Route OCSP stapling through CertVerifier.

net/cert/test_root_certs_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/files/file_path.h"
 #include "build/build_config.h"
 #include "net/base/net_errors.h"
 #include "net/base/test_data_directory.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/cert_verify_proc.h"
@@ skipping 71 matching lines @@
 
   scoped_refptr<X509Certificate> test_cert =
       ImportCertFromFile(GetTestCertsDirectory(), kGoodCertificateFile);
   ASSERT_NE(static_cast<X509Certificate*>(NULL), test_cert.get());
 
   // Test that the good certificate fails verification, because the root
   // certificate should not yet be trusted.
   int flags = 0;
   CertVerifyResult bad_verify_result;
   scoped_refptr<CertVerifyProc> verify_proc(CertVerifyProc::CreateDefault());
-  int bad_status = verify_proc->Verify(test_cert.get(),
-                                       "127.0.0.1",
-                                       flags,
-                                       NULL,
-                                       CertificateList(),
-                                       &bad_verify_result);
+  int bad_status =
+      verify_proc->Verify(test_cert.get(), "127.0.0.1", std::string(), flags,
+                          NULL, CertificateList(), &bad_verify_result);
   EXPECT_NE(OK, bad_status);
   EXPECT_NE(0u, bad_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID);
 
   // Add the root certificate and mark it as trusted.
   EXPECT_TRUE(test_roots->AddFromFile(
       GetTestCertsDirectory().AppendASCII(kRootCertificateFile)));
   EXPECT_FALSE(test_roots->IsEmpty());
 
   // Test that the certificate verification now succeeds, because the
   // TestRootCerts is successfully imbuing trust.
   CertVerifyResult good_verify_result;
-  int good_status = verify_proc->Verify(test_cert.get(),
-                                        "127.0.0.1",
-                                        flags,
-                                        NULL,
-                                        CertificateList(),
-                                        &good_verify_result);
+  int good_status =
+      verify_proc->Verify(test_cert.get(), "127.0.0.1", std::string(), flags,
+                          NULL, CertificateList(), &good_verify_result);
   EXPECT_EQ(OK, good_status);
   EXPECT_EQ(0u, good_verify_result.cert_status);
 
   test_roots->Clear();
   EXPECT_TRUE(test_roots->IsEmpty());
 
   // Ensure that when the TestRootCerts is cleared, the trust settings
   // revert to their original state, and don't linger. If trust status
   // lingers, it will likely break other tests in net_unittests.
   CertVerifyResult restored_verify_result;
-  int restored_status = verify_proc->Verify(test_cert.get(),
-                                            "127.0.0.1",
-                                            flags,
-                                            NULL,
-                                            CertificateList(),
-                                            &restored_verify_result);
+  int restored_status =
+      verify_proc->Verify(test_cert.get(), "127.0.0.1", std::string(), flags,
+                          NULL, CertificateList(), &restored_verify_result);
   EXPECT_NE(OK, restored_status);
   EXPECT_NE(0u,
             restored_verify_result.cert_status & CERT_STATUS_AUTHORITY_INVALID);
   EXPECT_EQ(bad_status, restored_status);
   EXPECT_EQ(bad_verify_result.cert_status, restored_verify_result.cert_status);
 }
 
 #if defined(USE_NSS_CERTS) || \
     (defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID))
 TEST(TestRootCertsTest, Contains) {
@@ skipping 26 matching lines @@
   EXPECT_FALSE(test_roots->Contains(root_cert_1->os_cert_handle()));
   EXPECT_FALSE(test_roots->Contains(root_cert_2->os_cert_handle()));
 }
 #endif
 
 // TODO(rsleevi): Add tests for revocation checking via CRLs, ensuring that
 // TestRootCerts properly injects itself into the validation process. See
 // http://crbug.com/63958
 
 }  // namespace net