Include cert status in invalid certificate reports

chrome/browser/net/cert_logger.proto

Index: chrome/browser/net/cert_logger.proto
diff --git a/chrome/browser/net/cert_logger.proto b/chrome/browser/net/cert_logger.proto
index 7ef828a5357beefa0f731c7271aead82e05bf62f..871b47179d9621a913ab53ae25dab67d6af0490d 100644
--- a/chrome/browser/net/cert_logger.proto
+++ b/chrome/browser/net/cert_logger.proto
@@ -39,6 +39,9 @@ message CertLoggerRequest {
   // pin contains the string forms of the pins that were matched against for
   // this host.
   repeated string pin = 5;
+  // The result of validating this certificate chain. A bitmask of
+  // status flags as defined in //net/cert/cert_status_flags.h
+  optional uint32 cert_status = 6;

[Ryan Sleevi, 2015/05/06 00:00:33]

The //net flags are API compatible, but are not defined as a stable API (that
is, we can change the status flags, so long as we handle the disk cache issues
that arise)

While it sounds duplicative, I'd suggest you define your own enum here, then map
the CertStatusFlags to it.

[estark, 2015/05/06 00:50:20]

Done. (Now it's reporting the most serious error, like
|MapCertStatusToNetError|.)

 };
 
 // A wrapper proto containing an encrypted CertLoggerRequest