CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop.

net/BUILD.gn

Index: net/BUILD.gn
diff --git a/net/BUILD.gn b/net/BUILD.gn
index 7d25dd2c881af5b525c387df08842777bbdd1b4a..b9448041d38c6c5dc06576199e44963a71f1b5f2 100644
--- a/net/BUILD.gn
+++ b/net/BUILD.gn
@@ -1470,6 +1470,10 @@ test("net_unittests") {
     sources += gypi_values.net_base_test_mac_ios_sources
   }
 
+  if (is_mac) {
+    libs = [ "Security.framework" ]

[Ryan Sleevi, 2016/08/12 19:50:17]

I thought we also needed to add Foundation.framework (because of CFArray)?

[mattm, 2016/08/16 01:41:34]

I think this is okay since the cert_verify_proc_unittest.cc doesn't use CFArray,
only SecKeychainRef.

test_keychain_search_list_mac and cert_verify_proc_mac use CFArray, but those
are in net (rather than net_unittests) and net already has both
Foundation.framework and Security.framework.

+  }
+
   if (is_chromeos) {
     sources -= [ "proxy/proxy_config_service_linux_unittest.cc" ]
   }