Certificate path builder for new certificate verification library

net/net.gypi

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This file is shared between the regular GYP build, the NaCl GYP build, and
 # the GN build. For GN support, it must have no conditionals or anything like
 # that beyond the simple one-level-deep dictionary of values.
 {
   'variables': {
     # Subset of net source files that are compiled for NaCl (net_nacl target).
@@ skipping 87 matching lines @@
       'cert/internal/name_constraints.cc',
       'cert/internal/name_constraints.h',
       'cert/internal/parse_certificate.cc',
       'cert/internal/parse_certificate.h',
       'cert/internal/parse_name.cc',
       'cert/internal/parse_name.h',
       'cert/internal/parse_ocsp.cc',
       'cert/internal/parse_ocsp.h',
       'cert/internal/parsed_certificate.cc',
       'cert/internal/parsed_certificate.h',
+      'cert/internal/path_builder.cc',
+      'cert/internal/path_builder.h',
       'cert/internal/signature_algorithm.cc',
       'cert/internal/signature_algorithm.h',
       'cert/internal/signature_policy.cc',
       'cert/internal/signature_policy.h',
       'cert/internal/trust_store.cc',
       'cert/internal/trust_store.h',
       'cert/internal/verify_certificate_chain.cc',
       'cert/internal/verify_certificate_chain.h',
       'cert/internal/verify_name_match.cc',
       'cert/internal/verify_name_match.h',
@@ skipping 1275 matching lines @@
       'cert/ev_root_ca_metadata_unittest.cc',
       'cert/internal/cert_issuer_source_aia_unittest.cc',
       'cert/internal/cert_issuer_source_static_unittest.cc',
       'cert/internal/certificate_policies_unittest.cc',
       'cert/internal/extended_key_usage_unittest.cc',
       'cert/internal/name_constraints_unittest.cc',
       'cert/internal/nist_pkits_unittest.h',
       'cert/internal/parse_certificate_unittest.cc',
       'cert/internal/parse_name_unittest.cc',
       'cert/internal/parse_ocsp_unittest.cc',
+      'cert/internal/path_builder_pkits_unittest.cc',
+      'cert/internal/path_builder_unittest.cc',
+      'cert/internal/path_builder_verify_certificate_chain_unittest.cc',
       'cert/internal/signature_algorithm_unittest.cc',
       'cert/internal/test_helpers.cc',
       'cert/internal/test_helpers.h',
+      'cert/internal/verify_certificate_chain_pkits_unittest.cc',
+      'cert/internal/verify_certificate_chain_typed_unittest.h',
       'cert/internal/verify_certificate_chain_unittest.cc',
-      'cert/internal/verify_certificate_chain_pkits_unittest.cc',
       'cert/internal/verify_name_match_unittest.cc',
       'cert/internal/verify_signed_data_unittest.cc',
       'cert/jwk_serializer_unittest.cc',
       'cert/merkle_audit_proof_unittest.cc',
       'cert/merkle_tree_leaf_unittest.cc',
       'cert/multi_log_ct_verifier_unittest.cc',
       'cert/multi_threaded_cert_verifier_unittest.cc',
       'cert/nss_cert_database_chromeos_unittest.cc',
       'cert/nss_cert_database_unittest.cc',
       'cert/nss_profile_filter_chromeos_unittest.cc',
@@ skipping 1030 matching lines @@
       'data/verify_certificate_chain_unittest/expired-target.pem',
       'data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem',
       'data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem',
       'data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem',
       'data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem',
       'data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem',
       'data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem',
       'data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem',
       'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal-anchor.pem',
       'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal.pem',
+      'data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem',
+      'data/verify_certificate_chain_unittest/key-rollover-newchain.pem',
+      'data/verify_certificate_chain_unittest/key-rollover-oldchain.pem',
+      'data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem',
       'data/verify_certificate_chain_unittest/non-self-signed-root.pem',
       'data/verify_certificate_chain_unittest/target-and-intermediary.pem',
       'data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem',
       'data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem',
       'data/verify_certificate_chain_unittest/target-not-end-entity.pem',
       'data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem',
       'data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem',
       'data/verify_certificate_chain_unittest/target-signed-with-md5.pem',
       'data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem',
       'data/verify_certificate_chain_unittest/target-wrong-signature.pem',
@@ skipping 686 matching lines @@
       'third_party/nist-pkits/crls/requireExplicitPolicy5subCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy5subsubCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy5subsubsubCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7CACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subCARE2CRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subsubCARE2RE4CRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subsubsubCARE2RE4CRL.crl',
     ],
   }
 }