Differentiate between VERIFY_FAILED and VERIFY_INCORRECT_KEY_USAGE.

net/cert/cert_verify_proc_android.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_android.h"
 
 #include <string>
 #include <vector>
 
 #include "base/logging.h"
@@ skipping 23 matching lines @@
     case android::VERIFY_NO_TRUSTED_ROOT:
       verify_result->cert_status |= CERT_STATUS_AUTHORITY_INVALID;
       break;
     case android::VERIFY_EXPIRED:
     case android::VERIFY_NOT_YET_VALID:
       verify_result->cert_status |= CERT_STATUS_DATE_INVALID;
       break;
     case android::VERIFY_UNABLE_TO_PARSE:
       verify_result->cert_status |= CERT_STATUS_INVALID;
       break;
+    case android::VERIFY_INCORRECT_KEY_USAGE:
+      verify_result->cert_status |= CERT_STATUS_INVALID;

[Ryan Sleevi, 2013/04/25 18:36:50]

I've confirmed this matches how we map CERT_TRUST_IS_NOT_VALID_FOR_USAGE on
Windows.

+      break;
     default:
       NOTREACHED();
       verify_result->cert_status |= CERT_STATUS_INVALID;
       break;
   }
   return true;
 }
 
 bool GetChainDEREncodedBytes(X509Certificate* cert,
                              std::vector<std::string>* chain_bytes) {
@@ skipping 54 matching lines @@
 
   // Until the required support is available in the platform, we don't know if
   // the trust root at the end of the chain was standard or user-added, so we
   // mark all correctly verified certificates as issued by a known root.
   verify_result->is_issued_by_known_root = true;
 
   return OK;
 }
 
 }  // namespace net