Implement Expect-Staple

net/socket/ssl_client_socket_impl.h

Index: net/socket/ssl_client_socket_impl.h
diff --git a/net/socket/ssl_client_socket_impl.h b/net/socket/ssl_client_socket_impl.h
index 97fa2929d50d880c857b46bcc5da5043686b64e6..0816dfd530fd9217d10a19a4e2583e774eb2d09e 100644
--- a/net/socket/ssl_client_socket_impl.h
+++ b/net/socket/ssl_client_socket_impl.h
@@ -134,6 +134,8 @@ class SSLClientSocketImpl : public SSLClientSocket {
   void DoConnectCallback(int result);
   void UpdateServerCert();
   void VerifyCT();
+  void CheckOCSP(const X509Certificate& verified_certificate,
+                 const X509Certificate& unverified_certificate);
 
   void OnHandshakeIOComplete(int result);
   void OnSendComplete(int result);
@@ -373,6 +375,8 @@ class SSLClientSocketImpl : public SSLClientSocket {
   // True if PKP is bypassed due to a local trust anchor.
   bool pkp_bypassed_;
 
+  std::string ocsp_response_;
+
   BoundNetLog net_log_;
   base::WeakPtrFactory<SSLClientSocketImpl> weak_factory_;
 };