Mac EV verification using Chrome methods rather than OS methods.

Mac EV verification using Chrome methods rather than OS methods.

Previously we were using some internal/private Mac OS APIs to get the results of OS EV checking, and those APIs stopped providing results on Sierra when we stopped passing the hostname to the OS verification (see crbug/621684). Additionally, it was impossible to unittest the old implementation. The new method is similar to what we do on other platforms, does not depend on OS handling, and can be unittested. Due to OS API limitations, the new method will be less efficient, but that additional inefficiency is limited to sites with EV certs.

BUG=655612
Review-Url: https://codereview.chromium.org/2456523003
Cr-Commit-Position: refs/heads/master@{#431367}
(cherry picked from commit 1a282f54af2ea79cf9aa0b78234e3b4053b4d73b)

Committed: https://chromium.googlesource.com/chromium/src/+/945b76c48334c49d343cd43139418a3ef2298e1b

[mattm, 2016-11-14 23:00:04]

Description was changed from

==========
Mac EV verification using Chrome methods rather than OS methods.

Previously we were using some internal/private Mac OS APIs to get the results of
OS EV checking, and those APIs stopped providing results on Sierra when we
stopped passing the hostname to the OS verification (see crbug/621684).
Additionally, it was impossible to unittest the old implementation. The new
method is similar to what we do on other platforms, does not depend on OS
handling, and can be unittested. Due to OS API limitations, the new method will
be less efficient, but that additional inefficiency is limited to sites with EV
certs.

BUG=655612

Review-Url: https://codereview.chromium.org/2456523003
Cr-Commit-Position: refs/heads/master@{#431367}
(cherry picked from commit 1a282f54af2ea79cf9aa0b78234e3b4053b4d73b)
==========

to

==========
Mac EV verification using Chrome methods rather than OS methods.

Previously we were using some internal/private Mac OS APIs to get the results of
OS EV checking, and those APIs stopped providing results on Sierra when we
stopped passing the hostname to the OS verification (see crbug/621684).
Additionally, it was impossible to unittest the old implementation. The new
method is similar to what we do on other platforms, does not depend on OS
handling, and can be unittested. Due to OS API limitations, the new method will
be less efficient, but that additional inefficiency is limited to sites with EV
certs.

BUG=655612

Review-Url: https://codereview.chromium.org/2456523003
Cr-Commit-Position: refs/heads/master@{#431367}
(cherry picked from commit 1a282f54af2ea79cf9aa0b78234e3b4053b4d73b)

Committed:
https://chromium.googlesource.com/chromium/src/+/945b76c48334c49d343cd4313941...
==========

[mattm, 2016-11-14 23:00:05]

Committed patchset #1 (id:1) manually as
945b76c48334c49d343cd43139418a3ef2298e1b.