[Cronet] Public key pinning for Java API

components/cronet/url_request_context_config.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 #define COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 
 #include <string>
 
 #include "base/json/json_value_converter.h"
 #include "base/macros.h"
 #include "base/memory/scoped_vector.h"
+#include "base/time/time.h"
 
 namespace net {
 class CertVerifier;
 class URLRequestContextBuilder;
 }  // namespace net
 
 namespace cronet {
 
 // Common configuration parameters used by Cronet to configure
 // URLRequestContext. Can be parsed from JSON string passed through JNI.
@@ skipping 11 matching lines @@
     std::string host;
     // Port of the server that supports QUIC.
     int port;
     // Alternate protocol port.
     int alternate_port;
 
    private:
     DISALLOW_COPY_AND_ASSIGN(QuicHint);
   };
 
+  // Public-Key-Pinning configuration structure.
+  struct Hpkp {
+    Hpkp() {}
+    ~Hpkp() {}
+
+    // Register |converter| for use in converter.Convert().
+    static void RegisterJSONConverter(
+        base::JSONValueConverter<Hpkp>* converter);
+
+    // Host name.
+    std::string host;
+    // Pin hashes (currently SHA256 only).
+    ScopedVector<std::string> pin_hashes;
+    // Indicates whether the pinning should apply to the pinned host subdomains.
+    bool include_subdomains;
+    // Expiration date for the pins.
+    base::Time expiration_date;
+
+   private:
+    DISALLOW_COPY_AND_ASSIGN(Hpkp);
+  };
+
   URLRequestContextConfig();
   ~URLRequestContextConfig();
 
   // Load config values from JSON format.
   bool LoadFromJSON(const std::string& config_string);
 
   // Configure |context_builder| based on |this|.
   void ConfigureURLRequestContextBuilder(
       net::URLRequestContextBuilder* context_builder);
 
@@ skipping 21 matching lines @@
   std::string user_agent;
   // App-provided list of servers that support QUIC.
   ScopedVector<QuicHint> quic_hints;
   // Comma-separated list of QUIC connection options.
   std::string quic_connection_options;
   // Enable Data Reduction Proxy with authentication key.
   std::string data_reduction_proxy_key;
   std::string data_reduction_primary_proxy;
   std::string data_reduction_fallback_proxy;
   std::string data_reduction_secure_proxy_check_url;
+  // The list of public key pins.
+  ScopedVector<Hpkp> hpkp_list;
 
   // Certificate verifier for testing.
   scoped_ptr<net::CertVerifier> mock_cert_verifier;
 
  private:
   DISALLOW_COPY_AND_ASSIGN(URLRequestContextConfig);
 };
 
 }  // namespace cronet
 
 #endif  // COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_