Fix the Bazel build

The good news is we now have a way to test mistakes in the header lists
standalone. The bad news is we don't run it on CI.

Change-Id: Ie9e6efeb7922374efa38f8e4e8aab85174424f26
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/68469
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>

MODULE.bazel.lock

diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index 7ac13bb..93be303 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -1375,7 +1375,7 @@
     },
     "@@rules_foreign_cc~//foreign_cc:extensions.bzl%ext": {
       "general": {
-        "bzlTransitiveDigest": "QbxK92//k6c63fpMer2Lkk6224s9gwYoVFFS6mdkucI=",
+        "bzlTransitiveDigest": "0/GTFp9D0gb6hOu9jXXnaWa5hPbzPpIzLVxITdJTwvo=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
         "envVariables": {},
@@ -1646,7 +1646,7 @@
     },
     "@@rules_java~//java:extensions.bzl%toolchains": {
       "general": {
-        "bzlTransitiveDigest": "tJHbmWnq7m+9eUBnUdv7jZziQ26FmcGL9C5/hU3Q9UQ=",
+        "bzlTransitiveDigest": "0N5b5J9fUzo0sgvH4F3kIEaeXunz4Wy2/UtSFV/eXUY=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
         "envVariables": {},
@@ -2151,7 +2151,7 @@
     },
     "@@rules_python~//python/extensions:python.bzl%python": {
       "general": {
-        "bzlTransitiveDigest": "o0WIKfdQRSZd/9+sY+LDTrUuYozMBFuYsL85uwJYKk8=",
+        "bzlTransitiveDigest": "hcJ2K4XvZ3hi0G4g5MkUEs8xowZlCfrgq3JX4dyipWY=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
         "envVariables": {},

build.json

diff --git a/build.json b/build.json
index f2c1ac9..f8948fb 100644
--- a/build.json
+++ b/build.json
@@ -478,7 +478,6 @@
             "crypto/bytestring/internal.h",
             "crypto/chacha/internal.h",
             "crypto/cipher_extra/internal.h",
-            "crypto/conf/conf_def.h",
             "crypto/conf/internal.h",
             "crypto/cpu_arm_linux.h",
             "crypto/curve25519/curve25519_tables.h",
@@ -610,6 +609,7 @@
         "hdrs": [
             "include/openssl/pki/certificate.h",
             "include/openssl/pki/signature_verify_cache.h",
+            "include/openssl/pki/verify.h",
             "include/openssl/pki/verify_error.h"
         ],
         "internal_hdrs": [

gen/sources.bzl

diff --git a/gen/sources.bzl b/gen/sources.bzl
index 86f2cbe..6903427 100644
--- a/gen/sources.bzl
+++ b/gen/sources.bzl
@@ -582,7 +582,6 @@
   "crypto/bytestring/internal.h",
   "crypto/chacha/internal.h",
   "crypto/cipher_extra/internal.h",
-  "crypto/conf/conf_def.h",
   "crypto/conf/internal.h",
   "crypto/cpu_arm_linux.h",
   "crypto/curve25519/curve25519_tables.h",
@@ -1070,6 +1069,7 @@
 pki_headers = [
   "include/openssl/pki/certificate.h",
   "include/openssl/pki/signature_verify_cache.h",
+  "include/openssl/pki/verify.h",
   "include/openssl/pki/verify_error.h",
 ]
 

gen/sources.cmake

diff --git a/gen/sources.cmake b/gen/sources.cmake
index 9d15ef0..d7e1e74 100644
--- a/gen/sources.cmake
+++ b/gen/sources.cmake
@@ -600,7 +600,6 @@
   crypto/bytestring/internal.h
   crypto/chacha/internal.h
   crypto/cipher_extra/internal.h
-  crypto/conf/conf_def.h
   crypto/conf/internal.h
   crypto/cpu_arm_linux.h
   crypto/curve25519/curve25519_tables.h
@@ -1106,6 +1105,7 @@
 
   include/openssl/pki/certificate.h
   include/openssl/pki/signature_verify_cache.h
+  include/openssl/pki/verify.h
   include/openssl/pki/verify_error.h
 )
 

gen/sources.json

diff --git a/gen/sources.json b/gen/sources.json
index 86da01d..5d96a60 100644
--- a/gen/sources.json
+++ b/gen/sources.json
@@ -564,7 +564,6 @@
       "crypto/bytestring/internal.h",
       "crypto/chacha/internal.h",
       "crypto/cipher_extra/internal.h",
-      "crypto/conf/conf_def.h",
       "crypto/conf/internal.h",
       "crypto/cpu_arm_linux.h",
       "crypto/curve25519/curve25519_tables.h",
@@ -1051,6 +1050,7 @@
     "hdrs": [
       "include/openssl/pki/certificate.h",
       "include/openssl/pki/signature_verify_cache.h",
+      "include/openssl/pki/verify.h",
       "include/openssl/pki/verify_error.h"
     ],
     "internal_hdrs": [