Add Expect CT policy that gets checked on all certs

net/ssl/ssl_info.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_INFO_H_
 #define NET_SSL_SSL_INFO_H_
 
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/ct_verify_result.h"
 #include "net/cert/sct_status_flags.h"
 #include "net/cert/x509_cert_types.h"
 #include "net/ssl/signed_certificate_timestamp_and_status.h"
 #include "net/ssl/ssl_config.h"
 
 namespace net {
 
 namespace ct {
 
+enum class CertPolicyCompliance;
 enum class EVPolicyCompliance;
 
 }  // namespace ct
 
 class X509Certificate;
 
 // SSL connection info.
 // This is really a struct.  All members are public.
 class NET_EXPORT SSLInfo {
  public:
@@ skipping 95 matching lines @@
   // connection and results are available. If true, the field below
   // (|ev_policy_compliance|) will contain information about whether
   // the connection complied with the policy and why the connection
   // was considered non-compliant, if applicable.
   bool ct_compliance_details_available;
 
   // Whether the connection complied with the CT EV policy, and if not,
   // why not. Only meaningful if |ct_compliance_details_available| is
   // true.
   ct::EVPolicyCompliance ct_ev_policy_compliance;
+
+  // Whether the connection complied with the CT cert policy, and if
+  // not, why not. Only meaningful it |ct_compliance_details_available|
+  // is true.
+  ct::CertPolicyCompliance ct_cert_policy_compliance;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_INFO_H_