Implement Expect-Staple

net/ssl/ssl_info.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_INFO_H_
 #define NET_SSL_SSL_INFO_H_
 
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/ct_verify_result.h"
+#include "net/cert/internal/parse_ocsp.h"
 #include "net/cert/sct_status_flags.h"
 #include "net/cert/x509_cert_types.h"
 #include "net/ssl/signed_certificate_timestamp_and_status.h"
 #include "net/ssl/ssl_config.h"
 
 namespace net {
 
 namespace ct {
 
 enum class CertPolicyCompliance;
 enum class EVPolicyCompliance;
 
 }  // namespace ct
 
 class X509Certificate;
 
 // SSL connection info.
 // This is really a struct.  All members are public.
 class NET_EXPORT SSLInfo {
  public:
   // HandshakeType enumerates the possible resumption cases after an SSL
   // handshake.
   enum HandshakeType {
     HANDSHAKE_UNKNOWN = 0,
     HANDSHAKE_RESUME,  // we resumed a previous session.
     HANDSHAKE_FULL,  // we negotiated a new session.
   };
 
+  struct OCSPStaple {
+    OCSPStaple();
+    ~OCSPStaple();
+
+    bool is_valid_date;
+    bool is_correct_certificate;
+    OCSPCertStatus::Status status;
+  };
+
   SSLInfo();
   SSLInfo(const SSLInfo& info);
   ~SSLInfo();
   SSLInfo& operator=(const SSLInfo& info);
 
   void Reset();
 
   bool is_valid() const { return cert.get() != NULL; }
 
   // Adds the specified |error| to the cert status.
@@ skipping 82 matching lines @@
 
   // Whether the connection complied with the CT EV policy, and if not,
   // why not. Only meaningful if |ct_compliance_details_available| is
   // true.
   ct::EVPolicyCompliance ct_ev_policy_compliance;
 
   // Whether the connection complied with the CT cert policy, and if
   // not, why not. Only meaningful it |ct_compliance_details_available|
   // is true.
   ct::CertPolicyCompliance ct_cert_policy_compliance;
+
+  std::vector<OCSPStaple> ocsp_staples;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_INFO_H_