Certificate Transparency: Add STH Fetching capability.

net/base/net_error_list.h

Index: net/base/net_error_list.h
diff --git a/net/base/net_error_list.h b/net/base/net_error_list.h
index a57cd493da0c1dad582ef9ff25ca034e1679162a..9dd6841b97eff4a321ca5042b1d3de1385325284 100644
--- a/net/base/net_error_list.h
+++ b/net/base/net_error_list.h
@@ -347,6 +347,12 @@ NET_ERROR(SSL_FALLBACK_BEYOND_MINIMUM_VERSION, -165)
 // problem.
 NET_ERROR(ICANN_NAME_COLLISION, -166)
 
+// Certificate Transparency: Received a signed tree head that failed to parse.
+NET_ERROR(CT_STH_PARSING_FAILED, -167)
+// Certificate Transparency: Received a signed tree head whose JSON parsing was
+// OK but was missing some of the fields.
+NET_ERROR(CT_STH_INCOMPLETE, -168)

[mmenke, 2015/07/29 18:51:51]

Hrm...Having a net error exist exclusively for stuff outside net/ seems a bit
ugly, though suppose we already do that in a number of places.

[Eran Messeri, 2015/07/31 12:55:53]

Acknowledged - if that helps I can move the code that generates those errors
into net/, though I can't guarantee it'd be pretty.

+
 // Certificate error codes
 //
 // The values of certificate error codes must be consecutive.