Check ignore-certificate-erros in SocketStream

net/socket_stream/socket_stream.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // TODO(ukai): code is similar with http_network_transaction.cc.  We should
 //   think about ways to share code, if possible.
 
 #include "net/socket_stream/socket_stream.h"
 
 #include <set>
@@ skipping 11 matching lines @@
 #include "net/base/auth.h"
 #include "net/base/host_resolver.h"
 #include "net/base/io_buffer.h"
 #include "net/base/net_errors.h"
 #include "net/base/net_util.h"
 #include "net/base/ssl_cert_request_info.h"
 #include "net/http/http_auth_handler_factory.h"
 #include "net/http/http_network_session.h"
 #include "net/http/http_request_info.h"
 #include "net/http/http_response_headers.h"
+#include "net/http/http_stream_factory.h"
 #include "net/http/http_transaction_factory.h"
 #include "net/http/http_util.h"
 #include "net/socket/client_socket_factory.h"
 #include "net/socket/socks5_client_socket.h"
 #include "net/socket/socks_client_socket.h"
 #include "net/socket/ssl_client_socket.h"
 #include "net/socket/tcp_client_socket.h"
 #include "net/socket_stream/socket_stream_metrics.h"
 #include "net/url_request/url_request.h"
 
@@ skipping 991 matching lines @@
     result = DidEstablishConnection();
   else
     next_state_ = STATE_CLOSE;
   return result;
 }
 
 int SocketStream::DoSSLHandleCertError(int result) {
   DCHECK_EQ(STATE_NONE, next_state_);
   DCHECK(IsCertificateError(result));
   result = HandleCertificateError(result);
-  if (result == ERR_IO_PENDING)
+  if (result == OK || result == ERR_IO_PENDING)
     next_state_ = STATE_SSL_HANDLE_CERT_ERROR_COMPLETE;
   else
     next_state_ = STATE_CLOSE;
   return result;
 }
 
 int SocketStream::DoSSLHandleCertErrorComplete(int result) {
   DCHECK_EQ(STATE_NONE, next_state_);
   // TODO(toyoshim): Upgrade to SPDY through TLS NPN extension if possible.
   // If we use HTTPS and this is the first connection to the SPDY server,
@@ skipping 236 matching lines @@
   tunnel_response_headers_ = NULL;
   tunnel_response_headers_capacity_ = 0;
   tunnel_response_headers_len_ = 0;
 
   next_state_ = STATE_TCP_CONNECT;
   DoLoop(OK);
 }
 
 int SocketStream::HandleCertificateError(int result) {
   DCHECK(IsCertificateError(result));
+  SSLClientSocket* ssl_socket = static_cast<SSLClientSocket*>(socket_.get());
+  DCHECK(ssl_socket);
+
+  if (HttpStreamFactory::ignore_certificate_errors() &&
+      ssl_socket->IgnoreCertError(result, LOAD_IGNORE_ALL_CERT_ERRORS))
+    return OK;
 
   if (!delegate_)
     return result;
 
-  SSLClientSocket* ssl_socket = static_cast<SSLClientSocket*>(socket_.get());
-  DCHECK(ssl_socket);
   SSLInfo ssl_info;
   ssl_socket->GetSSLInfo(&ssl_info);
 
   TransportSecurityState::DomainState domain_state;
   DCHECK(context_);
   const bool fatal =
       context_->transport_security_state() &&
       context_->transport_security_state()->GetDomainState(
           url_.host(),
           SSLConfigService::IsSNIAvailable(context_->ssl_config_service()),
           &domain_state);
 
   delegate_->OnSSLCertificateError(this, ssl_info, fatal);
   return ERR_IO_PENDING;
 }
 
 SSLConfigService* SocketStream::ssl_config_service() const {
   return context_->ssl_config_service();
 }
 
 ProxyService* SocketStream::proxy_service() const {
   return context_->proxy_service();
 }
 
 }  // namespace net