net: add two Google backup pins.

net/base/transport_security_state_static.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is automatically generated by transport_security_state_static_generate.go
 
 #ifndef NET_BASE_TRANSPORT_SECURITY_STATE_STATIC_H_
 #define NET_BASE_TRANSPORT_SECURITY_STATE_STATIC_H_
 
 // These are SubjectPublicKeyInfo hashes for public key pinning. The
@@ skipping 12 matching lines @@
     "\x46\xf4\xc2\xe8\xf6\xc5\x54\xdd\x5e\x07";
 
 static const char kSPKIHash_Google1024[] =
     "\x40\xc5\x40\x1d\x6f\x8c\xba\xf0\x8b\x00"
     "\xed\xef\xb1\xee\x87\xd0\x05\xb3\xb9\xcd";
 
 static const char kSPKIHash_Google2048[] =
     "\x01\xb9\x21\xc5\x8d\x0b\xdf\x8d\xe0\x29"
     "\xff\x9c\x92\x2e\xcd\x55\x6a\x7e\xa3\x39";
 
+static const char kSPKIHash_GoogleBackup1024[] =

[palmer, 2013/01/22 19:08:07]

These are good too.

+    "\x7d\x5b\xa3\xca\x8e\x37\x65\x1d\x7c\x71"
+    "\xc3\xe3\xb7\x74\xcd\xe9\x7b\x1b\x59\x43";
+
+static const char kSPKIHash_GoogleBackup2048[] =
+    "\xbe\xae\xce\xca\x34\xa7\xa8\xe7\x28\xf6"
+    "\x7c\x8c\x08\x31\x9d\xcb\xbe\xde\x8a\x33";
+
 static const char kSPKIHash_EquifaxSecureCA[] =
     "\x48\xe6\x68\xf9\x2b\xd2\xb2\x95\xd7\x47"
     "\xd8\x23\x20\x10\x4f\x33\x98\x90\x9f\xd4";
 
 static const char kSPKIHash_Aetna[] =
     "\x92\x52\xaa\x14\xde\xbf\x80\xae\x30\xaa"
     "\xd9\x4e\x60\x38\x70\x24\xa5\x43\x2f\x1a";
 
 static const char kSPKIHash_GeoTrustGlobal[] =
     "\xc0\x7a\x98\x68\x8d\x89\xfb\xab\x05\x64"
@@ skipping 190 matching lines @@
 #define kTestPins { \
   kTestAcceptableCerts, \
   kNoRejectedPublicKeys, \
 }
 
 static const char* const kGoogleAcceptableCerts[] = {
   kSPKIHash_VeriSignClass3,
   kSPKIHash_VeriSignClass3_G3,
   kSPKIHash_Google1024,
   kSPKIHash_Google2048,
+  kSPKIHash_GoogleBackup1024,
+  kSPKIHash_GoogleBackup2048,
   kSPKIHash_EquifaxSecureCA,
   kSPKIHash_GeoTrustGlobal,
   NULL,
 };
 static const char* const kGoogleRejectedCerts[] = {
   kSPKIHash_Aetna,
   kSPKIHash_Intel,
   kSPKIHash_TCTrustCenter,
   kSPKIHash_Vodafone,
   NULL,
@@ skipping 517 matching lines @@
   {11, false, "\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {16, false, "\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {15, false, "\003www\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {20, false, "\003www\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {22, true, "\020google-analytics\003com", false, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\014googlegroups\003com", false, kGooglePins, DOMAIN_GOOGLEGROUPS_COM },
 };
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 #endif // NET_BASE_TRANSPORT_SECURITY_STATE_STATIC_H_