Create stubs for system certificate validation.

net/base/cert_verify_proc_mac.h

Index: net/base/cert_verify_proc_mac.h
diff --git a/net/base/cert_verify_proc_mac.h b/net/base/cert_verify_proc_mac.h
new file mode 100644
index 0000000000000000000000000000000000000000..4942bf93ac667bcfae70edd60a9bf44f128ae7c9
--- /dev/null
+++ b/net/base/cert_verify_proc_mac.h
@@ -0,0 +1,32 @@
+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_BASE_CERT_VERIFY_PROC_MAC_H_
+#define NET_BASE_CERT_VERIFY_PROC_MAC_H_
+#pragma once

[wtc, 2012/03/13 22:37:57]

Why doesn't this header need #pragma once?  Same question for
the other cert_verify_proc_xxx.h headers.

[Ryan Sleevi, 2012/03/14 00:58:50]

It does. This was an oversight. Thanks for catching.

+
+#include "net/base/multi_threaded_cert_verifier.h"
+
+namespace net {
+
+// CertVerifyProcMac is a VerifyProc implementation that verifies certificates
+// using OS X's Security.framework for path building and verification.

[wtc, 2012/03/06 23:10:14]

Nit: path => certification path

This is for the benefit of people unfamiliar with
certificates.

+class CertVerifyProcMac : public MultiThreadedCertVerifier::VerifyProc {
+ public:
+  CertVerifyProcMac();
+
+  // MultiThreadedCertVerifier::VerifyProc implementation.
+  virtual int Verify(X509Certificate* cert,
+                     const std::string& hostname,
+                     int flags,
+                     CRLSet* crl_set,
+                     CertVerifyResult* verify_result) OVERRIDE;
+
+ protected:
+  virtual ~CertVerifyProcMac();
+};
+
+}  // namespace net
+
+#endif  // NET_BASE_CERT_VERIFY_PROC_MAC_H_