Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/cert/cert_verify_proc_builtin.cc

 // Copyright (c) 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_builtin.h"
 
 #include <string>
 #include <vector>
 
 #include "base/logging.h"
@@ skipping 218 matching lines @@
     verify_result->cert_status |= CERT_STATUS_DATE_INVALID;
     return;
   }
 
   // Initialize the path builder.
   CertPathBuilder::Result result;
   CertPathBuilder path_builder(target, ssl_trust_store->GetTrustStore(),
                                &signature_policy, verification_time,
                                KeyPurpose::SERVER_AUTH, &result);
 
-  // Allow the path builder to discover intermediates from the trust store.
-  if (ssl_trust_store->GetCertIssuerSource())
-    path_builder.AddCertIssuerSource(ssl_trust_store->GetCertIssuerSource());
-
   // Allow the path builder to discover the explicitly provided intermediates in
   // |input_cert|.
   CertIssuerSourceStatic intermediates;
   AddIntermediatesToIssuerSource(input_cert, &intermediates);
   path_builder.AddCertIssuerSource(&intermediates);
 
   // TODO(crbug.com/649017): Allow the path builder to discover intermediates
   // through AIA fetching.
 
   path_builder.Run();
@@ skipping 58 matching lines @@
              : OK;
 }
 
 }  // namespace
 
 scoped_refptr<CertVerifyProc> CreateCertVerifyProcBuiltin() {
   return scoped_refptr<CertVerifyProc>(new CertVerifyProcBuiltin());
 }
 
 }  // namespace net