[Cronet] Public key pinning for Java API

components/cronet/url_request_context_config.h

Index: components/cronet/url_request_context_config.h
diff --git a/components/cronet/url_request_context_config.h b/components/cronet/url_request_context_config.h
index 7389811a88355e8ce6e5eaed8d5a30fa78b2fe43..9c8b6639caacfd8b1f1c35a7e95ef76a3edb1617 100644
--- a/components/cronet/url_request_context_config.h
+++ b/components/cronet/url_request_context_config.h
@@ -41,6 +41,26 @@ struct URLRequestContextConfig {
     DISALLOW_COPY_AND_ASSIGN(QuicHint);
   };
 
+  // Public-Key-Pinning configuration structure.

[xunjieli, 2015/11/06 15:47:55]

nit: could mention this is dynamic public key pinning. (as opposed to static
public key pinning)

+  struct Hpkp {
+    Hpkp(){};
+    ~Hpkp(){};
+
+    // Register |converter| for use in converter.Convert().
+    static void RegisterJSONConverter(
+        base::JSONValueConverter<Hpkp>* converter);
+
+    // Host name.
+    std::string host;
+    // Pin hashes (currently SHA256 only).
+    ScopedVector<std::string> pin_hashes;
+    // Indicates whether the pinning should apply to the pinned host subdomains.
+    bool include_subdomains;
+
+   private:
+    DISALLOW_COPY_AND_ASSIGN(Hpkp);
+  };
+
   URLRequestContextConfig();
   ~URLRequestContextConfig();
 
@@ -82,6 +102,8 @@ struct URLRequestContextConfig {
   std::string data_reduction_primary_proxy;
   std::string data_reduction_fallback_proxy;
   std::string data_reduction_secure_proxy_check_url;
+  // The list of public key pins.
+  ScopedVector<Hpkp> hpkp_list;
 
   // Certificate verifier for testing.
   scoped_ptr<net::CertVerifier> mock_cert_verifier;