Add Expect CT policy that gets checked on all certs

net/cert/ct_policy_enforcer.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_policy_enforcer.h"
 
 #include <algorithm>
 #include <utility>
 
 #include "base/bind.h"
@@ skipping 243 matching lines @@
     std::string truncated_fp =
         std::string(reinterpret_cast<const char*>(fingerprint.data), 8);
     cert_in_ev_whitelist = ev_whitelist->ContainsCertificateHash(truncated_fp);
 
     UMA_HISTOGRAM_BOOLEAN("Net.SSL_EVCertificateInWhitelist",
                           cert_in_ev_whitelist);
   }
   return cert_in_ev_whitelist;
 }
 
-void CheckCTEVPolicyCompliance(X509Certificate* cert,
+void CheckCTPolicyCompliance(X509Certificate* cert,

[Ryan Sleevi, 2016/01/12 21:24:56]

git cl format

                                const ct::EVCertsWhitelist* ev_whitelist,
                                const ct::CTVerifyResult& ct_result,
                                ComplianceDetails* result) {
   result->ct_presence_required = true;
 
   if (!IsBuildTimely())
     return;
   result->build_timely = true;
 
   if (ev_whitelist && ev_whitelist->IsValid())
@@ skipping 14 matching lines @@
       !HasEnoughDiverseSCTs(ct_result.verified_scts)) {
     result->status = CT_NOT_ENOUGH_DIVERSE_SCTS;
     return;
   }
 
   result->status = CT_ENOUGH_SCTS;
 }
 
 }  // namespace
 
-bool CTPolicyEnforcer::DoesConformToCTEVPolicy(
+bool CTPolicyEnforcer::DoesConformToCTPolicy(
     X509Certificate* cert,
     const ct::EVCertsWhitelist* ev_whitelist,
     const ct::CTVerifyResult& ct_result,
     const BoundNetLog& net_log) {
   ComplianceDetails details;
 
-  CheckCTEVPolicyCompliance(cert, ev_whitelist, ct_result, &details);
+  CheckCTPolicyCompliance(cert, ev_whitelist, ct_result, &details);
 
   NetLog::ParametersCallback net_log_callback =
       base::Bind(&NetLogComplianceCheckResultCallback, base::Unretained(cert),
                  base::Unretained(&details));
 
   net_log.AddEvent(NetLog::TYPE_EV_CERT_CT_COMPLIANCE_CHECKED,
                    net_log_callback);
 
   if (!details.ct_presence_required)
     return true;
 
   if (!details.build_timely)
     return false;
 
   LogCTComplianceStatusToUMA(details.status, ev_whitelist);
 
   if (details.status == CT_IN_WHITELIST || details.status == CT_ENOUGH_SCTS)
     return true;
 
   return false;
 }
 
 }  // namespace net