Fixing BoringSSL on iOS

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 309 matching lines @@
       "cert_net/nss_ocsp.h",
     ]
   }
 
   if (is_ios && use_nss_verifier) {
     net_shared_sources -= [
       "cert/cert_verify_proc_ios.cc",
       "cert/cert_verify_proc_ios.h",
       "cert/x509_certificate_openssl_ios.cc",
     ]
+
+    net_shared_deps += [
+      "//third_party/nss:nspr",
+      "//third_party/nss",
+      "//net/third_party/nss/ssl:libssl",
+    ]
   }
 
   if (is_chromecast && use_nss_certs) {
     net_shared_sources += [ "ssl/ssl_platform_key_chromecast.cc" ]
     net_shared_sources -= [ "ssl/ssl_platform_key_nss.cc" ]
   }
 
   if (!enable_mdns) {
     net_shared_sources -= [
       "dns/mdns_cache.cc",
@@ skipping 31 matching lines @@
       "base/network_change_notifier_mac.cc",
       "base/network_config_watcher_mac.cc",
       "base/network_interfaces_mac.cc",
       "base/network_interfaces_mac.h",
       "base/platform_mime_util_mac.mm",
       "proxy/proxy_resolver_mac.cc",
       "proxy/proxy_server_mac.cc",
     ]
 
     net_shared_sources -= [ "disk_cache/blockfile/file_posix.cc" ]
-    net_shared_deps += [
-      "//third_party/nss:nspr",
-      "//third_party/nss",
-      "//net/third_party/nss/ssl:libssl",
-    ]
   }
 
   if (is_ios && !use_nss_verifier) {
-    net_shared_sources += [ "cert/test_root_certs_mac.cc" ]
+    net_shared_unfiltered_sources += [ "cert/test_root_certs_mac.cc" ]
+    net_shared_sources -= [ "cert/x509_certificate_ios.cc" ]
   }
 
   if (is_ios || is_mac) {
     net_shared_sources += gypi_values.net_base_mac_ios_sources
   }
 
   if (is_android) {
     net_shared_deps += [ ":net_jni_headers" ]
 
     # Add some Linux sources that were excluded by the filter, but which
@@ skipping 1028 matching lines @@
   testonly = true
   sources = [
     "data/certificate_policies_unittest",
     "data/name_constraints_unittest",
     "data/parse_certificate_unittest",
     "data/parse_ocsp_unittest",
     "data/test.html",
     "data/url_request_unittest",
     "data/verify_certificate_chain_unittest",
     "data/verify_name_match_unittest/names",
+    "third_party/nist-pkits/certs",
+    "third_party/nist-pkits/crls",
   ]
   outputs = [
     "{{bundle_resources_dir}}/" +
         "{{source_root_relative_dir}}/{{source_file_part}}",
   ]
 }
 
 test("net_unittests") {
   sources = gypi_values.net_test_sources
 
@@ skipping 25 matching lines @@
     "//testing/gtest",
     "//third_party/zlib",
     "//url",
   ]
 
   data = [
     "data/",
   ]
   data_deps = []
 
-  if (!is_ios) {
+  if (use_openssl) {
     data_deps += [ "third_party/nist-pkits/" ]
   }
 
   if (is_linux || is_mac || is_win) {
     deps += [
       "//third_party/pyftpdlib/",
       "//third_party/pywebsocket/",
       "//third_party/tlslite/",
     ]
     data_deps += [
@@ skipping 456 matching lines @@
 fuzzer_test("net_quic_crypto_framer_parse_message_fuzzer") {
   sources = [
     "quic/quic_crypto_framer_parse_message_fuzzer.cc",
   ]
   deps = [
     ":net_fuzzer_test_support",
     "//base",
     "//net",
   ]
 }