki/testdata/name_constraints_unittest/dnsname2.pem
--  pki/testdata/name_constraints_unittest/edipartyname-excluded.pem
--  pki/testdata/name_constraints_unittest/edipartyname-permitted.pem
--  pki/testdata/name_constraints_unittest/invalid-empty_excluded_subtree.pem
--  pki/testdata/name_constraints_unittest/invalid-empty_permitted_subtree.pem
--  pki/testdata/name_constraints_unittest/invalid-no_subtrees.pem
--  pki/testdata/name_constraints_unittest/ipaddress-excludeall.pem
--  pki/testdata/name_constraints_unittest/ipaddress-excluded.pem
--  pki/testdata/name_constraints_unittest/ipaddress-invalid_addr.pem
--  pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_1.pem
--  pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_2.pem
--  pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_3.pem
--  pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_4.pem
--  pki/testdata/name_constraints_unittest/ipaddress-mapped_addrs.pem
--  pki/testdata/name_constraints_unittest/ipaddress-permit_all.pem
--  pki/testdata/name_constraints_unittest/ipaddress-permit_prefix1.pem
--  pki/testdata/name_constraints_unittest/ipaddress-permit_prefix31.pem
--  pki/testdata/name_constraints_unittest/ipaddress-permit_singlehost.pem
--  pki/testdata/name_constraints_unittest/ipaddress.pem
--  pki/testdata/name_constraints_unittest/name-ca.pem
--  pki/testdata/name_constraints_unittest/name-de.pem
--  pki/testdata/name_constraints_unittest/name-empty.pem
--  pki/testdata/name_constraints_unittest/name-jp-tokyo.pem
--  pki/testdata/name_constraints_unittest/name-jp.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-1.1.1.1.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-192.168.1.1.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-email-invalidstring.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-email-localpartcase.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-email-multiple.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-email.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-foo.com.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-ipv6.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona-permitted.example.com.pem
--  pki/testdata/name_constraints_unittest/name-us-arizona.pem
--  pki/testdata/name_constraints_unittest/name-us-california-192.168.1.1.pem
--  pki/testdata/name_constraints_unittest/name-us-california-mountain_view.pem
--  pki/testdata/name_constraints_unittest/name-us-california-permitted.example.com.pem
--  pki/testdata/name_constraints_unittest/name-us-california.pem
--  pki/testdata/name_constraints_unittest/name-us.pem
--  pki/testdata/name_constraints_unittest/othername-excluded.pem
--  pki/testdata/name_constraints_unittest/othername-permitted.pem
--  pki/testdata/name_constraints_unittest/registeredid-excluded.pem
--  pki/testdata/name_constraints_unittest/registeredid-permitted.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-empty.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-hostname.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-hostnamewithat.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-ipv4.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-quoted.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded-subdomains.pem
--  pki/testdata/name_constraints_unittest/rfc822name-excluded.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-empty.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-hostname.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-hostnamewithat.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-ipv4.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-quoted.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted-subdomains.pem
--  pki/testdata/name_constraints_unittest/rfc822name-permitted.pem
--  pki/testdata/name_constraints_unittest/san-directoryname.pem
--  pki/testdata/name_constraints_unittest/san-dnsname.pem
--  pki/testdata/name_constraints_unittest/san-edipartyname.pem
--  pki/testdata/name_constraints_unittest/san-excluded-directoryname.pem
--  pki/testdata/name_constraints_unittest/san-excluded-dnsname.pem
--  pki/testdata/name_constraints_unittest/san-excluded-ipaddress.pem
--  pki/testdata/name_constraints_unittest/san-invalid-empty.pem
--  pki/testdata/name_constraints_unittest/san-invalid-ipaddress.pem
--  pki/testdata/name_constraints_unittest/san-ipaddress4.pem
--  pki/testdata/name_constraints_unittest/san-ipaddress6.pem
--  pki/testdata/name_constraints_unittest/san-othername.pem
--  pki/testdata/name_constraints_unittest/san-permitted.pem
--  pki/testdata/name_constraints_unittest/san-registeredid.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-domaincase.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-empty-localpart.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-empty.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-ipv4.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-localpartcase.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-multiple.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-no-at.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-quoted.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-subdomain-no-at.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-subdomain-two-ats.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-subdomain.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-subdomaincase.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name-two-ats.pem
--  pki/testdata/name_constraints_unittest/san-rfc822name.pem
--  pki/testdata/name_constraints_unittest/san-uri.pem
--  pki/testdata/name_constraints_unittest/san-x400address.pem
--  pki/testdata/name_constraints_unittest/uri-excluded.pem
--  pki/testdata/name_constraints_unittest/uri-permitted.pem
--  pki/testdata/name_constraints_unittest/x400address-excluded.pem
--  pki/testdata/name_constraints_unittest/x400address-permitted.pem
--  pki/testdata/nist-pkits/certs/AllCertificatesNoPoliciesTest2EE.crt
--  pki/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest10EE.crt
--  pki/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest13EE.crt
--  pki/testdata/nist-pkits/certs/AllCertificatesanyPolicyTest11EE.crt
--  pki/testdata/nist-pkits/certs/AnyPolicyTest14EE.crt
--  pki/testdata/nist-pkits/certs/BadCRLIssuerNameCACert.crt
--  pki/testdata/nist-pkits/certs/BadCRLSignatureCACert.crt
--  pki/testdata/nist-pkits/certs/BadSignedCACert.crt
--  pki/testdata/nist-pkits/certs/BadnotAfterDateCACert.crt
--  pki/testdata/nist-pkits/certs/BadnotBeforeDateCACert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCACert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCRLCert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyCACert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyCACert.crt
--  pki/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt
--  pki/testdata/nist-pkits/certs/CPSPointerQualifierTest20EE.crt
--  pki/testdata/nist-pkits/certs/DSACACert.crt
--  pki/testdata/nist-pkits/certs/DSAParametersInheritedCACert.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest12EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest3EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest4EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest5EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest7EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest8EE.crt
--  pki/testdata/nist-pkits/certs/DifferentPoliciesTest9EE.crt
--  pki/testdata/nist-pkits/certs/GeneralizedTimeCRLnextUpdateCACert.crt
--  pki/testdata/nist-pkits/certs/GoodCACert.crt
--  pki/testdata/nist-pkits/certs/GoodsubCACert.crt
--  pki/testdata/nist-pkits/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt
--  pki/testdata/nist-pkits/certs/InvalidBadCRLIssuerNameTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidBadCRLSignatureTest4EE.crt
--  pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt
--  pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidCASignatureTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidCAnotAfterDateTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidCAnotBeforeDateTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest31EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest33EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest38EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest28EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest29EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest12EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest13EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest15EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest16EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest17EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest20EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest7EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest9EE.crt
--  pki/testdata/nist-pkits/certs/InvalidDSASignatureTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidEESignatureTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidEEnotAfterDateTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidEEnotBeforeDateTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest23EE.crt
--  pki/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest26EE.crt
--  pki/testdata/nist-pkits/certs/InvalidLongSerialNumberTest18EE.crt
--  pki/testdata/nist-pkits/certs/InvalidMappingFromanyPolicyTest7EE.crt
--  pki/testdata/nist-pkits/certs/InvalidMappingToanyPolicyTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidMissingCRLTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidMissingbasicConstraintsTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidNameChainingOrderTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidNameChainingTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidNegativeSerialNumberTest15EE.crt
--  pki/testdata/nist-pkits/certs/InvalidOldCRLnextUpdateTest11EE.crt
--  pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest4EE.crt
--  pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest22EE.crt
--  pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest24EE.crt
--  pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest26EE.crt
--  pki/testdata/nist-pkits/certs/InvalidRevokedCATest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidRevokedEETest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedpathLenConstraintTest16EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt
--  pki/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt
--  pki/testdata/nist-pkits/certs/InvalidURInameConstraintsTest35EE.crt
--  pki/testdata/nist-pkits/certs/InvalidURInameConstraintsTest37EE.crt
--  pki/testdata/nist-pkits/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest9EE.crt
--  pki/testdata/nist-pkits/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidWrongCRLTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcAFalseTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcAFalseTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest27EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest31EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest32EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest34EE.crt
--  pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest35EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest4EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest9EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddistributionPointTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddistributionPointTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddistributionPointTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddistributionPointTest8EE.crt
--  pki/testdata/nist-pkits/certs/InvaliddistributionPointTest9EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest4EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt
--  pki/testdata/nist-pkits/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt
--  pki/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlyContainsAttributeCertsTest14EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlyContainsCACertsTest12EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlyContainsUserCertsTest11EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest15EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest16EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest17EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest20EE.crt
--  pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest21EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest10EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest11EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest12EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest5EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest6EE.crt
--  pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest9EE.crt
--  pki/testdata/nist-pkits/certs/Invalidpre2000CRLnextUpdateTest12EE.crt
--  pki/testdata/nist-pkits/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt
--  pki/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest3EE.crt
--  pki/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest5EE.crt
--  pki/testdata/nist-pkits/certs/LongSerialNumberCACert.crt
--  pki/testdata/nist-pkits/certs/Mapping1to2CACert.crt
--  pki/testdata/nist-pkits/certs/MappingFromanyPolicyCACert.crt
--  pki/testdata/nist-pkits/certs/MappingToanyPolicyCACert.crt
--  pki/testdata/nist-pkits/certs/MissingbasicConstraintsCACert.crt
--  pki/testdata/nist-pkits/certs/NameOrderingCACert.crt
--  pki/testdata/nist-pkits/certs/NegativeSerialNumberCACert.crt
--  pki/testdata/nist-pkits/certs/NoCRLCACert.crt
--  pki/testdata/nist-pkits/certs/NoPoliciesCACert.crt
--  pki/testdata/nist-pkits/certs/NoissuingDistributionPointCACert.crt
--  pki/testdata/nist-pkits/certs/OldCRLnextUpdateCACert.crt
--  pki/testdata/nist-pkits/certs/OverlappingPoliciesTest6EE.crt
--  pki/testdata/nist-pkits/certs/P12Mapping1to3CACert.crt
--  pki/testdata/nist-pkits/certs/P12Mapping1to3subCACert.crt
--  pki/testdata/nist-pkits/certs/P12Mapping1to3subsubCACert.crt
--  pki/testdata/nist-pkits/certs/P1Mapping1to234CACert.crt
--  pki/testdata/nist-pkits/certs/P1Mapping1to234subCACert.crt
--  pki/testdata/nist-pkits/certs/P1anyPolicyMapping1to2CACert.crt
--  pki/testdata/nist-pkits/certs/PanyPolicyMapping1to2CACert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP1234CACert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP1234subCAP123Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP1234subsubCAP123P12Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP123CACert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP123subCAP12Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P1Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P2Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP123subsubsubCAP12P2P1Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP12CACert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP12subCAP1Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP12subsubCAP1P2Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP2subCA2Cert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP2subCACert.crt
--  pki/testdata/nist-pkits/certs/PoliciesP3CACert.crt
--  pki/testdata/nist-pkits/certs/RFC3280MandatoryAttributeTypesCACert.crt
--  pki/testdata/nist-pkits/certs/RFC3280OptionalAttributeTypesCACert.crt
--  pki/testdata/nist-pkits/certs/RevokedsubCACert.crt
--  pki/testdata/nist-pkits/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt
--  pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CRLSigningCert.crt
--  pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt
--  pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt
--  pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt
--  pki/testdata/nist-pkits/certs/TrustAnchorRootCertificate.crt
--  pki/testdata/nist-pkits/certs/TwoCRLsCACert.crt
--  pki/testdata/nist-pkits/certs/UIDCACert.crt
--  pki/testdata/nist-pkits/certs/UTF8StringCaseInsensitiveMatchCACert.crt
--  pki/testdata/nist-pkits/certs/UTF8StringEncodedNamesCACert.crt
--  pki/testdata/nist-pkits/certs/UnknownCRLEntryExtensionCACert.crt
--  pki/testdata/nist-pkits/certs/UnknownCRLExtensionCACert.crt
--  pki/testdata/nist-pkits/certs/UserNoticeQualifierTest15EE.crt
--  pki/testdata/nist-pkits/certs/UserNoticeQualifierTest16EE.crt
--  pki/testdata/nist-pkits/certs/UserNoticeQualifierTest17EE.crt
--  pki/testdata/nist-pkits/certs/UserNoticeQualifierTest18EE.crt
--  pki/testdata/nist-pkits/certs/UserNoticeQualifierTest19EE.crt
--  pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt
--  pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt
--  pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidCertificatePathTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest30EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest32EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNandRFC822nameConstraintsTest27EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest11EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest14EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest18EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest19EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest6EE.crt
--  pki/testdata/nist-pkits/certs/ValidDSAParameterInheritanceTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValidDSASignaturesTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidGeneralizedTimeCRLnextUpdateTest13EE.crt
--  pki/testdata/nist-pkits/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt
--  pki/testdata/nist-pkits/certs/ValidGeneralizedTimenotBeforeDateTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest22EE.crt
--  pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest24EE.crt
--  pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest25EE.crt
--  pki/testdata/nist-pkits/certs/ValidLongSerialNumberTest16EE.crt
--  pki/testdata/nist-pkits/certs/ValidLongSerialNumberTest17EE.crt
--  pki/testdata/nist-pkits/certs/ValidNameChainingCapitalizationTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest3EE.crt
--  pki/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidNameUIDsTest6EE.crt
--  pki/testdata/nist-pkits/certs/ValidNegativeSerialNumberTest14EE.crt
--  pki/testdata/nist-pkits/certs/ValidNoissuingDistributionPointTest10EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest11EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest12EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest13EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest14EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest3EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest6EE.crt
--  pki/testdata/nist-pkits/certs/ValidPolicyMappingTest9EE.crt
--  pki/testdata/nist-pkits/certs/ValidRFC3280MandatoryAttributeTypesTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt
--  pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest21EE.crt
--  pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest23EE.crt
--  pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest25EE.crt
--  pki/testdata/nist-pkits/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest15EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt
--  pki/testdata/nist-pkits/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt
--  pki/testdata/nist-pkits/certs/ValidSeparateCertificateandCRLKeysTest19EE.crt
--  pki/testdata/nist-pkits/certs/ValidTwoCRLsTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidURInameConstraintsTest34EE.crt
--  pki/testdata/nist-pkits/certs/ValidURInameConstraintsTest36EE.crt
--  pki/testdata/nist-pkits/certs/ValidUTF8StringCaseInsensitiveMatchTest11EE.crt
--  pki/testdata/nist-pkits/certs/ValidUTF8StringEncodedNamesTest9EE.crt
--  pki/testdata/nist-pkits/certs/ValidUnknownNotCriticalCertificateExtensionTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidbasicConstraintsNotCriticalTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidcRLIssuerTest28EE.crt
--  pki/testdata/nist-pkits/certs/ValidcRLIssuerTest29EE.crt
--  pki/testdata/nist-pkits/certs/ValidcRLIssuerTest30EE.crt
--  pki/testdata/nist-pkits/certs/ValidcRLIssuerTest33EE.crt
--  pki/testdata/nist-pkits/certs/ValiddeltaCRLTest2EE.crt
--  pki/testdata/nist-pkits/certs/ValiddeltaCRLTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValiddeltaCRLTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValiddeltaCRLTest8EE.crt
--  pki/testdata/nist-pkits/certs/ValiddistributionPointTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValiddistributionPointTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValiddistributionPointTest5EE.crt
--  pki/testdata/nist-pkits/certs/ValiddistributionPointTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidinhibitAnyPolicyTest2EE.crt
--  pki/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest2EE.crt
--  pki/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest4EE.crt
--  pki/testdata/nist-pkits/certs/ValidkeyUsageNotCriticalTest3EE.crt
--  pki/testdata/nist-pkits/certs/ValidonlyContainsCACertsTest13EE.crt
--  pki/testdata/nist-pkits/certs/ValidonlySomeReasonsTest18EE.crt
--  pki/testdata/nist-pkits/certs/ValidonlySomeReasonsTest19EE.crt
--  pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest13EE.crt
--  pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest14EE.crt
--  pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest7EE.crt
--  pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest8EE.crt
--  pki/testdata/nist-pkits/certs/Validpre2000UTCnotBeforeDateTest3EE.crt
--  pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest1EE.crt
--  pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest2EE.crt
--  pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest4EE.crt
--  pki/testdata/nist-pkits/certs/WrongCRLCACert.crt
--  pki/testdata/nist-pkits/certs/anyPolicyCACert.crt
--  pki/testdata/nist-pkits/certs/basicConstraintsCriticalcAFalseCACert.crt
--  pki/testdata/nist-pkits/certs/basicConstraintsNotCriticalCACert.crt
--  pki/testdata/nist-pkits/certs/basicConstraintsNotCriticalcAFalseCACert.crt
--  pki/testdata/nist-pkits/certs/deltaCRLCA1Cert.crt
--  pki/testdata/nist-pkits/certs/deltaCRLCA2Cert.crt
--  pki/testdata/nist-pkits/certs/deltaCRLCA3Cert.crt
--  pki/testdata/nist-pkits/certs/deltaCRLIndicatorNoBaseCACert.crt
--  pki/testdata/nist-pkits/certs/distributionPoint1CACert.crt
--  pki/testdata/nist-pkits/certs/distributionPoint2CACert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA1Cert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA2Cert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA3Cert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA3cRLIssuerCert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA4Cert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA4cRLIssuerCert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA5Cert.crt
--  pki/testdata/nist-pkits/certs/indirectCRLCA6Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy0CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA1Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA2Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCAIAP5Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subsubCA2Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy5CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy5subCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicy5subsubCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitAnyPolicyTest3EE.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping0CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping0subCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subsubCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping5CACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubCACert.crt
--  pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubsubCACert.crt
--  pki/testdata/nist-pkits/certs/keyUsageCriticalcRLSignFalseCACert.crt
--  pki/testdata/nist-pkits/certs/keyUsageCriticalkeyCertSignFalseCACert.crt
--  pki/testdata/nist-pkits/certs/keyUsageNotCriticalCACert.crt
--  pki/testdata/nist-pkits/certs/keyUsageNotCriticalcRLSignFalseCACert.crt
--  pki/testdata/nist-pkits/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN1CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN1SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA1Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA2Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA3Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN2CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN3CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN3subCA1Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN3subCA2Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN4CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDN5CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDNS1CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsDNS2CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA1Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA2Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA3Cert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsURI1CACert.crt
--  pki/testdata/nist-pkits/certs/nameConstraintsURI2CACert.crt
--  pki/testdata/nist-pkits/certs/onlyContainsAttributeCertsCACert.crt
--  pki/testdata/nist-pkits/certs/onlyContainsCACertsCACert.crt
--  pki/testdata/nist-pkits/certs/onlyContainsUserCertsCACert.crt
--  pki/testdata/nist-pkits/certs/onlySomeReasonsCA1Cert.crt
--  pki/testdata/nist-pkits/certs/onlySomeReasonsCA2Cert.crt
--  pki/testdata/nist-pkits/certs/onlySomeReasonsCA3Cert.crt
--  pki/testdata/nist-pkits/certs/onlySomeReasonsCA4Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint0CACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint0SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint0subCA2Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint0subCACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint1CACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedsubCACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint1subCACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6CACert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subCA0Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subCA1Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subCA4Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA00Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA11Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA41Cert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA11XCert.crt
--  pki/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA41XCert.crt
--  pki/testdata/nist-pkits/certs/pre2000CRLnextUpdateCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy0CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy0subCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy0subsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy0subsubsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy10CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy10subCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy10subsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy10subsubsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy2CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy2subCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy4CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy4subCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy4subsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy4subsubsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy5CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy5subCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy5subsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy5subsubsubCACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy7CACert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy7subCARE2Cert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt
--  pki/testdata/nist-pkits/certs/requireExplicitPolicy7subsubsubCARE2RE4Cert.crt
--  pki/testdata/nist-pkits/crls/BadCRLIssuerNameCACRL.crl
--  pki/testdata/nist-pkits/crls/BadCRLSignatureCACRL.crl
--  pki/testdata/nist-pkits/crls/BadSignedCACRL.crl
--  pki/testdata/nist-pkits/crls/BadnotAfterDateCACRL.crl
--  pki/testdata/nist-pkits/crls/BadnotBeforeDateCACRL.crl
--  pki/testdata/nist-pkits/crls/BasicSelfIssuedCRLSigningKeyCACRL.crl
--  pki/testdata/nist-pkits/crls/BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl
--  pki/testdata/nist-pkits/crls/BasicSelfIssuedNewKeyCACRL.crl
--  pki/testdata/nist-pkits/crls/BasicSelfIssuedOldKeyCACRL.crl
--  pki/testdata/nist-pkits/crls/BasicSelfIssuedOldKeySelfIssuedCertCRL.crl
--  pki/testdata/nist-pkits/crls/DSACACRL.crl
--  pki/testdata/nist-pkits/crls/DSAParametersInheritedCACRL.crl
--  pki/testdata/nist-pkits/crls/GeneralizedTimeCRLnextUpdateCACRL.crl
--  pki/testdata/nist-pkits/crls/GoodCACRL.crl
--  pki/testdata/nist-pkits/crls/GoodsubCACRL.crl
--  pki/testdata/nist-pkits/crls/GoodsubCAPanyPolicyMapping1to2CACRL.crl
--  pki/testdata/nist-pkits/crls/LongSerialNumberCACRL.crl
--  pki/testdata/nist-pkits/crls/Mapping1to2CACRL.crl
--  pki/testdata/nist-pkits/crls/MappingFromanyPolicyCACRL.crl
--  pki/testdata/nist-pkits/crls/MappingToanyPolicyCACRL.crl
--  pki/testdata/nist-pkits/crls/MissingbasicConstraintsCACRL.crl
--  pki/testdata/nist-pkits/crls/NameOrderCACRL.crl
--  pki/testdata/nist-pkits/crls/NegativeSerialNumberCACRL.crl
--  pki/testdata/nist-pkits/crls/NoPoliciesCACRL.crl
--  pki/testdata/nist-pkits/crls/NoissuingDistributionPointCACRL.crl
--  pki/testdata/nist-pkits/crls/OldCRLnextUpdateCACRL.crl
--  pki/testdata/nist-pkits/crls/P12Mapping1to3CACRL.crl
--  pki/testdata/nist-pkits/crls/P12Mapping1to3subCACRL.crl
--  pki/testdata/nist-pkits/crls/P12Mapping1to3subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/P1Mapping1to234CACRL.crl
--  pki/testdata/nist-pkits/crls/P1Mapping1to234subCACRL.crl
--  pki/testdata/nist-pkits/crls/P1anyPolicyMapping1to2CACRL.crl
--  pki/testdata/nist-pkits/crls/PanyPolicyMapping1to2CACRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP1234CACRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP1234subCAP123CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP1234subsubCAP123P12CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP123CACRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP123subCAP12CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP123subsubCAP12P1CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP123subsubCAP2P2CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP123subsubsubCAP12P2P1CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP12CACRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP12subCAP1CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP12subsubCAP1P2CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP2subCA2CRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP2subCACRL.crl
--  pki/testdata/nist-pkits/crls/PoliciesP3CACRL.crl
--  pki/testdata/nist-pkits/crls/RFC3280MandatoryAttributeTypesCACRL.crl
--  pki/testdata/nist-pkits/crls/RFC3280OptionalAttributeTypesCACRL.crl
--  pki/testdata/nist-pkits/crls/RevokedsubCACRL.crl
--  pki/testdata/nist-pkits/crls/RolloverfromPrintableStringtoUTF8StringCACRL.crl
--  pki/testdata/nist-pkits/crls/SeparateCertificateandCRLKeysCA2CRL.crl
--  pki/testdata/nist-pkits/crls/SeparateCertificateandCRLKeysCRL.crl
--  pki/testdata/nist-pkits/crls/TrustAnchorRootCRL.crl
--  pki/testdata/nist-pkits/crls/TwoCRLsCABadCRL.crl
--  pki/testdata/nist-pkits/crls/TwoCRLsCAGoodCRL.crl
--  pki/testdata/nist-pkits/crls/UIDCACRL.crl
--  pki/testdata/nist-pkits/crls/UTF8StringCaseInsensitiveMatchCACRL.crl
--  pki/testdata/nist-pkits/crls/UTF8StringEncodedNamesCACRL.crl
--  pki/testdata/nist-pkits/crls/UnknownCRLEntryExtensionCACRL.crl
--  pki/testdata/nist-pkits/crls/UnknownCRLExtensionCACRL.crl
--  pki/testdata/nist-pkits/crls/WrongCRLCACRL.crl
--  pki/testdata/nist-pkits/crls/anyPolicyCACRL.crl
--  pki/testdata/nist-pkits/crls/basicConstraintsCriticalcAFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/basicConstraintsNotCriticalCACRL.crl
--  pki/testdata/nist-pkits/crls/basicConstraintsNotCriticalcAFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA1CRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA1deltaCRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA2CRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA2deltaCRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA3CRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLCA3deltaCRL.crl
--  pki/testdata/nist-pkits/crls/deltaCRLIndicatorNoBaseCACRL.crl
--  pki/testdata/nist-pkits/crls/distributionPoint1CACRL.crl
--  pki/testdata/nist-pkits/crls/distributionPoint2CACRL.crl
--  pki/testdata/nist-pkits/crls/indirectCRLCA1CRL.crl
--  pki/testdata/nist-pkits/crls/indirectCRLCA3CRL.crl
--  pki/testdata/nist-pkits/crls/indirectCRLCA3cRLIssuerCRL.crl
--  pki/testdata/nist-pkits/crls/indirectCRLCA4cRLIssuerCRL.crl
--  pki/testdata/nist-pkits/crls/indirectCRLCA5CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy0CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy1CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCA1CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCA2CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCAIAP5CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subsubCA2CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy5CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy5subCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitAnyPolicy5subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping0CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping0subCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subCAIPM5CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subsubCAIPM5CRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1subCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping5CACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subsubsubCACRL.crl
--  pki/testdata/nist-pkits/crls/keyUsageCriticalcRLSignFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/keyUsageCriticalkeyCertSignFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/keyUsageNotCriticalCACRL.crl
--  pki/testdata/nist-pkits/crls/keyUsageNotCriticalcRLSignFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/keyUsageNotCriticalkeyCertSignFalseCACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN1CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA1CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA2CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA3CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN2CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN3CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN3subCA1CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN3subCA2CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN4CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDN5CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDNS1CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsDNS2CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA1CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA2CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA3CRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsURI1CACRL.crl
--  pki/testdata/nist-pkits/crls/nameConstraintsURI2CACRL.crl
--  pki/testdata/nist-pkits/crls/onlyContainsAttributeCertsCACRL.crl
--  pki/testdata/nist-pkits/crls/onlyContainsCACertsCACRL.crl
--  pki/testdata/nist-pkits/crls/onlyContainsUserCertsCACRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA1compromiseCRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA1otherreasonsCRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA2CRL1.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA2CRL2.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA3compromiseCRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA3otherreasonsCRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA4compromiseCRL.crl
--  pki/testdata/nist-pkits/crls/onlySomeReasonsCA4otherreasonsCRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint0CACRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint0subCA2CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint0subCACRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint1CACRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint1subCACRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6CACRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subCA0CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subCA1CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subCA4CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA00CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA11CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA41CRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subsubsubCA11XCRL.crl
--  pki/testdata/nist-pkits/crls/pathLenConstraint6subsubsubCA41XCRL.crl
--  pki/testdata/nist-pkits/crls/pre2000CRLnextUpdateCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy0CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy0subCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy0subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy0subsubsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy10CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy10subCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy10subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy10subsubsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy2CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy2subCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy4CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy4subCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy4subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy4subsubsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy5CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy5subCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy5subsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy5subsubsubCACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy7CACRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy7subCARE2CRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy7subsubCARE2RE4CRL.crl
--  pki/testdata/nist-pkits/crls/requireExplicitPolicy7subsubsubCARE2RE4CRL.crl
--  pki/testdata/ocsp_unittest/bad_ocsp_type.pem
--  pki/testdata/ocsp_unittest/bad_signature.pem
--  pki/testdata/ocsp_unittest/bad_status.pem
--  pki/testdata/ocsp_unittest/good_response.pem
--  pki/testdata/ocsp_unittest/good_response_next_update.pem
--  pki/testdata/ocsp_unittest/good_response_sha256.pem
--  pki/testdata/ocsp_unittest/has_critical_ct_extension.pem
--  pki/testdata/ocsp_unittest/has_critical_response_extension.pem
--  pki/testdata/ocsp_unittest/has_critical_single_extension.pem
--  pki/testdata/ocsp_unittest/has_extension.pem
--  pki/testdata/ocsp_unittest/has_single_extension.pem
--  pki/testdata/ocsp_unittest/has_version.pem
--  pki/testdata/ocsp_unittest/malformed_request.pem
--  pki/testdata/ocsp_unittest/missing_response.pem
--  pki/testdata/ocsp_unittest/multiple_response.pem
--  pki/testdata/ocsp_unittest/no_response.pem
--  pki/testdata/ocsp_unittest/ocsp_extra_certs.pem
--  pki/testdata/ocsp_unittest/ocsp_sign_bad_indirect.pem
--  pki/testdata/ocsp_unittest/ocsp_sign_direct.pem
--  pki/testdata/ocsp_unittest/ocsp_sign_indirect.pem
--  pki/testdata/ocsp_unittest/ocsp_sign_indirect_missing.pem
--  pki/testdata/ocsp_unittest/other_response.pem
--  pki/testdata/ocsp_unittest/responder_id.pem
--  pki/testdata/ocsp_unittest/responder_name.pem
--  pki/testdata/ocsp_unittest/revoke_response.pem
--  pki/testdata/ocsp_unittest/revoke_response_reason.pem
--  pki/testdata/ocsp_unittest/unknown_response.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/empty_sequence.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/extra_contents_after_extension_sequence.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/extra_contents_after_issuer_and_serial.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_contents.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_issuer.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_key_identifier.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_serial.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/issuer_and_serial.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/issuer_only.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/key_identifier.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/key_identifier_and_issuer_and_serial.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/serial_only.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier/url_issuer_and_serial.pem
--  pki/testdata/parse_certificate_unittest/authority_key_identifier_not_sequence.pem
--  pki/testdata/parse_certificate_unittest/bad_key_usage.pem
--  pki/testdata/parse_certificate_unittest/bad_policy_qualifiers.pem
--  pki/testdata/parse_certificate_unittest/bad_signature_algorithm_oid.pem
--  pki/testdata/parse_certificate_unittest/bad_validity.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_ca_false.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_ca_no_path.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_ca_path_9.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_negative_path.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_not_ca.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_path_too_large.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_255.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_256.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_not_ca.pem
--  pki/testdata/parse_certificate_unittest/basic_constraints_unconsumed_data.pem
--  pki/testdata/parse_certificate_unittest/cert_algorithm_not_sequence.pem
--  pki/testdata/parse_certificate_unittest/cert_data_after_signature.pem
--  pki/testdata/parse_certificate_unittest/cert_empty_sequence.pem
--  pki/testdata/parse_certificate_unittest/cert_missing_signature.pem
--  pki/testdata/parse_certificate_unittest/cert_not_sequence.pem
--  pki/testdata/parse_certificate_unittest/cert_signature_not_bit_string.pem
--  pki/testdata/parse_certificate_unittest/cert_skeleton.pem
--  pki/testdata/parse_certificate_unittest/cert_version3.pem
--  pki/testdata/parse_certificate_unittest/crldp_1uri_noissuer.pem
--  pki/testdata/parse_certificate_unittest/crldp_3uri_noissuer.pem
--  pki/testdata/parse_certificate_unittest/crldp_full_name_as_dirname.pem
--  pki/testdata/parse_certificate_unittest/crldp_issuer_as_dirname.pem
--  pki/testdata/parse_certificate_unittest/extended_key_usage.pem
--  pki/testdata/parse_certificate_unittest/extension_critical.pem
--  pki/testdata/parse_certificate_unittest/extension_critical_0.pem
--  pki/testdata/parse_certificate_unittest/extension_critical_3.pem
--  pki/testdata/parse_certificate_unittest/extension_not_critical.pem
--  pki/testdata/parse_certificate_unittest/extensions_data_after_sequence.pem
--  pki/testdata/parse_certificate_unittest/extensions_duplicate_key_usage.pem
--  pki/testdata/parse_certificate_unittest/extensions_empty_sequence.pem
--  pki/testdata/parse_certificate_unittest/extensions_not_sequence.pem
--  pki/testdata/parse_certificate_unittest/extensions_real.pem
--  pki/testdata/parse_certificate_unittest/failed_signature_algorithm.pem
--  pki/testdata/parse_certificate_unittest/inhibit_any_policy.pem
--  pki/testdata/parse_certificate_unittest/issuer_bad_printable_string.pem
--  pki/testdata/parse_certificate_unittest/key_usage.pem
--  pki/testdata/parse_certificate_unittest/name_constraints_bad_ip.pem
--  pki/testdata/parse_certificate_unittest/policies.pem
--  pki/testdata/parse_certificate_unittest/policy_constraints_empty.pem
--  pki/testdata/parse_certificate_unittest/policy_constraints_inhibit.pem
--  pki/testdata/parse_certificate_unittest/policy_constraints_inhibit_require.pem
--  pki/testdata/parse_certificate_unittest/policy_constraints_require.pem
--  pki/testdata/parse_certificate_unittest/policy_qualifiers_empty_sequence.pem
--  pki/testdata/parse_certificate_unittest/serial_37_bytes.pem
--  pki/testdata/parse_certificate_unittest/serial_negative.pem
--  pki/testdata/parse_certificate_unittest/serial_not_minimal.pem
--  pki/testdata/parse_certificate_unittest/serial_not_number.pem
--  pki/testdata/parse_certificate_unittest/serial_zero.pem
--  pki/testdata/parse_certificate_unittest/serial_zero_padded.pem
--  pki/testdata/parse_certificate_unittest/serial_zero_padded_21_bytes.pem
--  pki/testdata/parse_certificate_unittest/signature_algorithm_null.pem
--  pki/testdata/parse_certificate_unittest/subject_alt_name.pem
--  pki/testdata/parse_certificate_unittest/subject_blank_subjectaltname_not_critical.pem
--  pki/testdata/parse_certificate_unittest/subject_key_identifier_not_octet_string.pem
--  pki/testdata/parse_certificate_unittest/subject_not_ascii.pem
--  pki/testdata/parse_certificate_unittest/subject_not_printable_string.pem
--  pki/testdata/parse_certificate_unittest/subject_printable_string_containing_utf8_client_cert.pem
--  pki/testdata/parse_certificate_unittest/subject_t61string.pem
--  pki/testdata/parse_certificate_unittest/subject_t61string_1-32.pem
--  pki/testdata/parse_certificate_unittest/subject_t61string_126-160.pem
--  pki/testdata/parse_certificate_unittest/subject_t61string_actual.pem
--  pki/testdata/parse_certificate_unittest/subjectaltname_bad_ip.pem
--  pki/testdata/parse_certificate_unittest/subjectaltname_dns_not_ascii.pem
--  pki/testdata/parse_certificate_unittest/subjectaltname_general_names_empty_sequence.pem
--  pki/testdata/parse_certificate_unittest/subjectaltname_trailing_data.pem
--  pki/testdata/parse_certificate_unittest/tbs_explicit_v1.pem
--  pki/testdata/parse_certificate_unittest/tbs_v1.pem
--  pki/testdata/parse_certificate_unittest/tbs_v1_extensions.pem
--  pki/testdata/parse_certificate_unittest/tbs_v2_extensions.pem
--  pki/testdata/parse_certificate_unittest/tbs_v2_issuer_and_subject_unique_id.pem
--  pki/testdata/parse_certificate_unittest/tbs_v2_issuer_unique_id.pem
--  pki/testdata/parse_certificate_unittest/tbs_v2_no_optionals.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_all_optionals.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_data_after_extensions.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_extensions.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_extensions_not_sequence.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_no_optionals.pem
--  pki/testdata/parse_certificate_unittest/tbs_v3_real.pem
--  pki/testdata/parse_certificate_unittest/tbs_v4.pem
--  pki/testdata/parse_certificate_unittest/tbs_validity_both_generalized_time.pem
--  pki/testdata/parse_certificate_unittest/tbs_validity_both_utc_time.pem
--  pki/testdata/parse_certificate_unittest/tbs_validity_generalized_time_and_utc_time.pem
--  pki/testdata/parse_certificate_unittest/tbs_validity_relaxed.pem
--  pki/testdata/parse_certificate_unittest/tbs_validity_utc_time_and_generalized_time.pem
--  pki/testdata/parse_certificate_unittest/v1_explicit_version.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_match_name_only.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_matching.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_mismatch.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/root.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/root2.pem
--  pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/target.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_a.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_b.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_c.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_a.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_b.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_c.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_a.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_b.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_c.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/root.pem
--  pki/testdata/path_builder_unittest/key_id_prioritization/target.pem
--  pki/testdata/path_builder_unittest/multi-root-A-by-B.pem
--  pki/testdata/path_builder_unittest/multi-root-B-by-C.pem
--  pki/testdata/path_builder_unittest/multi-root-B-by-F.pem
--  pki/testdata/path_builder_unittest/multi-root-C-by-D.pem
--  pki/testdata/path_builder_unittest/multi-root-C-by-E.pem
--  pki/testdata/path_builder_unittest/multi-root-D-by-D.pem
--  pki/testdata/path_builder_unittest/multi-root-E-by-E.pem
--  pki/testdata/path_builder_unittest/multi-root-F-by-E.pem
--  pki/testdata/path_builder_unittest/precertificate/precertificate.pem
--  pki/testdata/path_builder_unittest/precertificate/root.pem
--  pki/testdata/path_builder_unittest/self_issued_prioritization/root1.pem
--  pki/testdata/path_builder_unittest/self_issued_prioritization/root1_cross.pem
--  pki/testdata/path_builder_unittest/self_issued_prioritization/root2.pem
--  pki/testdata/path_builder_unittest/self_issued_prioritization/target.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/int_ac.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/int_ad.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/int_bc.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/int_bd.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/root.pem
--  pki/testdata/path_builder_unittest/validity_date_prioritization/target.pem
--  pki/testdata/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued/main.test
--  pki/testdata/verify_certificate_chain_unittest/expired-intermediate/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/expired-intermediate/not-after.test
--  pki/testdata/verify_certificate_chain_unittest/expired-intermediate/not-before.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-expiration-and-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-expiration.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-after.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-before-ta-with-expiration.test
--  pki/testdata/verify_certificate_chain_unittest/expired-root/not-before.test
--  pki/testdata/verify_certificate_chain_unittest/expired-target/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/expired-target/not-after.test
--  pki/testdata/verify_certificate_chain_unittest/expired-target/not-before.test
--  pki/testdata/verify_certificate_chain_unittest/incorrect-trust-anchor/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/incorrect-trust-anchor/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-and-target-wrong-signature/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-and-target-wrong-signature/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/any.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/any.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-any.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-clientAuth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-clientAuth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-serverAuth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-serverAuth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-any.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-clientAuth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-clientAuth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-serverAuth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-serverAuth.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-invalid-spki/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-invalid-spki/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-signed-with-sha1/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-signed-with-sha1/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/main.test
--  pki/testdata/verify_certificate_chain_unittest/intermediate-wrong-signature-no-authority-key-identifier/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/intermediate-wrong-signature-no-authority-key-identifier/main.test
--  pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.pem
--  pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.test
--  pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.pem
--  pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.test
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/longrolloverchain.pem
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/longrolloverchain.test
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/newchain.pem
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/newchain.test
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/oldchain.pem
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/oldchain.test
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/rolloverchain.pem
--  pki/testdata/verify_certificate_chain_unittest/key-rollover/rolloverchain.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/ok-all-types.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/ok-all-types.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-all-types.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-all-types.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-excluded.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-excluded.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-permitted.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-permitted.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-excluded.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-excluded.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-permitted.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-permitted.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-excluded.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-excluded.test
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-permitted.pem
--  pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-permitted.test
--  pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/main.test
--  pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.4.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.1.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.1.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.10.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.13.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.4.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.7.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.8.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.10.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.11.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.8.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.9.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.10.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.4.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.8.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.10.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.12.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.13.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.15.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.16.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.17.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.20.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.21.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.22.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.23.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.24.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.25.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.26.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.27.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.28.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.29.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.31.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.33.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.34.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.35.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.36.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.37.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.38.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.7.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.8.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.9.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.16.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.7.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.3.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.3.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.10.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.11.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.12.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.16.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.9.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.7.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.7.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.1.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.12.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.14.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.2.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.4.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.6.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.7.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.8.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.9.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.3.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.5.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.7.txt
--  pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.8.txt
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/main.test
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/main.test
--  pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/main.test
--  pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-constraints-strict.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-expiration-and-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-expiration.test
--  pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/main.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-constraints-require-basic-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-require-basic-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/main.test
--  pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/distrusted-root-expired.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/distrusted-root.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/ta-with-constraints.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/ta-with-expiration.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/trusted_leaf-and-trust_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/trusted_leaf-root.test
--  pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/unspecified-trust-root.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/any.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/any.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/any.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/any.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth-strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/serverauth-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-eku-none/serverauth.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-512bit-rsa-key/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-has-512bit-rsa-key/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only-trusted_leaf-strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only-trusted_leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only.pem
--  pki/testdata/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-and-eku/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-and-eku/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-no-eku/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-no-eku/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/strict-leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/strict.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-and-trust_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-not_after.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-wrong_eku.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf_require_self_signed.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfissued/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf-and-trust_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf_require_self_signed.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-and-trust_anchor.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-not_after.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-wrong_eku.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf_require_self_signed.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.test
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.pem
--  pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.test
--  pki/testdata/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-signed-using-ecdsa/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-signed-using-ecdsa/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-signed-with-sha1/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-signed-with-sha1/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/target_only-trusted_leaf.test
--  pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/target_only.pem
--  pki/testdata/verify_certificate_chain_unittest/target-wrong-signature-no-authority-key-identifier/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-wrong-signature-no-authority-key-identifier/main.test
--  pki/testdata/verify_certificate_chain_unittest/target-wrong-signature/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/target-wrong-signature/main.test
--  pki/testdata/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/main.test
--  pki/testdata/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/main.test
--  pki/testdata/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/main.test
--  pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/chain.pem
--  pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/main.test
--  pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/ta-with-constraints.test
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-rdn_sorting_1.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-rdn_sorting_2.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-dupe_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-extra_attr.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-extra_rdn.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-mixed-rdn_dupetype_sorting_1.pem
--  pki/testdata/verify_name_match_unittest/names/ascii-mixed-rdn_dupetype_sorting_2.pem
--  pki/testdata/verify_name_match_unittest/names/custom-custom-normalized.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-badAttributeType.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-empty.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-extradata.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-onlyOneElement.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-setNotSequence.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-Name-setInsteadOfSequence.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-RDN-empty.pem
--  pki/testdata/verify_name_match_unittest/names/invalid-RDN-sequenceInsteadOfSet.pem
--  pki/testdata/verify_name_match_unittest/names/unicode-mixed-normalized.pem
--  pki/testdata/verify_name_match_unittest/names/unicode-mixed-unnormalized.pem
--  pki/testdata/verify_name_match_unittest/names/unicode_bmp-BMPSTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/unicode_bmp-UNIVERSALSTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/unicode_bmp-UTF8-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/unicode_supplementary-UNIVERSALSTRING-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/unicode_supplementary-UTF8-unmangled.pem
--  pki/testdata/verify_name_match_unittest/names/valid-Name-empty.pem
--  pki/testdata/verify_name_match_unittest/names/valid-minimal.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-spki-params-null.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-unused-bits-signature.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-ecdh-key.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-ecmqv-key.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-rsa-algorithm.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-wrong-signature-format.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-secp384r1-sha256-corrupted-data.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-secp384r1-sha256.pem
--  pki/testdata/verify_signed_data_unittest/ecdsa-using-rsa-key.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-bad-key-der-length.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-bad-key-der-null.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-key-params-absent.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-using-pss-key-no-params.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-wrong-algorithm.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-key-encoded-ber.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-spki-non-null-params.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-using-ecdsa-algorithm.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-using-id-ea-rsa.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pss-sha256-using-pss-key-with-params.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pss-sha256-wrong-salt.pem
--  pki/testdata/verify_signed_data_unittest/rsa-pss-sha256.pem
--  pki/testdata/verify_signed_data_unittest/rsa-using-ec-key.pem
--  pki/testdata/verify_signed_data_unittest/rsa2048-pkcs1-sha512.pem
-   pki/testdata/verify_unittest/google-intermediate1.der
-   pki/testdata/verify_unittest/google-intermediate2.der
-   pki/testdata/verify_unittest/google-leaf.der
-@@ -2838,6 +1403,7 @@ set(
+@@ -342,6 +344,7 @@ set(
+   crypto/cpu_arm_freebsd.cc
+   crypto/cpu_arm_linux.cc
+   crypto/cpu_intel.cc
++  crypto/cpu_ppc64le.cc
+   crypto/crypto.cc
+   crypto/curve25519/curve25519.cc
+   crypto/curve25519/curve25519_64_adx.cc
+@@ -2830,6 +2833,7 @@ set(
    gen/test_support/trampoline-armv8-apple.S
    gen/test_support/trampoline-armv8-linux.S
    gen/test_support/trampoline-armv8-win.S
@@ -5759,11 +4307,11 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.cmake
    gen/test_support/trampoline-x86-apple.S
    gen/test_support/trampoline-x86-linux.S
    gen/test_support/trampoline-x86_64-apple.S
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.json
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.json
 ===================================================================
---- chromium-130.0.6723.44.orig/third_party/boringssl/src/gen/sources.json
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.json
-@@ -84,6 +84,7 @@
+--- chromium-133.0.6943.35.orig/third_party/boringssl/src/gen/sources.json
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/sources.json
+@@ -96,6 +96,7 @@
        "gen/bcm/aesni-x86-linux.S",
        "gen/bcm/aesni-x86_64-apple.S",
        "gen/bcm/aesni-x86_64-linux.S",
@@ -5771,7 +4319,7 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.json
        "gen/bcm/aesv8-armv7-linux.S",
        "gen/bcm/aesv8-armv8-apple.S",
        "gen/bcm/aesv8-armv8-linux.S",
-@@ -115,6 +116,7 @@
+@@ -127,6 +128,7 @@
        "gen/bcm/ghash-x86-linux.S",
        "gen/bcm/ghash-x86_64-apple.S",
        "gen/bcm/ghash-x86_64-linux.S",
@@ -5779,1467 +4327,15 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.json
        "gen/bcm/ghashv8-armv7-linux.S",
        "gen/bcm/ghashv8-armv8-apple.S",
        "gen/bcm/ghashv8-armv8-linux.S",
-@@ -298,6 +300,7 @@
-       "crypto/cpu_arm_freebsd.c",
-       "crypto/cpu_arm_linux.c",
-       "crypto/cpu_intel.c",
-+      "crypto/cpu_ppc64le.c",
-       "crypto/crypto.c",
-       "crypto/curve25519/curve25519.c",
-       "crypto/curve25519/curve25519_64_adx.c",
-@@ -759,37 +762,6 @@
-     ],
-     "data": [
-       "crypto/blake2/blake2b256_tests.txt",
--      "crypto/cipher_extra/test/aes_128_cbc_sha1_tls_implicit_iv_tests.txt",
--      "crypto/cipher_extra/test/aes_128_cbc_sha1_tls_tests.txt",
--      "crypto/cipher_extra/test/aes_128_ccm_bluetooth_8_tests.txt",
--      "crypto/cipher_extra/test/aes_128_ccm_bluetooth_tests.txt",
--      "crypto/cipher_extra/test/aes_128_ccm_matter_tests.txt",
--      "crypto/cipher_extra/test/aes_128_ctr_hmac_sha256.txt",
--      "crypto/cipher_extra/test/aes_128_gcm_randnonce_tests.txt",
--      "crypto/cipher_extra/test/aes_128_gcm_siv_tests.txt",
--      "crypto/cipher_extra/test/aes_128_gcm_tests.txt",
--      "crypto/cipher_extra/test/aes_192_gcm_tests.txt",
--      "crypto/cipher_extra/test/aes_256_cbc_sha1_tls_implicit_iv_tests.txt",
--      "crypto/cipher_extra/test/aes_256_cbc_sha1_tls_tests.txt",
--      "crypto/cipher_extra/test/aes_256_ctr_hmac_sha256.txt",
--      "crypto/cipher_extra/test/aes_256_gcm_randnonce_tests.txt",
--      "crypto/cipher_extra/test/aes_256_gcm_siv_tests.txt",
--      "crypto/cipher_extra/test/aes_256_gcm_tests.txt",
--      "crypto/cipher_extra/test/chacha20_poly1305_tests.txt",
--      "crypto/cipher_extra/test/cipher_tests.txt",
--      "crypto/cipher_extra/test/des_ede3_cbc_sha1_tls_implicit_iv_tests.txt",
--      "crypto/cipher_extra/test/des_ede3_cbc_sha1_tls_tests.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_128_cbc.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_128_ctr.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_128_gcm.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_192_cbc.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_192_ctr.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_256_cbc.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_256_ctr.txt",
--      "crypto/cipher_extra/test/nist_cavp/aes_256_gcm.txt",
--      "crypto/cipher_extra/test/nist_cavp/tdes_cbc.txt",
--      "crypto/cipher_extra/test/nist_cavp/tdes_ecb.txt",
--      "crypto/cipher_extra/test/xchacha20_poly1305_tests.txt",
-       "crypto/curve25519/ed25519_tests.txt",
-       "crypto/dilithium/dilithium_tests.txt",
-       "crypto/dilithium/edge_cases_draft_dilithium3_sign.txt",
-@@ -1216,1413 +1188,6 @@
-       "pki/verify_unittest.cc"
-     ],
-     "data": [
--      "pki/testdata/cert_issuer_source_static_unittest/c1.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/c2.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/d.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/e1.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/e2.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/i1_1.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/i1_2.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/i2.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/i3_1.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/i3_2.pem",
--      "pki/testdata/cert_issuer_source_static_unittest/root.pem",
--      "pki/testdata/certificate_policies_unittest/anypolicy.pem",
--      "pki/testdata/certificate_policies_unittest/anypolicy_with_qualifier.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-anypolicy_with_custom_qualifier.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-empty.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_dupe.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_policyinformation_unconsumed_data.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_policyqualifierinfo_unconsumed_data.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-policy_1_2_3_with_empty_qualifiers_sequence.pem",
--      "pki/testdata/certificate_policies_unittest/invalid-policy_identifier_not_oid.pem",
--      "pki/testdata/certificate_policies_unittest/policy_1_2_3.pem",
--      "pki/testdata/certificate_policies_unittest/policy_1_2_3_and_1_2_4.pem",
--      "pki/testdata/certificate_policies_unittest/policy_1_2_3_and_1_2_4_with_qualifiers.pem",
--      "pki/testdata/certificate_policies_unittest/policy_1_2_3_with_custom_qualifier.pem",
--      "pki/testdata/certificate_policies_unittest/policy_1_2_3_with_qualifier.pem",
--      "pki/testdata/crl_unittest/bad_crldp_has_crlissuer.pem",
--      "pki/testdata/crl_unittest/bad_fake_critical_crlentryextension.pem",
--      "pki/testdata/crl_unittest/bad_fake_critical_extension.pem",
--      "pki/testdata/crl_unittest/bad_idp_contains_wrong_uri.pem",
--      "pki/testdata/crl_unittest/bad_idp_indirectcrl.pem",
--      "pki/testdata/crl_unittest/bad_idp_onlycontainscacerts.pem",
--      "pki/testdata/crl_unittest/bad_idp_onlycontainscacerts_no_basic_constraints.pem",
--      "pki/testdata/crl_unittest/bad_idp_onlycontainsusercerts.pem",
--      "pki/testdata/crl_unittest/bad_idp_uri_and_onlycontainscacerts.pem",
