net: make HSTS hosts use the normal SSL interstitials

content/browser/ssl/ssl_cert_error_handler.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_SSL_SSL_CERT_ERROR_HANDLER_H_
 #define CONTENT_BROWSER_SSL_SSL_CERT_ERROR_HANDLER_H_
 #pragma once
 
 #include <string>
 
 #include "content/browser/ssl/ssl_error_handler.h"
 #include "net/base/ssl_info.h"
 
 namespace net {
 class X509Certificate;
 }
 
 // A CertError represents an error that occurred with the certificate in an
 // SSL session.  A CertError object exists both on the IO thread and on the UI
 // thread and allows us to cancel/continue a request it is associated with.
 class SSLCertErrorHandler : public SSLErrorHandler {
  public:
   // Construct on the IO thread.
   SSLCertErrorHandler(ResourceDispatcherHost* rdh,
                       net::URLRequest* request,
                       ResourceType::Type resource_type,
                       int cert_error,
-                      net::X509Certificate* cert);
+                      const net::SSLInfo& ssl_info,
+                      bool must_be_fatal);
 
   virtual SSLCertErrorHandler* AsSSLCertErrorHandler();
 
   // These accessors are available on either thread
   const net::SSLInfo& ssl_info() const { return ssl_info_; }
   int cert_error() const { return cert_error_; }
+  bool must_be_fatal() const { return must_be_fatal_; }
 
  protected:
   // SSLErrorHandler methods
   virtual void OnDispatchFailed();
   virtual void OnDispatched();
 
  private:
   virtual ~SSLCertErrorHandler();
 
   // These read-only members may be accessed on any thread.
-  net::SSLInfo ssl_info_;
+  const net::SSLInfo ssl_info_;
   const int cert_error_;  // The error we represent.
+  const bool must_be_fatal_;  // true if the error is from an HSTS host.

[wtc, 2011/09/23 00:04:51]

To be precise, this should also say "and the error is not
"ERR_CERT_UNABLE_TO_CHECK_REVOCATION".

 
   DISALLOW_COPY_AND_ASSIGN(SSLCertErrorHandler);
 };
 
 #endif  // CONTENT_BROWSER_SSL_SSL_CERT_ERROR_HANDLER_H_