net: enable CRL sets behind a command line flag.

net/socket/ssl_host_info.h

Index: net/socket/ssl_host_info.h
diff --git a/net/socket/ssl_host_info.h b/net/socket/ssl_host_info.h
index c8028d3dc5025825e1a06c1ce00d949cb5b59894..67a4217a7e79a037b3b5e36288a96b3f19f2eeb7 100644
--- a/net/socket/ssl_host_info.h
+++ b/net/socket/ssl_host_info.h
@@ -15,6 +15,7 @@
 #include "net/base/cert_verifier.h"
 #include "net/base/cert_verify_result.h"
 #include "net/base/completion_callback.h"
+#include "net/base/crl_set.h"

[wtc, 2011/10/21 23:17:31]

Does a forward declaration of CRLSet work?

[agl, 2011/10/24 20:44:27]

Done.

 #include "net/base/dnsrr_resolver.h"
 #include "net/base/net_export.h"
 #include "net/socket/ssl_client_socket.h"
@@ -121,9 +122,10 @@ class NET_EXPORT_PRIVATE SSLHostInfo {
   const std::string hostname_;
   bool cert_parsing_failed_;
   OldCompletionCallback* cert_verification_callback_;
-  // These two members are taken from the SSLConfig.
+  // These three members are taken from the SSLConfig.
   bool rev_checking_enabled_;
   bool verify_ev_cert_;
+  scoped_refptr<CRLSet> crl_set_;
   base::TimeTicks verification_start_time_;
   base::TimeTicks verification_end_time_;
   CertVerifyResult cert_verify_result_;