--      "pki/testdata/crl_unittest/bad_idp_uri_and_onlycontainsusercerts.pem",
--      "pki/testdata/crl_unittest/bad_key_rollover_signature.pem",
--      "pki/testdata/crl_unittest/bad_nextupdate_too_old.pem",
--      "pki/testdata/crl_unittest/bad_signature.pem",
--      "pki/testdata/crl_unittest/bad_thisupdate_in_future.pem",
--      "pki/testdata/crl_unittest/bad_thisupdate_too_old.pem",
--      "pki/testdata/crl_unittest/bad_wrong_issuer.pem",
--      "pki/testdata/crl_unittest/good.pem",
--      "pki/testdata/crl_unittest/good_fake_extension.pem",
--      "pki/testdata/crl_unittest/good_fake_extension_no_nextupdate.pem",
--      "pki/testdata/crl_unittest/good_generalizedtime.pem",
--      "pki/testdata/crl_unittest/good_idp_contains_uri.pem",
--      "pki/testdata/crl_unittest/good_idp_onlycontainscacerts.pem",
--      "pki/testdata/crl_unittest/good_idp_onlycontainsusercerts.pem",
--      "pki/testdata/crl_unittest/good_idp_onlycontainsusercerts_no_basic_constraints.pem",
--      "pki/testdata/crl_unittest/good_idp_uri_and_onlycontainscacerts.pem",
--      "pki/testdata/crl_unittest/good_idp_uri_and_onlycontainsusercerts.pem",
--      "pki/testdata/crl_unittest/good_issuer_name_normalization.pem",
--      "pki/testdata/crl_unittest/good_issuer_no_keyusage.pem",
--      "pki/testdata/crl_unittest/good_key_rollover.pem",
--      "pki/testdata/crl_unittest/good_no_crldp.pem",
--      "pki/testdata/crl_unittest/good_no_nextupdate.pem",
--      "pki/testdata/crl_unittest/good_no_version.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_crlentryextensions.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_extensions.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_nextupdate.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_revocationdate.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_revokedcerts.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_signaturevalue.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_after_thisupdate.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_crlentry.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_issuer_name.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_revocationdate.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_revoked_serial_number.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_signaturealgorithm.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_signaturevalue.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_tbs_signature_algorithm.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_tbscertlist.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_thisupdate.pem",
--      "pki/testdata/crl_unittest/invalid_garbage_version.pem",
--      "pki/testdata/crl_unittest/invalid_idp_dpname_choice_extra_data.pem",
--      "pki/testdata/crl_unittest/invalid_idp_empty_sequence.pem",
--      "pki/testdata/crl_unittest/invalid_idp_onlycontains_user_and_ca_certs.pem",
--      "pki/testdata/crl_unittest/invalid_idp_onlycontainsusercerts_v1_leaf.pem",
--      "pki/testdata/crl_unittest/invalid_issuer_keyusage_no_crlsign.pem",
--      "pki/testdata/crl_unittest/invalid_key_rollover_issuer_keyusage_no_crlsign.pem",
--      "pki/testdata/crl_unittest/invalid_mismatched_signature_algorithm.pem",
--      "pki/testdata/crl_unittest/invalid_revoked_empty_sequence.pem",
--      "pki/testdata/crl_unittest/invalid_v1_explicit.pem",
--      "pki/testdata/crl_unittest/invalid_v1_with_crlentryextension.pem",
--      "pki/testdata/crl_unittest/invalid_v1_with_extension.pem",
--      "pki/testdata/crl_unittest/invalid_v3.pem",
--      "pki/testdata/crl_unittest/revoked.pem",
--      "pki/testdata/crl_unittest/revoked_fake_crlentryextension.pem",
--      "pki/testdata/crl_unittest/revoked_generalized_revocationdate.pem",
--      "pki/testdata/crl_unittest/revoked_key_rollover.pem",
--      "pki/testdata/crl_unittest/revoked_no_nextupdate.pem",
--      "pki/testdata/name_constraints_unittest/directoryname-excludeall.pem",
--      "pki/testdata/name_constraints_unittest/directoryname-excluded.pem",
--      "pki/testdata/name_constraints_unittest/directoryname.pem",
--      "pki/testdata/name_constraints_unittest/directoryname_and_dnsname.pem",
--      "pki/testdata/name_constraints_unittest/directoryname_and_dnsname_and_ipaddress.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-exclude_dot.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-excludeall.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-excluded.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-excluded_with_leading_dot.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-permitted_two_dot.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-permitted_with_leading_dot.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-with_max.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-with_min_0.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-with_min_0_and_max.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-with_min_1.pem",
--      "pki/testdata/name_constraints_unittest/dnsname-with_min_1_and_max.pem",
--      "pki/testdata/name_constraints_unittest/dnsname.pem",
--      "pki/testdata/name_constraints_unittest/dnsname2.pem",
--      "pki/testdata/name_constraints_unittest/edipartyname-excluded.pem",
--      "pki/testdata/name_constraints_unittest/edipartyname-permitted.pem",
--      "pki/testdata/name_constraints_unittest/invalid-empty_excluded_subtree.pem",
--      "pki/testdata/name_constraints_unittest/invalid-empty_permitted_subtree.pem",
--      "pki/testdata/name_constraints_unittest/invalid-no_subtrees.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-excludeall.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-excluded.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-invalid_addr.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_1.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_2.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_3.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-invalid_mask_not_contiguous_4.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-mapped_addrs.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-permit_all.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-permit_prefix1.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-permit_prefix31.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress-permit_singlehost.pem",
--      "pki/testdata/name_constraints_unittest/ipaddress.pem",
--      "pki/testdata/name_constraints_unittest/name-ca.pem",
--      "pki/testdata/name_constraints_unittest/name-de.pem",
--      "pki/testdata/name_constraints_unittest/name-empty.pem",
--      "pki/testdata/name_constraints_unittest/name-jp-tokyo.pem",
--      "pki/testdata/name_constraints_unittest/name-jp.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-1.1.1.1.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-192.168.1.1.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-email-invalidstring.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-email-localpartcase.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-email-multiple.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-email.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-foo.com.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-ipv6.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona-permitted.example.com.pem",
--      "pki/testdata/name_constraints_unittest/name-us-arizona.pem",
--      "pki/testdata/name_constraints_unittest/name-us-california-192.168.1.1.pem",
--      "pki/testdata/name_constraints_unittest/name-us-california-mountain_view.pem",
--      "pki/testdata/name_constraints_unittest/name-us-california-permitted.example.com.pem",
--      "pki/testdata/name_constraints_unittest/name-us-california.pem",
--      "pki/testdata/name_constraints_unittest/name-us.pem",
--      "pki/testdata/name_constraints_unittest/othername-excluded.pem",
--      "pki/testdata/name_constraints_unittest/othername-permitted.pem",
--      "pki/testdata/name_constraints_unittest/registeredid-excluded.pem",
--      "pki/testdata/name_constraints_unittest/registeredid-permitted.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-empty.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-hostname.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-hostnamewithat.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-ipv4.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-quoted.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded-subdomains.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-excluded.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-empty.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-hostname.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-hostnamewithat.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-ipv4.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-quoted.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted-subdomains.pem",
--      "pki/testdata/name_constraints_unittest/rfc822name-permitted.pem",
--      "pki/testdata/name_constraints_unittest/san-directoryname.pem",
--      "pki/testdata/name_constraints_unittest/san-dnsname.pem",
--      "pki/testdata/name_constraints_unittest/san-edipartyname.pem",
--      "pki/testdata/name_constraints_unittest/san-excluded-directoryname.pem",
--      "pki/testdata/name_constraints_unittest/san-excluded-dnsname.pem",
--      "pki/testdata/name_constraints_unittest/san-excluded-ipaddress.pem",
--      "pki/testdata/name_constraints_unittest/san-invalid-empty.pem",
--      "pki/testdata/name_constraints_unittest/san-invalid-ipaddress.pem",
--      "pki/testdata/name_constraints_unittest/san-ipaddress4.pem",
--      "pki/testdata/name_constraints_unittest/san-ipaddress6.pem",
--      "pki/testdata/name_constraints_unittest/san-othername.pem",
--      "pki/testdata/name_constraints_unittest/san-permitted.pem",
--      "pki/testdata/name_constraints_unittest/san-registeredid.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-domaincase.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-empty-localpart.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-empty.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-ipv4.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-localpartcase.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-multiple.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-no-at.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-quoted.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-subdomain-no-at.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-subdomain-two-ats.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-subdomain.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-subdomaincase.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name-two-ats.pem",
--      "pki/testdata/name_constraints_unittest/san-rfc822name.pem",
--      "pki/testdata/name_constraints_unittest/san-uri.pem",
--      "pki/testdata/name_constraints_unittest/san-x400address.pem",
--      "pki/testdata/name_constraints_unittest/uri-excluded.pem",
--      "pki/testdata/name_constraints_unittest/uri-permitted.pem",
--      "pki/testdata/name_constraints_unittest/x400address-excluded.pem",
--      "pki/testdata/name_constraints_unittest/x400address-permitted.pem",
--      "pki/testdata/nist-pkits/certs/AllCertificatesNoPoliciesTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/AllCertificatesanyPolicyTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/AnyPolicyTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/BadCRLIssuerNameCACert.crt",
--      "pki/testdata/nist-pkits/certs/BadCRLSignatureCACert.crt",
--      "pki/testdata/nist-pkits/certs/BadSignedCACert.crt",
--      "pki/testdata/nist-pkits/certs/BadnotAfterDateCACert.crt",
--      "pki/testdata/nist-pkits/certs/BadnotBeforeDateCACert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCACert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCRLCert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyCACert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyCACert.crt",
--      "pki/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt",
--      "pki/testdata/nist-pkits/certs/CPSPointerQualifierTest20EE.crt",
--      "pki/testdata/nist-pkits/certs/DSACACert.crt",
--      "pki/testdata/nist-pkits/certs/DSAParametersInheritedCACert.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/DifferentPoliciesTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/GeneralizedTimeCRLnextUpdateCACert.crt",
--      "pki/testdata/nist-pkits/certs/GoodCACert.crt",
--      "pki/testdata/nist-pkits/certs/GoodsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBadCRLIssuerNameTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBadCRLSignatureTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidCASignatureTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidCAnotAfterDateTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidCAnotBeforeDateTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest31EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest33EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest38EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest28EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest29EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest15EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest16EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest17EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest20EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidDSASignatureTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidEESignatureTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidEEnotAfterDateTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidEEnotBeforeDateTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest23EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest26EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidLongSerialNumberTest18EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidMappingFromanyPolicyTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidMappingToanyPolicyTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidMissingCRLTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidMissingbasicConstraintsTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidNameChainingOrderTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidNameChainingTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidNegativeSerialNumberTest15EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidOldCRLnextUpdateTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidPolicyMappingTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest22EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest24EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest26EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidRevokedCATest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidRevokedEETest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedpathLenConstraintTest16EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidURInameConstraintsTest35EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidURInameConstraintsTest37EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidWrongCRLTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcAFalseTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcAFalseTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest27EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest31EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest32EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest34EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidcRLIssuerTest35EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddeltaCRLTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddistributionPointTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddistributionPointTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddistributionPointTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddistributionPointTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/InvaliddistributionPointTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlyContainsAttributeCertsTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlyContainsCACertsTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlyContainsUserCertsTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest15EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest16EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest17EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest20EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest21EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidpathLenConstraintTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/Invalidpre2000CRLnextUpdateTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/LongSerialNumberCACert.crt",
--      "pki/testdata/nist-pkits/certs/Mapping1to2CACert.crt",
--      "pki/testdata/nist-pkits/certs/MappingFromanyPolicyCACert.crt",
--      "pki/testdata/nist-pkits/certs/MappingToanyPolicyCACert.crt",
--      "pki/testdata/nist-pkits/certs/MissingbasicConstraintsCACert.crt",
--      "pki/testdata/nist-pkits/certs/NameOrderingCACert.crt",
--      "pki/testdata/nist-pkits/certs/NegativeSerialNumberCACert.crt",
--      "pki/testdata/nist-pkits/certs/NoCRLCACert.crt",
--      "pki/testdata/nist-pkits/certs/NoPoliciesCACert.crt",
--      "pki/testdata/nist-pkits/certs/NoissuingDistributionPointCACert.crt",
--      "pki/testdata/nist-pkits/certs/OldCRLnextUpdateCACert.crt",
--      "pki/testdata/nist-pkits/certs/OverlappingPoliciesTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/P12Mapping1to3CACert.crt",
--      "pki/testdata/nist-pkits/certs/P12Mapping1to3subCACert.crt",
--      "pki/testdata/nist-pkits/certs/P12Mapping1to3subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/P1Mapping1to234CACert.crt",
--      "pki/testdata/nist-pkits/certs/P1Mapping1to234subCACert.crt",
--      "pki/testdata/nist-pkits/certs/P1anyPolicyMapping1to2CACert.crt",
--      "pki/testdata/nist-pkits/certs/PanyPolicyMapping1to2CACert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP1234CACert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP1234subCAP123Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP1234subsubCAP123P12Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP123CACert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP123subCAP12Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P1Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P2Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP123subsubsubCAP12P2P1Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP12CACert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP12subCAP1Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP12subsubCAP1P2Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP2subCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP2subCACert.crt",
--      "pki/testdata/nist-pkits/certs/PoliciesP3CACert.crt",
--      "pki/testdata/nist-pkits/certs/RFC3280MandatoryAttributeTypesCACert.crt",
--      "pki/testdata/nist-pkits/certs/RFC3280OptionalAttributeTypesCACert.crt",
--      "pki/testdata/nist-pkits/certs/RevokedsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt",
--      "pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CRLSigningCert.crt",
--      "pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt",
--      "pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt",
--      "pki/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt",
--      "pki/testdata/nist-pkits/certs/TrustAnchorRootCertificate.crt",
--      "pki/testdata/nist-pkits/certs/TwoCRLsCACert.crt",
--      "pki/testdata/nist-pkits/certs/UIDCACert.crt",
--      "pki/testdata/nist-pkits/certs/UTF8StringCaseInsensitiveMatchCACert.crt",
--      "pki/testdata/nist-pkits/certs/UTF8StringEncodedNamesCACert.crt",
--      "pki/testdata/nist-pkits/certs/UnknownCRLEntryExtensionCACert.crt",
--      "pki/testdata/nist-pkits/certs/UnknownCRLExtensionCACert.crt",
--      "pki/testdata/nist-pkits/certs/UserNoticeQualifierTest15EE.crt",
--      "pki/testdata/nist-pkits/certs/UserNoticeQualifierTest16EE.crt",
--      "pki/testdata/nist-pkits/certs/UserNoticeQualifierTest17EE.crt",
--      "pki/testdata/nist-pkits/certs/UserNoticeQualifierTest18EE.crt",
--      "pki/testdata/nist-pkits/certs/UserNoticeQualifierTest19EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidCertificatePathTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest30EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest32EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNandRFC822nameConstraintsTest27EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest18EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest19EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDNnameConstraintsTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDSAParameterInheritanceTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidDSASignaturesTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidGeneralizedTimeCRLnextUpdateTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidGeneralizedTimenotBeforeDateTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest22EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest24EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest25EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidLongSerialNumberTest16EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidLongSerialNumberTest17EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNameChainingCapitalizationTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNameUIDsTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNegativeSerialNumberTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidNoissuingDistributionPointTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest12EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidPolicyMappingTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRFC3280MandatoryAttributeTypesTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest21EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest23EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest25EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest15EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidSeparateCertificateandCRLKeysTest19EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidTwoCRLsTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidURInameConstraintsTest34EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidURInameConstraintsTest36EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidUTF8StringCaseInsensitiveMatchTest11EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidUTF8StringEncodedNamesTest9EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidUnknownNotCriticalCertificateExtensionTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidbasicConstraintsNotCriticalTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidcRLIssuerTest28EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidcRLIssuerTest29EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidcRLIssuerTest30EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidcRLIssuerTest33EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddeltaCRLTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddeltaCRLTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddeltaCRLTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddeltaCRLTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddistributionPointTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddistributionPointTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddistributionPointTest5EE.crt",
--      "pki/testdata/nist-pkits/certs/ValiddistributionPointTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidinhibitAnyPolicyTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidkeyUsageNotCriticalTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidonlyContainsCACertsTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidonlySomeReasonsTest18EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidonlySomeReasonsTest19EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest13EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest14EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest7EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidpathLenConstraintTest8EE.crt",
--      "pki/testdata/nist-pkits/certs/Validpre2000UTCnotBeforeDateTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest1EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest2EE.crt",
--      "pki/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest4EE.crt",
--      "pki/testdata/nist-pkits/certs/WrongCRLCACert.crt",
--      "pki/testdata/nist-pkits/certs/anyPolicyCACert.crt",
--      "pki/testdata/nist-pkits/certs/basicConstraintsCriticalcAFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/basicConstraintsNotCriticalCACert.crt",
--      "pki/testdata/nist-pkits/certs/basicConstraintsNotCriticalcAFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/deltaCRLCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/deltaCRLCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/deltaCRLCA3Cert.crt",
--      "pki/testdata/nist-pkits/certs/deltaCRLIndicatorNoBaseCACert.crt",
--      "pki/testdata/nist-pkits/certs/distributionPoint1CACert.crt",
--      "pki/testdata/nist-pkits/certs/distributionPoint2CACert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA3Cert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA3cRLIssuerCert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA4Cert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA4cRLIssuerCert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA5Cert.crt",
--      "pki/testdata/nist-pkits/certs/indirectCRLCA6Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy0CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subCAIAP5Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy1subsubCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy5CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy5subCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicy5subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitAnyPolicyTest3EE.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping0CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping0subCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping5CACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/keyUsageCriticalcRLSignFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/keyUsageCriticalkeyCertSignFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/keyUsageNotCriticalCACert.crt",
--      "pki/testdata/nist-pkits/certs/keyUsageNotCriticalcRLSignFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN1CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN1SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN1subCA3Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN2CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN3CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN3subCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN3subCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN4CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDN5CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDNS1CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsDNS2CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsRFC822CA3Cert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsURI1CACert.crt",
--      "pki/testdata/nist-pkits/certs/nameConstraintsURI2CACert.crt",
--      "pki/testdata/nist-pkits/certs/onlyContainsAttributeCertsCACert.crt",
--      "pki/testdata/nist-pkits/certs/onlyContainsCACertsCACert.crt",
--      "pki/testdata/nist-pkits/certs/onlyContainsUserCertsCACert.crt",
--      "pki/testdata/nist-pkits/certs/onlySomeReasonsCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/onlySomeReasonsCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/onlySomeReasonsCA3Cert.crt",
--      "pki/testdata/nist-pkits/certs/onlySomeReasonsCA4Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint0CACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint0SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint0subCA2Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint0subCACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint1CACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint1subCACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6CACert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subCA0Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subCA1Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subCA4Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA00Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA11Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subsubCA41Cert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA11XCert.crt",
--      "pki/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA41XCert.crt",
--      "pki/testdata/nist-pkits/certs/pre2000CRLnextUpdateCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy0CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy0subCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy0subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy0subsubsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy10CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy10subCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy10subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy10subsubsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy2CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy2subCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy4CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy4subCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy4subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy4subsubsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy5CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy5subCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy5subsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy5subsubsubCACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy7CACert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy7subCARE2Cert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt",
--      "pki/testdata/nist-pkits/certs/requireExplicitPolicy7subsubsubCARE2RE4Cert.crt",
--      "pki/testdata/nist-pkits/crls/BadCRLIssuerNameCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BadCRLSignatureCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BadSignedCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BadnotAfterDateCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BadnotBeforeDateCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BasicSelfIssuedCRLSigningKeyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl",
--      "pki/testdata/nist-pkits/crls/BasicSelfIssuedNewKeyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BasicSelfIssuedOldKeyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/BasicSelfIssuedOldKeySelfIssuedCertCRL.crl",
--      "pki/testdata/nist-pkits/crls/DSACACRL.crl",
--      "pki/testdata/nist-pkits/crls/DSAParametersInheritedCACRL.crl",
--      "pki/testdata/nist-pkits/crls/GeneralizedTimeCRLnextUpdateCACRL.crl",
--      "pki/testdata/nist-pkits/crls/GoodCACRL.crl",
--      "pki/testdata/nist-pkits/crls/GoodsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/GoodsubCAPanyPolicyMapping1to2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/LongSerialNumberCACRL.crl",
--      "pki/testdata/nist-pkits/crls/Mapping1to2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/MappingFromanyPolicyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/MappingToanyPolicyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/MissingbasicConstraintsCACRL.crl",
--      "pki/testdata/nist-pkits/crls/NameOrderCACRL.crl",
--      "pki/testdata/nist-pkits/crls/NegativeSerialNumberCACRL.crl",
--      "pki/testdata/nist-pkits/crls/NoPoliciesCACRL.crl",
--      "pki/testdata/nist-pkits/crls/NoissuingDistributionPointCACRL.crl",
--      "pki/testdata/nist-pkits/crls/OldCRLnextUpdateCACRL.crl",
--      "pki/testdata/nist-pkits/crls/P12Mapping1to3CACRL.crl",
--      "pki/testdata/nist-pkits/crls/P12Mapping1to3subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/P12Mapping1to3subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/P1Mapping1to234CACRL.crl",
--      "pki/testdata/nist-pkits/crls/P1Mapping1to234subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/P1anyPolicyMapping1to2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/PanyPolicyMapping1to2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP1234CACRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP1234subCAP123CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP1234subsubCAP123P12CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP123CACRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP123subCAP12CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP123subsubCAP12P1CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP123subsubCAP2P2CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP123subsubsubCAP12P2P1CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP12CACRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP12subCAP1CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP12subsubCAP1P2CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP2subCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP2subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/PoliciesP3CACRL.crl",
--      "pki/testdata/nist-pkits/crls/RFC3280MandatoryAttributeTypesCACRL.crl",
--      "pki/testdata/nist-pkits/crls/RFC3280OptionalAttributeTypesCACRL.crl",
--      "pki/testdata/nist-pkits/crls/RevokedsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/RolloverfromPrintableStringtoUTF8StringCACRL.crl",
--      "pki/testdata/nist-pkits/crls/SeparateCertificateandCRLKeysCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/SeparateCertificateandCRLKeysCRL.crl",
--      "pki/testdata/nist-pkits/crls/TrustAnchorRootCRL.crl",
--      "pki/testdata/nist-pkits/crls/TwoCRLsCABadCRL.crl",
--      "pki/testdata/nist-pkits/crls/TwoCRLsCAGoodCRL.crl",
--      "pki/testdata/nist-pkits/crls/UIDCACRL.crl",
--      "pki/testdata/nist-pkits/crls/UTF8StringCaseInsensitiveMatchCACRL.crl",
--      "pki/testdata/nist-pkits/crls/UTF8StringEncodedNamesCACRL.crl",
--      "pki/testdata/nist-pkits/crls/UnknownCRLEntryExtensionCACRL.crl",
--      "pki/testdata/nist-pkits/crls/UnknownCRLExtensionCACRL.crl",
--      "pki/testdata/nist-pkits/crls/WrongCRLCACRL.crl",
--      "pki/testdata/nist-pkits/crls/anyPolicyCACRL.crl",
--      "pki/testdata/nist-pkits/crls/basicConstraintsCriticalcAFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/basicConstraintsNotCriticalCACRL.crl",
--      "pki/testdata/nist-pkits/crls/basicConstraintsNotCriticalcAFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA1deltaCRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA2deltaCRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA3CRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLCA3deltaCRL.crl",
--      "pki/testdata/nist-pkits/crls/deltaCRLIndicatorNoBaseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/distributionPoint1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/distributionPoint2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/indirectCRLCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/indirectCRLCA3CRL.crl",
--      "pki/testdata/nist-pkits/crls/indirectCRLCA3cRLIssuerCRL.crl",
--      "pki/testdata/nist-pkits/crls/indirectCRLCA4cRLIssuerCRL.crl",
--      "pki/testdata/nist-pkits/crls/indirectCRLCA5CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy0CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subCAIAP5CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy1subsubCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy5CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy5subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitAnyPolicy5subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping0CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping0subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subCAIPM5CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P12subsubCAIPM5CRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping1P1subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping5CACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/inhibitPolicyMapping5subsubsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/keyUsageCriticalcRLSignFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/keyUsageCriticalkeyCertSignFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/keyUsageNotCriticalCACRL.crl",
--      "pki/testdata/nist-pkits/crls/keyUsageNotCriticalcRLSignFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/keyUsageNotCriticalkeyCertSignFalseCACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN1subCA3CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN3CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN3subCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN3subCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN4CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDN5CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDNS1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsDNS2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsRFC822CA3CRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsURI1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/nameConstraintsURI2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/onlyContainsAttributeCertsCACRL.crl",
--      "pki/testdata/nist-pkits/crls/onlyContainsCACertsCACRL.crl",
--      "pki/testdata/nist-pkits/crls/onlyContainsUserCertsCACRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA1compromiseCRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA1otherreasonsCRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA2CRL1.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA2CRL2.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA3compromiseCRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA3otherreasonsCRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA4compromiseCRL.crl",
--      "pki/testdata/nist-pkits/crls/onlySomeReasonsCA4otherreasonsCRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint0CACRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint0subCA2CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint0subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint1CACRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint1subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6CACRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subCA0CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subCA1CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subCA4CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA00CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA11CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subsubCA41CRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subsubsubCA11XCRL.crl",
--      "pki/testdata/nist-pkits/crls/pathLenConstraint6subsubsubCA41XCRL.crl",
--      "pki/testdata/nist-pkits/crls/pre2000CRLnextUpdateCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy0CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy0subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy0subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy0subsubsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy10CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy10subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy10subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy10subsubsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy2CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy2subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy4CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy4subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy4subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy4subsubsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy5CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy5subCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy5subsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy5subsubsubCACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy7CACRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy7subCARE2CRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy7subsubCARE2RE4CRL.crl",
--      "pki/testdata/nist-pkits/crls/requireExplicitPolicy7subsubsubCARE2RE4CRL.crl",
--      "pki/testdata/ocsp_unittest/bad_ocsp_type.pem",
--      "pki/testdata/ocsp_unittest/bad_signature.pem",
--      "pki/testdata/ocsp_unittest/bad_status.pem",
--      "pki/testdata/ocsp_unittest/good_response.pem",
--      "pki/testdata/ocsp_unittest/good_response_next_update.pem",
--      "pki/testdata/ocsp_unittest/good_response_sha256.pem",
--      "pki/testdata/ocsp_unittest/has_critical_ct_extension.pem",
--      "pki/testdata/ocsp_unittest/has_critical_response_extension.pem",
--      "pki/testdata/ocsp_unittest/has_critical_single_extension.pem",
--      "pki/testdata/ocsp_unittest/has_extension.pem",
--      "pki/testdata/ocsp_unittest/has_single_extension.pem",
--      "pki/testdata/ocsp_unittest/has_version.pem",
--      "pki/testdata/ocsp_unittest/malformed_request.pem",
--      "pki/testdata/ocsp_unittest/missing_response.pem",
--      "pki/testdata/ocsp_unittest/multiple_response.pem",
--      "pki/testdata/ocsp_unittest/no_response.pem",
--      "pki/testdata/ocsp_unittest/ocsp_extra_certs.pem",
--      "pki/testdata/ocsp_unittest/ocsp_sign_bad_indirect.pem",
--      "pki/testdata/ocsp_unittest/ocsp_sign_direct.pem",
--      "pki/testdata/ocsp_unittest/ocsp_sign_indirect.pem",
--      "pki/testdata/ocsp_unittest/ocsp_sign_indirect_missing.pem",
--      "pki/testdata/ocsp_unittest/other_response.pem",
--      "pki/testdata/ocsp_unittest/responder_id.pem",
--      "pki/testdata/ocsp_unittest/responder_name.pem",
--      "pki/testdata/ocsp_unittest/revoke_response.pem",
--      "pki/testdata/ocsp_unittest/revoke_response_reason.pem",
--      "pki/testdata/ocsp_unittest/unknown_response.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/empty_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/extra_contents_after_extension_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/extra_contents_after_issuer_and_serial.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_contents.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_issuer.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_key_identifier.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/invalid_serial.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/issuer_and_serial.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/issuer_only.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/key_identifier.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/key_identifier_and_issuer_and_serial.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/serial_only.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier/url_issuer_and_serial.pem",
--      "pki/testdata/parse_certificate_unittest/authority_key_identifier_not_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/bad_key_usage.pem",
--      "pki/testdata/parse_certificate_unittest/bad_policy_qualifiers.pem",
--      "pki/testdata/parse_certificate_unittest/bad_signature_algorithm_oid.pem",
--      "pki/testdata/parse_certificate_unittest/bad_validity.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_ca_false.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_ca_no_path.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_ca_path_9.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_negative_path.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_not_ca.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_path_too_large.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_255.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_256.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_pathlen_not_ca.pem",
--      "pki/testdata/parse_certificate_unittest/basic_constraints_unconsumed_data.pem",
--      "pki/testdata/parse_certificate_unittest/cert_algorithm_not_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/cert_data_after_signature.pem",
--      "pki/testdata/parse_certificate_unittest/cert_empty_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/cert_missing_signature.pem",
--      "pki/testdata/parse_certificate_unittest/cert_not_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/cert_signature_not_bit_string.pem",
--      "pki/testdata/parse_certificate_unittest/cert_skeleton.pem",
--      "pki/testdata/parse_certificate_unittest/cert_version3.pem",
--      "pki/testdata/parse_certificate_unittest/crldp_1uri_noissuer.pem",
--      "pki/testdata/parse_certificate_unittest/crldp_3uri_noissuer.pem",
--      "pki/testdata/parse_certificate_unittest/crldp_full_name_as_dirname.pem",
--      "pki/testdata/parse_certificate_unittest/crldp_issuer_as_dirname.pem",
--      "pki/testdata/parse_certificate_unittest/extended_key_usage.pem",
--      "pki/testdata/parse_certificate_unittest/extension_critical.pem",
--      "pki/testdata/parse_certificate_unittest/extension_critical_0.pem",
--      "pki/testdata/parse_certificate_unittest/extension_critical_3.pem",
--      "pki/testdata/parse_certificate_unittest/extension_not_critical.pem",
--      "pki/testdata/parse_certificate_unittest/extensions_data_after_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/extensions_duplicate_key_usage.pem",
--      "pki/testdata/parse_certificate_unittest/extensions_empty_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/extensions_not_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/extensions_real.pem",
--      "pki/testdata/parse_certificate_unittest/failed_signature_algorithm.pem",
--      "pki/testdata/parse_certificate_unittest/inhibit_any_policy.pem",
--      "pki/testdata/parse_certificate_unittest/issuer_bad_printable_string.pem",
--      "pki/testdata/parse_certificate_unittest/key_usage.pem",
--      "pki/testdata/parse_certificate_unittest/name_constraints_bad_ip.pem",
--      "pki/testdata/parse_certificate_unittest/policies.pem",
--      "pki/testdata/parse_certificate_unittest/policy_constraints_empty.pem",
--      "pki/testdata/parse_certificate_unittest/policy_constraints_inhibit.pem",
--      "pki/testdata/parse_certificate_unittest/policy_constraints_inhibit_require.pem",
--      "pki/testdata/parse_certificate_unittest/policy_constraints_require.pem",
--      "pki/testdata/parse_certificate_unittest/policy_qualifiers_empty_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/serial_37_bytes.pem",
--      "pki/testdata/parse_certificate_unittest/serial_negative.pem",
--      "pki/testdata/parse_certificate_unittest/serial_not_minimal.pem",
--      "pki/testdata/parse_certificate_unittest/serial_not_number.pem",
--      "pki/testdata/parse_certificate_unittest/serial_zero.pem",
--      "pki/testdata/parse_certificate_unittest/serial_zero_padded.pem",
--      "pki/testdata/parse_certificate_unittest/serial_zero_padded_21_bytes.pem",
--      "pki/testdata/parse_certificate_unittest/signature_algorithm_null.pem",
--      "pki/testdata/parse_certificate_unittest/subject_alt_name.pem",
--      "pki/testdata/parse_certificate_unittest/subject_blank_subjectaltname_not_critical.pem",
--      "pki/testdata/parse_certificate_unittest/subject_key_identifier_not_octet_string.pem",
--      "pki/testdata/parse_certificate_unittest/subject_not_ascii.pem",
--      "pki/testdata/parse_certificate_unittest/subject_not_printable_string.pem",
--      "pki/testdata/parse_certificate_unittest/subject_printable_string_containing_utf8_client_cert.pem",
--      "pki/testdata/parse_certificate_unittest/subject_t61string.pem",
--      "pki/testdata/parse_certificate_unittest/subject_t61string_1-32.pem",
--      "pki/testdata/parse_certificate_unittest/subject_t61string_126-160.pem",
--      "pki/testdata/parse_certificate_unittest/subject_t61string_actual.pem",
--      "pki/testdata/parse_certificate_unittest/subjectaltname_bad_ip.pem",
--      "pki/testdata/parse_certificate_unittest/subjectaltname_dns_not_ascii.pem",
--      "pki/testdata/parse_certificate_unittest/subjectaltname_general_names_empty_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/subjectaltname_trailing_data.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_explicit_v1.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v1.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v1_extensions.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v2_extensions.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v2_issuer_and_subject_unique_id.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v2_issuer_unique_id.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v2_no_optionals.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_all_optionals.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_data_after_extensions.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_extensions.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_extensions_not_sequence.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_no_optionals.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v3_real.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_v4.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_validity_both_generalized_time.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_validity_both_utc_time.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_validity_generalized_time_and_utc_time.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_validity_relaxed.pem",
--      "pki/testdata/parse_certificate_unittest/tbs_validity_utc_time_and_generalized_time.pem",
--      "pki/testdata/parse_certificate_unittest/v1_explicit_version.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_match_name_only.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_matching.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/int_mismatch.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/root.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/root2.pem",
--      "pki/testdata/path_builder_unittest/key_id_name_and_serial_prioritization/target.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_a.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_b.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_different_ski_c.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_a.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_b.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_matching_ski_c.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_a.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_b.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/int_no_ski_c.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/root.pem",
--      "pki/testdata/path_builder_unittest/key_id_prioritization/target.pem",
--      "pki/testdata/path_builder_unittest/multi-root-A-by-B.pem",
--      "pki/testdata/path_builder_unittest/multi-root-B-by-C.pem",
--      "pki/testdata/path_builder_unittest/multi-root-B-by-F.pem",
--      "pki/testdata/path_builder_unittest/multi-root-C-by-D.pem",
--      "pki/testdata/path_builder_unittest/multi-root-C-by-E.pem",
--      "pki/testdata/path_builder_unittest/multi-root-D-by-D.pem",
--      "pki/testdata/path_builder_unittest/multi-root-E-by-E.pem",
--      "pki/testdata/path_builder_unittest/multi-root-F-by-E.pem",
--      "pki/testdata/path_builder_unittest/precertificate/precertificate.pem",
--      "pki/testdata/path_builder_unittest/precertificate/root.pem",
--      "pki/testdata/path_builder_unittest/self_issued_prioritization/root1.pem",
--      "pki/testdata/path_builder_unittest/self_issued_prioritization/root1_cross.pem",
--      "pki/testdata/path_builder_unittest/self_issued_prioritization/root2.pem",
--      "pki/testdata/path_builder_unittest/self_issued_prioritization/target.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/int_ac.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/int_ad.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/int_bc.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/int_bd.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/root.pem",
--      "pki/testdata/path_builder_unittest/validity_date_prioritization/target.pem",
--      "pki/testdata/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-intermediate/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/expired-intermediate/not-after.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-intermediate/not-before.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-expiration-and-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-after-ta-with-expiration.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-after.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-before-ta-with-expiration.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-root/not-before.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-target/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/expired-target/not-after.test",
--      "pki/testdata/verify_certificate_chain_unittest/expired-target/not-before.test",
--      "pki/testdata/verify_certificate_chain_unittest/incorrect-trust-anchor/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/incorrect-trust-anchor/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-and-target-wrong-signature/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-and-target-wrong-signature/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-any-and-clientauth/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-clientauth/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-any.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-clientAuth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-clientAuth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-serverAuth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha1-eku-serverAuth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-any.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-clientAuth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-clientAuth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-serverAuth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-eku-server-gated-crypto/sha256-eku-serverAuth.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-invalid-spki/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-invalid-spki/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-signed-with-sha1/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-signed-with-sha1/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-critical-extension/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-wrong-signature-no-authority-key-identifier/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/intermediate-wrong-signature-no-authority-key-identifier/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.pem",
--      "pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.pem",
--      "pki/testdata/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal/target.test",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/longrolloverchain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/longrolloverchain.test",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/newchain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/newchain.test",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/oldchain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/oldchain.test",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/rolloverchain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/key-rollover/rolloverchain.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/ok-all-types.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/ok-all-types.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-all-types.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-all-types.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-excluded.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-excluded.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-permitted.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dirnames-permitted.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-excluded.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-excluded.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-permitted.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-dns-permitted.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-excluded.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-excluded.test",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-permitted.pem",
--      "pki/testdata/verify_certificate_chain_unittest/many-names/toomany-ips-permitted.test",
--      "pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/non-self-signed-root/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.4.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.1.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.1.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.1.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.10.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.13.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.4.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.7.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.10.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.10.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.11.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.11.9.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.10.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.4.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.12.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.10.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.12.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.13.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.15.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.16.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.17.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.20.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.21.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.22.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.23.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.24.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.25.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.26.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.27.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.28.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.29.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.31.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.33.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.34.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.35.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.36.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.37.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.38.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.7.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.13.9.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.16.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.2.7.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.3.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.3.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.10.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.11.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.12.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.16.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.6.9.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.7.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.7.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.1.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.12.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.14.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.2.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.4.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.6.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.7.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.8.9.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.3.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.5.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.7.txt",
--      "pki/testdata/verify_certificate_chain_unittest/pkits_errors/4.9.8.txt",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-fail/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-anypolicy-by-root-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-fail/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-inhibit-mapping-by-root-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-on-root-wrong/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-fail/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policies-required-by-root-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-fail/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/policy-mappings-on-root-ok/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-basic-constraints-ca-false/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-constraints-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-expiration-and-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth-ta-with-expiration.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-eku-clientauth/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-constraints-require-basic-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-basic-constraints/ta-with-require-basic-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/root-lacks-keycertsign-key-usage/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/distrusted-root-expired.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/distrusted-root.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/ta-with-constraints.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/ta-with-expiration.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/trusted_leaf-and-trust_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/trusted_leaf-root.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-and-intermediate/unspecified-trust-root.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-any/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-clientauth/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-many/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/any.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth-strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/clientauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/serverauth-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-eku-none/serverauth.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-512bit-rsa-key/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-512bit-rsa-key/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only-trusted_leaf-strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only-trusted_leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-ca-basic-constraints/target_only.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-and-eku/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-and-eku/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-no-eku/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-msapplicationpolicies-no-eku/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/strict-leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-not-end-entity/strict.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-and-trust_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-not_after.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf-wrong_eku.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-only/trusted_leaf_require_self_signed.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfissued/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf-and-trust_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfissued/trusted_leaf_require_self_signed.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-and-trust_anchor.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-not_after.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf-wrong_eku.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-selfsigned/trusted_leaf_require_self_signed.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-decipherOnly.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-digitalSignature.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyAgreement.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/ec-keyEncipherment.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-decipherOnly.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-digitalSignature.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyAgreement.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-serverauth-various-keyusages/rsa-keyEncipherment.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-by-512bit-rsa/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-using-ecdsa/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-using-ecdsa/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-with-sha1/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-signed-with-sha1/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/target_only-trusted_leaf.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-unknown-critical-extension/target_only.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-wrong-signature-no-authority-key-identifier/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-wrong-signature-no-authority-key-identifier/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/target-wrong-signature/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/target-wrong-signature/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/unknown-critical-policy-qualifier/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/unknown-non-critical-policy-qualifier/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/chain.pem",
--      "pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/main.test",
--      "pki/testdata/verify_certificate_chain_unittest/violates-pathlen-1-from-root/ta-with-constraints.test",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-case_swap.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-extra_whitespace.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-BMPSTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-case_swap.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-extra_whitespace.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-rdn_sorting_1.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-rdn_sorting_2.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-PRINTABLESTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-case_swap.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-extra_whitespace.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-T61STRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-case_swap.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-extra_whitespace.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UNIVERSALSTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-case_swap.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-extra_whitespace.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-dupe_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-extra_attr.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled-extra_rdn.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-UTF8-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-mixed-rdn_dupetype_sorting_1.pem",
--      "pki/testdata/verify_name_match_unittest/names/ascii-mixed-rdn_dupetype_sorting_2.pem",
--      "pki/testdata/verify_name_match_unittest/names/custom-custom-normalized.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-badAttributeType.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-empty.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-extradata.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-onlyOneElement.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-AttributeTypeAndValue-setNotSequence.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-Name-setInsteadOfSequence.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-RDN-empty.pem",
--      "pki/testdata/verify_name_match_unittest/names/invalid-RDN-sequenceInsteadOfSet.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode-mixed-normalized.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode-mixed-unnormalized.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode_bmp-BMPSTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode_bmp-UNIVERSALSTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode_bmp-UTF8-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode_supplementary-UNIVERSALSTRING-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/unicode_supplementary-UTF8-unmangled.pem",
--      "pki/testdata/verify_name_match_unittest/names/valid-Name-empty.pem",
--      "pki/testdata/verify_name_match_unittest/names/valid-minimal.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-spki-params-null.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-unused-bits-signature.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-ecdh-key.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-ecmqv-key.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-using-rsa-algorithm.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512-wrong-signature-format.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-prime256v1-sha512.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-secp384r1-sha256-corrupted-data.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-secp384r1-sha256.pem",
--      "pki/testdata/verify_signed_data_unittest/ecdsa-using-rsa-key.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-bad-key-der-length.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-bad-key-der-null.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-key-params-absent.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-using-pss-key-no-params.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1-wrong-algorithm.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha1.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-key-encoded-ber.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-spki-non-null-params.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-using-ecdsa-algorithm.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256-using-id-ea-rsa.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pkcs1-sha256.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pss-sha256-using-pss-key-with-params.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pss-sha256-wrong-salt.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-pss-sha256.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa-using-ec-key.pem",
--      "pki/testdata/verify_signed_data_unittest/rsa2048-pkcs1-sha512.pem",
-       "pki/testdata/verify_unittest/google-intermediate1.der",
-       "pki/testdata/verify_unittest/google-intermediate2.der",
-       "pki/testdata/verify_unittest/google-leaf.der",
-@@ -2758,6 +1323,7 @@
+@@ -312,6 +314,7 @@
+       "crypto/cpu_arm_freebsd.cc",
+       "crypto/cpu_arm_linux.cc",
+       "crypto/cpu_intel.cc",
++      "crypto/cpu_ppc64le.cc",
+       "crypto/crypto.cc",
+       "crypto/curve25519/curve25519.cc",
+       "crypto/curve25519/curve25519_64_adx.cc",
+@@ -2750,6 +2753,7 @@
        "gen/test_support/trampoline-armv8-apple.S",
        "gen/test_support/trampoline-armv8-linux.S",
        "gen/test_support/trampoline-armv8-win.S",
@@ -7247,10 +4343,10 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/sources.json
        "gen/test_support/trampoline-x86-apple.S",
        "gen/test_support/trampoline-x86-linux.S",
        "gen/test_support/trampoline-x86_64-apple.S",
-Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/test_support/trampoline-ppc-linux.S
+Index: chromium-133.0.6943.35/third_party/boringssl/src/gen/test_support/trampoline-ppc-linux.S
 ===================================================================
 --- /dev/null
-+++ chromium-130.0.6723.44/third_party/boringssl/src/gen/test_support/trampoline-ppc-linux.S
++++ chromium-133.0.6943.35/third_party/boringssl/src/gen/test_support/trampoline-ppc-linux.S
 @@ -0,0 +1,1413 @@
 +// This file is generated from a similarly-named Perl script in the BoringSSL
 +// source tree. Do not edit by hand.
@@ -8662,6 +5758,6 @@ Index: chromium-130.0.6723.44/third_party/boringssl/src/gen/test_support/trampol
 +
 +#endif  // !OPENSSL_NO_ASM && __powerpc64__ && __ELF__
 +#if defined(__ELF__)
-+// See https://www.airs.com/blog/archives/518.
++// See https://www.airs.ccom/blog/archives/518.
 +.section .note.GNU-stack,"",%progbits
 +#endif

