Don't treat trust anchors as certificates during path building.

components/cast_certificate/cast_crl_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/time/time.h"
 #include "components/cast_certificate/cast_cert_validator.h"
 #include "components/cast_certificate/cast_cert_validator_test_helpers.h"
 #include "components/cast_certificate/cast_crl.h"
 #include "components/cast_certificate/proto/test_suite.pb.h"
 #include "net/cert/internal/trust_store.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace cast_certificate {
 namespace {
 
 // Creates a trust store using the test roots encoded in the PEM file at |path|.
 std::unique_ptr<net::TrustStore> CreateTrustStoreFromFile(
     const std::string& path) {
   std::unique_ptr<net::TrustStore> trust_store(new net::TrustStore());
   const auto trusted_test_roots =
       cast_certificate::testing::ReadCertificateChainFromFile(path);
   for (const auto& trusted_root : trusted_test_roots) {
-    scoped_refptr<net::ParsedCertificate> anchor(
+    scoped_refptr<net::ParsedCertificate> cert(
         net::ParsedCertificate::CreateFromCertificateCopy(trusted_root, {}));
-    EXPECT_TRUE(anchor);
-    trust_store->AddTrustedCertificate(std::move(anchor));
+    EXPECT_TRUE(cert);
+    auto anchor =
+        net::TrustAnchor::CreateFromCertificateNoConstraints(std::move(cert));
+    trust_store->AddTrustAnchor(std::move(anchor));
   }
   return trust_store;
 }
 
 // Converts uint64_t unix timestamp in seconds to base::Time.
 base::Time ConvertUnixTimestampSeconds(uint64_t time) {
   return base::Time::UnixEpoch() +
          base::TimeDelta::FromMilliseconds(time * 1000);
 }
 
@@ skipping 209 matching lines @@
   }
 }
 
 TEST(CastCertificateTest, TestSuite1) {
   RunTestSuite("testsuite/testsuite1.pb");
 }
 
 }  // namespace
 
 }  // namespace cast_certificate