Introduce unit test for NSS OCSP/AIA fetching

net/net.gyp

 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     'chromium_code': 1,
 
     'linux_link_kerberos%': 0,
     'use_tracing_cache_backend%': 0,
@@ skipping 1581 matching lines @@
         'http/mock_allow_url_security_manager.cc',
         'http/mock_allow_url_security_manager.h',
         'http/mock_gssapi_library_posix.cc',
         'http/mock_gssapi_library_posix.h',
         'http/mock_http_cache.cc',
         'http/mock_http_cache.h',
         'http/mock_sspi_library_win.cc',
         'http/mock_sspi_library_win.h',
         'http/transport_security_state_unittest.cc',
         'http/url_security_manager_unittest.cc',
+        'ocsp/nss_ocsp_unittest.cc',

[wtc, 2013/05/16 19:21:13]

nss_ocsp_unittest.cc is only testing id-ad-caIssuers, not
id-ad-ocsp, so the file name is misleading, unless you plan
to add OCSP tests to the file in the future.

[Ryan Sleevi, 2013/05/16 21:25:38]

This is intentional, to match the naming of the file - nss_ocsp.h - even though
it handles all of NSS's IO functions.

I recall there was some discussion about this file naming last time, and during
phajdan.jr's moving, but it was decided to keep it the same.

In particular, following the sort of "directory as components" model, we don't
want to stick this into cert/ because we want to have this able to depend on
concepts like URLRequest (which cert/ should not)

         'proxy/dhcp_proxy_script_adapter_fetcher_win_unittest.cc',
         'proxy/dhcp_proxy_script_fetcher_factory_unittest.cc',
         'proxy/dhcp_proxy_script_fetcher_win_unittest.cc',
         'proxy/multi_threaded_proxy_resolver_unittest.cc',
         'proxy/network_delegate_error_observer_unittest.cc',
         'proxy/proxy_bypass_rules_unittest.cc',
         'proxy/proxy_config_service_android_unittest.cc',
         'proxy/proxy_config_service_linux_unittest.cc',
         'proxy/proxy_config_service_win_unittest.cc',
         'proxy/proxy_config_unittest.cc',
@@ skipping 246 matching lines @@
             'USE_KERBEROS',
           ],
         }, { # use_kerberos == 0
           'sources!': [
             'http/http_auth_gssapi_posix_unittest.cc',
             'http/http_auth_handler_negotiate_unittest.cc',
             'http/mock_gssapi_library_posix.cc',
             'http/mock_gssapi_library_posix.h',
           ],
         }],
+        [ 'use_openssl == 1 or (use_glib == 0 and OS != "ios")', {
+          # Only include this test when on Posix and using NSS for
+          # cert verification or on iOS (which also uses NSS for certs).
+          'sources!': [
+            'ocsp/nss_ocsp_unittest.cc',
+          ],
+        }],
         [ 'use_openssl==1', {
             # When building for OpenSSL, we need to exclude NSS specific tests.
             # TODO(bulach): Add equivalent tests when the underlying
             #               functionality is ported to OpenSSL.
             'sources!': [
               'cert/nss_cert_database_unittest.cc',
               'cert/x509_util_nss_unittest.cc',
               'ssl/client_cert_store_impl_unittest.cc',
             ],
           }, {  # else !use_openssl: remove the unneeded files
@@ skipping 992 matching lines @@
                 '--result', '<@(_outputs)',
                 '--isolate', 'net_unittests.isolate',
               ],
             },
           ],
         },
       ],
     }],
   ],
 }