diff --git a/0002-third_party-libvpx-Remove-bad-ppc64-config.patch b/0002-third_party-libvpx-Remove-bad-ppc64-config.patch
index 585d4b8..e2eb5e5 100644
--- a/0002-third_party-libvpx-Remove-bad-ppc64-config.patch
+++ b/0002-third_party-libvpx-Remove-bad-ppc64-config.patch
@@ -1,9 +1,10 @@
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vp8_rtcd.h
++++ /dev/null
 @@ -1,330 +0,0 @@
 -/*
-- *  Copyright (c) 2024 The WebM project authors. All Rights Reserved.
+- *  Copyright (c) 2025 The WebM project authors. All Rights Reserved.
 - *
 - *  Use of this source code is governed by a BSD-style license
 - *  that can be found in the LICENSE file in the root of the source
@@ -332,12 +333,13 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -#endif
 -
 -#endif  // VP8_RTCD_H_
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vp9_rtcd.h
++++ /dev/null
 @@ -1,206 +0,0 @@
 -/*
-- *  Copyright (c) 2024 The WebM project authors. All Rights Reserved.
+- *  Copyright (c) 2025 The WebM project authors. All Rights Reserved.
 - *
 - *  Use of this source code is governed by a BSD-style license
 - *  that can be found in the LICENSE file in the root of the source
@@ -542,9 +544,10 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -#endif
 -
 -#endif  // VP9_RTCD_H_
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.asm
++++ /dev/null
 @@ -1,108 +0,0 @@
 -@ This file was created from a .asm file
 -@  using the ads2gas.pl script.
@@ -654,9 +657,10 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -.equ DECODE_WIDTH_LIMIT ,  16384
 -.equ DECODE_HEIGHT_LIMIT ,  16384
 -    .section .note.GNU-stack,"",%progbits
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.c chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.c
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.c	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.c	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vpx_config.c
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.c
++++ /dev/null
 @@ -1,10 +0,0 @@
 -/* Copyright (c) 2011 The WebM project authors. All Rights Reserved. */
 -/*  */
@@ -668,9 +672,10 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -#include "vpx/vpx_codec.h"
 -static const char* const cfg = "--target=ppc64le-linux-gcc --enable-external-build --enable-postproc --enable-multi-res-encoding --enable-temporal-denoising --enable-vp9-temporal-denoising --enable-vp9-postproc --size-limit=16384x16384 --enable-realtime-only --disable-install-docs --disable-libyuv --enable-unit-tests";
 -const char *vpx_codec_build_config(void) {return cfg;}
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.h chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.h
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.h	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_config.h	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vpx_config.h
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vpx_config.h
++++ /dev/null
 @@ -1,117 +0,0 @@
 -/* Copyright (c) 2011 The WebM project authors. All Rights Reserved. */
 -/*  */
@@ -789,12 +794,13 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -#define DECODE_WIDTH_LIMIT 16384
 -#define DECODE_HEIGHT_LIMIT 16384
 -#endif /* VPX_CONFIG_H */
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vpx_dsp_rtcd.h
++++ /dev/null
 @@ -1,2138 +0,0 @@
 -/*
-- *  Copyright (c) 2024 The WebM project authors. All Rights Reserved.
+- *  Copyright (c) 2025 The WebM project authors. All Rights Reserved.
 - *
 - *  Use of this source code is governed by a BSD-style license
 - *  that can be found in the LICENSE file in the root of the source
@@ -2931,12 +2937,13 @@ diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc
 -#endif
 -
 -#endif  // VPX_DSP_RTCD_H_
-diff -Nur chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h
---- chromium-131.0.6778.69.orig/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h	2024-11-12 22:49:02.000000000 +0100
-+++ chromium-131.0.6778.69/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h	1970-01-01 01:00:00.000000000 +0100
+Index: chromium-133.0.6943.35/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h
+===================================================================
+--- chromium-133.0.6943.35.orig/third_party/libvpx/source/config/linux/ppc64/vpx_scale_rtcd.h
++++ /dev/null
 @@ -1,110 +0,0 @@
 -/*
-- *  Copyright (c) 2024 The WebM project authors. All Rights Reserved.
+- *  Copyright (c) 2025 The WebM project authors. All Rights Reserved.
 - *
 - *  Use of this source code is governed by a BSD-style license
 - *  that can be found in the LICENSE file in the root of the source

