net: enable CRL sets behind a command line flag.

net/base/ssl_config_service.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_config_service.h"
 
+#include "base/lazy_instance.h"
+#include "base/memory/ref_counted.h"
+#include "net/base/crl_set.h"
 #include "net/base/ssl_config_service_defaults.h"
 #include "net/base/ssl_false_start_blacklist.h"
 
 namespace net {
 
 SSLConfig::CertAndStatus::CertAndStatus() : cert_status(0) {}
 
 SSLConfig::CertAndStatus::~CertAndStatus() {}
 
 SSLConfig::SSLConfig()
@@ skipping 35 matching lines @@
 // static
 bool SSLConfigService::IsKnownFalseStartIncompatibleServer(
     const std::string& hostname) {
   return SSLFalseStartBlacklist::IsMember(hostname);
 }
 
 static bool g_cached_info_enabled = false;
 static bool g_origin_bound_certs_enabled = false;
 static bool g_false_start_enabled = true;
 static bool g_dns_cert_provenance_checking = false;
+base::LazyInstance<scoped_refptr<CRLSet>,
+                   base::LeakyLazyInstanceTraits<scoped_refptr<CRLSet> > >
+    g_crl_set(base::LINKER_INITIALIZED);
 
 // static
 void SSLConfigService::DisableFalseStart() {
   g_false_start_enabled = false;
 }
 
 // static
 bool SSLConfigService::false_start_enabled() {
   return g_false_start_enabled;
 }
 
 // static
 void SSLConfigService::EnableDNSCertProvenanceChecking() {
   g_dns_cert_provenance_checking = true;
 }
 
 // static
 bool SSLConfigService::dns_cert_provenance_checking_enabled() {
   return g_dns_cert_provenance_checking;
 }
 
 // static
 void SSLConfigService::SetCRLSet(scoped_refptr<CRLSet> crl_set) {
-  // TODO(agl): not implemented yet.
+  g_crl_set.Get() = crl_set;
 }
 
 // static
 scoped_refptr<CRLSet> SSLConfigService::GetCRLSet() {
-  // TODO(agl): not implemented yet.
-  scoped_refptr<CRLSet> ret;
-  return ret;
+  return g_crl_set.Get();
 }
 
 void SSLConfigService::EnableCachedInfo() {
   g_cached_info_enabled = true;
 }
 
 // static
 bool SSLConfigService::cached_info_enabled() {
   return g_cached_info_enabled;
 }
@@ skipping 45 matching lines @@
 bool SSLConfigService::IsSNIAvailable(SSLConfigService* service) {
   if (!service)
     return false;
 
   SSLConfig ssl_config;
   service->GetSSLConfig(&ssl_config);
   return ssl_config.tls1_enabled;
 }
 
 }  // namespace net