Send HPKP violation reports when a pin check fails

net/quic/crypto/proof_verifier_chromium.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/proof_verifier_chromium.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/callback_helpers.h"
 #include "base/compiler_specific.h"
@@ skipping 225 matching lines @@
                  base::Unretained(this)),
       &cert_verifier_request_, net_log_);
 }
 
 int ProofVerifierChromium::Job::DoVerifyCertComplete(int result) {
   cert_verifier_request_.reset();
 
   const CertVerifyResult& cert_verify_result =
       verify_details_->cert_verify_result;
   const CertStatus cert_status = cert_verify_result.cert_status;
+  // TODO(estark): replace 0 below with the port that the connection was
+  // made on.
   if (transport_security_state_ &&
       (result == OK ||
        (IsCertificateError(result) && IsCertStatusMinorError(cert_status))) &&
       !transport_security_state_->CheckPublicKeyPins(
-          hostname_,
-          cert_verify_result.is_issued_by_known_root,
-          cert_verify_result.public_key_hashes,
+          hostname_, cert_verify_result.is_issued_by_known_root,
+          cert_verify_result.public_key_hashes, 0, cert_.get(),
+          cert_verify_result.verified_cert.get(),
+          TransportSecurityState::ENABLE_PIN_REPORTS,
           &verify_details_->pinning_failure_log)) {
     result = ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN;
   }
 
   scoped_refptr<ct::EVCertsWhitelist> ev_whitelist =
       SSLConfigService::GetEVCertsWhitelist();
   if ((cert_status & CERT_STATUS_IS_EV) && ev_whitelist.get() &&
       ev_whitelist->IsValid()) {
     const SHA256HashValue fingerprint(
         X509Certificate::CalculateFingerprint256(cert_->os_cert_handle()));
@@ skipping 134 matching lines @@
   }
   return status;
 }
 
 void ProofVerifierChromium::OnJobComplete(Job* job) {
   active_jobs_.erase(job);
   delete job;
 }
 
 }  // namespace net