Use LOAD_VERIFY_EV_CERT to verify EV-ness in Verify()....

net/base/ssl_config_service.h

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_SSL_CONFIG_SERVICE_H__
 #define NET_BASE_SSL_CONFIG_SERVICE_H__
 
 #include <set>
 
 #include "base/time.h"
 #include "net/base/x509_certificate.h"
 
 namespace net {
 
 // A collection of SSL-related configuration settings.
 struct SSLConfig {
   // Default to no revocation checking.
   // Default to SSL 2.0 off, SSL 3.0 on, and TLS 1.0 on.
   SSLConfig()
-      : rev_checking_enabled(false), ssl2_enabled(false),
-        ssl3_enabled(true), tls1_enabled(true), send_client_cert(false) {
+      : rev_checking_enabled(false),  ssl2_enabled(false), ssl3_enabled(true),
+        tls1_enabled(true), send_client_cert(false), verify_ev_cert(false) {
   }
 
   bool rev_checking_enabled;  // True if server certificate revocation
                               // checking is enabled.
   bool ssl2_enabled;  // True if SSL 2.0 is enabled.
   bool ssl3_enabled;  // True if SSL 3.0 is enabled.
   bool tls1_enabled;  // True if TLS 1.0 is enabled.
 
   // TODO(wtc): move the following members to a new SSLParams structure.  They
   // are not SSL configuration settings.
 
   // Add any known-bad SSL certificates to allowed_bad_certs_ that should not
   // trigger an ERR_CERT_*_INVALID error when calling SSLClientSocket::Connect.
   // This would normally be done in response to the user explicitly accepting
   // the bad certificate.
   std::set<scoped_refptr<X509Certificate> > allowed_bad_certs_;
 
   // True if we should send client_cert to the server.
   bool send_client_cert;
 
+  bool verify_ev_cert;  // True if we should verify the certificate for EV.
+
   scoped_refptr<X509Certificate> client_cert;
 };
 
 // This class is responsible for getting and setting the SSL configuration.
 //
 // We think the SSL configuration settings should apply to all applications
 // used by the user.  We consider IE's Internet Options as the de facto
 // system-wide network configuration settings, so we just use the values
 // from IE's Internet Settings registry key.
 class SSLConfigService {
@@ skipping 27 matching lines @@
   // We store the IE SSL config and the time that we fetched it.
   SSLConfig config_info_;
   base::TimeTicks config_time_;
 
   DISALLOW_EVIL_CONSTRUCTORS(SSLConfigService);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_SSL_CONFIG_SERVICE_H__