Support EC certs in OriginBoundCertService and OriginBoundCertStore.

net/base/net_error_list.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 496 matching lines @@
 // SPDY server refused the stream. Client should retry. This should never be a
 // user-visible error.
 NET_ERROR(SPDY_SERVER_REFUSED_STREAM, -351)
 
 // SPDY server didn't respond to the PING message.
 NET_ERROR(SPDY_PING_FAILED, -352)
 
 // Content-Length does not match the number of bytes received.
 NET_ERROR(CONTENT_LENGTH_MISMATCH, -353)
 
+// Server request for Origin Bound Cert did not contain any types we support.
+NET_ERROR(ORIGIN_BOUND_CERT_TYPE_UNSUPPORTED, -354)

[wtc, 2011/12/06 00:18:05]

This error code does not need to be specific to origin-bound
certs because it also applies to regular client certificates.

So, I suggest the following:
  // Server request for client certificate did not contain any types we support.
  NET_ERROR(CLIENT_AUTH_CERT_TYPE_UNSUPPORTED, -354)

Note: we've used "CLIENT_AUTH_CERT" instead of just "CLIENT_CERT"
in other error codes, so I'm trying to be consistent here.

[mattm, 2011/12/06 00:54:01]

Done.

+
+// Server requested one type of cert, then requested a different type while the
+// first was still being generated.
+NET_ERROR(ORIGIN_BOUND_CERT_GENERATION_TYPE_MISMATCH, -355)

[wtc, 2011/12/06 00:18:05]

The 300-399 range is the HTTP errors.  Since these are not
HTTP errors, we should add them to a different range.  I
suggest adding them to either the 700-799 range (which has
two origin-bound cert errors) or the 100-199 range (which
has several SSL client certificate errors).

[mattm, 2011/12/06 00:54:01]

oops.  Moved to the 1xx range since that seemed appropriate for errors caused by
the server rather than locally.

+
 // The cache does not have the requested entry.
 NET_ERROR(CACHE_MISS, -400)
 
 // Unable to read from the disk cache.
 NET_ERROR(CACHE_READ_FAILURE, -401)
 
 // Unable to write to the disk cache.
 NET_ERROR(CACHE_WRITE_FAILURE, -402)
 
 // The operation is not supported for this entry.
@@ skipping 112 matching lines @@
 NET_ERROR(DNS_SERVER_FAILED, -802)
 
 // DNS transaction timed out.
 NET_ERROR(DNS_TIMED_OUT, -803)
 
 // The entry was not found in cache, for cache-only lookups.
 NET_ERROR(DNS_CACHE_MISS, -804)
 
 // FIXME: Take the next number.
 NET_ERROR(PIPELINE_EVICTION, -900)