3 files changed, 11 insertions, 9 deletions
diff --git a/net/base/asn1_util.h b/net/base/asn1_util.h
index 904d7a5..ea6277a 100644
--- a/net/base/asn1_util.h
+++ b/net/base/asn1_util.h
@@ -66,8 +66,9 @@ NET_TEST bool ExtractSPKIFromDERCert(base::StringPiece cert,
 // The nested set of GeneralNames is flattened into a single list because
 // having several CRLs with one location is equivalent to having one CRL with
 // several locations as far as a CRL filter is concerned.
-bool ExtractCRLURLsFromDERCert(base::StringPiece cert,
-                               std::vector<base::StringPiece>* urls_out);
+NET_TEST bool ExtractCRLURLsFromDERCert(
+    base::StringPiece cert,
+    std::vector<base::StringPiece>* urls_out);
 
 } // namespace asn1
 
diff --git a/net/base/crl_filter.h b/net/base/crl_filter.h
index 3b51d4c..0b54628 100644
--- a/net/base/crl_filter.h
+++ b/net/base/crl_filter.h
@@ -11,10 +11,11 @@
 #include <utility>
 #include <vector>
 
-#include <base/memory/ref_counted.h>
-#include <base/memory/scoped_ptr.h>
-#include <base/string_piece.h>
-#include <base/synchronization/lock.h>
+#include "base/memory/ref_counted.h"
+#include "base/memory/scoped_ptr.h"
+#include "base/string_piece.h"
+#include "base/synchronization/lock.h"
+#include "net/base/net_api.h"
 
 class DictionaryValue;
 
@@ -30,7 +31,7 @@ class GolombCompressedSet;
 // a firm "not revoked" answer or a probabilistic "revoked" answer.
 // Additionally, a CRLFilter can contain a list of blocked public keys and, in
 // that case, it can give a firm "revoked" answer.
-class CRLFilter : public base::RefCounted<CRLFilter> {
+class NET_TEST CRLFilter : public base::RefCounted<CRLFilter> {
  public:
   enum Result {
     REVOKED,  // the certificate should be rejected.
diff --git a/net/base/dnssec_chain_verifier.h b/net/base/dnssec_chain_verifier.h
index 0c8c024..630be5f 100644
--- a/net/base/dnssec_chain_verifier.h
+++ b/net/base/dnssec_chain_verifier.h
@@ -103,7 +103,7 @@ class NET_TEST DNSSECChainVerifier {
 // Authority Authorization records. These are DNS records which can express
 // limitations regarding acceptable certificates for a domain. See
 // http://tools.ietf.org/html/draft-hallambaker-donotissue-04
-class DnsCAARecord {
+class NET_TEST DnsCAARecord {
  public:
   enum ParseResult {
     SUCCESS,  // parse successful.
@@ -115,7 +115,7 @@ class DnsCAARecord {
   // A CAAPolicy is the result of parsing a set of CAA records. It describes a
   // number of properies of certificates in a chain, any of which is sufficient
   // to validate the chain.
-  struct Policy {
+  struct NET_TEST Policy {
    public:
     Policy();
     ~Policy();