chromiumos-overlay: Use restricted HTTPS CAs when sending crashes

chromeos-base/update_engine/update_engine-9999.ebuild

 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=2
 inherit toolchain-funcs cros-debug cros-workon
 
 DESCRIPTION="Chrome OS Update Engine."
 HOMEPAGE="http://src.chromium.org"
 SRC_URI=""
 LICENSE="BSD"
 SLOT="0"
 IUSE="-delta_generator"
 KEYWORDS="~amd64 ~arm ~x86"
 
 RDEPEND="app-arch/bzip2
+        chromeos-base/chromeos-ca-certificates
         chromeos-base/libchrome
         chromeos-base/metrics
         chromeos-base/verity
         dev-cpp/gflags
         dev-libs/glib
         dev-libs/libpcre
         dev-libs/libxml2
         dev-libs/protobuf
         dev-util/bsdiff
         net-misc/curl
@@ skipping 49 matching lines @@
 
         insinto /usr/share/dbus-1/services
         doins org.chromium.UpdateEngine.service
 
         insinto /etc/dbus-1/system.d
         doins UpdateEngine.conf
 
         insinto /usr/include/chromeos/update_engine
         doins update_engine.dbusserver.h
         doins update_engine.dbusclient.h
-
-        # c_rehash (OpenSSL 0.9.8l 5 Nov 2009) is processing just .pem files so
-        # rename the certificates from .crt to .pem. An alternative is to use
-        # openssl directly to create the hash symlinks:
-        #
-        #   ln -s $cert.crt $(openssl x509 -noout -hash < $cert.crt).0
-        #
-        # However, c_rehash has smarts about incrementing the .0 extension if
-        # necessary.
-        CA_CERT_DIR=/usr/share/update_engine/ca-certificates
-        insinto "${CA_CERT_DIR}"
-        for cert in \
-          Equifax_Secure_Certificate_Authority \
-          GeoTrustGlobalCA_crosssigned \
-          GoogleInternetAuthority; do
-          newins certs/$cert.crt $cert.pem
-        done
-        c_rehash "${D}/${CA_CERT_DIR}"
 }