diff --git a/0008-sandbox-fix-ppc64le-glibc234.patch b/0008-sandbox-fix-ppc64le-glibc234.patch
index 2e70fef..8c52acb 100644
--- a/0008-sandbox-fix-ppc64le-glibc234.patch
+++ b/0008-sandbox-fix-ppc64le-glibc234.patch
@@ -1,7 +1,5 @@
-Index: chromium-130.0.6723.44/sandbox/policy/linux/bpf_utility_policy_linux.cc
-===================================================================
---- chromium-130.0.6723.44.orig/sandbox/policy/linux/bpf_utility_policy_linux.cc
-+++ chromium-130.0.6723.44/sandbox/policy/linux/bpf_utility_policy_linux.cc
+--- a/sandbox/policy/linux/bpf_utility_policy_linux.cc
++++ b/sandbox/policy/linux/bpf_utility_policy_linux.cc
 @@ -34,7 +34,7 @@ ResultExpr UtilityProcessPolicy::Evaluat
      case __NR_fdatasync:
      case __NR_fsync:
@@ -11,11 +9,9 @@ Index: chromium-130.0.6723.44/sandbox/policy/linux/bpf_utility_policy_linux.cc
      case __NR_getrlimit:
  #endif
  #if defined(__i386__) || defined(__arm__)
-Index: chromium-130.0.6723.44/sandbox/policy/linux/bpf_renderer_policy_linux.cc
-===================================================================
---- chromium-130.0.6723.44.orig/sandbox/policy/linux/bpf_renderer_policy_linux.cc
-+++ chromium-130.0.6723.44/sandbox/policy/linux/bpf_renderer_policy_linux.cc
-@@ -87,7 +87,7 @@ ResultExpr RendererProcessPolicy::Evalua
+--- a/sandbox/policy/linux/bpf_renderer_policy_linux.cc
++++ b/sandbox/policy/linux/bpf_renderer_policy_linux.cc
+@@ -90,7 +90,7 @@ ResultExpr RendererProcessPolicy::Evalua
      case __NR_ftruncate64:
  #endif
  #if defined(__i386__) || defined(__x86_64__) || defined(__mips__) || \
@@ -24,10 +20,8 @@ Index: chromium-130.0.6723.44/sandbox/policy/linux/bpf_renderer_policy_linux.cc
      case __NR_getrlimit:
      case __NR_setrlimit:
  // We allow setrlimit to dynamically adjust the address space limit as
-Index: chromium-130.0.6723.44/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
-===================================================================
---- chromium-130.0.6723.44.orig/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
-+++ chromium-130.0.6723.44/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
+--- a/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
++++ b/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
 @@ -58,9 +58,9 @@
  
