Verify alternative server certificate validity for origin.

net/http/http_stream_factory_impl_job.h

Index: net/http/http_stream_factory_impl_job.h
diff --git a/net/http/http_stream_factory_impl_job.h b/net/http/http_stream_factory_impl_job.h
index 27c5f00ec0fafa39f80396c0413b239326e30e7a..3e6c61d867d5d0649ef74389bddfcb8bd872641e 100644
--- a/net/http/http_stream_factory_impl_job.h
+++ b/net/http/http_stream_factory_impl_job.h
@@ -210,6 +210,11 @@ class HttpStreamFactoryImpl::Job {
   // Returns true if the current request can use an existing spdy session.
   bool CanUseExistingSpdySession() const;
 
+  // Returns true if |spdy_session| has an associated SSL certificate with is
+  // valid for |origin_url_|.
+  bool IsAlternativeCertificateValidForOrigin(
+      base::WeakPtr<SpdySession> spdy_session);
+
   // Called when we encounter a network error that could be resolved by trying
   // a new proxy configuration.  If there is another proxy configuration to try
   // then this method sets next_state_ appropriately and returns either OK or