Allow the constructed certificate chain to be returned in CertVerifyResult

net/base/x509_chain.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_X509_CHAIN_H_
 #define NET_BASE_X509_CHAIN_H_
 #pragma once
 
 #include <string>
 
 namespace net {
 
 class CertVerifyResult;
 class X509Certificate;
 
 // Functions related to X.509 certificate chain building and verification.
 namespace x509_chain {
 
 enum VerifyFlags {
   VERIFY_REV_CHECKING_ENABLED = 1 << 0,
   VERIFY_EV_CERT = 1 << 1,
+  VERIFY_RETURN_CHAIN = 1 << 2,
 };
 
 // Verifies that |certificate| is a valid SSL server certificate for the
 // given |hostname|. against the given hostname.  Returns OK if successful
 // or an error code upon failure.
 //
 // The |*verify_result| structure, including the |verify_result->cert_status|
 // bitmask, is always filled out regardless of the return value.  If the
 // certificate has multiple errors, the corresponding status flags are set in
 // |verify_result->cert_status|, and the error code for the most serious
 // error is returned.
 //
 // |flags| is bitwise OR'd of VerifyFlags.
 // If VERIFY_REV_CHECKING_ENABLED is set in |flags|, certificate revocation
 // checking is performed.  If VERIFY_EV_CERT is set in |flags| too,
 // EV certificate verification is performed.
 int VerifySSLServer(X509Certificate* certificate, const std::string& hostname,
                     int flags, CertVerifyResult* verify_result);
 
 }  // namespace x509_chain
 
 }  // namespace net
 
 #endif  // NET_BASE_X509_CHAIN_H_