[Cronet] Public key pinning for Java API

components/cronet/url_request_context_config.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 #define COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 
 #include <string>
 
 #include "base/json/json_value_converter.h"
@@ skipping 23 matching lines @@
     std::string host;
     // Port of the server that supports QUIC.
     int port;
     // Alternate protocol port.
     int alternate_port;
 
    private:
     DISALLOW_COPY_AND_ASSIGN(QuicHint);
   };
 
+  // Public-Key-Pinning configuration structure.
+  struct Hpkp {
+    Hpkp(){};
+    ~Hpkp(){};
+
+    // Register |converter| for use in converter.Convert().
+    static void RegisterJSONConverter(
+        base::JSONValueConverter<Hpkp>* converter);
+
+    // Name of the pinned host.

[mef, 2015/11/02 17:56:56]

nit: Host name.

[kapishnikov, 2015/11/02 22:45:49]

Done.

+    std::string host;
+    // Pin hashes (currently SHA256 only).
+    ScopedVector<std::string> pin_hashes;
+    // Indicates whether the pinning should apply to the pinned host subdomains.
+    bool include_subdomains;
+
+   private:
+    DISALLOW_COPY_AND_ASSIGN(Hpkp);
+  };
+
   URLRequestContextConfig();
   ~URLRequestContextConfig();
 
   // Load config values from JSON format.
   bool LoadFromJSON(const std::string& config_string);
 
   // Configure |context_builder| based on |this|.
   void ConfigureURLRequestContextBuilder(
       net::URLRequestContextBuilder* context_builder);
 
@@ skipping 21 matching lines @@
   std::string user_agent;
   // App-provided list of servers that support QUIC.
   ScopedVector<QuicHint> quic_hints;
   // Comma-separted list of QUIC connection options.
   std::string quic_connection_options;
   // Enable Data Reduction Proxy with authentication key.
   std::string data_reduction_proxy_key;
   std::string data_reduction_primary_proxy;
   std::string data_reduction_fallback_proxy;
   std::string data_reduction_secure_proxy_check_url;
+  // The list of host pinning-s

[mef, 2015/11/02 17:56:56]

-s? End in period.

[kapishnikov, 2015/11/02 22:45:49]

Done.

+  ScopedVector<Hpkp> hpkp_list;
 
   // Certificate verifier for testing.
   scoped_ptr<net::CertVerifier> mock_cert_verifier;
 
  private:
   DISALLOW_COPY_AND_ASSIGN(URLRequestContextConfig);
 };
 
 }  // namespace cronet
 
 #endif  // COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_