Try #2: CertVerifyProcMac: Add Keychain re-ordering hack, check CRLsets in path pruning loop.

net/net.gypi

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This file is shared between the regular GYP build, the NaCl GYP build, and
 # the GN build. For GN support, it must have no conditionals or anything like
 # that beyond the simple one-level-deep dictionary of values.
 {
   'variables': {
     # Subset of net source files that are compiled for NaCl (net_nacl target).
@@ skipping 432 matching lines @@
       'cert/multi_log_ct_verifier.cc',
       'cert/multi_log_ct_verifier.h',
       'cert/multi_threaded_cert_verifier.cc',
       'cert/multi_threaded_cert_verifier.h',
       'cert/nss_cert_database.cc',
       'cert/nss_cert_database.h',
       'cert/nss_cert_database_chromeos.cc',
       'cert/nss_cert_database_chromeos.h',
       'cert/nss_profile_filter_chromeos.cc',
       'cert/nss_profile_filter_chromeos.h',
+      'cert/test_keychain_search_list_mac.cc',
+      'cert/test_keychain_search_list_mac.h',
       'cert/test_root_certs.cc',
       'cert/test_root_certs.h',
       'cert/test_root_certs_android.cc',
       'cert/test_root_certs_mac.cc',
       'cert/test_root_certs_nss.cc',
       'cert/test_root_certs_openssl.cc',
       'cert/test_root_certs_win.cc',
       'cert/x509_cert_types_mac.cc',
       'cert/x509_cert_types_win.cc',
       'cert/x509_certificate_ios.cc',
@@ skipping 2770 matching lines @@
       'third_party/nist-pkits/crls/requireExplicitPolicy5subCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy5subsubCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy5subsubsubCACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7CACRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subCARE2CRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subsubCARE2RE4CRL.crl',
       'third_party/nist-pkits/crls/requireExplicitPolicy7subsubsubCARE2RE4CRL.crl',
     ],
   }
 }