Work around our not caching the intermediate CA...

net/base/ssl_client_socket_mac.cc

 // Copyright (c) 2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_client_socket_mac.h"
 
 #include "base/singleton.h"
 #include "base/string_util.h"
 #include "net/base/net_errors.h"
 #include "net/base/ssl_info.h"
@@ skipping 362 matching lines @@
   // set cert
   CFArrayRef certs;
   status = SSLCopyPeerCertificates(ssl_context_, &certs);
   if (!status) {
     DCHECK(CFArrayGetCount(certs) > 0);
     
     SecCertificateRef client_cert =
         static_cast<SecCertificateRef>(
           const_cast<void*>(CFArrayGetValueAtIndex(certs, 0)));
     CFRetain(client_cert);
-    ssl_info->cert = X509Certificate::CreateFromHandle(client_cert);
+    ssl_info->cert = X509Certificate::CreateFromHandle(
+        client_cert, X509Certificate::SOURCE_FROM_NETWORK);
     CFRelease(certs);
   }
   
   // update status
   ssl_info->cert_status = server_cert_status_;
   
   // security info
   SSLCipherSuite suite;
   status = SSLGetNegotiatedCipher(ssl_context_, &suite);
   if (!status)
@@ skipping 377 matching lines @@
   if (rv < 0 && rv != ERR_IO_PENDING) {
     return OSStatusFromNetError(rv);
   }
   
   // always lie to our caller
   return noErr;
 }
 
 }  // namespace net