Introduce unit test for NSS OCSP/AIA fetching

net/net.gyp

Index: net/net.gyp
diff --git a/net/net.gyp b/net/net.gyp
index 02f8ddacd53d34201ff4602af438bdb25758e2d3..f0d82576c68527ddc4360cbf572d868036a2f3a9 100644
--- a/net/net.gyp
+++ b/net/net.gyp
@@ -1599,6 +1599,7 @@
         'http/mock_sspi_library_win.h',
         'http/transport_security_state_unittest.cc',
         'http/url_security_manager_unittest.cc',
+        'ocsp/nss_ocsp_unittest.cc',

[wtc, 2013/05/16 19:21:13]

nss_ocsp_unittest.cc is only testing id-ad-caIssuers, not
id-ad-ocsp, so the file name is misleading, unless you plan
to add OCSP tests to the file in the future.

[Ryan Sleevi, 2013/05/16 21:25:38]

This is intentional, to match the naming of the file - nss_ocsp.h - even though
it handles all of NSS's IO functions.

I recall there was some discussion about this file naming last time, and during
phajdan.jr's moving, but it was decided to keep it the same.

In particular, following the sort of "directory as components" model, we don't
want to stick this into cert/ because we want to have this able to depend on
concepts like URLRequest (which cert/ should not)

         'proxy/dhcp_proxy_script_adapter_fetcher_win_unittest.cc',
         'proxy/dhcp_proxy_script_fetcher_factory_unittest.cc',
         'proxy/dhcp_proxy_script_fetcher_win_unittest.cc',
@@ -1865,6 +1866,13 @@
             'http/mock_gssapi_library_posix.h',
           ],
         }],
+        [ 'use_openssl == 1 or (use_glib == 0 and OS != "ios")', {
+          # Only include this test when on Posix and using NSS for
+          # cert verification or on iOS (which also uses NSS for certs).
+          'sources!': [
+            'ocsp/nss_ocsp_unittest.cc',
+          ],
+        }],
         [ 'use_openssl==1', {
             # When building for OpenSSL, we need to exclude NSS specific tests.
             # TODO(bulach): Add equivalent tests when the underlying