Certificate Transparency: Add STH Fetching capability.

components/components.gyp

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     # This turns on e.g. the filename-based detection of which
     # platforms to include source files on (e.g. files ending in
     # _mac.h or _mac.cc are only compiled on MacOSX).
     'chromium_code': 1,
@@ skipping 74 matching lines @@
       'includes': [
         'external_video_surface.gypi',
         'service_tab_launcher.gypi',
       ],
     }],
     ['OS != "ios"', {
       'includes': [
         'app_modal.gypi',
         'browsing_data.gypi',
         'cdm.gypi',
+        'certificate_transparency.gypi',

[davidben, 2015/07/16 21:53:39]

Just to confirm: there's no intention to implement this on iOS right now? (They
don't use much of //chrome, so that makes sense. Although they do use //net.
Dunno if they're currently checking SCTs or anything. I guess neither Android
nor iOS has an EV inidcator.)

[Eran Messeri, 2015/07/17 15:40:23]

Correct.
Note that STH fetching and consistency checking is independent of EV support -
i.e. ultimately inclusion of certificates in the log will be checked for any
certificate that is accompanied by SCTs.
Not sure which shape it'll take on Android exactly, I think I'll worry about iOS
last.

         'devtools_discovery.gypi',
         'devtools_http_handler.gypi',
         'message_port.gypi',
         'navigation_interception.gypi',
         'power.gypi',
         'safe_json.gypi',
         'visitedlink.gypi',
         'web_cache.gypi',
         'web_contents_delegate_android.gypi',
         'web_modal.gypi',
@@ skipping 54 matching lines @@
     }],
     # TODO(tbarzic): Remove chromeos condition when there are non-chromeos apps
     # in components/apps.
     ['enable_extensions == 1 and chromeos == 1', {
       'includes': [
         'chrome_apps.gypi',
       ],
     }],
   ],
 }