Route OCSP stapling through CertVerifier.

chrome/browser/chromeos/net/cert_verify_proc_chromeos.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/net/cert_verify_proc_chromeos.h"
 
 #include "net/cert/test_root_certs.h"
 #include "net/cert/x509_certificate.h"
 
 // NSS doesn't currently define CERT_LIST_TAIL.
@@ skipping 22 matching lines @@
   // trust settings are stored.
   profile_filter_.Init(
       public_slot.Pass(), crypto::ScopedPK11Slot(), crypto::ScopedPK11Slot());
 }
 
 CertVerifyProcChromeOS::~CertVerifyProcChromeOS() {}
 
 int CertVerifyProcChromeOS::VerifyInternal(
     net::X509Certificate* cert,
     const std::string& hostname,
+    const std::string& ocsp_response,
     int flags,
     net::CRLSet* crl_set,
     const net::CertificateList& additional_trust_anchors,
     net::CertVerifyResult* verify_result) {
   ChainVerifyArgs chain_verify_args = {this, additional_trust_anchors};
 
   CERTChainVerifyCallback chain_verify_callback;
   chain_verify_callback.isChainValid =
       &CertVerifyProcChromeOS::IsChainValidFunc;
   chain_verify_callback.isChainValidArg =
       static_cast<void*>(&chain_verify_args);
 
-  return VerifyInternalImpl(cert,
-                            hostname,
-                            flags,
-                            crl_set,
-                            additional_trust_anchors,
-                            &chain_verify_callback,
+  return VerifyInternalImpl(cert, hostname, ocsp_response, flags, crl_set,
+                            additional_trust_anchors, &chain_verify_callback,
                             verify_result);
 }
 
 // static
 SECStatus CertVerifyProcChromeOS::IsChainValidFunc(
     void* is_chain_valid_arg,
     const CERTCertList* current_chain,
     PRBool* chain_ok) {
   ChainVerifyArgs* args = static_cast<ChainVerifyArgs*>(is_chain_valid_arg);
   CERTCertificate* cert = CERT_LIST_TAIL(current_chain)->cert;
@@ skipping 26 matching lines @@
   // properly when the same cert is in multiple slots, this would also need
   // updating to check the per-slot trust values.
   *chain_ok = args->cert_verify_proc->profile_filter_.IsCertAllowed(cert)
                   ? PR_TRUE
                   : PR_FALSE;
   DVLOG(3) << cert->subjectName << " is " << (*chain_ok ? "ok" : "not ok");
   return SECSuccess;
 }
 
 }  // namespace chromeos