[Cronet] Public key pinning for Java API

components/cronet/android/cronet_url_request_context_adapter.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cronet/android/cronet_url_request_context_adapter.h"
 
 #include <map>
 
 #include "base/android/jni_android.h"
 #include "base/android/jni_string.h"
@@ skipping 354 matching lines @@
                                                  quic_hint.port);
       net::AlternativeService alternative_service(
           net::AlternateProtocol::QUIC, "",
           static_cast<uint16>(quic_hint.alternate_port));
       context_->http_server_properties()->SetAlternativeService(
           quic_hint_host_port_pair, alternative_service, 1.0f,
           base::Time::Max());
     }
   }
 
+  // Iterate through HPKP configuration for every host

[mef, 2015/11/02 17:56:56]

nit: I believe (although I can't find proof ATM) that according to chromium
style guide comments should be full sentences ending in period.

[kapishnikov, 2015/11/02 22:45:49]

Done.

+  for (auto hpkp_itr = config->hpkp_list.begin();
+       hpkp_itr != config->hpkp_list.end(); ++hpkp_itr) {
+    const URLRequestContextConfig::Hpkp& hpkp = **hpkp_itr;
+
+    // Convert the vector of hash strings from the config to
+    // a vector of HashValue objects
+    net::HashValueVector hash_value_vector;
+    for (auto hash_itr = hpkp.pin_hashes.begin();
+         hash_itr != hpkp.pin_hashes.end(); ++hash_itr) {
+      const std::string& pin_hash = **hash_itr;

[mef, 2015/11/02 17:56:56]

I think you can just inline this.

[kapishnikov, 2015/11/02 22:45:49]

Done.

+      auto hashValue = net::HashValue(net::HASH_VALUE_SHA256);

[mef, 2015/11/02 17:56:56]

no camelCase for local variables.

[kapishnikov, 2015/11/02 22:45:49]

Done.

+      bool good_hash = hashValue.FromString(pin_hash);
+      if (good_hash) {
+        hash_value_vector.push_back(hashValue);
+      } else {
+        LOG(WARNING) << "Unable to add hash value " << pin_hash;
+      }
+    }
+
+    // Add the host pinning
+    context_->transport_security_state()->AddHPKP(hpkp.host, base::Time::Max(),
+                                                  hpkp.include_subdomains,
+                                                  hash_value_vector, GURL());
+  }
+
   JNIEnv* env = base::android::AttachCurrentThread();
   jcronet_url_request_context_.Reset(env, jcronet_url_request_context.obj());
   Java_CronetUrlRequestContext_initNetworkThread(
       env, jcronet_url_request_context.obj());
 
 #if defined(DATA_REDUCTION_PROXY_SUPPORT)
   if (data_reduction_proxy_)
     data_reduction_proxy_->Init(true, GetURLRequestContext());
 #endif
   is_context_initialized_ = true;
@@ skipping 147 matching lines @@
 static jint SetMinLogLevel(JNIEnv* env,
                            const JavaParamRef<jclass>& jcaller,
                            jint jlog_level) {
   jint old_log_level = static_cast<jint>(logging::GetMinLogLevel());
   // MinLogLevel is global, shared by all URLRequestContexts.
   logging::SetMinLogLevel(static_cast<int>(jlog_level));
   return old_log_level;
 }
 
 }  // namespace cronet