Add support for built-in certificate pins, and add a pin list suitable for

net/base/transport_security_state_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace net {
 
 class TransportSecurityStateTest : public testing::Test {
@@ skipping 535 matching lines @@
   std::string ser;
   EXPECT_TRUE(state->Serialise(&ser));
   bool dirty;
   EXPECT_TRUE(state->LoadEntries(ser, &dirty));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "example.com", false));
   EXPECT_EQ(1u, domain_state.public_key_hashes.size());
   EXPECT_TRUE(0 == memcmp(domain_state.public_key_hashes[0].data, hash.data,
                           sizeof(hash.data)));
 }
 
+TEST_F(TransportSecurityStateTest, BuiltinCertPins) {
+  scoped_refptr<TransportSecurityState> state(
+      new TransportSecurityState);
+
+  TransportSecurityState::DomainState domain_state;
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
+                                      "chrome.google.com",
+                                      true));
+  std::vector<SHA1Fingerprint> hashes;
+  // This essential checks that a built-in list does exist.
+  EXPECT_FALSE(domain_state.IsChainOfPublicKeysPermitted(hashes));
+}
+
 }  // namespace net