  #elif defined(__powerpc64__)
@@ -40,10 +34,8 @@ Index: chromium-130.0.6723.44/sandbox/linux/bpf_dsl/linux_syscall_ranges.h
  #define MAX_SYSCALL MAX_PUBLIC_SYSCALL
  
  #else
-Index: chromium-130.0.6723.44/sandbox/linux/services/credentials.cc
-===================================================================
---- chromium-130.0.6723.44.orig/sandbox/linux/services/credentials.cc
-+++ chromium-130.0.6723.44/sandbox/linux/services/credentials.cc
+--- a/sandbox/linux/services/credentials.cc
++++ b/sandbox/linux/services/credentials.cc
 @@ -96,7 +96,8 @@ bool ChrootToSafeEmptyDir() {
  
    int clone_flags = CLONE_FS | LINUX_SIGCHLD;
@@ -65,11 +57,9 @@ Index: chromium-130.0.6723.44/sandbox/linux/services/credentials.cc
 +  // configuration loading failures and no fonts will be displayed!
    clone_flags |= CLONE_VM | CLONE_VFORK | CLONE_SETTLS;
  
-   char tls_buf[PTHREAD_STACK_MIN_CONST] = {0};
-Index: chromium-130.0.6723.44/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
-===================================================================
---- chromium-130.0.6723.44.orig/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
-+++ chromium-130.0.6723.44/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
+   char tls_buf[PTHREAD_STACK_MIN_CONST] = {};
+--- a/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
++++ b/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
 @@ -362,7 +362,16 @@ intptr_t SIGSYSFstatatHandler(const stru
    if (args.nr == __NR_fstatat_default) {
      if (*reinterpret_cast<const char*>(args.args[1]) == '\0' &&

diff --git a/chromium-125-disable-FFmpegAllowLists.patch b/chromium-125-disable-FFmpegAllowLists.patch
deleted file mode 100644
index e03688c..0000000
--- a/chromium-125-disable-FFmpegAllowLists.patch
+++ /dev/null
@@ -1,12 +0,0 @@
-diff -up chromium-125.0.6422.41/media/base/media_switches.cc.disable-FFmpegAllowLists chromium-125.0.6422.41/media/base/media_switches.cc
---- chromium-125.0.6422.41/media/base/media_switches.cc.disable-FFmpegAllowLists	2024-05-12 21:28:43.694027396 +0200
-+++ chromium-125.0.6422.41/media/base/media_switches.cc	2024-05-12 21:32:48.155063623 +0200
-@@ -1753,7 +1753,7 @@ BASE_FEATURE(kUseWindowBoundsForPip,
- // Enables FFmpeg allow lists for supported codecs / containers.
- BASE_FEATURE(kFFmpegAllowLists,
-              "FFmpegAllowLists",
--             base::FEATURE_ENABLED_BY_DEFAULT);
-+             base::FEATURE_DISABLED_BY_DEFAULT);
- 
- #if BUILDFLAG(IS_WIN)
- // Enables audio offload when supported by endpoints.

diff --git a/chromium-129-disable-H.264-video-parser-during-demuxing.patch b/chromium-129-disable-H.264-video-parser-during-demuxing.patch
deleted file mode 100644
index 78f49fa..0000000
--- a/chromium-129-disable-H.264-video-parser-during-demuxing.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-diff -up chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc.me chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc
---- chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc.me	2024-09-15 22:12:33.945186323 +0200
-+++ chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc	2024-09-16 10:53:13.334970539 +0200
-@@ -17,14 +17,11 @@
- 
- namespace media {
- 
--// Kill switches in case things explode. Remove after M132.
-+// Kill switch in case things explode. Remove after M132.
- // TODO(crbug.com/355485812): Re-enable this flag.
- BASE_FEATURE(kAllowOnlyAudioCodecsDuringDemuxing,
-              "AllowOnlyAudioCodecsDuringDemuxing",
-              base::FEATURE_ENABLED_BY_DEFAULT);
--BASE_FEATURE(kForbidH264ParsingDuringDemuxing,
--             "ForbidH264ParsingDuringDemuxing",
--             base::FEATURE_ENABLED_BY_DEFAULT);
- 
- // Internal buffer size used by AVIO for reading.
- // TODO(dalecurtis): Experiment with this buffer size and measure impact on
-@@ -118,12 +115,6 @@ FFmpegGlue::FFmpegGlue(FFmpegURLProtocol
-   // Enable fast, but inaccurate seeks for MP3.
-   format_context_->flags |= AVFMT_FLAG_FAST_SEEK;
- 
--  // We don't allow H.264 parsing during demuxing since we have our own parser
--  // and the ffmpeg one increases memory usage unnecessarily.
--  if (base::FeatureList::IsEnabled(kForbidH264ParsingDuringDemuxing)) {
--    format_context_->flags |= AVFMT_FLAG_NOH264PARSE;
--  }
--
-   // Ensures format parsing errors will bail out. From an audit on 11/2017, all
-   // instances were real failures. Solves bugs like http://crbug.com/710791.
-   format_context_->error_recognition |= AV_EF_EXPLODE;

