tests: generate client auth revocation tests.

Created by running:
```
cd tests
./generate.py --no-tls-server-certs --no-signatures --no-clientauth
```

Author: cpu

tests/client_auth_revocation.rs

@@ -82,3 +82,268 @@ fn check_cert(
 }
 
 // DO NOT EDIT BELOW: generated by tests/generate.py
+
+#[test]
+#[cfg(feature = "alloc")]
+fn no_crls_test_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn no_relevant_crl_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/no_relevant_crl_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_not_revoked_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_not_revoked_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_revoked_badsig_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_revoked_badsig_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_revoked_wrong_ku_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_crl_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_crl_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_crl_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_revoked_wrong_ku_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_revoked_no_ku_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_revoked_no_ku_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_revoked_crl_ku_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/ku_chain.ee.der");
+    let intermediates = &[include_bytes!("client_auth_revocation/ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_revoked_crl_ku_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn no_crls_test_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn no_relevant_crl_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/no_relevant_crl_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_not_revoked_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_not_revoked_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_revoked_badsig_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_revoked_badsig_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_revoked_wrong_ku_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_crl_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_crl_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_crl_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_revoked_wrong_ku_chain_depth.crl.der")
+            .as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn ee_revoked_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/ee_revoked_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_revoked_ee_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_revoked_ee_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::EndEntity, crls),
+        Ok(())
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_revoked_no_ku_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/no_ku_chain.ee.der");
+    let intermediates =
+        &[include_bytes!("client_auth_revocation/no_ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/no_ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_revoked_no_ku_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}
+
+#[test]
+#[cfg(feature = "alloc")]
+fn int_revoked_crl_ku_chain_depth() {
+    let ee = include_bytes!("client_auth_revocation/ku_chain.ee.der");
+    let intermediates = &[include_bytes!("client_auth_revocation/ku_chain.int.ca.der").as_slice()];
+    let ca = include_bytes!("client_auth_revocation/ku_chain.root.ca.der");
+    let crls = &[webpki::CertRevocationList::try_from(
+        include_bytes!("client_auth_revocation/int_revoked_crl_ku_chain_depth.crl.der").as_slice(),
+    )
+    .unwrap()];
+    assert_eq!(
+        check_cert(ee, intermediates, ca, RevocationCheckDepth::Chain, crls),
+        Err(webpki::Error::UnknownIssuer)
+    );
+}