Route OCSP stapling through CertVerifier.

net/cert/cert_verify_proc.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc.h"
 
 #include <stdint.h>
 
 #include "base/basictypes.h"
 #include "base/metrics/histogram.h"
@@ skipping 172 matching lines @@
   return NULL;
 #endif
 }
 
 CertVerifyProc::CertVerifyProc() {}
 
 CertVerifyProc::~CertVerifyProc() {}
 
 int CertVerifyProc::Verify(X509Certificate* cert,
                            const std::string& hostname,
+                           const std::string& ocsp_response,
                            int flags,
                            CRLSet* crl_set,
                            const CertificateList& additional_trust_anchors,
                            CertVerifyResult* verify_result) {
   verify_result->Reset();
   verify_result->verified_cert = cert;
 
   if (IsBlacklisted(cert)) {
     verify_result->cert_status |= CERT_STATUS_REVOKED;
     return ERR_CERT_REVOKED;
   }
 
   // We do online revocation checking for EV certificates that aren't covered
   // by a fresh CRLSet.
   // TODO(rsleevi): http://crbug.com/142974 - Allow preferences to fully
   // disable revocation checking.
   if (flags & CertVerifier::VERIFY_EV_CERT)
     flags |= CertVerifier::VERIFY_REV_CHECKING_ENABLED_EV_ONLY;
 
-  int rv = VerifyInternal(cert, hostname, flags, crl_set,
+  int rv = VerifyInternal(cert, hostname, ocsp_response, flags, crl_set,
                           additional_trust_anchors, verify_result);
 
   UMA_HISTOGRAM_BOOLEAN("Net.CertCommonNameFallback",
                         verify_result->common_name_fallback_used);
   if (!verify_result->is_issued_by_known_root) {
     UMA_HISTOGRAM_BOOLEAN("Net.CertCommonNameFallbackPrivateCA",
                           verify_result->common_name_fallback_used);
   }
 
   // This check is done after VerifyInternal so that VerifyInternal can fill
@@ skipping 447 matching lines @@
     return true;
 
   // For certificates issued after 1 April 2015: 39 months.
   if (start >= time_2015_04_01 && month_diff > 39)
     return true;
 
   return false;
 }
 
 }  // namespace net