diff --git a/chromium-129-el8-atk-compiler-error.patch b/chromium-129-el8-atk-compiler-error.patch
deleted file mode 100644
index 58e4cfb..0000000
--- a/chromium-129-el8-atk-compiler-error.patch
+++ /dev/null
@@ -1,1083 +0,0 @@
-diff -up chromium-129.0.6668.58/content/browser/accessibility/accessibility_auralinux_browsertest.cc.me chromium-129.0.6668.58/content/browser/accessibility/accessibility_auralinux_browsertest.cc
---- chromium-129.0.6668.58/content/browser/accessibility/accessibility_auralinux_browsertest.cc.me	2024-09-18 19:26:40.951100740 +0200
-+++ chromium-129.0.6668.58/content/browser/accessibility/accessibility_auralinux_browsertest.cc	2024-09-18 19:28:06.219700474 +0200
-@@ -3,6 +3,7 @@
- // found in the LICENSE file.
- 
- #include <atk/atk.h>
-+#include <dlfcn.h>
- 
- #include <string>
- #include <vector>
-@@ -547,6 +548,10 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   g_object_unref(div_element);
- }
- 
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 30, 0)
-+#define ATK_230
-+#endif
-+
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-                        TestCharacterExtentsWithInvalidArguments) {
-   AtkText* atk_text = SetUpSampleParagraph();
-@@ -569,12 +574,14 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_EQ(expect, width);
-   EXPECT_EQ(expect, height);
- 
-+#ifdef ATK_230
-   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
-                                  &height, ATK_XY_PARENT);
-   EXPECT_EQ(expect, x);
-   EXPECT_EQ(expect, y);
-   EXPECT_EQ(expect, width);
-   EXPECT_EQ(expect, height);
-+#endif  // ATK_230
- 
-   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
-                                  &height, ATK_XY_WINDOW);
-@@ -593,12 +600,14 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_EQ(expect, width);
-   EXPECT_EQ(expect, height);
- 
-+#ifdef ATK_230
-   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
-                                  &height, ATK_XY_PARENT);
-   EXPECT_EQ(expect, x);
-   EXPECT_EQ(expect, y);
-   EXPECT_EQ(expect, width);
-   EXPECT_EQ(expect, height);
-+#endif  // ATK_230
- 
-   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
-                                  &height, ATK_XY_WINDOW);
-@@ -613,7 +622,9 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
- AtkCoordType kCoordinateTypes[] = {
-     ATK_XY_SCREEN,
-     ATK_XY_WINDOW,
-+#ifdef ATK_230
-     ATK_XY_PARENT,
-+#endif  // ATK_230
- };
- 
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-@@ -872,6 +883,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   TestCharacterExtentsInScrollableInput();
- }
- 
-+#if defined(ATK_230)
- typedef bool (*ScrollToPointFunc)(AtkComponent* component,
-                                   AtkCoordType coords,
-                                   gint x,
-@@ -881,6 +893,18 @@ typedef bool (*ScrollToFunc)(AtkComponen
- // TODO(crbug.com/40866728): Enable this test.
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-                        DISABLED_TestScrollToPoint) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.30 instead of linking directly.
-+  ScrollToPointFunc scroll_to_point = reinterpret_cast<ScrollToPointFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point"));
-+  if (!scroll_to_point) {
-+    LOG(WARNING)
-+        << "Skipping AccessibilityAuraLinuxBrowserTest::TestScrollToPoint"
-+           " because ATK version < 2.30 detected.";
-+    return;
-+  }
-+
-   LoadSampleParagraphInScrollableDocument();
-   AtkText* atk_text = GetSampleParagraph();
-   ASSERT_TRUE(ATK_IS_COMPONENT(atk_text));
-@@ -893,7 +917,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   AccessibilityNotificationWaiter location_changed_waiter(
-       shell()->web_contents(), ui::kAXModeComplete,
-       ax::mojom::Event::kLocationChanged);
--  atk_component_scroll_to_point(atk_component, ATK_XY_PARENT, 0, 0);
-+  scroll_to_point(atk_component, ATK_XY_PARENT, 0, 0);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
- 
-   atk_component_get_extents(atk_component, &x, &y, nullptr, nullptr,
-@@ -902,20 +926,20 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_GT(prev_y, y);
- 
-   constexpr int kScrollToY = 0;
--  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY);
-+  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_component_get_extents(atk_component, &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_EQ(kScrollToY, y);
- 
-   constexpr int kScrollToY_2 = 243;
--  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY_2);
-+  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY_2);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_component_get_extents(atk_component, nullptr, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_EQ(kScrollToY_2, y);
- 
--  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, 129);
-+  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, 129);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_component_get_extents(atk_component, nullptr, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-@@ -932,6 +956,17 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
- // TODO(crbug.com/40866728): Enable this test.
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-                        DISABLED_TestScrollTo) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.30 instead of linking directly.
-+  ScrollToFunc scroll_to = reinterpret_cast<ScrollToFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_component_scroll_to"));
-+  if (!scroll_to) {
-+    LOG(WARNING) << "Skipping AccessibilityAuraLinuxBrowserTest::TestScrollTo"
-+                    " because ATK version < 2.30 detected.";
-+    return;
-+  }
-+
-   LoadInitialAccessibilityTreeFromHtml(
-       R"HTML(<!DOCTYPE html>
-       <html>
-@@ -973,8 +1008,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   AccessibilityNotificationWaiter waiter(
-       shell()->web_contents(), ui::kAXModeComplete,
-       ax::mojom::Event::kScrollPositionChanged);
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_EDGE));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   int x, y;
-   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
-@@ -982,40 +1016,35 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_EQ(y, doc_y);
-   EXPECT_NE(x, doc_x);
- 
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_LEFT));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_LEFT));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_EQ(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_BOTTOM_EDGE));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_BOTTOM_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_RIGHT_EDGE));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_RIGHT_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_NE(x, doc_x);
- 
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_LEFT_EDGE));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_LEFT_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_component_get_extents(ATK_COMPONENT(target2), &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(
--      atk_component_scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_TOP_LEFT));
-+  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_TOP_LEFT));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_component_get_extents(ATK_COMPONENT(target2), &x, &y, nullptr, nullptr,
-                             ATK_XY_SCREEN);
-@@ -1047,10 +1076,39 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   g_object_unref(target2);
-   g_object_unref(target3);
- }
-+#endif  //  defined(ATK_230)
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
-+typedef gboolean (*ScrollSubstringToFunc)(AtkText* text,
-+                                          gint start_offset,
-+                                          gint end_offset,
-+                                          AtkScrollType type);
-+ScrollSubstringToFunc g_scroll_substring_to = nullptr;
-+
-+NO_SANITIZE("cfi-icall")
-+gboolean ScrollSubstringTo(AtkText* text,
-+                           gint start_offset,
-+                           gint end_offset,
-+                           AtkScrollType type) {
-+  EXPECT_NE(g_scroll_substring_to, nullptr);
-+  return g_scroll_substring_to(text, start_offset, end_offset, type);
-+}
- 
- // TODO(crbug.com/40866728): Enable this test.
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-                        DISABLED_TestScrollSubstringTo) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.32 instead of linking directly.
-+  g_scroll_substring_to = reinterpret_cast<ScrollSubstringToFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to"));
-+  if (!g_scroll_substring_to) {
-+    LOG(WARNING) << "Skipping "
-+                    "AccessibilityAuraLinuxBrowserTest::TestSubstringScrollTo"
-+                    " because ATK version < 2.32 detected.";
-+    return;
-+  }
-+
-   LoadInitialAccessibilityTreeFromHtml(
-       R"HTML(<!DOCTYPE html>
-       <html>
-@@ -1084,8 +1142,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   AccessibilityNotificationWaiter waiter(
-       shell()->web_contents(), ui::kAXModeComplete,
-       ax::mojom::Event::kScrollPositionChanged);
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_TOP_EDGE));
-+  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   int x, y;
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-@@ -1093,40 +1150,37 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_EQ(y, doc_y);
-   EXPECT_NE(x, doc_x);
- 
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_TOP_LEFT));
-+  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_LEFT));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_EQ(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_BOTTOM_EDGE));
-+  ASSERT_TRUE(
-+      ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_BOTTOM_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_RIGHT_EDGE));
-+  ASSERT_TRUE(
-+      ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_RIGHT_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_NE(x, doc_x);
- 
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_LEFT_EDGE));
-+  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_LEFT_EDGE));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_NE(y, doc_y);
-   EXPECT_EQ(x, doc_x);
- 
--  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
--                                           ATK_SCROLL_TOP_LEFT));
-+  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_LEFT));
-   ASSERT_TRUE(waiter.WaitForNotification());
-   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-@@ -1136,9 +1190,42 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   g_object_unref(target1);
- }
- 
-+typedef gboolean (*ScrollSubstringToPointFunc)(AtkText* text,
-+                                               gint start_offset,
-+                                               gint end_offset,
-+                                               AtkCoordType coord_type,
-+                                               gint x,
-+                                               gint y);
-+ScrollSubstringToPointFunc g_scroll_substring_to_point = nullptr;
-+
-+NO_SANITIZE("cfi-icall")
-+gboolean ScrollSubstringToPoint(AtkText* text,
-+                                gint start_offset,
-+                                gint end_offset,
-+                                AtkCoordType coord_type,
-+                                gint x,
-+                                gint y) {
-+  EXPECT_NE(g_scroll_substring_to_point, nullptr);
-+  return g_scroll_substring_to_point(text, start_offset, end_offset, coord_type,
-+                                     x, y);
-+}
-+
- // TODO(crbug.com/40866728): Enable this test.
- IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
-                        DISABLED_TestScrollSubstringToPoint) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.30 instead of linking directly.
-+  g_scroll_substring_to_point = reinterpret_cast<ScrollSubstringToPointFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to_point"));
-+  if (!g_scroll_substring_to_point) {
-+    LOG(WARNING)
-+        << "Skipping "
-+           "AccessibilityAuraLinuxBrowserTest::TestScrollSubstringToPoint"
-+           " because ATK version < 2.30 detected.";
-+    return;
-+  }
-+
-   LoadSampleParagraphInScrollableDocument();
-   AtkText* atk_text = GetSampleParagraph();
-   ASSERT_TRUE(ATK_IS_COMPONENT(atk_text));
-@@ -1151,7 +1238,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   AccessibilityNotificationWaiter location_changed_waiter(
-       shell()->web_contents(), ui::kAXModeComplete,
-       ax::mojom::Event::kLocationChanged);
--  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_PARENT, 0, 0);
-+  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_PARENT, 0, 0);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
- 
-   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
-@@ -1160,22 +1247,20 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
-   EXPECT_GT(prev_y, y);
- 
-   constexpr int kScrollToY = 0;
--  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0,
--                                     kScrollToY);
-+  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, kScrollToY);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_EQ(kScrollToY, y);
- 
-   constexpr int kScrollToY_2 = 243;
--  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0,
--                                     kScrollToY_2);
-+  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, kScrollToY_2);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-   EXPECT_EQ(kScrollToY_2, y);
- 
--  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0, 129);
-+  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, 129);
-   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
-   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
-                                  ATK_XY_SCREEN);
-@@ -1191,6 +1276,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
- 
-   g_object_unref(atk_text);
- }
-+#endif  //  defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
- 
- #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
- // Flaky on crbug.com/1026149
-diff -up chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.cc.me chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.cc
---- chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.cc.me	2024-09-18 19:26:26.040821017 +0200
-+++ chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.cc	2024-09-18 19:28:06.220700493 +0200
-@@ -2,7 +2,6 @@
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- 
--#include "base/version.h"
- #ifdef UNSAFE_BUFFERS_BUILD
- // TODO(crbug.com/40285824): Remove this and convert code to safer constructs.
- #pragma allow_unsafe_buffers
-@@ -10,6 +9,7 @@
- 
- #include "ui/accessibility/platform/ax_platform_node_auralinux.h"
- 
-+#include <dlfcn.h>
- #include <stdint.h>
- 
- #include <algorithm>
-@@ -47,14 +47,33 @@
- #include "ui/accessibility/platform/child_iterator.h"
- #include "ui/gfx/geometry/rect_conversions.h"
- 
--// Function availability can be tested by checking whether its address is not
--// nullptr.
--#define WEAK_ATK_FN(x) extern "C" __attribute__((weak)) decltype(x) x
--
--// TODO(https://crbug.com/40549424): This may be removed when support for
--// Ubuntu 18.04 is dropped.
--WEAK_ATK_FN(atk_component_scroll_to_point);
--WEAK_ATK_FN(atk_text_scroll_substring_to_point);
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 10, 0)
-+#define ATK_210
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 12, 0)
-+#define ATK_212
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 16, 0)
-+#define ATK_216
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 26, 0)
-+#define ATK_226
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 30, 0)
-+#define ATK_230
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
-+#define ATK_232
-+#endif
-+
-+#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 34, 0)
-+#define ATK_234
-+#endif
- 
- namespace ui {
- 
-@@ -146,11 +165,29 @@ AtkObject* g_active_top_level_frame = nu
- 
- AtkObject* g_active_views_dialog = nullptr;
- 
-+#if defined(ATK_216)
- constexpr AtkRole kStaticRole = ATK_ROLE_STATIC;
- constexpr AtkRole kSubscriptRole = ATK_ROLE_SUBSCRIPT;
- constexpr AtkRole kSuperscriptRole = ATK_ROLE_SUPERSCRIPT;
-+#else
-+constexpr AtkRole kStaticRole = ATK_ROLE_TEXT;
-+constexpr AtkRole kSubscriptRole = ATK_ROLE_TEXT;
-+constexpr AtkRole kSuperscriptRole = ATK_ROLE_TEXT;
-+#endif
- 
-+#if defined(ATK_226)
- constexpr AtkRole kAtkFootnoteRole = ATK_ROLE_FOOTNOTE;
-+#else
-+constexpr AtkRole kAtkFootnoteRole = ATK_ROLE_LIST_ITEM;
-+#endif
-+
-+#if defined(ATK_234)
-+constexpr AtkRole kAtkRoleContentDeletion = ATK_ROLE_CONTENT_DELETION;
-+constexpr AtkRole kAtkRoleContentInsertion = ATK_ROLE_CONTENT_INSERTION;
-+#else
-+constexpr AtkRole kAtkRoleContentDeletion = ATK_ROLE_SECTION;
-+constexpr AtkRole kAtkRoleContentInsertion = ATK_ROLE_SECTION;
-+#endif
- 
- using GetTypeFunc = GType (*)();
- using GetColumnHeaderCellsFunc = GPtrArray* (*)(AtkTableCell* cell);
-@@ -161,6 +198,11 @@ using GetRowColumnSpanFunc = bool (*)(At
-                                       gint* row_span,
-                                       gint* col_span);
- 
-+static GetTypeFunc g_atk_table_cell_get_type;
-+static GetColumnHeaderCellsFunc g_atk_table_cell_get_column_header_cells;
-+static GetRowHeaderCellsFunc g_atk_table_cell_get_row_header_cells;
-+static GetRowColumnSpanFunc g_atk_table_cell_get_row_column_span;
-+
- // The ATK API often requires pointers to be used as out arguments, while
- // allowing for those pointers to be null if the caller is not interested in
- // the value. This function is a simpler helper to avoid continually checking
-@@ -170,35 +212,17 @@ void SetIntPointerValueIfNotNull(int* po
-     *pointer = value;
- }
- 
--// TODO(https://crbug.com/40549424): This may be removed when support for
--// Ubuntu 18.04 is dropped.
-+#if defined(ATK_230)
- bool SupportsAtkComponentScrollingInterface() {
--  return atk_component_scroll_to_point;
-+  return dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point");
- }
-+#endif
- 
--// TODO(https://crbug.com/40549424): This may be removed when support for
--// Ubuntu 18.04 is dropped.
-+#if defined(ATK_232)
- bool SupportsAtkTextScrollingInterface() {
--  return atk_text_scroll_substring_to_point;
--}
--
--// TODO(https://crbug.com/40549424): This may be removed when support for
--// Ubuntu 18.04 is dropped.
--AtkRole GetAtkRoleContentDeletion() {
--  base::Version atk_version(atk_get_version());
--  return atk_version.CompareTo(base::Version("2.34.0")) >= 0
--             ? ATK_ROLE_CONTENT_DELETION
--             : ATK_ROLE_SECTION;
--}
--
--// TODO(https://crbug.com/40549424): This may be removed when support for
--// Ubuntu 18.04 is dropped.
--AtkRole GetAtkRoleContentInsertion() {
--  base::Version atk_version(atk_get_version());
--  return atk_version.CompareTo(base::Version("2.34.0")) >= 0
--             ? ATK_ROLE_CONTENT_INSERTION
--             : ATK_ROLE_SECTION;
-+  return dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to_point");
- }
-+#endif
- 
- AtkObject* FindAtkObjectParentFrame(AtkObject* atk_object) {
-   AXPlatformNodeAuraLinux* node =
-@@ -297,10 +321,12 @@ AXCoordinateSystem AtkCoordTypeToAXCoord
-       return AXCoordinateSystem::kScreenDIPs;
-     case ATK_XY_WINDOW:
-       return AXCoordinateSystem::kRootFrame;
-+#if defined(ATK_230)
-     case ATK_XY_PARENT:
-       // AXCoordinateSystem does not support parent coordinates.
-       NOTIMPLEMENTED();
-       return AXCoordinateSystem::kFrame;
-+#endif
-     default:
-       return AXCoordinateSystem::kScreenDIPs;
-   }
-@@ -513,6 +539,7 @@ gboolean GrabFocus(AtkComponent* atk_com
-   return obj->GrabFocus();
- }
- 
-+#if defined(ATK_230)
- gboolean ScrollTo(AtkComponent* atk_component, AtkScrollType scroll_type) {
-   g_return_val_if_fail(ATK_IS_COMPONENT(atk_component), FALSE);
- 
-@@ -539,6 +566,7 @@ gboolean ScrollToPoint(AtkComponent* atk
-   obj->ScrollToPoint(atk_coord_type, x, y);
-   return TRUE;
- }
-+#endif
- 
- void Init(AtkComponentIface* iface) {
-   iface->get_extents = GetExtents;
-@@ -546,10 +574,12 @@ void Init(AtkComponentIface* iface) {
-   iface->get_size = GetSize;
-   iface->ref_accessible_at_point = RefAccesibleAtPoint;
-   iface->grab_focus = GrabFocus;
-+#if defined(ATK_230)
-   if (SupportsAtkComponentScrollingInterface()) {
-     iface->scroll_to = ScrollTo;
-     iface->scroll_to_point = ScrollToPoint;
-   }
-+#endif
- }
- 
- const GInterfaceInfo Info = {reinterpret_cast<GInterfaceInitFunc>(Init),
-@@ -1232,6 +1262,7 @@ gboolean AddSelection(AtkText* atk_text,
-   return SetSelection(atk_text, 0, start_offset, end_offset);
- }
- 
-+#if defined(ATK_210)
- char* GetStringAtOffset(AtkText* atk_text,
-                         int offset,
-                         AtkTextGranularity atk_granularity,
-@@ -1246,7 +1277,9 @@ char* GetStringAtOffset(AtkText* atk_tex
-   return GetTextWithBoundaryType(atk_text, offset, boundary, start_offset,
-                                  end_offset);
- }
-+#endif
- 
-+#if defined(ATK_230)
- gfx::Rect GetUnclippedParentHypertextRangeBoundsRect(
-     AXPlatformNodeDelegate* ax_platform_node_delegate,
-     const int start_offset,
-@@ -1270,6 +1303,7 @@ gfx::Rect GetUnclippedParentHypertextRan
-                              AXClippingBehavior::kClipped)
-              .OffsetFromOrigin();
- }
-+#endif
- 
- void GetCharacterExtents(AtkText* atk_text,
-                          int offset,
-@@ -1285,10 +1319,12 @@ void GetCharacterExtents(AtkText* atk_te
-       AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(atk_text));
-   if (obj) {
-     switch (coordinate_type) {
-+#if defined(ATK_230)
-       case ATK_XY_PARENT:
-         rect = GetUnclippedParentHypertextRangeBoundsRect(obj->GetDelegate(),
-                                                           offset, offset + 1);
-         break;
-+#endif
-       default:
-         rect = obj->GetDelegate()->GetHypertextRangeBoundsRect(
-             obj->UnicodeToUTF16OffsetInText(offset),
-@@ -1324,10 +1360,12 @@ void GetRangeExtents(AtkText* atk_text,
-       AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(atk_text));
-   if (obj) {
-     switch (coordinate_type) {
-+#if defined(ATK_230)
-       case ATK_XY_PARENT:
-         rect = GetUnclippedParentHypertextRangeBoundsRect(
-             obj->GetDelegate(), start_offset, end_offset);
-         break;
-+#endif
-       default:
-         rect = obj->GetDelegate()->GetHypertextRangeBoundsRect(
-             obj->UnicodeToUTF16OffsetInText(start_offset),
-@@ -1377,6 +1415,7 @@ AtkAttributeSet* GetDefaultAttributes(At
-   return ToAtkAttributeSet(obj->GetDefaultTextAttributes());
- }
- 
-+#if defined(ATK_232)
- gboolean ScrollSubstringTo(AtkText* atk_text,
-                            gint start_offset,
-                            gint end_offset,
-@@ -1407,6 +1446,7 @@ gboolean ScrollSubstringToPoint(AtkText*
-   return obj->ScrollSubstringToPoint(start_offset, end_offset, atk_coord_type,
-                                      x, y);
- }
-+#endif  // ATK_232
- 
- void Init(AtkTextIface* iface) {
-   iface->get_text = GetText;
-@@ -1429,12 +1469,16 @@ void Init(AtkTextIface* iface) {
-   iface->get_run_attributes = GetRunAttributes;
-   iface->get_default_attributes = GetDefaultAttributes;
- 
-+#if defined(ATK_210)
-   iface->get_string_at_offset = GetStringAtOffset;
-+#endif
- 
-+#if defined(ATK_232)
-   if (SupportsAtkTextScrollingInterface()) {
-     iface->scroll_substring_to = ScrollSubstringTo;
-     iface->scroll_substring_to_point = ScrollSubstringToPoint;
-   }
-+#endif
- }
- 
- const GInterfaceInfo Info = {reinterpret_cast<GInterfaceInitFunc>(Init),
-@@ -1837,11 +1881,15 @@ const GInterfaceInfo Info = {reinterpret
- 
- }  // namespace atk_table
- 
-+// The ATK table cell interface was added in ATK 2.12.
-+#if defined(ATK_212)
-+
- namespace atk_table_cell {
- 
- gint GetColumnSpan(AtkTableCell* cell) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), 0);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()), 0);
- 
-   if (const AXPlatformNodeBase* obj =
-           AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
-@@ -1853,8 +1901,10 @@ gint GetColumnSpan(AtkTableCell* cell) {
- }
- 
- GPtrArray* GetColumnHeaderCells(AtkTableCell* cell) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
-+      nullptr);
- 
-   GPtrArray* array = g_ptr_array_new_with_free_func(g_object_unref);
- 
-@@ -1888,8 +1938,10 @@ GPtrArray* GetColumnHeaderCells(AtkTable
- }
- 
- gboolean GetCellPosition(AtkTableCell* cell, gint* row, gint* column) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), FALSE);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
-+      FALSE);
- 
-   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
-     std::optional<int> row_index = obj->GetTableRow();
-@@ -1906,8 +1958,9 @@ gboolean GetCellPosition(AtkTableCell* c
- }
- 
- gint GetRowSpan(AtkTableCell* cell) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), 0);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()), 0);
- 
-   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
-     // If the object is not a cell, we return 0.
-@@ -1918,8 +1971,10 @@ gint GetRowSpan(AtkTableCell* cell) {
- }
- 
- GPtrArray* GetRowHeaderCells(AtkTableCell* cell) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
-+      nullptr);
- 
-   GPtrArray* array = g_ptr_array_new_with_free_func(g_object_unref);
- 
-@@ -1953,8 +2008,10 @@ GPtrArray* GetRowHeaderCells(AtkTableCel
- }
- 
- AtkObject* GetTable(AtkTableCell* cell) {
-+  DCHECK(g_atk_table_cell_get_type);
-   g_return_val_if_fail(
--      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
-+      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
-+      nullptr);
- 
-   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
-     if (auto* table = obj->GetTable())
-@@ -1980,6 +2037,8 @@ const GInterfaceInfo Info = {reinterpret
- 
- }  // namespace atk_table_cell
- 
-+#endif  // ATK_212
-+
- namespace atk_object {
- 
- gpointer kAXPlatformNodeAuraLinuxParentClass = nullptr;
-@@ -2246,6 +2305,50 @@ void Detach(AXPlatformNodeAuraLinuxObjec
- 
- }  // namespace
- 
-+// static
-+NO_SANITIZE("cfi-icall")
-+GType AtkTableCellInterface::GetType() {
-+  return g_atk_table_cell_get_type();
-+}
-+
-+// static
-+NO_SANITIZE("cfi-icall")
-+GPtrArray* AtkTableCellInterface::GetColumnHeaderCells(AtkTableCell* cell) {
-+  return g_atk_table_cell_get_column_header_cells(cell);
-+}
-+
-+// static
-+NO_SANITIZE("cfi-icall")
-+GPtrArray* AtkTableCellInterface::GetRowHeaderCells(AtkTableCell* cell) {
-+  return g_atk_table_cell_get_row_header_cells(cell);
-+}
-+
-+// static
-+NO_SANITIZE("cfi-icall")
-+bool AtkTableCellInterface::GetRowColumnSpan(AtkTableCell* cell,
-+                                             gint* row,
-+                                             gint* column,
-+                                             gint* row_span,
-+                                             gint* col_span) {
-+  return g_atk_table_cell_get_row_column_span(cell, row, column, row_span,
-+                                              col_span);
-+}
-+
-+// static
-+bool AtkTableCellInterface::Exists() {
-+  g_atk_table_cell_get_type = reinterpret_cast<GetTypeFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_table_cell_get_type"));
-+  g_atk_table_cell_get_column_header_cells =
-+      reinterpret_cast<GetColumnHeaderCellsFunc>(
-+          dlsym(RTLD_DEFAULT, "atk_table_cell_get_column_header_cells"));
-+  g_atk_table_cell_get_row_header_cells =
-+      reinterpret_cast<GetRowHeaderCellsFunc>(
-+          dlsym(RTLD_DEFAULT, "atk_table_cell_get_row_header_cells"));
-+  g_atk_table_cell_get_row_column_span = reinterpret_cast<GetRowColumnSpanFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_table_cell_get_row_column_span"));
-+  return *g_atk_table_cell_get_type;
-+}
-+
- void AXPlatformNodeAuraLinux::EnsureGTypeInit() {
- #if !GLIB_CHECK_VERSION(2, 36, 0)
-   static bool first_time = true;
-@@ -2353,8 +2456,11 @@ GType AXPlatformNodeAuraLinux::GetAccess
-     g_type_add_interface_static(type, ATK_TYPE_TABLE, &atk_table::Info);
- 
-   if (interface_mask_.Implements(ImplementedAtkInterfaces::Value::kTableCell)) {
--    g_type_add_interface_static(type, atk_table_cell_get_type(),
--                                &atk_table_cell::Info);
-+    // Run-time check to ensure AtkTableCell is supported (requires ATK 2.12).
-+    if (AtkTableCellInterface::Exists()) {
-+      g_type_add_interface_static(type, AtkTableCellInterface::GetType(),
-+                                  &atk_table_cell::Info);
-+    }
-   }
- 
-   return type;
-@@ -2584,9 +2690,9 @@ AtkRole AXPlatformNodeAuraLinux::GetAtkR
-     case ax::mojom::Role::kComplementary:
-       return ATK_ROLE_LANDMARK;
-     case ax::mojom::Role::kContentDeletion:
--      return GetAtkRoleContentDeletion();
-+      return kAtkRoleContentDeletion;
-     case ax::mojom::Role::kContentInsertion:
--      return GetAtkRoleContentInsertion();
-+      return kAtkRoleContentInsertion;
-     case ax::mojom::Role::kContentInfo:
-     case ax::mojom::Role::kFooter:
-       return ATK_ROLE_LANDMARK;
-@@ -3020,12 +3126,14 @@ void AXPlatformNodeAuraLinux::GetAtkStat
-           static_cast<int32_t>(ax::mojom::AriaCurrentState::kFalse)) {
-     atk_state_set_add_state(atk_state_set, ATK_STATE_ACTIVE);
-   }
-+#if defined(ATK_216)
-   // Runtime checks in case we were compiled with a newer version of ATK.
-   if (IsPlatformCheckable() && PlatformSupportsState(ATK_STATE_CHECKABLE))
-     atk_state_set_add_state(atk_state_set, ATK_STATE_CHECKABLE);
-   if (HasIntAttribute(ax::mojom::IntAttribute::kHasPopup) &&
-       PlatformSupportsState(ATK_STATE_HAS_POPUP))
-     atk_state_set_add_state(atk_state_set, ATK_STATE_HAS_POPUP);
-+#endif
-   if (GetBoolAttribute(ax::mojom::BoolAttribute::kBusy))
-     atk_state_set_add_state(atk_state_set, ATK_STATE_BUSY);
-   if (GetBoolAttribute(ax::mojom::BoolAttribute::kModal))
-@@ -3064,9 +3172,11 @@ void AXPlatformNodeAuraLinux::GetAtkStat
-   if (GetData().GetRestriction() != ax::mojom::Restriction::kDisabled) {
-     if (GetDelegate()->IsReadOnlySupported() &&
-         GetDelegate()->IsReadOnlyOrDisabled()) {
-+#if defined(ATK_216)
-       // Runtime check in case we were compiled with a newer version of ATK.
-       if (PlatformSupportsState(ATK_STATE_READ_ONLY))
-         atk_state_set_add_state(atk_state_set, ATK_STATE_READ_ONLY);
-+#endif
-     } else {
-       atk_state_set_add_state(atk_state_set, ATK_STATE_ENABLED);
-       atk_state_set_add_state(atk_state_set, ATK_STATE_SENSITIVE);
-@@ -3100,12 +3210,16 @@ struct AtkIntListRelation {
- static AtkIntListRelation kIntListRelations[] = {
-     {ax::mojom::IntListAttribute::kControlsIds, ATK_RELATION_CONTROLLER_FOR,
-      ATK_RELATION_CONTROLLED_BY},
-+#if defined(ATK_226)
-     {ax::mojom::IntListAttribute::kDetailsIds, ATK_RELATION_DETAILS,
-      ATK_RELATION_DETAILS_FOR},
-+#endif
-     {ax::mojom::IntListAttribute::kDescribedbyIds, ATK_RELATION_DESCRIBED_BY,
-      ATK_RELATION_DESCRIPTION_FOR},
-+#if defined(ATK_226)
-     {ax::mojom::IntListAttribute::kErrormessageIds, ATK_RELATION_ERROR_MESSAGE,
-      ATK_RELATION_ERROR_FOR},
-+#endif
-     {ax::mojom::IntListAttribute::kFlowtoIds, ATK_RELATION_FLOWS_TO,
-      ATK_RELATION_FLOWS_FROM},
-     {ax::mojom::IntListAttribute::kLabelledbyIds, ATK_RELATION_LABELLED_BY,
-@@ -3884,6 +3998,7 @@ void AXPlatformNodeAuraLinux::OnReadonly
-   if (!obj)
-     return;
- 
-+#if defined(ATK_216)
-   // Runtime check in case we were compiled with a newer version of ATK.
-   if (!PlatformSupportsState(ATK_STATE_READ_ONLY))
-     return;
-@@ -3891,6 +4006,7 @@ void AXPlatformNodeAuraLinux::OnReadonly
-   atk_object_notify_state_change(
-       obj, ATK_STATE_READ_ONLY,
-       GetData().GetRestriction() == ax::mojom::Restriction::kReadOnly);
-+#endif
- }
- 
- void AXPlatformNodeAuraLinux::OnInvalidStatusChanged() {
-@@ -4217,11 +4333,13 @@ gfx::Rect AXPlatformNodeAuraLinux::GetEx
-       extents.Offset(window_origin);
-       break;
-     }
-+#if defined(ATK_230)
-     case ATK_XY_PARENT: {
-       gfx::Vector2d parent_origin = -GetParentOriginInScreenCoordinates();
-       extents.Offset(parent_origin);
-       break;
-     }
-+#endif
-   }
- 
-   return extents;
-@@ -4651,6 +4769,7 @@ bool AXPlatformNodeAuraLinux::IsInLiveRe
-   return HasStringAttribute(ax::mojom::StringAttribute::kContainerLiveStatus);
- }
- 
-+#if defined(ATK_230)
- void AXPlatformNodeAuraLinux::ScrollToPoint(AtkCoordType atk_coord_type,
-                                             int x,
-                                             int y) {
-@@ -4723,7 +4842,9 @@ void AXPlatformNodeAuraLinux::ScrollNode
-   rect -= rect.OffsetFromOrigin();
-   ScrollNodeRectIntoView(rect, atk_scroll_type);
- }
-+#endif  // defined(ATK_230)
- 
-+#if defined(ATK_232)
- std::optional<gfx::Rect>
- AXPlatformNodeAuraLinux::GetUnclippedHypertextRangeBoundsRect(int start_offset,
-                                                               int end_offset) {
-@@ -4782,6 +4903,7 @@ bool AXPlatformNodeAuraLinux::ScrollSubs
- 
-   return true;
- }
-+#endif  // defined(ATK_232)
- 
- void AXPlatformNodeAuraLinux::ComputeStylesIfNeeded() {
-   if (!offset_to_text_attributes_.empty())
-@@ -4964,8 +5086,10 @@ gfx::Point AXPlatformNodeAuraLinux::Conv
-   switch (atk_coord_type) {
-     case ATK_XY_WINDOW:
-       return point + GetParentFrameOriginInScreenCoordinates();
-+#if defined(ATK_230)
-     case ATK_XY_PARENT:
-       return point + GetParentOriginInScreenCoordinates();
-+#endif
-     case ATK_XY_SCREEN:
-     default:
-       return point;
-diff -up chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.h.me chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.h
---- chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.h.me	2024-09-18 19:26:54.167348688 +0200
-+++ chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux.h	2024-09-18 19:28:06.220700493 +0200
-@@ -52,6 +52,31 @@ struct FindInPageResultInfo {
-   }
- };
- 
-+// AtkTableCell was introduced in ATK 2.12. Ubuntu Trusty has ATK 2.10.
-+// Compile-time checks are in place for ATK versions that are older than 2.12.
-+// However, we also need runtime checks in case the version we are building
-+// against is newer than the runtime version. To prevent a runtime error, we
-+// check that we have a version of ATK that supports AtkTableCell. If we do,
-+// we dynamically load the symbol; if we don't, the interface is absent from
-+// the accessible object and its methods will not be exposed or callable.
-+// The definitions below ensure we have no missing symbols. Note that in
-+// environments where we have ATK > 2.12, the definitions of AtkTableCell and
-+// AtkTableCellIface below are overridden by the runtime version.
-+// TODO(accessibility) Remove AtkTableCellInterface when 2.12 is the minimum
-+// supported version.
-+struct COMPONENT_EXPORT(AX_PLATFORM) AtkTableCellInterface {
-+  typedef struct _AtkTableCell AtkTableCell;
-+  static GType GetType();
-+  static GPtrArray* GetColumnHeaderCells(AtkTableCell* cell);
-+  static GPtrArray* GetRowHeaderCells(AtkTableCell* cell);
-+  static bool GetRowColumnSpan(AtkTableCell* cell,
-+                               gint* row,
-+                               gint* column,
-+                               gint* row_span,
-+                               gint* col_span);
-+  static bool Exists();
-+};
-+
- // This class with an enum is used to generate a bitmask which tracks the ATK
- // interfaces that an AXPlatformNodeAuraLinux's ATKObject implements.
- class ImplementedAtkInterfaces {
-diff -up chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc.me chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc
---- chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc.me	2024-09-18 19:27:10.728659400 +0200
-+++ chromium-129.0.6668.58/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc	2024-09-18 19:28:06.221700512 +0200
-@@ -8,6 +8,7 @@
- #endif
- 
- #include <atk/atk.h>
-+#include <dlfcn.h>
- #include <utility>
- #include <vector>
- 
-@@ -884,6 +885,17 @@ typedef bool (*ScrollToPointFunc)(AtkCom
- typedef bool (*ScrollToFunc)(AtkComponent* component, AtkScrollType type);
- 
- TEST_F(AXPlatformNodeAuraLinuxTest, AtkComponentScrollToPoint) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.30 instead of linking directly.
-+  ScrollToPointFunc scroll_to_point = reinterpret_cast<ScrollToPointFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point"));
-+  if (!scroll_to_point) {
-+    LOG(WARNING) << "Skipping AtkComponentScrollToPoint"
-+                    " because ATK version < 2.30 detected.";
-+    return;
-+  }
-+
-   AXNodeData root;
-   root.id = 1;
-   root.role = ax::mojom::Role::kRootWebArea;
-@@ -911,8 +923,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
-   EXPECT_EQ(10, width);
-   EXPECT_EQ(10, height);
- 
--  atk_component_scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_SCREEN, 600,
--                                650);
-+  scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_SCREEN, 600, 650);
-   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
-                             &height, ATK_XY_SCREEN);
-   EXPECT_EQ(610, x_left);
-@@ -920,8 +931,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
-   EXPECT_EQ(10, width);
-   EXPECT_EQ(10, height);
- 
--  atk_component_scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_PARENT, 10,
--                                10);
-+  scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_PARENT, 10, 10);
-   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
-                             &height, ATK_XY_SCREEN);
-   // The test wrapper scrolls every element when scrolling, so this should be
-@@ -938,6 +948,17 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
- }
- 
- TEST_F(AXPlatformNodeAuraLinuxTest, AtkComponentScrollTo) {
-+  // There's a chance we may be compiled with a newer version of ATK and then
-+  // run with an older one, so we need to do a runtime check for this method
-+  // that is available in ATK 2.30 instead of linking directly.
-+  ScrollToFunc scroll_to = reinterpret_cast<ScrollToFunc>(
-+      dlsym(RTLD_DEFAULT, "atk_component_scroll_to"));
-+  if (!scroll_to) {
-+    LOG(WARNING) << "Skipping AtkComponentScrollTo"
-+                    " because ATK version < 2.30 detected.";
-+    return;
-+  }
-+
-   AXNodeData root;
-   root.id = 1;
-   root.role = ax::mojom::Role::kRootWebArea;
-@@ -965,7 +986,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
-   EXPECT_EQ(10, width);
-   EXPECT_EQ(10, height);
- 
--  atk_component_scroll_to(ATK_COMPONENT(child_obj), ATK_SCROLL_ANYWHERE);
-+  scroll_to(ATK_COMPONENT(child_obj), ATK_SCROLL_ANYWHERE);
-   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
-                             &height, ATK_XY_SCREEN);
-   EXPECT_EQ(0, x_left);
-diff -up chromium-129.0.6668.58/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc.me chromium-129.0.6668.58/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc
---- chromium-129.0.6668.58/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc.me	2024-09-18 19:27:20.965851455 +0200
-+++ chromium-129.0.6668.58/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc	2024-09-18 19:28:06.221700512 +0200
-@@ -474,18 +474,34 @@ void AXTreeFormatterAuraLinux::AddTableC
-   int row = 0, col = 0, row_span = 0, col_span = 0;
-   int n_row_headers = 0, n_column_headers = 0;
- 
--  AtkTableCell* cell = G_TYPE_CHECK_INSTANCE_CAST(
--      (atk_object), atk_table_cell_get_type(), AtkTableCell);
-+  // Properties obtained via AtkTableCell, if possible. If we do not have at
-+  // least ATK 2.12, use the same logic in our AtkTableCell implementation so
-+  // that tests can still be run.
-+  if (AtkTableCellInterface::Exists()) {
-+    AtkTableCell* cell = G_TYPE_CHECK_INSTANCE_CAST(
-+        (atk_object), AtkTableCellInterface::GetType(), AtkTableCell);
- 
--  atk_table_cell_get_row_column_span(cell, &row, &col, &row_span, &col_span);
-+    AtkTableCellInterface::GetRowColumnSpan(cell, &row, &col, &row_span,
-+                                            &col_span);
- 
--  GPtrArray* column_headers = atk_table_cell_get_column_header_cells(cell);
--  n_column_headers = column_headers->len;
--  g_ptr_array_unref(column_headers);
-+    GPtrArray* column_headers =
-+        AtkTableCellInterface::GetColumnHeaderCells(cell);
-+    n_column_headers = column_headers->len;
-+    g_ptr_array_unref(column_headers);
- 
--  GPtrArray* row_headers = atk_table_cell_get_row_header_cells(cell);
--  n_row_headers = row_headers->len;
--  g_ptr_array_unref(row_headers);
-+    GPtrArray* row_headers = AtkTableCellInterface::GetRowHeaderCells(cell);
-+    n_row_headers = row_headers->len;
-+    g_ptr_array_unref(row_headers);
-+  } else {
-+    row = node->GetTableRow().value_or(-1);
-+    col = node->GetTableColumn().value_or(-1);
-+    row_span = node->GetTableRowSpan().value_or(0);
-+    col_span = node->GetTableColumnSpan().value_or(0);
-+    if (role == ATK_ROLE_TABLE_CELL) {
-+      n_column_headers = node->GetDelegate()->GetColHeaderNodeIds(col).size();
-+      n_row_headers = node->GetDelegate()->GetRowHeaderNodeIds(row).size();
-+    }
-+  }
- 
-   std::vector<std::string> cell_info;
-   cell_info.push_back(base::StringPrintf("row=%i", row));

diff --git a/chromium-133-disable-H.264-video-parser-during-demuxing.patch b/chromium-133-disable-H.264-video-parser-during-demuxing.patch
new file mode 100644
index 0000000..2456708
--- /dev/null
+++ b/chromium-133-disable-H.264-video-parser-during-demuxing.patch
@@ -0,0 +1,12 @@
+diff -up chromium-133.0.6943.53/media/filters/ffmpeg_glue.cc.me chromium-133.0.6943.53/media/filters/ffmpeg_glue.cc
+--- chromium-133.0.6943.53/media/filters/ffmpeg_glue.cc.me	2025-02-05 13:28:17.782881439 +0100
++++ chromium-133.0.6943.53/media/filters/ffmpeg_glue.cc	2025-02-05 13:33:15.256928027 +0100
+@@ -111,7 +111,7 @@ FFmpegGlue::FFmpegGlue(FFmpegURLProtocol
+ 
+   // We don't allow H.264 parsing during demuxing since we have our own parser
+   // and the ffmpeg one increases memory usage unnecessarily.
+-  format_context_->flags |= AVFMT_FLAG_NOH264PARSE;
++  // format_context_->flags |= AVFMT_FLAG_NOH264PARSE;
+ 
+   // Ensures format parsing errors will bail out. From an audit on 11/2017, all
+   // instances were real failures. Solves bugs like http://crbug.com/710791.

