Certificate Transparency: Per-profile CT verification

chrome/browser/profiles/profile_io_data.cc

Index: chrome/browser/profiles/profile_io_data.cc
diff --git a/chrome/browser/profiles/profile_io_data.cc b/chrome/browser/profiles/profile_io_data.cc
index 3e331d5d8d0ca216f1269f907649fb33d187b24a..7016901a6493b0d7fdd814c27a35e0c7eb6e8778 100644
--- a/chrome/browser/profiles/profile_io_data.cc
+++ b/chrome/browser/profiles/profile_io_data.cc
@@ -68,6 +68,7 @@
 #include "net/base/keygen_handler.h"
 #include "net/base/network_quality_estimator.h"
 #include "net/cert/cert_verifier.h"
+#include "net/cert/multi_log_ct_verifier.h"
 #include "net/cookies/canonical_cookie.h"
 #include "net/http/http_network_session.h"
 #include "net/http/http_transaction_factory.h"
@@ -1155,6 +1156,11 @@ void ProfileIOData::Init(
         profile_params_->new_tab_page_interceptor.release());
   }
 
+  net::MultiLogCTVerifier* ct_verifier = new net::MultiLogCTVerifier();

[mmenke, 2015/11/17 17:38:32]

scoped_refptr?  Think that makes the ownership model here clearer, and not a big
fan of raw pointers.

[Eran Messeri, 2015/11/18 14:16:22]

Done.

+  ct_verifier->AddLogs(io_thread_globals->ct_logs);
+  main_request_context_->set_cert_transparency_verifier(ct_verifier);
+  cert_transparency_verifier_.reset(ct_verifier);
+
   InitializeInternal(
       network_delegate.Pass(), profile_params_.get(),
       protocol_handlers, request_interceptors.Pass());