net: enable CRL sets behind a command line flag.

net/socket/ssl_host_info.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/ssl_host_info.h"
 
 #include "base/bind.h"
 #include "base/metrics/histogram.h"
 #include "base/pickle.h"
 #include "base/string_piece.h"
@@ skipping 110 matching lines @@
     if (cert_.get()) {
       int flags = 0;
       if (verify_ev_cert_)
         flags |= X509Certificate::VERIFY_EV_CERT;
       if (rev_checking_enabled_)
         flags |= X509Certificate::VERIFY_REV_CHECKING_ENABLED;
       VLOG(1) << "Kicking off verification for " << hostname_;
       verification_start_time_ = base::TimeTicks::Now();
       verification_end_time_ = base::TimeTicks();
       int rv = verifier_.Verify(
-          cert_.get(), hostname_, flags, &cert_verify_result_,
+          cert_.get(), hostname_, flags, crl_set_.get(), &cert_verify_result_,
           base::Bind(&SSLHostInfo::VerifyCallback, weak_factory_.GetWeakPtr()),
           // TODO(willchan): Figure out how to use NetLog here.
           BoundNetLog());
       if (rv != ERR_IO_PENDING)
         VerifyCallback(rv);
     } else {
       cert_parsing_failed_ = true;
       DCHECK(!cert_verification_callback_);
     }
   }
@@ skipping 67 matching lines @@
   if (cert_verification_callback_) {
     OldCompletionCallback* callback = cert_verification_callback_;
     cert_verification_callback_ = NULL;
     callback->Run(rv);
   }
 }
 
 SSLHostInfoFactory::~SSLHostInfoFactory() {}
 
 }  // namespace net