Mark untrusted certificates as such in Linux UI.

net/base/cert_database.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_CERT_DATABASE_H_
 #define NET_BASE_CERT_DATABASE_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 141 matching lines @@
   // |not_imported|.
   // Returns false if there is an internal error, otherwise true is returned and
   // |not_imported| should be checked for any certificates that were not
   // imported.
   bool ImportServerCert(const CertificateList& certificates,
                         ImportCertFailureList* not_imported);
 
   // Get trust bits for certificate.
   unsigned int GetCertTrust(const X509Certificate* cert, CertType type) const;
 
+  // IsUntrusted returns true if |cert| is specifically untrusted. These
+  // certificates are remembered for the specific purpose of rejecting them.

[wtc, 2011/09/21 17:05:33]

Nit: remembered => stored in the database ?

[agl, 2011/09/21 17:53:53]

Done.

+  bool IsUntrusted(const X509Certificate* cert) const;
+
   // Set trust values for certificate.
   // Returns true on success or false on failure.
   bool SetCertTrust(const X509Certificate* cert,
                     CertType type,
                     unsigned int trust_bits);
 
   // Delete certificate and associated private key (if one exists).
   // Returns true on success or false on failure.
   // |cert| is still valid when this function returns.
   bool DeleteCertAndKey(const X509Certificate* cert);
@@ skipping 15 matching lines @@
   // Broadcasts notifications to all registered observers.
   static void NotifyObserversOfUserCertAdded(const X509Certificate* cert);
   static void NotifyObserversOfCertTrustChanged(const X509Certificate* cert);
 
   DISALLOW_COPY_AND_ASSIGN(CertDatabase);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_CERT_DATABASE_H_