Expose OpenSSL's key_exchange_info in the content API

content/browser/loader/resource_loader.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/loader/resource_loader.h"
 
 #include "base/command_line.h"
 #include "base/location.h"
 #include "base/metrics/histogram.h"
 #include "base/profiler/scoped_tracker.h"
@@ skipping 59 matching lines @@
   int cert_id =
       CertStore::GetInstance()->StoreCert(ssl_info.cert.get(), child_id);
 
   SignedCertificateTimestampIDStatusList signed_certificate_timestamp_ids;
   StoreSignedCertificateTimestamps(ssl_info.signed_certificate_timestamps,
                                    child_id, &signed_certificate_timestamp_ids);
 
   ssl_status->cert_id = cert_id;
   ssl_status->cert_status = ssl_info.cert_status;
   ssl_status->security_bits = ssl_info.security_bits;
+  ssl_status->key_exchange_info = ssl_info.key_exchange_info;
   ssl_status->connection_status = ssl_info.connection_status;
   ssl_status->signed_certificate_timestamp_ids =
       signed_certificate_timestamp_ids;
   ssl_status->security_style =
       SSLPolicy::GetSecurityStyleForResource(url, *ssl_status);
 }
 
 void PopulateResourceResponse(ResourceRequestInfoImpl* info,
                               net::URLRequest* request,
                               ResourceResponse* response) {
@@ skipping 24 matching lines @@
 
   if (request->ssl_info().cert.get()) {
     SSLStatus ssl_status;
     GetSSLStatusForRequest(request->url(), request->ssl_info(),
                            info->GetChildID(), &ssl_status);
     response->head.security_info = SerializeSecurityInfo(ssl_status);
   } else {
     // We should not have any SSL state.
     DCHECK(!request->ssl_info().cert_status &&
            request->ssl_info().security_bits == -1 &&
+           request->ssl_info().key_exchange_info == 0 &&
            !request->ssl_info().connection_status);

[davidben, 2015/09/15 14:33:17]

Nit: Existing thing, but this probably ought to be separate DCHECKs and
DCHECK_EQ for the two equality ones, so more information is available when it
fails.

[sigbjorn, 2015/09/15 15:10:56]

Done.

   }
 }
 
 }  // namespace
 
 ResourceLoader::ResourceLoader(scoped_ptr<net::URLRequest> request,
                                scoped_ptr<ResourceHandler> handler,
                                ResourceLoaderDelegate* delegate)
     : deferred_stage_(DEFERRED_NONE),
       request_(request.Pass()),
@@ skipping 627 matching lines @@
       case net::URLRequestStatus::FAILED:
         status = STATUS_UNDEFINED;
         break;
     }
 
     UMA_HISTOGRAM_ENUMERATION("Net.Prefetch.Pattern", status, STATUS_MAX);
   }
 }
 
 }  // namespace content