CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop.

net/data/ssl/certificates/README

Index: net/data/ssl/certificates/README
diff --git a/net/data/ssl/certificates/README b/net/data/ssl/certificates/README
index 079fdbecac5473b096c365d7f5cca8551a9f63ab..168f1acadcfb59b03c26abcd1a8e4e1da56ac527 100644
--- a/net/data/ssl/certificates/README
+++ b/net/data/ssl/certificates/README
@@ -58,6 +58,15 @@ unit tests.
 - twitter-chain.pem : A certificate chain for twitter.com which should be
      valid. Expires May 9 2016.
 
+- tripadvisor-verisign-chain.pem: A certificate chain for www.tripadvisor.com
+  issued by VeriSign Class 3 Public Primary Certification Authority - G5.
+  Expires Apr 2 2018.
+- verisign_class3_g5_crosssigned.pem: The SHA1 cross-signed version of
+  VeriSign Class 3 Public Primary Certification Authority - G5
+- verisign_class3_g5_crosssigned-trusted.keychain: OSX Keychain set to Always
+  Trust the certificate in verisign_class3_g5_crosssigned.pem (Generated by
+  scripts/generate-verisign_class3_g5_crosssigned-trusted-keychain.sh)
+
 ===== Manually generated certificates
 - client.p12 : A PKCS #12 file containing a client certificate and a private
      key created for testing.  The password is "12345".
@@ -260,6 +269,10 @@ unit tests.
      interfere with the chain_verify_callback used by CertVerifyProcChromeOS.
      See CertVerifyProcChromeOSTest.
 
+===== From net/data/ssl/scripts/generate-multi-root-BFE-keychain.sh
+- multi-root-BFE.keychain: An OSX Keychain containing the generated
+  certificates "multi-root-B-by-F.pem" and "multi-root-F-by-E.pem".
+
 ===== From net/data/ssl/scripts/generate-duplicate-cn-certs.sh
 - duplicate_cn_1.p12
 - duplicate_cn_1.pem