Mac: Use SecPolicyCreateSSL instead of CreatePolicy(&CSSMOID_APPLE_TP_SSL, ...)

Mac: Use SecPolicyCreateSSL instead of CreatePolicy(&CSSMOID_APPLE_TP_SSL, ...)

Fixes client cert selector not showing client certs that were not directly
issued by the specified root(s) on Sierra.

Also use SecPolicyCreateBasicX509 instead of CreatePolicy(&CSSMOID_APPLE_X509_BASIC, ...).
(Should have no effect, but may be safer / more future-proof.)

BUG=649953
Review-Url: https://codereview.chromium.org/2373533003
Cr-Commit-Position: refs/heads/master@{#421598}
(cherry picked from commit 9d33bc396faca1d6d017ed22894197e51c16d6e5)

Committed: https://chromium.googlesource.com/chromium/src/+/7f6568a8aca70454edfa9c2c72c3ab2eed2b83d8

[mattm, 2016-09-30 21:06:13]

Description was changed from

==========
Mac: Use SecPolicyCreateSSL instead of CreatePolicy(&CSSMOID_APPLE_TP_SSL, ...)

Fixes client cert selector not showing client certs that were not directly
issued by the specified root(s) on Sierra.

Also use SecPolicyCreateBasicX509 instead of
CreatePolicy(&CSSMOID_APPLE_X509_BASIC, ...).
(Should have no effect, but may be safer / more future-proof.)

BUG=649953

Review-Url: https://codereview.chromium.org/2373533003
Cr-Commit-Position: refs/heads/master@{#421598}
(cherry picked from commit 9d33bc396faca1d6d017ed22894197e51c16d6e5)
==========

to

==========
Mac: Use SecPolicyCreateSSL instead of CreatePolicy(&CSSMOID_APPLE_TP_SSL, ...)

Fixes client cert selector not showing client certs that were not directly
issued by the specified root(s) on Sierra.

Also use SecPolicyCreateBasicX509 instead of
CreatePolicy(&CSSMOID_APPLE_X509_BASIC, ...).
(Should have no effect, but may be safer / more future-proof.)

BUG=649953

Review-Url: https://codereview.chromium.org/2373533003
Cr-Commit-Position: refs/heads/master@{#421598}
(cherry picked from commit 9d33bc396faca1d6d017ed22894197e51c16d6e5)

Committed:
https://chromium.googlesource.com/chromium/src/+/7f6568a8aca70454edfa9c2c72c3...
==========

[mattm, 2016-09-30 21:06:14]

Committed patchset #1 (id:1) manually as
7f6568a8aca70454edfa9c2c72c3ab2eed2b83d8.