Implement Expect-Staple

net/socket/ssl_client_socket_impl.h

Index: net/socket/ssl_client_socket_impl.h
diff --git a/net/socket/ssl_client_socket_impl.h b/net/socket/ssl_client_socket_impl.h
index 5fa33673747417f735365adabc5d4d54601a5853..97c5835b581c2c7fe763f1a904eeac20837d64d8 100644
--- a/net/socket/ssl_client_socket_impl.h
+++ b/net/socket/ssl_client_socket_impl.h
@@ -134,6 +134,8 @@ class SSLClientSocketImpl : public SSLClientSocket {
   void DoConnectCallback(int result);
   void UpdateServerCert();
   void VerifyCT();
+  void CheckOCSP(const X509Certificate& verified_certificate,
+                 const X509Certificate& unverified_certificate);
 
   void OnHandshakeIOComplete(int result);
   void OnSendComplete(int result);
@@ -370,6 +372,8 @@ class SSLClientSocketImpl : public SSLClientSocket {
   // pinning failure. It is a (somewhat) human-readable string.
   std::string pinning_failure_log_;
 
+  std::string ocsp_response_;
+
   BoundNetLog net_log_;
   base::WeakPtrFactory<SSLClientSocketImpl> weak_factory_;
 };