net: enable CRL sets behind a command line flag.

chrome/browser/net/crl_set_fetcher.cc

Index: chrome/browser/net/crl_set_fetcher.cc
diff --git a/chrome/browser/net/crl_set_fetcher.cc b/chrome/browser/net/crl_set_fetcher.cc
index ef3558a10389d06f3ac720e82a0d1edf492bcc17..e3fa8d8be7bc05d5050b732f65941ab0ec7576ef 100644
--- a/chrome/browser/net/crl_set_fetcher.cc
+++ b/chrome/browser/net/crl_set_fetcher.cc
@@ -122,20 +122,21 @@ void CRLSetFetcher::SetCRLSetIfNewer(
   }
 }
 
-// TODO(agl): this is a key for testing only. Replace with a real key.
+// kPublicKeySHA256 is the SHA256 hash of the SubjectPublicKeyInfo of the key
+// that's used to sign generated CRL sets.
 static const uint8 kPublicKeySHA256[32] = {
-  0x0f, 0x0e, 0xa7, 0x94, 0x37, 0x6b, 0x60, 0x9a,
-  0x90, 0x09, 0x3e, 0xbb, 0xce, 0xe8, 0xd7, 0x4b,
-  0xc2, 0x78, 0x17, 0x43, 0x63, 0xd5, 0xb4, 0x43,
-  0xc1, 0x49, 0xc6, 0x44, 0x40, 0x43, 0xae, 0x2a,
+  0x75, 0xda, 0xf8, 0xcb, 0x77, 0x68, 0x40, 0x33,
+  0x65, 0x4c, 0x97, 0xe5, 0xc5, 0x1b, 0xcd, 0x81,
+  0x7b, 0x1e, 0xeb, 0x11, 0x2c, 0xe1, 0xa4, 0x33,
+  0x8c, 0xf5, 0x72, 0x5e, 0xed, 0xb8, 0x43, 0x97,
 };
 
 void CRLSetFetcher::RegisterComponent(uint32 sequence_of_loaded_crl) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
 
   CrxComponent component;
-  component.pk_hash.assign(&kPublicKeySHA256[0],
-                           &kPublicKeySHA256[0] + sizeof(kPublicKeySHA256));
+  component.pk_hash.assign(kPublicKeySHA256,
+                           kPublicKeySHA256 + sizeof(kPublicKeySHA256));
   component.installer = this;
   component.name = "CRLSet";
   component.version = Version(base::UintToString(sequence_of_loaded_crl));