net: enable CRL sets behind a command line flag.

chrome/common/chrome_switches.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_switches.h"
 
 #include "base/base_switches.h"
 #include "base/command_line.h"
 
 namespace switches {
@@ skipping 410 matching lines @@
 // Cloud Print Proxy component within the service process.
 const char kEnableCloudPrintProxy[]         = "enable-cloud-print-proxy";
 
 // Enables compositing to texture instead of display.
 const char kEnableCompositeToTexture[]      = "enable-composite-to-texture";
 
 // Enables establishing a backup TCP connection if a specified timeout is
 // exceeded.
 const char kEnableConnectBackupJobs[]       = "enable-connect-backup-jobs";
 
+// Enables establishing revocation information by downloading a set of CRLs

[wtc, 2011/10/21 23:17:31]

Nit: add "certificate" before "revocation".

"performing on-line checks" is not accurate because a properly
implemented crypto library caches the CRLs persistently.  (NSS
doesn't do that yet.)

[agl, 2011/10/24 20:44:27]

Done.
In the Windows implementation (which I've yet to write), we will be using cached
revocation information, just not on-line checks. So I believe that this comment
is accurate.

(Based on discussions with cemp, I believe that this is possible with
CryptoAPI.)

+// rather than performing on-line checks.
+const char kEnableCRLSets[]                 = "enable-crl-sets";
+
 // Enables web developers to create apps for Chrome without using crx packages.
 const char kEnableCrxlessWebApps[]          = "enable-crxless-web-apps";
 
 // Enables extension APIs that are in development.
 const char kEnableExperimentalExtensionApis[] =
     "enable-experimental-extension-apis";
 
 // Enables extension alerts, which are currently in development.
 const char kEnableExtensionAlerts[] = "enable-extension-alerts";
 
@@ skipping 815 matching lines @@
 
 // -----------------------------------------------------------------------------
 // DO NOT ADD YOUR CRAP TO THE BOTTOM OF THIS FILE.
 //
 // You were going to just dump your switches here, weren't you? Instead,
 // please put them in alphabetical order above, or in order inside the
 // appropriate ifdef at the bottom. The order should match the header.
 // -----------------------------------------------------------------------------
 
 }  // namespace switches