Expose when PKP is bypassed in SSLInfo.

net/cert/cert_verify_result.h

Index: net/cert/cert_verify_result.h
diff --git a/net/cert/cert_verify_result.h b/net/cert/cert_verify_result.h
index 1cfb8fa51b3aa3655905cdc1f6e9a3292b9e07a7..8cb9e46d7e69cf3ded990eb2ae40810b8b9c1512 100644
--- a/net/cert/cert_verify_result.h
+++ b/net/cert/cert_verify_result.h
@@ -69,6 +69,9 @@ class NET_EXPORT CertVerifyResult {
   // True if a fallback to the common name was used when matching the host
   // name, rather than using the subjectAltName.
   bool common_name_fallback_used;
+
+  // True if PKP was bypassed for this certificate.
+  bool pkp_bypassed;

[Ryan Sleevi, 2016/06/09 19:17:32]

I believe this is a layering violation - the CertVerifier does not know about
PKP at present.

[estark, 2016/06/09 19:26:41]

That's only sort of true. The CertVerifier carries a CertStatus which knows
about PKP (CERT_STATUS_PINNED_KEY_MISSING). It sounds like we need to get rid of
that flag somehow.

 };
 
 }  // namespace net