Route OCSP stapling through CertVerifier.

chrome/browser/chromeos/net/cert_verify_proc_chromeos.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_NET_CERT_VERIFY_PROC_CHROMEOS_H_
 #define CHROME_BROWSER_CHROMEOS_NET_CERT_VERIFY_PROC_CHROMEOS_H_
 
 #include "crypto/scoped_nss_types.h"
 #include "net/cert/cert_verify_proc_nss.h"
 #include "net/cert/nss_profile_filter_chromeos.h"
@@ skipping 16 matching lines @@
   // users other than the specified slot.
   explicit CertVerifyProcChromeOS(crypto::ScopedPK11Slot public_slot);
 
  protected:
   ~CertVerifyProcChromeOS() override;
 
  private:
   // net::CertVerifyProcNSS implementation:
   int VerifyInternal(net::X509Certificate* cert,
                      const std::string& hostname,
+                     const std::string& ocsp_response,
                      int flags,
                      net::CRLSet* crl_set,
                      const net::CertificateList& additional_trust_anchors,
                      net::CertVerifyResult* verify_result) override;
 
   // Check if the trust root of |current_chain| is allowed.
   // |is_chain_valid_arg| is actually a ChainVerifyArgs*, which is used to pass
   // state through the NSS CERTChainVerifyCallback.isChainValidArg parameter.
   // If the chain is allowed, |*chain_ok| will be set to PR_TRUE.
   // If the chain is not allowed, |*chain_ok| is set to PR_FALSE, and this
   // function may be called again during a single certificate verification if
   // there are multiple possible valid chains.
   static SECStatus IsChainValidFunc(void* is_chain_valid_arg,
                                     const CERTCertList* current_chain,
                                     PRBool* chain_ok);
 
   net::NSSProfileFilterChromeOS profile_filter_;
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_NET_CERT_VERIFY_PROC_CHROMEOS_H_