diff --git a/chromium-133-el8-atk-compiler-error.patch b/chromium-133-el8-atk-compiler-error.patch
new file mode 100644
index 0000000..627c0a6
--- /dev/null
+++ b/chromium-133-el8-atk-compiler-error.patch
@@ -0,0 +1,1081 @@
+diff -up chromium-133.0.6943.35/content/browser/accessibility/accessibility_auralinux_browsertest.cc.el8-atk-compiler-error chromium-133.0.6943.35/content/browser/accessibility/accessibility_auralinux_browsertest.cc
+--- chromium-133.0.6943.35/content/browser/accessibility/accessibility_auralinux_browsertest.cc.el8-atk-compiler-error	2025-01-28 23:03:27.000000000 +0100
++++ chromium-133.0.6943.35/content/browser/accessibility/accessibility_auralinux_browsertest.cc	2025-02-04 10:56:08.414126354 +0100
+@@ -3,6 +3,7 @@
+ // found in the LICENSE file.
+ 
+ #include <atk/atk.h>
++#include <dlfcn.h>
+ 
+ #include <string>
+ #include <vector>
+@@ -549,6 +550,10 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   g_object_unref(div_element);
+ }
+ 
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 30, 0)
++#define ATK_230
++#endif
++
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+                        TestCharacterExtentsWithInvalidArguments) {
+   AtkText* atk_text = SetUpSampleParagraph();
+@@ -571,12 +576,14 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_EQ(expect, width);
+   EXPECT_EQ(expect, height);
+ 
++#ifdef ATK_230
+   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
+                                  &height, ATK_XY_PARENT);
+   EXPECT_EQ(expect, x);
+   EXPECT_EQ(expect, y);
+   EXPECT_EQ(expect, width);
+   EXPECT_EQ(expect, height);
++#endif  // ATK_230
+ 
+   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
+                                  &height, ATK_XY_WINDOW);
+@@ -595,12 +602,14 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_EQ(expect, width);
+   EXPECT_EQ(expect, height);
+ 
++#ifdef ATK_230
+   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
+                                  &height, ATK_XY_PARENT);
+   EXPECT_EQ(expect, x);
+   EXPECT_EQ(expect, y);
+   EXPECT_EQ(expect, width);
+   EXPECT_EQ(expect, height);
++#endif  // ATK_230
+ 
+   atk_text_get_character_extents(atk_text, invalid_offset, &x, &y, &width,
+                                  &height, ATK_XY_WINDOW);
+@@ -615,7 +624,9 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+ AtkCoordType kCoordinateTypes[] = {
+     ATK_XY_SCREEN,
+     ATK_XY_WINDOW,
++#ifdef ATK_230
+     ATK_XY_PARENT,
++#endif  // ATK_230
+ };
+ 
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+@@ -874,6 +885,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   TestCharacterExtentsInScrollableInput();
+ }
+ 
++#if defined(ATK_230)
+ typedef bool (*ScrollToPointFunc)(AtkComponent* component,
+                                   AtkCoordType coords,
+                                   gint x,
+@@ -883,6 +895,18 @@ typedef bool (*ScrollToFunc)(AtkComponen
+ // TODO(crbug.com/40866728): Enable this test.
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+                        DISABLED_TestScrollToPoint) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.30 instead of linking directly.
++  ScrollToPointFunc scroll_to_point = reinterpret_cast<ScrollToPointFunc>(
++      dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point"));
++  if (!scroll_to_point) {
++    LOG(WARNING)
++        << "Skipping AccessibilityAuraLinuxBrowserTest::TestScrollToPoint"
++           " because ATK version < 2.30 detected.";
++    return;
++  }
++
+   LoadSampleParagraphInScrollableDocument();
+   AtkText* atk_text = GetSampleParagraph();
+   ASSERT_TRUE(ATK_IS_COMPONENT(atk_text));
+@@ -895,7 +919,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   AccessibilityNotificationWaiter location_changed_waiter(
+       shell()->web_contents(), ui::kAXModeComplete,
+       ax::mojom::Event::kLocationChanged);
+-  atk_component_scroll_to_point(atk_component, ATK_XY_PARENT, 0, 0);
++  scroll_to_point(atk_component, ATK_XY_PARENT, 0, 0);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+ 
+   atk_component_get_extents(atk_component, &x, &y, nullptr, nullptr,
+@@ -904,20 +928,20 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_GT(prev_y, y);
+ 
+   constexpr int kScrollToY = 0;
+-  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY);
++  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_component_get_extents(atk_component, &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_EQ(kScrollToY, y);
+ 
+   constexpr int kScrollToY_2 = 243;
+-  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY_2);
++  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, kScrollToY_2);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_component_get_extents(atk_component, nullptr, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_EQ(kScrollToY_2, y);
+ 
+-  atk_component_scroll_to_point(atk_component, ATK_XY_SCREEN, 0, 129);
++  scroll_to_point(atk_component, ATK_XY_SCREEN, 0, 129);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_component_get_extents(atk_component, nullptr, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+@@ -934,6 +958,17 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+ // TODO(crbug.com/40866728): Enable this test.
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+                        DISABLED_TestScrollTo) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.30 instead of linking directly.
++  ScrollToFunc scroll_to = reinterpret_cast<ScrollToFunc>(
++      dlsym(RTLD_DEFAULT, "atk_component_scroll_to"));
++  if (!scroll_to) {
++    LOG(WARNING) << "Skipping AccessibilityAuraLinuxBrowserTest::TestScrollTo"
++                    " because ATK version < 2.30 detected.";
++    return;
++  }
++
+   LoadInitialAccessibilityTreeFromHtml(
+       R"HTML(<!DOCTYPE html>
+       <html>
+@@ -975,8 +1010,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   AccessibilityNotificationWaiter waiter(
+       shell()->web_contents(), ui::kAXModeComplete,
+       ax::mojom::Event::kScrollPositionChanged);
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_EDGE));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   int x, y;
+   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
+@@ -984,40 +1018,35 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_EQ(y, doc_y);
+   EXPECT_NE(x, doc_x);
+ 
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_LEFT));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_TOP_LEFT));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_EQ(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_BOTTOM_EDGE));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_BOTTOM_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target), ATK_SCROLL_RIGHT_EDGE));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target), ATK_SCROLL_RIGHT_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_component_get_extents(ATK_COMPONENT(target), &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_NE(x, doc_x);
+ 
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_LEFT_EDGE));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_LEFT_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_component_get_extents(ATK_COMPONENT(target2), &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(
+-      atk_component_scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_TOP_LEFT));
++  ASSERT_TRUE(scroll_to(ATK_COMPONENT(target2), ATK_SCROLL_TOP_LEFT));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_component_get_extents(ATK_COMPONENT(target2), &x, &y, nullptr, nullptr,
+                             ATK_XY_SCREEN);
+@@ -1049,10 +1078,39 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   g_object_unref(target2);
+   g_object_unref(target3);
+ }
++#endif  //  defined(ATK_230)
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
++typedef gboolean (*ScrollSubstringToFunc)(AtkText* text,
++                                          gint start_offset,
++                                          gint end_offset,
++                                          AtkScrollType type);
++ScrollSubstringToFunc g_scroll_substring_to = nullptr;
++
++NO_SANITIZE("cfi-icall")
++gboolean ScrollSubstringTo(AtkText* text,
++                           gint start_offset,
++                           gint end_offset,
++                           AtkScrollType type) {
++  EXPECT_NE(g_scroll_substring_to, nullptr);
++  return g_scroll_substring_to(text, start_offset, end_offset, type);
++}
+ 
+ // TODO(crbug.com/40866728): Enable this test.
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+                        DISABLED_TestScrollSubstringTo) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.32 instead of linking directly.
++  g_scroll_substring_to = reinterpret_cast<ScrollSubstringToFunc>(
++      dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to"));
++  if (!g_scroll_substring_to) {
++    LOG(WARNING) << "Skipping "
++                    "AccessibilityAuraLinuxBrowserTest::TestSubstringScrollTo"
++                    " because ATK version < 2.32 detected.";
++    return;
++  }
++
+   LoadInitialAccessibilityTreeFromHtml(
+       R"HTML(<!DOCTYPE html>
+       <html>
+@@ -1086,8 +1144,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   AccessibilityNotificationWaiter waiter(
+       shell()->web_contents(), ui::kAXModeComplete,
+       ax::mojom::Event::kScrollPositionChanged);
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_TOP_EDGE));
++  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   int x, y;
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+@@ -1095,40 +1152,37 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_EQ(y, doc_y);
+   EXPECT_NE(x, doc_x);
+ 
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_TOP_LEFT));
++  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_LEFT));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_EQ(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_BOTTOM_EDGE));
++  ASSERT_TRUE(
++      ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_BOTTOM_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_RIGHT_EDGE));
++  ASSERT_TRUE(
++      ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_RIGHT_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_NE(x, doc_x);
+ 
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_LEFT_EDGE));
++  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_LEFT_EDGE));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_NE(y, doc_y);
+   EXPECT_EQ(x, doc_x);
+ 
+-  ASSERT_TRUE(atk_text_scroll_substring_to(ATK_TEXT(target1), 1, 2,
+-                                           ATK_SCROLL_TOP_LEFT));
++  ASSERT_TRUE(ScrollSubstringTo(ATK_TEXT(target1), 1, 2, ATK_SCROLL_TOP_LEFT));
+   ASSERT_TRUE(waiter.WaitForNotification());
+   atk_text_get_character_extents(ATK_TEXT(target1), 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+@@ -1138,9 +1192,42 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   g_object_unref(target1);
+ }
+ 
++typedef gboolean (*ScrollSubstringToPointFunc)(AtkText* text,
++                                               gint start_offset,
++                                               gint end_offset,
++                                               AtkCoordType coord_type,
++                                               gint x,
++                                               gint y);
++ScrollSubstringToPointFunc g_scroll_substring_to_point = nullptr;
++
++NO_SANITIZE("cfi-icall")
++gboolean ScrollSubstringToPoint(AtkText* text,
++                                gint start_offset,
++                                gint end_offset,
++                                AtkCoordType coord_type,
++                                gint x,
++                                gint y) {
++  EXPECT_NE(g_scroll_substring_to_point, nullptr);
++  return g_scroll_substring_to_point(text, start_offset, end_offset, coord_type,
++                                     x, y);
++}
++
+ // TODO(crbug.com/40866728): Enable this test.
+ IN_PROC_BROWSER_TEST_F(AccessibilityAuraLinuxBrowserTest,
+                        DISABLED_TestScrollSubstringToPoint) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.30 instead of linking directly.
++  g_scroll_substring_to_point = reinterpret_cast<ScrollSubstringToPointFunc>(
++      dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to_point"));
++  if (!g_scroll_substring_to_point) {
++    LOG(WARNING)
++        << "Skipping "
++           "AccessibilityAuraLinuxBrowserTest::TestScrollSubstringToPoint"
++           " because ATK version < 2.30 detected.";
++    return;
++  }
++
+   LoadSampleParagraphInScrollableDocument();
+   AtkText* atk_text = GetSampleParagraph();
+   ASSERT_TRUE(ATK_IS_COMPONENT(atk_text));
+@@ -1153,7 +1240,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   AccessibilityNotificationWaiter location_changed_waiter(
+       shell()->web_contents(), ui::kAXModeComplete,
+       ax::mojom::Event::kLocationChanged);
+-  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_PARENT, 0, 0);
++  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_PARENT, 0, 0);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+ 
+   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
+@@ -1162,22 +1249,20 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+   EXPECT_GT(prev_y, y);
+ 
+   constexpr int kScrollToY = 0;
+-  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0,
+-                                     kScrollToY);
++  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, kScrollToY);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_EQ(kScrollToY, y);
+ 
+   constexpr int kScrollToY_2 = 243;
+-  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0,
+-                                     kScrollToY_2);
++  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, kScrollToY_2);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+   EXPECT_EQ(kScrollToY_2, y);
+ 
+-  atk_text_scroll_substring_to_point(atk_text, 1, 2, ATK_XY_SCREEN, 0, 129);
++  ScrollSubstringToPoint(atk_text, 1, 2, ATK_XY_SCREEN, 0, 129);
+   ASSERT_TRUE(location_changed_waiter.WaitForNotification());
+   atk_text_get_character_extents(atk_text, 1, &x, &y, nullptr, nullptr,
+                                  ATK_XY_SCREEN);
+@@ -1193,6 +1278,7 @@ IN_PROC_BROWSER_TEST_F(AccessibilityAura
+ 
+   g_object_unref(atk_text);
+ }
++#endif  //  defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
+ 
+ #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
+ // Flaky on crbug.com/1026149
+diff -up chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.cc.el8-atk-compiler-error chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.cc
+--- chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.cc.el8-atk-compiler-error	2025-01-28 23:03:27.000000000 +0100
++++ chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.cc	2025-02-04 10:56:08.424126602 +0100
+@@ -2,12 +2,12 @@
+ // Use of this source code is governed by a BSD-style license that can be
+ // found in the LICENSE file.
+ 
+-#include "base/version.h"
+ #ifdef UNSAFE_BUFFERS_BUILD
+ // TODO(crbug.com/40285824): Remove this and convert code to safer constructs.
+ #pragma allow_unsafe_buffers
+ #endif
+ 
++#include <dlfcn.h>
+ #include <stdint.h>
+ 
+ #include <algorithm>
+@@ -47,14 +47,33 @@
+ #include "ui/accessibility/platform/child_iterator.h"
+ #include "ui/gfx/geometry/rect_conversions.h"
+ 
+-// Function availability can be tested by checking whether its address is not
+-// nullptr.
+-#define WEAK_ATK_FN(x) extern "C" __attribute__((weak)) decltype(x) x
+-
+-// TODO(https://crbug.com/40549424): This may be removed when support for
+-// Ubuntu 18.04 is dropped.
+-WEAK_ATK_FN(atk_component_scroll_to_point);
+-WEAK_ATK_FN(atk_text_scroll_substring_to_point);
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 10, 0)
++#define ATK_210
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 12, 0)
++#define ATK_212
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 16, 0)
++#define ATK_216
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 26, 0)
++#define ATK_226
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 30, 0)
++#define ATK_230
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 32, 0)
++#define ATK_232
++#endif
++
++#if defined(ATK_CHECK_VERSION) && ATK_CHECK_VERSION(2, 34, 0)
++#define ATK_234
++#endif
+ 
+ namespace ui {
+ 
+@@ -146,11 +165,29 @@ AtkObject* g_active_top_level_frame = nu
+ 
+ AtkObject* g_active_views_dialog = nullptr;
+ 
++#if defined(ATK_216)
+ constexpr AtkRole kStaticRole = ATK_ROLE_STATIC;
+ constexpr AtkRole kSubscriptRole = ATK_ROLE_SUBSCRIPT;
+ constexpr AtkRole kSuperscriptRole = ATK_ROLE_SUPERSCRIPT;
++#else
++constexpr AtkRole kStaticRole = ATK_ROLE_TEXT;
++constexpr AtkRole kSubscriptRole = ATK_ROLE_TEXT;
++constexpr AtkRole kSuperscriptRole = ATK_ROLE_TEXT;
++#endif
+ 
++#if defined(ATK_226)
+ constexpr AtkRole kAtkFootnoteRole = ATK_ROLE_FOOTNOTE;
++#else
++constexpr AtkRole kAtkFootnoteRole = ATK_ROLE_LIST_ITEM;
++#endif
++
++#if defined(ATK_234)
++constexpr AtkRole kAtkRoleContentDeletion = ATK_ROLE_CONTENT_DELETION;
++constexpr AtkRole kAtkRoleContentInsertion = ATK_ROLE_CONTENT_INSERTION;
++#else
++constexpr AtkRole kAtkRoleContentDeletion = ATK_ROLE_SECTION;
++constexpr AtkRole kAtkRoleContentInsertion = ATK_ROLE_SECTION;
++#endif
+ 
+ using GetTypeFunc = GType (*)();
+ using GetColumnHeaderCellsFunc = GPtrArray* (*)(AtkTableCell* cell);
+@@ -161,6 +198,11 @@ using GetRowColumnSpanFunc = bool (*)(At
+                                       gint* row_span,
+                                       gint* col_span);
+ 
++static GetTypeFunc g_atk_table_cell_get_type;
++static GetColumnHeaderCellsFunc g_atk_table_cell_get_column_header_cells;
++static GetRowHeaderCellsFunc g_atk_table_cell_get_row_header_cells;
++static GetRowColumnSpanFunc g_atk_table_cell_get_row_column_span;
++
+ // The ATK API often requires pointers to be used as out arguments, while
+ // allowing for those pointers to be null if the caller is not interested in
+ // the value. This function is a simpler helper to avoid continually checking
+@@ -170,35 +212,17 @@ void SetIntPointerValueIfNotNull(int* po
+     *pointer = value;
+ }
+ 
+-// TODO(https://crbug.com/40549424): This may be removed when support for
+-// Ubuntu 18.04 is dropped.
++#if defined(ATK_230)
+ bool SupportsAtkComponentScrollingInterface() {
+-  return atk_component_scroll_to_point;
++  return dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point");
+ }
++#endif
+ 
+-// TODO(https://crbug.com/40549424): This may be removed when support for
+-// Ubuntu 18.04 is dropped.
++#if defined(ATK_232)
+ bool SupportsAtkTextScrollingInterface() {
+-  return atk_text_scroll_substring_to_point;
+-}
+-
+-// TODO(https://crbug.com/40549424): This may be removed when support for
+-// Ubuntu 18.04 is dropped.
+-AtkRole GetAtkRoleContentDeletion() {
+-  base::Version atk_version(atk_get_version());
+-  return atk_version.CompareTo(base::Version("2.34.0")) >= 0
+-             ? ATK_ROLE_CONTENT_DELETION
+-             : ATK_ROLE_SECTION;
+-}
+-
+-// TODO(https://crbug.com/40549424): This may be removed when support for
+-// Ubuntu 18.04 is dropped.
+-AtkRole GetAtkRoleContentInsertion() {
+-  base::Version atk_version(atk_get_version());
+-  return atk_version.CompareTo(base::Version("2.34.0")) >= 0
+-             ? ATK_ROLE_CONTENT_INSERTION
+-             : ATK_ROLE_SECTION;
++  return dlsym(RTLD_DEFAULT, "atk_text_scroll_substring_to_point");
+ }
++#endif
+ 
+ AtkObject* FindAtkObjectParentFrame(AtkObject* atk_object) {
+   AXPlatformNodeAuraLinux* node =
+@@ -297,10 +321,12 @@ AXCoordinateSystem AtkCoordTypeToAXCoord
+       return AXCoordinateSystem::kScreenDIPs;
+     case ATK_XY_WINDOW:
+       return AXCoordinateSystem::kRootFrame;
++#if defined(ATK_230)
+     case ATK_XY_PARENT:
+       // AXCoordinateSystem does not support parent coordinates.
+       NOTIMPLEMENTED();
+       return AXCoordinateSystem::kFrame;
++#endif
+     default:
+       return AXCoordinateSystem::kScreenDIPs;
+   }
+@@ -513,6 +539,7 @@ gboolean GrabFocus(AtkComponent* atk_com
+   return obj->GrabFocus();
+ }
+ 
++#if defined(ATK_230)
+ gboolean ScrollTo(AtkComponent* atk_component, AtkScrollType scroll_type) {
+   g_return_val_if_fail(ATK_IS_COMPONENT(atk_component), FALSE);
+ 
+@@ -539,6 +566,7 @@ gboolean ScrollToPoint(AtkComponent* atk
+   obj->ScrollToPoint(atk_coord_type, x, y);
+   return TRUE;
+ }
++#endif
+ 
+ void Init(AtkComponentIface* iface) {
+   iface->get_extents = GetExtents;
+@@ -546,10 +574,12 @@ void Init(AtkComponentIface* iface) {
+   iface->get_size = GetSize;
+   iface->ref_accessible_at_point = RefAccesibleAtPoint;
+   iface->grab_focus = GrabFocus;
++#if defined(ATK_230)
+   if (SupportsAtkComponentScrollingInterface()) {
+     iface->scroll_to = ScrollTo;
+     iface->scroll_to_point = ScrollToPoint;
+   }
++#endif
+ }
+ 
+ const GInterfaceInfo Info = {reinterpret_cast<GInterfaceInitFunc>(Init),
+@@ -1310,6 +1340,7 @@ gboolean AddSelection(AtkText* atk_text,
+   return SetSelection(atk_text, 0, start_offset, end_offset);
+ }
+ 
++#if defined(ATK_210)
+ char* GetStringAtOffset(AtkText* atk_text,
+                         int offset,
+                         AtkTextGranularity atk_granularity,
+@@ -1324,7 +1355,9 @@ char* GetStringAtOffset(AtkText* atk_tex
+   return GetTextWithBoundaryType(atk_text, offset, boundary, start_offset,
+                                  end_offset);
+ }
++#endif
+ 
++#if defined(ATK_230)
+ gfx::Rect GetUnclippedParentHypertextRangeBoundsRect(
+     AXPlatformNodeDelegate* ax_platform_node_delegate,
+     const int start_offset,
+@@ -1348,6 +1381,7 @@ gfx::Rect GetUnclippedParentHypertextRan
+                              AXClippingBehavior::kClipped)
+              .OffsetFromOrigin();
+ }
++#endif
+ 
+ void GetCharacterExtents(AtkText* atk_text,
+                          int offset,
+@@ -1363,10 +1397,12 @@ void GetCharacterExtents(AtkText* atk_te
+       AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(atk_text));
+   if (obj) {
+     switch (coordinate_type) {
++#if defined(ATK_230)
+       case ATK_XY_PARENT:
+         rect = GetUnclippedParentHypertextRangeBoundsRect(obj->GetDelegate(),
+                                                           offset, offset + 1);
+         break;
++#endif
+       default:
+         rect = obj->GetDelegate()->GetHypertextRangeBoundsRect(
+             obj->UnicodeToUTF16OffsetInText(offset),
+@@ -1402,10 +1438,12 @@ void GetRangeExtents(AtkText* atk_text,
+       AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(atk_text));
+   if (obj) {
+     switch (coordinate_type) {
++#if defined(ATK_230)
+       case ATK_XY_PARENT:
+         rect = GetUnclippedParentHypertextRangeBoundsRect(
+             obj->GetDelegate(), start_offset, end_offset);
+         break;
++#endif
+       default:
+         rect = obj->GetDelegate()->GetHypertextRangeBoundsRect(
+             obj->UnicodeToUTF16OffsetInText(start_offset),
+@@ -1455,6 +1493,7 @@ AtkAttributeSet* GetDefaultAttributes(At
+   return ToAtkAttributeSet(obj->GetDefaultTextAttributes());
+ }
+ 
++#if defined(ATK_232)
+ gboolean ScrollSubstringTo(AtkText* atk_text,
+                            gint start_offset,
+                            gint end_offset,
+@@ -1485,6 +1524,7 @@ gboolean ScrollSubstringToPoint(AtkText*
+   return obj->ScrollSubstringToPoint(start_offset, end_offset, atk_coord_type,
+                                      x, y);
+ }
++#endif  // ATK_232
+ 
+ void Init(AtkTextIface* iface) {
+   iface->get_text = GetText;
+@@ -1507,12 +1547,16 @@ void Init(AtkTextIface* iface) {
+   iface->get_run_attributes = GetRunAttributes;
+   iface->get_default_attributes = GetDefaultAttributes;
+ 
++#if defined(ATK_210)
+   iface->get_string_at_offset = GetStringAtOffset;
++#endif
+ 
++#if defined(ATK_232)
+   if (SupportsAtkTextScrollingInterface()) {
+     iface->scroll_substring_to = ScrollSubstringTo;
+     iface->scroll_substring_to_point = ScrollSubstringToPoint;
+   }
++#endif
+ }
+ 
+ const GInterfaceInfo Info = {reinterpret_cast<GInterfaceInitFunc>(Init),
+@@ -1915,11 +1959,15 @@ const GInterfaceInfo Info = {reinterpret
+ 
+ }  // namespace atk_table
+ 
++// The ATK table cell interface was added in ATK 2.12.
++#if defined(ATK_212)
++
+ namespace atk_table_cell {
+ 
+ gint GetColumnSpan(AtkTableCell* cell) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), 0);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()), 0);
+ 
+   if (const AXPlatformNodeBase* obj =
+           AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
+@@ -1931,8 +1979,10 @@ gint GetColumnSpan(AtkTableCell* cell) {
+ }
+ 
+ GPtrArray* GetColumnHeaderCells(AtkTableCell* cell) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
++      nullptr);
+ 
+   GPtrArray* array = g_ptr_array_new_with_free_func(g_object_unref);
+ 
+@@ -1966,8 +2016,10 @@ GPtrArray* GetColumnHeaderCells(AtkTable
+ }
+ 
+ gboolean GetCellPosition(AtkTableCell* cell, gint* row, gint* column) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), FALSE);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
++      FALSE);
+ 
+   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
+     std::optional<int> row_index = obj->GetTableRow();
+@@ -1984,8 +2036,9 @@ gboolean GetCellPosition(AtkTableCell* c
+ }
+ 
+ gint GetRowSpan(AtkTableCell* cell) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), 0);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()), 0);
+ 
+   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
+     // If the object is not a cell, we return 0.
+@@ -1996,8 +2049,10 @@ gint GetRowSpan(AtkTableCell* cell) {
+ }
+ 
+ GPtrArray* GetRowHeaderCells(AtkTableCell* cell) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
++      nullptr);
+ 
+   GPtrArray* array = g_ptr_array_new_with_free_func(g_object_unref);
+ 
+@@ -2031,8 +2086,10 @@ GPtrArray* GetRowHeaderCells(AtkTableCel
+ }
+ 
+ AtkObject* GetTable(AtkTableCell* cell) {
++  DCHECK(g_atk_table_cell_get_type);
+   g_return_val_if_fail(
+-      G_TYPE_CHECK_INSTANCE_TYPE((cell), atk_table_cell_get_type()), nullptr);
++      G_TYPE_CHECK_INSTANCE_TYPE((cell), AtkTableCellInterface::GetType()),
++      nullptr);
+ 
+   if (auto* obj = AXPlatformNodeAuraLinux::FromAtkObject(ATK_OBJECT(cell))) {
+     if (auto* table = obj->GetTable())
+@@ -2058,6 +2115,8 @@ const GInterfaceInfo Info = {reinterpret
+ 
+ }  // namespace atk_table_cell
+ 
++#endif  // ATK_212
++
+ namespace atk_object {
+ 
+ gpointer kAXPlatformNodeAuraLinuxParentClass = nullptr;
+@@ -2324,6 +2383,50 @@ void Detach(AXPlatformNodeAuraLinuxObjec
+ 
+ }  // namespace
+ 
++// static
++NO_SANITIZE("cfi-icall")
++GType AtkTableCellInterface::GetType() {
++  return g_atk_table_cell_get_type();
++}
++
++// static
++NO_SANITIZE("cfi-icall")
++GPtrArray* AtkTableCellInterface::GetColumnHeaderCells(AtkTableCell* cell) {
++  return g_atk_table_cell_get_column_header_cells(cell);
++}
++
++// static
++NO_SANITIZE("cfi-icall")
++GPtrArray* AtkTableCellInterface::GetRowHeaderCells(AtkTableCell* cell) {
++  return g_atk_table_cell_get_row_header_cells(cell);
++}
++
++// static
++NO_SANITIZE("cfi-icall")
++bool AtkTableCellInterface::GetRowColumnSpan(AtkTableCell* cell,
++                                             gint* row,
++                                             gint* column,
++                                             gint* row_span,
++                                             gint* col_span) {
++  return g_atk_table_cell_get_row_column_span(cell, row, column, row_span,
++                                              col_span);
++}
++
++// static
++bool AtkTableCellInterface::Exists() {
++  g_atk_table_cell_get_type = reinterpret_cast<GetTypeFunc>(
++      dlsym(RTLD_DEFAULT, "atk_table_cell_get_type"));
++  g_atk_table_cell_get_column_header_cells =
++      reinterpret_cast<GetColumnHeaderCellsFunc>(
++          dlsym(RTLD_DEFAULT, "atk_table_cell_get_column_header_cells"));
++  g_atk_table_cell_get_row_header_cells =
++      reinterpret_cast<GetRowHeaderCellsFunc>(
++          dlsym(RTLD_DEFAULT, "atk_table_cell_get_row_header_cells"));
++  g_atk_table_cell_get_row_column_span = reinterpret_cast<GetRowColumnSpanFunc>(
++      dlsym(RTLD_DEFAULT, "atk_table_cell_get_row_column_span"));
++  return *g_atk_table_cell_get_type;
++}
++
+ void AXPlatformNodeAuraLinux::EnsureGTypeInit() {
+ #if !GLIB_CHECK_VERSION(2, 36, 0)
+   static bool first_time = true;
+@@ -2431,8 +2534,11 @@ GType AXPlatformNodeAuraLinux::GetAccess
+     g_type_add_interface_static(type, ATK_TYPE_TABLE, &atk_table::Info);
+ 
+   if (interface_mask_.Implements(ImplementedAtkInterfaces::Value::kTableCell)) {
+-    g_type_add_interface_static(type, atk_table_cell_get_type(),
+-                                &atk_table_cell::Info);
++    // Run-time check to ensure AtkTableCell is supported (requires ATK 2.12).
++    if (AtkTableCellInterface::Exists()) {
++      g_type_add_interface_static(type, AtkTableCellInterface::GetType(),
++                                  &atk_table_cell::Info);
++    }
+   }
+ 
+   return type;
+@@ -2667,9 +2773,9 @@ AtkRole AXPlatformNodeAuraLinux::GetAtkR
+     case ax::mojom::Role::kComplementary:
+       return ATK_ROLE_LANDMARK;
+     case ax::mojom::Role::kContentDeletion:
+-      return GetAtkRoleContentDeletion();
++      return kAtkRoleContentDeletion;
+     case ax::mojom::Role::kContentInsertion:
+-      return GetAtkRoleContentInsertion();
++      return kAtkRoleContentInsertion;
+     case ax::mojom::Role::kContentInfo:
+     case ax::mojom::Role::kFooter:
+       return ATK_ROLE_LANDMARK;
+@@ -3105,12 +3211,14 @@ void AXPlatformNodeAuraLinux::GetAtkStat
+           static_cast<int32_t>(ax::mojom::AriaCurrentState::kFalse)) {
+     atk_state_set_add_state(atk_state_set, ATK_STATE_ACTIVE);
+   }
++#if defined(ATK_216)
+   // Runtime checks in case we were compiled with a newer version of ATK.
+   if (IsPlatformCheckable() && PlatformSupportsState(ATK_STATE_CHECKABLE))
+     atk_state_set_add_state(atk_state_set, ATK_STATE_CHECKABLE);
+   if (HasIntAttribute(ax::mojom::IntAttribute::kHasPopup) &&
+       PlatformSupportsState(ATK_STATE_HAS_POPUP))
+     atk_state_set_add_state(atk_state_set, ATK_STATE_HAS_POPUP);
++#endif
+   if (GetBoolAttribute(ax::mojom::BoolAttribute::kBusy))
+     atk_state_set_add_state(atk_state_set, ATK_STATE_BUSY);
+   if (GetBoolAttribute(ax::mojom::BoolAttribute::kModal))
+@@ -3149,9 +3257,11 @@ void AXPlatformNodeAuraLinux::GetAtkStat
+   if (GetData().GetRestriction() != ax::mojom::Restriction::kDisabled) {
+     if (GetDelegate()->IsReadOnlySupported() &&
+         GetDelegate()->IsReadOnlyOrDisabled()) {
++#if defined(ATK_216)
+       // Runtime check in case we were compiled with a newer version of ATK.
+       if (PlatformSupportsState(ATK_STATE_READ_ONLY))
+         atk_state_set_add_state(atk_state_set, ATK_STATE_READ_ONLY);
++#endif
+     } else {
+       atk_state_set_add_state(atk_state_set, ATK_STATE_ENABLED);
+       atk_state_set_add_state(atk_state_set, ATK_STATE_SENSITIVE);
+@@ -3185,12 +3295,16 @@ struct AtkIntListRelation {
+ static AtkIntListRelation kIntListRelations[] = {
+     {ax::mojom::IntListAttribute::kControlsIds, ATK_RELATION_CONTROLLER_FOR,
+      ATK_RELATION_CONTROLLED_BY},
++#if defined(ATK_226)
+     {ax::mojom::IntListAttribute::kDetailsIds, ATK_RELATION_DETAILS,
+      ATK_RELATION_DETAILS_FOR},
++#endif
+     {ax::mojom::IntListAttribute::kDescribedbyIds, ATK_RELATION_DESCRIBED_BY,
+      ATK_RELATION_DESCRIPTION_FOR},
++#if defined(ATK_226)
+     {ax::mojom::IntListAttribute::kErrormessageIds, ATK_RELATION_ERROR_MESSAGE,
+      ATK_RELATION_ERROR_FOR},
++#endif
+     {ax::mojom::IntListAttribute::kFlowtoIds, ATK_RELATION_FLOWS_TO,
+      ATK_RELATION_FLOWS_FROM},
+     {ax::mojom::IntListAttribute::kLabelledbyIds, ATK_RELATION_LABELLED_BY,
+@@ -3981,6 +4095,7 @@ void AXPlatformNodeAuraLinux::OnReadonly
+   if (!obj)
+     return;
+ 
++#if defined(ATK_216)
+   // Runtime check in case we were compiled with a newer version of ATK.
+   if (!PlatformSupportsState(ATK_STATE_READ_ONLY))
+     return;
+@@ -3988,6 +4103,7 @@ void AXPlatformNodeAuraLinux::OnReadonly
+   atk_object_notify_state_change(
+       obj, ATK_STATE_READ_ONLY,
+       GetData().GetRestriction() == ax::mojom::Restriction::kReadOnly);
++#endif
+ }
+ 
+ void AXPlatformNodeAuraLinux::OnInvalidStatusChanged() {
+@@ -4314,11 +4430,13 @@ gfx::Rect AXPlatformNodeAuraLinux::GetEx
+       extents.Offset(window_origin);
+       break;
+     }
++#if defined(ATK_230)
+     case ATK_XY_PARENT: {
+       gfx::Vector2d parent_origin = -GetParentOriginInScreenCoordinates();
+       extents.Offset(parent_origin);
+       break;
+     }
++#endif
+   }
+ 
+   return extents;
+@@ -4755,6 +4873,7 @@ bool AXPlatformNodeAuraLinux::IsInLiveRe
+   return HasStringAttribute(ax::mojom::StringAttribute::kContainerLiveStatus);
+ }
+ 
++#if defined(ATK_230)
+ void AXPlatformNodeAuraLinux::ScrollToPoint(AtkCoordType atk_coord_type,
+                                             int x,
+                                             int y) {
+@@ -4827,7 +4946,9 @@ void AXPlatformNodeAuraLinux::ScrollNode
+   rect -= rect.OffsetFromOrigin();
+   ScrollNodeRectIntoView(rect, atk_scroll_type);
+ }
++#endif  // defined(ATK_230)
+ 
++#if defined(ATK_232)
+ std::optional<gfx::Rect>
+ AXPlatformNodeAuraLinux::GetUnclippedHypertextRangeBoundsRect(int start_offset,
+                                                               int end_offset) {
+@@ -4886,6 +5007,7 @@ bool AXPlatformNodeAuraLinux::ScrollSubs
+ 
+   return true;
+ }
++#endif  // defined(ATK_232)
+ 
+ void AXPlatformNodeAuraLinux::ComputeStylesIfNeeded() {
+   if (!offset_to_text_attributes_.empty())
+@@ -5066,8 +5188,10 @@ gfx::Point AXPlatformNodeAuraLinux::Conv
+   switch (atk_coord_type) {
+     case ATK_XY_WINDOW:
+       return point + GetParentFrameOriginInScreenCoordinates();
++#if defined(ATK_230)
+     case ATK_XY_PARENT:
+       return point + GetParentOriginInScreenCoordinates();
++#endif
+     case ATK_XY_SCREEN:
+     default:
+       return point;
+diff -up chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.h.el8-atk-compiler-error chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.h
+--- chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.h.el8-atk-compiler-error	2025-01-28 23:03:27.000000000 +0100
++++ chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux.h	2025-02-04 10:56:08.439126973 +0100
+@@ -52,6 +52,31 @@ struct FindInPageResultInfo {
+   }
+ };
+ 
++// AtkTableCell was introduced in ATK 2.12. Ubuntu Trusty has ATK 2.10.
++// Compile-time checks are in place for ATK versions that are older than 2.12.
++// However, we also need runtime checks in case the version we are building
++// against is newer than the runtime version. To prevent a runtime error, we
++// check that we have a version of ATK that supports AtkTableCell. If we do,
++// we dynamically load the symbol; if we don't, the interface is absent from
++// the accessible object and its methods will not be exposed or callable.
++// The definitions below ensure we have no missing symbols. Note that in
++// environments where we have ATK > 2.12, the definitions of AtkTableCell and
++// AtkTableCellIface below are overridden by the runtime version.
++// TODO(accessibility) Remove AtkTableCellInterface when 2.12 is the minimum
++// supported version.
++struct COMPONENT_EXPORT(AX_PLATFORM) AtkTableCellInterface {
++  typedef struct _AtkTableCell AtkTableCell;
++  static GType GetType();
++  static GPtrArray* GetColumnHeaderCells(AtkTableCell* cell);
++  static GPtrArray* GetRowHeaderCells(AtkTableCell* cell);
++  static bool GetRowColumnSpan(AtkTableCell* cell,
++                               gint* row,
++                               gint* column,
++                               gint* row_span,
++                               gint* col_span);
++  static bool Exists();
++};
++
+ // This class with an enum is used to generate a bitmask which tracks the ATK
+ // interfaces that an AXPlatformNodeAuraLinux's ATKObject implements.
+ class ImplementedAtkInterfaces {
+diff -up chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc.el8-atk-compiler-error chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc
+--- chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc.el8-atk-compiler-error	2025-01-28 23:03:27.000000000 +0100
++++ chromium-133.0.6943.35/ui/accessibility/platform/ax_platform_node_auralinux_unittest.cc	2025-02-04 12:06:15.819918562 +0100
+@@ -11,6 +11,7 @@
+ 
+ #include <atk/atk.h>
+ 
++#include <dlfcn.h>
+ #include <array>
+ #include <utility>
+ #include <vector>
+@@ -887,6 +888,17 @@ typedef bool (*ScrollToPointFunc)(AtkCom
+ typedef bool (*ScrollToFunc)(AtkComponent* component, AtkScrollType type);
+ 
+ TEST_F(AXPlatformNodeAuraLinuxTest, AtkComponentScrollToPoint) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.30 instead of linking directly.
++  ScrollToPointFunc scroll_to_point = reinterpret_cast<ScrollToPointFunc>(
++      dlsym(RTLD_DEFAULT, "atk_component_scroll_to_point"));
++  if (!scroll_to_point) {
++    LOG(WARNING) << "Skipping AtkComponentScrollToPoint"
++                    " because ATK version < 2.30 detected.";
++    return;
++  }
++
+   AXNodeData root;
+   root.id = 1;
+   root.role = ax::mojom::Role::kRootWebArea;
+@@ -914,8 +926,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
+   EXPECT_EQ(10, width);
+   EXPECT_EQ(10, height);
+ 
+-  atk_component_scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_SCREEN, 600,
+-                                650);
++  scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_SCREEN, 600, 650);
+   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
+                             &height, ATK_XY_SCREEN);
+   EXPECT_EQ(610, x_left);
+@@ -923,8 +934,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
+   EXPECT_EQ(10, width);
+   EXPECT_EQ(10, height);
+ 
+-  atk_component_scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_PARENT, 10,
+-                                10);
++  scroll_to_point(ATK_COMPONENT(child_obj), ATK_XY_PARENT, 10, 10);
+   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
+                             &height, ATK_XY_SCREEN);
+   // The test wrapper scrolls every element when scrolling, so this should be
+@@ -941,6 +951,17 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
+ }
+ 
+ TEST_F(AXPlatformNodeAuraLinuxTest, AtkComponentScrollTo) {
++  // There's a chance we may be compiled with a newer version of ATK and then
++  // run with an older one, so we need to do a runtime check for this method
++  // that is available in ATK 2.30 instead of linking directly.
++  ScrollToFunc scroll_to = reinterpret_cast<ScrollToFunc>(
++      dlsym(RTLD_DEFAULT, "atk_component_scroll_to"));
++  if (!scroll_to) {
++    LOG(WARNING) << "Skipping AtkComponentScrollTo"
++                    " because ATK version < 2.30 detected.";
++    return;
++  }
++
+   AXNodeData root;
+   root.id = 1;
+   root.role = ax::mojom::Role::kRootWebArea;
+@@ -968,7 +989,7 @@ TEST_F(AXPlatformNodeAuraLinuxTest, AtkC
+   EXPECT_EQ(10, width);
+   EXPECT_EQ(10, height);
+ 
+-  atk_component_scroll_to(ATK_COMPONENT(child_obj), ATK_SCROLL_ANYWHERE);
++  scroll_to(ATK_COMPONENT(child_obj), ATK_SCROLL_ANYWHERE);
+   atk_component_get_extents(ATK_COMPONENT(child_obj), &x_left, &y_top, &width,
+                             &height, ATK_XY_SCREEN);
+   EXPECT_EQ(0, x_left);
+diff -up chromium-133.0.6943.35/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc.el8-atk-compiler-error chromium-133.0.6943.35/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc
+--- chromium-133.0.6943.35/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc.el8-atk-compiler-error	2025-01-28 23:03:27.000000000 +0100
++++ chromium-133.0.6943.35/ui/accessibility/platform/inspect/ax_tree_formatter_auralinux.cc	2025-02-04 10:56:08.464127592 +0100
+@@ -474,18 +474,34 @@ void AXTreeFormatterAuraLinux::AddTableC
+   int row = 0, col = 0, row_span = 0, col_span = 0;
+   int n_row_headers = 0, n_column_headers = 0;
+ 
+-  AtkTableCell* cell = G_TYPE_CHECK_INSTANCE_CAST(
+-      (atk_object), atk_table_cell_get_type(), AtkTableCell);
++  // Properties obtained via AtkTableCell, if possible. If we do not have at
++  // least ATK 2.12, use the same logic in our AtkTableCell implementation so
++  // that tests can still be run.
++  if (AtkTableCellInterface::Exists()) {
++    AtkTableCell* cell = G_TYPE_CHECK_INSTANCE_CAST(
++        (atk_object), AtkTableCellInterface::GetType(), AtkTableCell);
+ 
+-  atk_table_cell_get_row_column_span(cell, &row, &col, &row_span, &col_span);
++    AtkTableCellInterface::GetRowColumnSpan(cell, &row, &col, &row_span,
++                                            &col_span);
+ 
+-  GPtrArray* column_headers = atk_table_cell_get_column_header_cells(cell);
+-  n_column_headers = column_headers->len;
+-  g_ptr_array_unref(column_headers);
++    GPtrArray* column_headers =
++        AtkTableCellInterface::GetColumnHeaderCells(cell);
++    n_column_headers = column_headers->len;
++    g_ptr_array_unref(column_headers);
+ 
+-  GPtrArray* row_headers = atk_table_cell_get_row_header_cells(cell);
+-  n_row_headers = row_headers->len;
+-  g_ptr_array_unref(row_headers);
++    GPtrArray* row_headers = AtkTableCellInterface::GetRowHeaderCells(cell);
++    n_row_headers = row_headers->len;
++    g_ptr_array_unref(row_headers);
++  } else {
++    row = node->GetTableRow().value_or(-1);
++    col = node->GetTableColumn().value_or(-1);
++    row_span = node->GetTableRowSpan().value_or(0);
++    col_span = node->GetTableColumnSpan().value_or(0);
++    if (role == ATK_ROLE_TABLE_CELL) {
++      n_column_headers = node->GetDelegate()->GetColHeaderNodeIds(col).size();
++      n_row_headers = node->GetDelegate()->GetRowHeaderNodeIds(row).size();
++    }
++  }
+ 
+   std::vector<std::string> cell_info;
+   cell_info.push_back(base::StringPrintf("row=%i", row));

