net: measure theoretical delay of waiting for DNS cert information.

net/socket/ssl_host_info.h

Index: net/socket/ssl_host_info.h
diff --git a/net/socket/ssl_host_info.h b/net/socket/ssl_host_info.h
index c384e2e7828b587d5fa19063336babdc25e32ac2..276888bf1f70809ce365b7a632216896b2b2b528 100644
--- a/net/socket/ssl_host_info.h
+++ b/net/socket/ssl_host_info.h
@@ -106,6 +106,12 @@ class SSLHostInfo {
     return verification_end_time_;
   }
 
+  // set_cert_verification_finished_time allows the SSL socket to tell us when
+  // it finished verifing the certificate. If the DNS request hasn't finished
+  // by this time then we record how long we would have had to have waited for
+  // it.
+  void set_cert_verification_finished_time();
+
  protected:
   // Parse parses an opaque blob of data and fills out the public member fields
   // of this object. It returns true iff the parse was successful. The public
@@ -146,6 +152,7 @@ class SSLHostInfo {
   DnsRRResolver::Handle dns_handle_;
   RRResponse dns_response_;
   base::TimeTicks dns_lookup_start_time_;
+  base::TimeTicks cert_verification_finished_time_;
 };
 
 class SSLHostInfoFactory {