Certificate Transparency: Add STH Fetching capability.

net/base/net_error_list.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum values.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 329 matching lines @@
 // The SSL server requires falling back to a version older than the configured
 // minimum fallback version, and thus fallback failed.
 NET_ERROR(SSL_FALLBACK_BEYOND_MINIMUM_VERSION, -165)
 
 // Resolving a hostname to an IP address list included the IPv4 address
 // "127.0.53.53". This is a special IP address which ICANN has recommended to
 // indicate there was a name collision, and alert admins to a potential
 // problem.
 NET_ERROR(ICANN_NAME_COLLISION, -166)
 
+// Certificate Transparency: Received a signed tree head that failed to parse.
+NET_ERROR(CT_STH_PARSING_FAILED, -167)
+// Certificate Transparency: Received a signed tree head whose JSON parsing was
+// OK but was missing some of the fields.
+NET_ERROR(CT_STH_INCOMPLETE, -168)

[mmenke, 2015/07/29 18:51:51]

Hrm...Having a net error exist exclusively for stuff outside net/ seems a bit
ugly, though suppose we already do that in a number of places.

[Eran Messeri, 2015/07/31 12:55:53]

Acknowledged - if that helps I can move the code that generates those errors
into net/, though I can't guarantee it'd be pretty.

+
 // Certificate error codes
 //
 // The values of certificate error codes must be consecutive.
 
 // The server responded with a certificate whose common name did not match
 // the host name.  This could mean:
 //
 // 1. An attacker has redirected our traffic to their server and is
 //    presenting a certificate for which they know the private key.
 //
@@ skipping 440 matching lines @@
 NET_ERROR(DNS_TIMED_OUT, -803)
 
 // The entry was not found in cache, for cache-only lookups.
 NET_ERROR(DNS_CACHE_MISS, -804)
 
 // Suffix search list rules prevent resolution of the given host name.
 NET_ERROR(DNS_SEARCH_EMPTY, -805)
 
 // Failed to sort addresses according to RFC3484.
 NET_ERROR(DNS_SORT_ERROR, -806)