diff --git a/chromium.spec b/chromium.spec
index f1cfccf..7bf0d8d 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -152,7 +152,7 @@
 
 # enable|disable use_custom_libcxx
 %global use_custom_libcxx 0
-%if 0%{?rhel} || 0%{?fedora} == 39
+%if 0%{?rhel} || 0%{?fedora} == 40
 %global use_custom_libcxx 1
 %endif
 
@@ -197,6 +197,7 @@
 %global bundlelibdrm 1
 %global bundlefontconfig 1
 %global bundleffmpegfree 1
+%global bundlehighway 1
 # openjpeg2, need to update to 2.5.x
 %global bundlelibopenjpeg2 1
 %global bundlelibtiff 1
@@ -206,18 +207,11 @@
 %global bundleflac 0
 %global bundledoubleconversion 0
 %global bundlelibXNVCtrl 0
-%global bundlehighway 0
 %global bundlelibusbx 0
-%global bundlelibevent 0
 %global bundlelibsecret 0
 %global bundleopus 0
 %global bundlelcms2 0
 
-# workaround for build error on aarch64
-%ifarch aarch64
-%global bundlehighway 1
-%endif
-
 # workaround for build error
 # disable bundleminizip for Fedora > 39 due to switch to minizip-ng
 # disable bundleminizip for epel and Fedora39 due to old minizip version
@@ -282,7 +276,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 132.0.6834.159
+Version: 133.0.6943.53
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -322,10 +316,8 @@ Patch131: chromium-107-proprietary-codecs.patch
 Patch132: chromium-118-sigtrap_system_ffmpeg.patch
 # need for old ffmpeg 6.0/5.x on epel9 and fedora < 40
 Patch133: chromium-121-system-old-ffmpeg.patch
-# disable FFmpegAllowLists by default to allow external ffmpeg
-patch134: chromium-125-disable-FFmpegAllowLists.patch
 # revert, it causes build error: use of undeclared identifier 'AVFMT_FLAG_NOH264PARSE'
-Patch135: chromium-129-disable-H.264-video-parser-during-demuxing.patch
+Patch135: chromium-133-disable-H.264-video-parser-during-demuxing.patch
 
 # file conflict with old kernel on el8/el9
 Patch141: chromium-118-dma_buf_export_sync_file-conflict.patch
@@ -343,7 +335,7 @@ Patch305: chromium-124-el8-arm64-memory_tagging.patch
 Patch306: chromium-127-el8-ifunc-header.patch
 
 # workaround for build error due to old atk version on el8
-Patch307: chromium-129-el8-atk-compiler-error.patch
+Patch307: chromium-133-el8-atk-compiler-error.patch
 Patch308: chromium-132-el8-unsupport-clang-flags.patch
 Patch309: chromium-132-el8-unsupport-rustc-flags.patch
 Patch310: chromium-132-el8-clang18-build-error.patch
@@ -408,6 +400,7 @@ Patch385: 0002-Include-cstddef-to-fix-build.patch
 Patch386: 0004-third_party-crashpad-port-curl-transport-ppc64.patch
 
 Patch387: HACK-third_party-libvpx-use-generic-gnu.patch
+Patch388: 0001-third-party-hwy-wrong-include.patch
 Patch389: HACK-debian-clang-disable-base-musttail.patch
 
 Patch390: 0001-Add-ppc64-target-to-libaom.patch
@@ -678,9 +671,6 @@ BuildRequires: libXNVCtrl-devel
 BuildRequires:	git-core
 BuildRequires:	hwdata
 BuildRequires:	kernel-headers
-%if ! %{bundlelibevent}
-BuildRequires:	libevent-devel
-%endif
 BuildRequires:	libffi-devel
 
 %if ! %{bundleicu}
@@ -864,7 +854,6 @@ Provides: bundled(libaddressinput) = 0
 Provides: bundled(libdrm) = 2.4.85
 %endif
 
-Provides: bundled(libevent) = 1.4.15
 Provides: bundled(libjingle) = 9564
 
 %if %{bundlelibjpeg}
@@ -1038,7 +1027,6 @@ Qt6 UI for chromium.
 %patch -P131 -p1 -b .prop-codecs
 %patch -P132 -p1 -b .sigtrap_system_ffmpeg
 %patch -P133 -p1 -b .system-old-ffmpeg
-%patch -P134 -p1 -b .disable-FFmpegAllowLists
 %patch -P135 -p1 -b .disable-H.264-video-parser-during-demuxing
 %endif
 
@@ -1117,6 +1105,7 @@ Qt6 UI for chromium.
 %patch -P385 -p1 -b .0002-Include-cstddef-to-fix-build
 %patch -P386 -p1 -b .0004-third_party-crashpad-port-curl-transport-ppc64
 %patch -P387 -p1 -b .HACK-third_party-libvpx-use-generic-gnu
+%patch -P388 -p1 -b .0001-third-party-hwy-wrong-include.patch
 %patch -P389 -p1 -b .HACK-debian-clang-disable-base-musttail
 %patch -P390 -p1 -b .0001-Add-ppc64-target-to-libaom
 %patch -P391 -p1 -b .0001-Add-pregenerated-config-for-libaom-on-ppc64
@@ -1466,9 +1455,6 @@ system_libs=()
 %if ! %{bundlelibdrm}
 	system_libs+=(libdrm)
 %endif
-%if ! %{bundlelibevent}
-	system_libs+=(libevent)
-%endif
 %if ! %{bundlelibjpeg}
 	system_libs+=(libjpeg)
 %endif
@@ -1942,6 +1928,12 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Tue Feb 04 2025 Than Ngo <than@redhat.com> - 133.0.6943.53-1
+- Update to 133.0.6943.53
+  * CVE-2025-0444: Use after free in Skia
+  * CVE-2025-0445: Use after free in V8
+  * CVE-2025-0451: Inappropriate implementation in Extensions API
+
 * Wed Jan 29 2025 Than Ngo <than@redhat.com> - 132.0.6834.159-1
 - Updated to 132.0.6834.159
   * Medium CVE-2025-0762: Use after free in DevTools

diff --git a/clean_ffmpeg.sh b/clean_ffmpeg.sh
index f26b2fe..8b323d5 100755
--- a/clean_ffmpeg.sh
+++ b/clean_ffmpeg.sh
@@ -183,6 +183,7 @@ header_files="	libavcodec/x86/inline_asm.h \
 		libavformat/iamf_parse.h \
 		libavformat/iamf_reader.h \
 		libavformat/iamf.h \
+		libavformat/dvdclut.h \
 		libavutil/aarch64/cpu.h \
 		libavutil/aarch64/intreadwrite.h \
 		libavutil/x86/asm.h \
@@ -271,6 +272,7 @@ manual_files=" libavcodec/aarch64/h264pred_neon.S \
 		libavformat/pcm.c \
 		libavformat/utils.c \
 		libavformat/version.c \
+		libavformat/dvdclut.c \
 		libavutil/aarch64/asm.S \
 		libavutil/aarch64/cpu.c \
 		libavutil/aarch64/cpu_sve.S \

diff --git a/sources b/sources
index c1933a7..dd44a7a 100644
--- a/sources
+++ b/sources
@@ -2,4 +2,4 @@ SHA512 (node-v20.6.1-linux-arm64.tar.xz) = adfcaf2c22614797fd69fb46d94c1cbf64dea
 SHA512 (node-v20.6.1-linux-x64.tar.xz) = 7e15c05041a9a50f0046266aadb2e092a5aefbec19be1c7c809471add520cb57c7df3c47d88b1888b29bf2979dca3c92adddfd965370fa2a9da4ea02186464fd
 SHA512 (linux-arm64-0.19.2.tgz) = 8a0d8fec6786fffcd6954d00820037a55d61e60762c74300df0801f8db27057562c221a063bedfb8df56af9ba80abb366336987e881782c5996e6f871abd3dc6
 SHA512 (linux-x64-0.19.2.tgz) = a31cc74c4bfa54f9b75d735a1cfc944d3b5efb7c06bfba9542da9a642ae0b2d235ea00ae84d3ad0572c406405110fe7b61377af0fd15803806ef78d20fc6f05d
-SHA512 (chromium-132.0.6834.159-clean.tar.xz) = 8149f5eb9d73cb3782dcc925ac85d3f63693767d8c82a7ad235e3f9416c95a9b262fa464cd4e34ddcfc002163a737e72e161cb0b407540fe9ac92b515755038e
+SHA512 (chromium-133.0.6943.53-clean.tar.xz) = 0ae9f0e38993eb87b3fdfe5170e4db8e962e257c5b36eb88f1c4ced32424da9ffec08d69b746cb29b92b8de137e9bca96d621faad511f220c59171680eed3044

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-07 16:07 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-07 16:07 [rpms/chromium] epel9-next: - Update to 133.0.6943.53 Than Ngo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox