Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 539 matching lines @@
       "cert/ct_objects_extractor.cc",
       "cert/ct_objects_extractor.h",
       "cert/ct_sct_to_string.cc",
       "cert/ct_sct_to_string.h",
       "cert/ct_serialization.cc",
       "cert/ct_serialization.h",
       "cert/ct_signed_certificate_timestamp_log_param.cc",
       "cert/ct_signed_certificate_timestamp_log_param.h",
       "cert/ev_root_ca_metadata.cc",
       "cert/ev_root_ca_metadata.h",
-      "cert/internal/cert_issuer_source_nss.cc",
-      "cert/internal/cert_issuer_source_nss.h",
       "cert/internal/system_trust_store.cc",
       "cert/internal/system_trust_store.h",
       "cert/internal/trust_store_mac.cc",
       "cert/internal/trust_store_mac.h",
       "cert/internal/trust_store_nss.cc",
       "cert/internal/trust_store_nss.h",
       "cert/jwk_serializer.cc",
       "cert/jwk_serializer.h",
       "cert/merkle_audit_proof.cc",
       "cert/merkle_audit_proof.h",
@@ skipping 1224 matching lines @@
       ]
     }
 
     if (use_gio) {
       deps += [ "//build/linux/libgio" ]
     }
 
     if (!use_nss_certs) {
       sources -= [
         "cert/cert_database_nss.cc",
-        "cert/internal/cert_issuer_source_nss.cc",
-        "cert/internal/cert_issuer_source_nss.h",
         "cert/internal/trust_store_nss.cc",
         "cert/internal/trust_store_nss.h",
         "cert/nss_cert_database.cc",
         "cert/nss_cert_database.h",
         "cert/x509_certificate_nss.cc",
         "ssl/client_cert_store_nss.cc",
         "ssl/client_cert_store_nss.h",
         "third_party/mozilla_security_manager/nsNSSCertificateDB.cpp",
         "third_party/mozilla_security_manager/nsNSSCertificateDB.h",
         "third_party/mozilla_security_manager/nsPKCS12Blob.cpp",
@@ skipping 2390 matching lines @@
     "cert/cert_verify_proc_whitelist_unittest.cc",
     "cert/crl_set_unittest.cc",
     "cert/ct_known_logs_unittest.cc",
     "cert/ct_log_response_parser_unittest.cc",
     "cert/ct_log_verifier_unittest.cc",
     "cert/ct_objects_extractor_unittest.cc",
     "cert/ct_policy_enforcer_unittest.cc",
     "cert/ct_serialization_unittest.cc",
     "cert/ev_root_ca_metadata_unittest.cc",
     "cert/internal/cert_issuer_source_aia_unittest.cc",
-    "cert/internal/cert_issuer_source_nss_unittest.cc",
     "cert/internal/cert_issuer_source_static_unittest.cc",
     "cert/internal/cert_issuer_source_sync_unittest.h",
     "cert/internal/certificate_policies_unittest.cc",
     "cert/internal/extended_key_usage_unittest.cc",
     "cert/internal/name_constraints_unittest.cc",
     "cert/internal/nist_pkits_unittest.h",
     "cert/internal/parse_certificate_unittest.cc",
     "cert/internal/parse_name_unittest.cc",
     "cert/internal/parse_ocsp_unittest.cc",
     "cert/internal/parsed_certificate_unittest.cc",
@@ skipping 739 matching lines @@
   if (is_chromeos) {
     sources -= [ "proxy/proxy_config_service_linux_unittest.cc" ]
   }
 
   if (!is_proto_quic && v8_use_external_startup_data) {
     deps += [ "//gin" ]
   }
 
   if (!use_nss_certs) {
     sources -= [
-      "cert/internal/cert_issuer_source_nss_unittest.cc",
       "cert/internal/trust_store_nss_unittest.cc",
       "cert/nss_cert_database_unittest.cc",
       "ssl/client_cert_store_nss_unittest.cc",
       "ssl/ssl_platform_key_nss_unittest.cc",
     ]
     if (is_chromeos) {  # Already removed for all non-ChromeOS builds.
       sources -= [
         "cert/nss_cert_database_chromeos_unittest.cc",
         "cert/nss_profile_filter_chromeos_unittest.cc",
       ]
@@ skipping 805 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }