Implement Expect-Staple

net/socket/ssl_client_socket_impl.h

Index: net/socket/ssl_client_socket_impl.h
diff --git a/net/socket/ssl_client_socket_impl.h b/net/socket/ssl_client_socket_impl.h
index 97fa2929d50d880c857b46bcc5da5043686b64e6..3e5f9d5bb5d7367f63f70076c1d1c92c47e0a6a3 100644
--- a/net/socket/ssl_client_socket_impl.h
+++ b/net/socket/ssl_client_socket_impl.h
@@ -134,7 +134,7 @@ class SSLClientSocketImpl : public SSLClientSocket {
   void DoConnectCallback(int result);
   void UpdateServerCert();
   void VerifyCT();
-
+  void ReportOCSP();

[Ryan Sleevi, 2016/06/23 22:11:52]

I'd like to avoid adding a dedicated state here; it's actually on the agenda of
"cleanups Sleevi wants to hack on" to clean up how the CT/cert verification
stuff works, but let's not add an extra method for it

   void OnHandshakeIOComplete(int result);
   void OnSendComplete(int result);
   void OnRecvComplete(int result);
@@ -373,6 +373,8 @@ class SSLClientSocketImpl : public SSLClientSocket {
   // True if PKP is bypassed due to a local trust anchor.
   bool pkp_bypassed_;
 
+  std::string ocsp_response_;
+
   BoundNetLog net_log_;
   base::WeakPtrFactory<SSLClientSocketImpl> weak_factory_;
 };