Some of the calls to SecTrustEvaluate (in particular the one in ResourceResponseCocoa) are not made with a corresponding call to SecTrustSetClientAuditToken. As a result, if trustd ends up making a network request to fulfill that API request (e.g. for OCSP verification), the corresponding network request is misattributed to NetworkProcess rather than the UIProcess. To fix this, we add a call to SecTrustSetClientAuditToken in ResourceResponse::platformCertificateInfo.
rdar://91322555
Pull request: https://github.com/WebKit/WebKit/pull/1335
Committed r295357 (251366@main): <https://commits.webkit.org/251366@main> Reviewed commits have been landed. Closing PR #1335 and removing active labels.