Don't treat trust anchors as certificates during path building.

net/cert/internal/path_builder_verify_certificate_chain_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/path_builder.h"
 
 #include "net/cert/internal/cert_issuer_source_static.h"
 #include "net/cert/internal/signature_policy.h"
 #include "net/cert/internal/trust_store.h"
 #include "net/cert/internal/verify_certificate_chain_typed_unittest.h"
 
 namespace net {
 
 namespace {
 
 class PathBuilderDelegate {
  public:
   static void Verify(const ParsedCertificateList& chain,
-                     const ParsedCertificateList& roots,
+                     const TrustAnchors& anchors,
                      const der::GeneralizedTime& time,
                      bool expected_result) {
     SimpleSignaturePolicy signature_policy(1024);
     ASSERT_FALSE(chain.empty());
 
     TrustStore trust_store;
-    for (const auto& root : roots)
-      trust_store.AddTrustedCertificate(root);
+    for (const auto& anchor : anchors)
+      trust_store.AddTrustAnchor(anchor);
 
     CertIssuerSourceStatic intermediate_cert_issuer_source;
     for (size_t i = 1; i < chain.size(); ++i)
       intermediate_cert_issuer_source.AddCert(chain[i]);
 
     CertPathBuilder::Result result;
     // First cert in the |chain| is the target.
     CertPathBuilder path_builder(chain.front(), &trust_store, &signature_policy,
                                  time, &result);
     path_builder.AddCertIssuerSource(&intermediate_cert_issuer_source);
 
     CompletionStatus rv = path_builder.Run(base::Closure());
     EXPECT_EQ(CompletionStatus::SYNC, rv);
 
     EXPECT_EQ(expected_result, result.is_success());
   }
 };
 
 }  // namespace
 
 INSTANTIATE_TYPED_TEST_CASE_P(PathBuilder,
                               VerifyCertificateChainSingleRootTest,
                               PathBuilderDelegate);
 
 INSTANTIATE_TYPED_TEST_CASE_P(PathBuilder,
                               VerifyCertificateChainNonSingleRootTest,
                               PathBuilderDelegate);
 
 }  // namespace net