Fix official build in GN

crypto/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/crypto.gni")
 import("//testing/test.gni")
 
 component("crypto") {
   output_name = "crcrypto"  # Avoid colliding with OpenSSL's libcrypto.
   sources = [
@@ skipping 268 matching lines @@
   if (!is_chromeos) {
     sources -= [
       "scoped_test_nss_chromeos_user.cc",
       "scoped_test_nss_chromeos_user.h",
       "scoped_test_system_nss_key_slot.cc",
       "scoped_test_system_nss_key_slot.h",
     ]
   }
 }
 
+config("platform_config") {
+  if (!use_openssl && is_clang) {
+    # There is a broken header guard in /usr/include/nss/secmod.h:
+    # https://bugzilla.mozilla.org/show_bug.cgi?id=884072
+    cflags = [ "-Wno-header-guard" ]
+  }
+}
+
 # This is a meta-target that forwards to NSS's SSL library or OpenSSL,
 # according to the state of the crypto flags. A target just wanting to depend
 # on the current SSL library should just depend on this.
 group("platform") {
   if (use_openssl) {
     deps = [
       "//third_party/boringssl",
     ]
   } else {
     deps = [
       "//net/third_party/nss/ssl:libssl",
     ]
     if (is_linux) {
       # On Linux, we use the system NSS (excepting SSL where we always use our
       # own).
       #
       # We always need our SSL header search path to come before the system one
       # so our versions are used. The libssl target will add the search path we
       # want, but according to GN's ordering rules, public_configs' search path
       # will get applied before ones inherited from our dependencies.
       # Therefore, we need to explicitly list our custom libssl's config here
       # before the system one.
       public_configs = [
+        ":platform_config",
         "//net/third_party/nss/ssl:ssl_config",
         "//third_party/nss:system_nss_no_ssl_config",
       ]
     } else {
       # Non-Linux platforms use the hermetic NSS from the tree.
       deps += [
         "//third_party/nss:nspr",
         "//third_party/nss:nss",
       ]
     }
   }
 }