Work around GTE CyberTrust/Baltimore CyberTrust cross-signing issues

net/cert/test_root_certs.h

Index: net/cert/test_root_certs.h
diff --git a/net/cert/test_root_certs.h b/net/cert/test_root_certs.h
index 543adbdd29791f032396ccffd3614d4a30adcabf..825771774f47b24ecf49d3ada3eecae4de80df75 100644
--- a/net/cert/test_root_certs.h
+++ b/net/cert/test_root_certs.h
@@ -63,6 +63,12 @@ class NET_EXPORT_PRIVATE TestRootCerts {
   // certificates stored in |temporary_roots_|. If IsEmpty() is true, this
   // does not modify |trust_ref|.
   OSStatus FixupSecTrustRef(SecTrustRef trust_ref) const;
+
+  // Configures whether or not the default/system root store should also
+  // be trusted. By default, this is true, indicating that the TestRootCerts
+  // are used in addition to OS trust store.
+  void SetAllowSystemTrust(bool allow_system_trust);
+
 #elif defined(OS_WIN)
   HCERTSTORE temporary_roots() const { return temporary_roots_; }
 
@@ -91,6 +97,7 @@ class NET_EXPORT_PRIVATE TestRootCerts {
   HCERTSTORE temporary_roots_;
 #elif defined(OS_MACOSX)
   base::mac::ScopedCFTypeRef<CFMutableArrayRef> temporary_roots_;
+  bool allow_system_trust_;
 #endif
 
 #if defined(OS_WIN) || defined(USE_OPENSSL)