Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/BUILD.gn

Index: net/BUILD.gn
diff --git a/net/BUILD.gn b/net/BUILD.gn
index b2e1f4d7b016c5c51689dd0a885c61a9ae7663cd..b84840874981ade5c583efd3dbc57c461870f959 100644
--- a/net/BUILD.gn
+++ b/net/BUILD.gn
@@ -557,8 +557,6 @@ component("net") {
       "cert/ct_signed_certificate_timestamp_log_param.h",
       "cert/ev_root_ca_metadata.cc",
       "cert/ev_root_ca_metadata.h",
-      "cert/internal/cert_issuer_source_nss.cc",
-      "cert/internal/cert_issuer_source_nss.h",
       "cert/internal/system_trust_store.cc",
       "cert/internal/system_trust_store.h",
       "cert/internal/trust_store_mac.cc",
@@ -1803,8 +1801,6 @@ component("net") {
     if (!use_nss_certs) {
       sources -= [
         "cert/cert_database_nss.cc",
-        "cert/internal/cert_issuer_source_nss.cc",
-        "cert/internal/cert_issuer_source_nss.h",
         "cert/internal/trust_store_nss.cc",
         "cert/internal/trust_store_nss.h",
         "cert/nss_cert_database.cc",
@@ -4215,7 +4211,6 @@ test("net_unittests") {
     "cert/ct_serialization_unittest.cc",
     "cert/ev_root_ca_metadata_unittest.cc",
     "cert/internal/cert_issuer_source_aia_unittest.cc",
-    "cert/internal/cert_issuer_source_nss_unittest.cc",
     "cert/internal/cert_issuer_source_static_unittest.cc",
     "cert/internal/cert_issuer_source_sync_unittest.h",
     "cert/internal/certificate_policies_unittest.cc",
@@ -4975,7 +4970,6 @@ test("net_unittests") {
 
   if (!use_nss_certs) {
     sources -= [
-      "cert/internal/cert_issuer_source_nss_unittest.cc",
       "cert/internal/trust_store_nss_unittest.cc",
       "cert/nss_cert_database_unittest.cc",
       "ssl/client_cert_store_nss_unittest.cc",