Expose when PKP is bypassed in SSLInfo.

net/quic/crypto/proof_verifier_chromium.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
 #define NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
 
 #include <memory>
 #include <set>
 #include <string>
@@ skipping 13 matching lines @@
 class CTPolicyEnforcer;
 class CertVerifier;
 class CTVerifier;
 class TransportSecurityState;
 
 // ProofVerifyDetailsChromium is the implementation-specific information that a
 // ProofVerifierChromium returns about a certificate verification.
 class NET_EXPORT_PRIVATE ProofVerifyDetailsChromium
     : public ProofVerifyDetails {
  public:
+  ProofVerifyDetailsChromium();
+  ProofVerifyDetailsChromium(const ProofVerifyDetailsChromium&);
+  ~ProofVerifyDetailsChromium() override;
+
   // ProofVerifyDetails implementation
   ProofVerifyDetails* Clone() const override;
 
   CertVerifyResult cert_verify_result;
   ct::CTVerifyResult ct_verify_result;
 
   // pinning_failure_log contains a message produced by
   // TransportSecurityState::PKPState::CheckPublicKeyPins in the event of a
   // pinning failure. It is a (somewhat) human-readable string.
   std::string pinning_failure_log;
+
+  // True if PKP was bypassed due to a local trust anchor.
+  bool pkp_bypassed;

[Ryan Sleevi, 2016/06/09 23:32:22]

If you added lines 34-36 to default initialize to false, you can just use C++11
here

bool pkp_bypassed = false;

Saves ya some pain :)

[davidben, 2016/06/10 17:24:23]

+1

 };
 
 // ProofVerifyContextChromium is the implementation-specific information that a
 // ProofVerifierChromium needs in order to log correctly.
 struct ProofVerifyContextChromium : public ProofVerifyContext {
  public:
   ProofVerifyContextChromium(int cert_verify_flags, const BoundNetLog& net_log)
       : cert_verify_flags(cert_verify_flags), net_log(net_log) {}
 
   int cert_verify_flags;
@@ skipping 40 matching lines @@
 
   TransportSecurityState* const transport_security_state_;
   CTVerifier* const cert_transparency_verifier_;
 
   DISALLOW_COPY_AND_ASSIGN(ProofVerifierChromium);
 };
 
 }  // namespace net
 
 #endif  // NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_