Add CertIssuerSourceAia: authorityInfoAccess fetching for CertPathBuilder.

net/cert/internal/cert_issuer_source_aia.h

+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_CERT_INTERNAL_CERT_ISSUER_SOURCE_AIA_H_
+#define NET_CERT_INTERNAL_CERT_ISSUER_SOURCE_AIA_H_
+
+#include "base/strings/string_piece.h"
+#include "net/cert/internal/cert_issuer_source.h"
+
+namespace net {
+
+class CertNetFetcher;
+
+class NET_EXPORT CertIssuerSourceAia : public CertIssuerSource {
+ public:
+  // Creates CertIssuerSource that will use |cert_fetcher| to retrieve issuers
+  // using AuthorityInfoAccess URIs. |cert_fetcher| must outlive the
+  // CertIssuerSourceAia.  CertIssuerSourceAia must be created and used only on

[eroman, 2016/06/14 00:22:21]

nit: can this be rephrased to avoid speaking about a "network thread" ?

For instance by saying it lives on a single thread, or the CertnetFetcher is
operated from that thread.
Or alternately expressing in the code by inheriting NonThreadSafe or using
ThreadChecker.

[mattm, 2016/06/14 21:37:30]

Done.

+  // the network thread.
+  explicit CertIssuerSourceAia(CertNetFetcher* cert_fetcher);
+  ~CertIssuerSourceAia() override;
+
+  // CertIssuerSource implementation:
+  void SyncGetIssuersOf(
+      const ParsedCertificate* cert,
+      std::vector<scoped_refptr<ParsedCertificate>>* issuers) override;
+  void AsyncGetIssuersOf(const ParsedCertificate* cert,
+                         const IssuerCallback& issuers_callback,
+                         std::unique_ptr<Request>* out_req) override;
+
+ private:
+  CertNetFetcher* cert_fetcher_;
+
+  DISALLOW_COPY_AND_ASSIGN(CertIssuerSourceAia);
+};
+
+}  // namespace net
+
+#endif  // NET_CERT_INTERNAL_CERT_ISSUER_SOURCE_AIA_H_