Try #2: CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop.

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 1372 matching lines @@
     deps += [
       ":epoll_quic_tools",
       ":epoll_server",
     ]
   }
 
   if (is_mac || is_ios) {
     sources += gypi_values.net_base_test_mac_ios_sources
   }
 
+  if (is_mac) {
+    libs = [ "Security.framework" ]
+  }
+
   if (is_chromeos) {
     sources -= [ "proxy/proxy_config_service_linux_unittest.cc" ]
   }
 
   if (v8_use_external_startup_data) {
     deps += [ "//gin" ]
   }
 
   if (!use_nss_certs) {
     sources -= [
@@ skipping 645 matching lines @@
   sources = [
     "http/http_auth_challenge_tokenizer_fuzzer.cc",
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
 }