Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/cert/internal/trust_store_mac_unittest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/internal/trust_store_mac.h"
 
 #include "base/base_paths.h"
 #include "base/files/file_util.h"
 #include "base/files/scoped_temp_dir.h"
 #include "base/path_service.h"
@@ skipping 178 matching lines @@
         SecCertificateArrayAsDER(scoped_matching_items),
         UnorderedElementsAreArray(ParsedCertificateListAsDER({e_by_e})));
   }
 
   // None of the certs should return any matching TrustAnchors, since the test
   // certs in the keychain aren't trusted (unless someone manually added and
   // trusted the test certs on the machine the test is being run on).
   for (const auto& cert :
        {a_by_b, b_by_c, b_by_f, c_by_d, c_by_e, f_by_e, d_by_d, e_by_e}) {
     TrustAnchors matching_anchors;
-    trust_store.FindTrustAnchorsForCert(cert, &matching_anchors);
+    ParsedCertificateList matching_intermediates;
+    trust_store.FindIssuers(cert, &matching_anchors, &matching_intermediates);
     EXPECT_EQ(0u, matching_anchors.size());
   }
 }
 
 // Test against all the certificates in the default keychains. Confirms that
 // the computed trust value matches that of SecTrustEvaluate.
 TEST(TrustStoreMacTest, SystemCerts) {
   // Get the list of all certificates in the user & system keychains.
   // This may include both trusted and untrusted certificates.
   //
@@ skipping 100 matching lines @@
       bool expected_trust_anchor =
           ((trust_result == kSecTrustResultProceed) ||
            (trust_result == kSecTrustResultUnspecified)) &&
           (SecTrustGetCertificateCount(trust) == 1);
       EXPECT_EQ(expected_trust_anchor, is_trust_anchor);
     }
   }
 }
 
 }  // namespace net