Don't run certificate algorithm mismatch tests on Sierra or later.

net/cert/cert_verify_proc_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc.h"
 
 #include <vector>
 
 #include "base/callback_helpers.h"
 #include "base/files/file_path.h"
@@ skipping 624 matching lines @@
       DigestAlgorithm::Sha384;
 
   struct CertParams {
     // Certificate.signatureAlgorithm
     DigestAlgorithm cert_algorithm;
 
     // TBSCertificate.algorithm
     DigestAlgorithm tbs_algorithm;
   };
 
   // On iOS trying to import a certificate with mismatched signature will

[eroman, 2017/03/14 06:35:02]

Can you update this comment?

[eroman, 2017/03/14 07:15:55]

(FTR, I checked the commit box before you could respond to this comment)

   // fail. Consequently the rest of the tests can't be performed.
   WARN_UNUSED_RESULT bool SupportsImportingMismatchedAlgorithms() const {
 #if defined(OS_IOS)
     LOG(INFO) << "Skipping test on iOS because certs with mismatched "
                  "algorithms cannot be imported";
     return false;
+#elif defined(OS_MACOSX)
+    if (base::mac::IsAtLeastOS10_12()) {
+      LOG(INFO) << "Skipping test on macOS >= 10.12 because certs with "
+                   "mismatched algorithms cannot be imported";
+      return false;
+    }
+    return true;
 #else
     return true;
 #endif
   }
 
   // Shorthand for VerifyChain() where only the leaf's parameters need
   // to be specified.
   WARN_UNUSED_RESULT int VerifyLeaf(const CertParams& leaf_params) {
     return VerifyChain({// Target
                         leaf_params,
@@ skipping 1648 matching lines @@
   int flags = 0;
   CertVerifyResult verify_result;
   int error = verify_proc->Verify(cert.get(), "127.0.0.1", std::string(), flags,
                                   NULL, CertificateList(), &verify_result);
   EXPECT_EQ(OK, error);
   histograms.ExpectTotalCount(kTLSFeatureExtensionHistogram, 0);
   histograms.ExpectTotalCount(kTLSFeatureExtensionOCSPHistogram, 0);
 }
 
 }  // namespace net