Implement SSLClientSocketPool.

net/socket/ssl_client_socket.h

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_H_
 #define NET_SOCKET_SSL_CLIENT_SOCKET_H_
 
 #include <string>
 
+#include "net/base/load_flags.h"
+#include "net/base/net_errors.h"
 #include "net/socket/client_socket.h"
 
 namespace net {
 
 class SSLCertRequestInfo;
 class SSLInfo;
 
 // A client socket that uses SSL as the transport layer.
 //
 // NOTE: The SSL handshake occurs within the Connect method after a TCP
@@ skipping 44 matching lines @@
   static NextProto NextProtoFromString(const std::string& proto_string) {
     if (proto_string == "http1.1" || proto_string == "http/1.1") {
       return kProtoHTTP11;
     } else if (proto_string == "spdy" || proto_string == "spdy/1") {
       return kProtoSPDY1;
     } else {
       return kProtoUnknown;
     }
   }
 
+  static bool IgnoreCertError(int error, int load_flags) {
+    if (error == OK || load_flags & LOAD_IGNORE_ALL_CERT_ERRORS)
+      return true;
+
+    if (error == ERR_CERT_COMMON_NAME_INVALID &&
+        (load_flags & LOAD_IGNORE_CERT_COMMON_NAME_INVALID))
+      return true;
+    if(error == ERR_CERT_DATE_INVALID &&
+            (load_flags & LOAD_IGNORE_CERT_DATE_INVALID))
+      return true;
+    if(error == ERR_CERT_AUTHORITY_INVALID &&
+            (load_flags & LOAD_IGNORE_CERT_AUTHORITY_INVALID))
+      return true;
+
+    return false;
+  }
+
   virtual bool wasNpnNegotiated() const {
     return was_npn_negotiated_;
   }
 
   virtual bool setWasNpnNegotiated(bool negotiated) {
     return was_npn_negotiated_ = negotiated;
   }
 
  private:
   // True if NPN was responded to, independent of selecting SPDY or HTTP.
   bool was_npn_negotiated_;
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_CLIENT_SOCKET_H_