Instantiate OriginBoundCertService in relevant places and do plumbing to pass it down to HttpNetw...

chrome/browser/io_thread.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_IO_THREAD_H_
 #define CHROME_BROWSER_IO_THREAD_H_
 #pragma once
 
 #include <list>
 #include <string>
@@ skipping 25 matching lines @@
 }  // namespace chrome_browser_net
 
 namespace net {
 class CertVerifier;
 class DnsRRResolver;
 class FtpTransactionFactory;
 class HostResolver;
 class HttpAuthHandlerFactory;
 class HttpTransactionFactory;
 class NetworkDelegate;
+class OriginBoundCertService;
 class ProxyConfigService;
 class ProxyScriptFetcher;
 class ProxyService;
 class SSLConfigService;
 class URLRequestContext;
 class URLRequestContextGetter;
 class URLSecurityManager;
 }  // namespace net
 
 class IOThread : public BrowserProcessSubThread {
  public:
   struct Globals {
     Globals();
     ~Globals();
 
     struct MediaGlobals {
       MediaGlobals();
       ~MediaGlobals();
       // MediaInternals singleton used to aggregate media information.
       scoped_ptr<MediaInternals> media_internals;
     } media;
 
     // The "system" NetworkDelegate, used for Profile-agnostic network events.
     scoped_ptr<net::NetworkDelegate> system_network_delegate;
     scoped_ptr<net::HostResolver> host_resolver;
     scoped_ptr<net::CertVerifier> cert_verifier;
+    scoped_ptr<net::OriginBoundCertService> proxy_origin_bound_cert_service;
+    scoped_ptr<net::OriginBoundCertService> system_origin_bound_cert_service;

[wtc, 2011/08/08 22:49:20]

These two members should be put next to the related members.

proxy_script_fetcher_xxx_: lines 78-82, and an odd one on line 90
system_xxx_: lines 91-94

But I believe we can use the same origin-bound cert service
object for the proxy script fetcher context and the system
context.  I believe the proxy script fetcher context needs
its own proxy service and anything that depends on a proxy
service; everything else it can share with the system
context.  Please ask eroman or willchan to confirm this.

     scoped_ptr<net::DnsRRResolver> dnsrr_resolver;
     scoped_refptr<net::SSLConfigService> ssl_config_service;
     scoped_ptr<net::HttpAuthHandlerFactory> http_auth_handler_factory;
     scoped_ptr<net::ProxyService> proxy_script_fetcher_proxy_service;
     scoped_ptr<net::HttpTransactionFactory>
         proxy_script_fetcher_http_transaction_factory;
     scoped_ptr<net::FtpTransactionFactory>
         proxy_script_fetcher_ftp_transaction_factory;
     scoped_ptr<net::URLSecurityManager> url_security_manager;
     // We use a separate URLRequestContext for PAC fetches, in order to break
@@ skipping 156 matching lines @@
   // ChromeURLRequestContexts can be released during
   // IOThread::CleanUp().
   std::list<ChromeURLRequestContextGetter*> url_request_context_getters_;
 
   ScopedRunnableMethodFactory<IOThread> method_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(IOThread);
 };
 
 #endif  // CHROME_BROWSER_IO_THREAD_H_