This directory contains a script to generate the content of rtc_base/ssl_roots.h, to update the SSL roots shipped by WebRTC follow this instructions:
Download roots.pem from pki.goog.
Launch the script:
$ python tools_webrtc/sslroots/generate_sslroots.py roots.pem
Step 2 should have generated an ssl_roots.h file right next to roots.pem.
Open rtc_base/ssl_roots.h, manually remove the old certificates and paste the ones from the ssl_roots.h file.
Delete the generated ssl_roots.h and roots.pem before creating the CL.