Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/cert/internal/trust_store_mac.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/trust_store_mac.h"
 
 #include <Security/Security.h>
 
 #include "base/logging.h"
 #include "base/mac/foundation_util.h"
@@ skipping 209 matching lines @@
 
 }  // namespace
 
 TrustStoreMac::TrustStoreMac(CFTypeRef policy_oid)
     : policy_oid_(base::mac::CFCastStrict<CFStringRef>(policy_oid)) {
   DCHECK(policy_oid_);
 }
 
 TrustStoreMac::~TrustStoreMac() = default;
 
-void TrustStoreMac::FindTrustAnchorsForCert(
-    const scoped_refptr<ParsedCertificate>& cert,
-    TrustAnchors* out_anchors) const {
+void TrustStoreMac::FindIssuers(const scoped_refptr<ParsedCertificate>& cert,
+                                TrustAnchors* trust_anchors,
+                                ParsedCertificateList* intermediates) const {
   base::ScopedCFTypeRef<CFDataRef> name_data = GetMacNormalizedIssuer(cert);
 
-  FindTrustAnchorsByMacNormalizedSubject(name_data, out_anchors);
+  FindTrustAnchorsByMacNormalizedSubject(name_data, trust_anchors);
+  // TODO(eroman): Look for intermediates.
+}
+
+bool TrustStoreMac::IsBlacklisted(
+    const scoped_refptr<ParsedCertificate>& cert) const {
+  return false;
+  // TODO(eroman): Implement.
 }
 
 // static
 base::ScopedCFTypeRef<CFArrayRef>
 TrustStoreMac::FindMatchingCertificatesForMacNormalizedSubject(
     CFDataRef name_data) {
   base::ScopedCFTypeRef<CFArrayRef> matching_items;
   base::ScopedCFTypeRef<CFMutableDictionaryRef> query(
       CFDictionaryCreateMutable(nullptr, 0, &kCFTypeDictionaryKeyCallBacks,
                                 &kCFTypeDictionaryValueCallBacks));
@@ skipping 96 matching lines @@
   base::ScopedCFTypeRef<CFArrayRef> scoped_matching_items =
       FindMatchingCertificatesForMacNormalizedSubject(name_data);
   if (!scoped_matching_items)
     return;
 
   FilterTrustedCertificates(scoped_matching_items.get(), policy_oid_,
                             out_anchors);
 }
 
 }  // namespace net