Only depend on NSS in one place.

net/BUILD.gn

Index: net/BUILD.gn
diff --git a/net/BUILD.gn b/net/BUILD.gn
index 05da14c455c4adfbe96f9cd170fde82970530899..4a5dec4126ed378129e81d7997e75d28072c9136 100644
--- a/net/BUILD.gn
+++ b/net/BUILD.gn
@@ -460,10 +460,6 @@ component("net") {
       "udp/udp_socket_libevent.cc",
       "udp/udp_socket_libevent.h",
     ]
-    deps += [
-      "//third_party/nss:nspr",
-      "//third_party/nss",
-    ]

[davidben, 2014/09/23 00:48:38]

These and similar are redundant with the //crypto:platform dependency.

   } else {  # !is_win
     sources -= [
       "base/winsock_init.cc",
@@ -476,10 +472,6 @@ component("net") {
   }
 
   if (is_mac) {
-    deps += [
-      "//third_party/nss:nspr",
-      "//third_party/nss",
-    ]
     libs = [
       "Foundation.framework",
       "Security.framework",
@@ -509,9 +501,6 @@ component("net") {
     set_sources_assignment_filter(sources_assignment_filter)
 
     sources -= [ "disk_cache/blockfile/file_posix.cc" ]
-    deps += [
-      "//third_party/nss",
-    ]
     libs = [
       "CFNetwork.framework",
       "MobileCoreServices.framework",
@@ -708,8 +697,8 @@ source_set("test_support") {
     "//url",
   ]
 
-  if (is_ios) {
-    deps += [ "//third_party/nss" ]
+  if (!use_openssl && (use_nss_certs || is_ios)) {

[davidben, 2014/09/23 00:48:38]

net/cert/ev_root_ca_metadata.cc

+    deps += ["//crypto:platform" ]
   }
 
   if (!is_android) {
@@ -732,9 +721,7 @@ source_set("test_support") {
     ]
   }
 
-  if (use_nss_certs) {
-    deps += ["//crypto:platform" ]
-  } else {
+  if (!use_nss_certs) {
     sources -= [
       "test/cert_test_util_nss.cc",
     ]