Start on CABF KU cases

[woodruffw]

WIP. These may have to go behind a pedantic feature like the CABF EKU tests.

[github-actions]

No regressions found.

[github-actions]

New testcases

There are new testcases in this change.

rustls-webpki

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

libressl-4.1.2

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

boringssl-legacy-40

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

gocryptox509-go1.26.3

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	validation: chain built
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	validation: chain built

libressl-4.2.1

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

pyca-cryptography-46.0.7

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	chain built successfully
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	chain built successfully

openssl-3.4.5

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

libressl-4.3.1

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

openssl-3.2.6

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

libressl-4.0.1

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

libressl-3.9.2

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

openssl-4.0.0

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

openssl-3.5.6

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

certvalidator-0.11.1

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	The X.509 certificate provided is not valid for securing TLS connections
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	The X.509 certificate provided is not valid for securing TLS connections

openssl-3.6.2

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

openssl-3.0.20

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

aws-lc-1.72.0

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

openssl-3.3.7

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	FAILURE	unable to get local issuer certificate
webpki::ku::ee-rsa-without-any-usages	FAILURE	FAILURE	unable to get local issuer certificate

gnutls-certtool-3.8.3

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	Chain verification output: Verified. The certificate is trusted.
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	Chain verification output: Verified. The certificate is trusted.

rust-webpki

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None

openssl-1.1

Testcase	Expected Result	Actual Result	Context
webpki::ku::ee-ecc-without-digitalsignature	FAILURE	SUCCESS	None
webpki::ku::ee-rsa-without-any-usages	FAILURE	SUCCESS	None