net: enable CRL sets behind a command line flag.

net/socket/ssl_host_info.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_HOST_INFO_H_
 #define NET_SOCKET_SSL_HOST_INFO_H_
 
 #include <string>
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/memory/weak_ptr.h"
 #include "base/time.h"
 #include "net/base/cert_verifier.h"
 #include "net/base/cert_verify_result.h"
 #include "net/base/completion_callback.h"
+#include "net/base/crl_set.h"

[wtc, 2011/10/21 23:17:31]

Does a forward declaration of CRLSet work?

[agl, 2011/10/24 20:44:27]

Done.

 #include "net/base/dnsrr_resolver.h"
 #include "net/base/net_export.h"
 #include "net/socket/ssl_client_socket.h"
 
 namespace net {
 
 class X509Certificate;
 struct SSLConfig;
 
 // SSLHostInfo is an interface for fetching information about an SSL server.
@@ skipping 86 matching lines @@
   // This is the callback function which the CertVerifier calls via |callback_|.
   void VerifyCallback(int rv);
 
   // ParseInner is a helper function for Parse.
   bool ParseInner(const std::string& data);
 
   // This is the hostname that we'll validate the certificates against.
   const std::string hostname_;
   bool cert_parsing_failed_;
   OldCompletionCallback* cert_verification_callback_;
-  // These two members are taken from the SSLConfig.
+  // These three members are taken from the SSLConfig.
   bool rev_checking_enabled_;
   bool verify_ev_cert_;
+  scoped_refptr<CRLSet> crl_set_;
   base::TimeTicks verification_start_time_;
   base::TimeTicks verification_end_time_;
   CertVerifyResult cert_verify_result_;
   SingleRequestCertVerifier verifier_;
   scoped_refptr<X509Certificate> cert_;
   base::WeakPtrFactory<SSLHostInfo> weak_factory_;
 
   DnsRRResolver* dnsrr_resolver_;
   OldCompletionCallback* dns_callback_;
   DnsRRResolver::Handle dns_handle_;
   RRResponse dns_response_;
   base::TimeTicks dns_lookup_start_time_;
   base::TimeTicks cert_verification_finished_time_;
 };
 
 class SSLHostInfoFactory {
  public:
   virtual ~SSLHostInfoFactory();
 
   // GetForHost returns a fresh, allocated SSLHostInfo for the given hostname
   // or NULL on failure.
   virtual SSLHostInfo* GetForHost(const std::string& hostname,
                                   const SSLConfig& ssl_config) = 0;
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_HOST_INFO_H_