Enable public key pinning of local trust anchors

components/cronet/url_request_context_config.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 #define COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 88 matching lines @@
       // JSON encoded experimental options.
       const std::string& experimental_options,
       // Data reduction proxy key.
       const std::string& data_reduction_proxy_key,
       // Data reduction proxy.
       const std::string& data_reduction_primary_proxy,
       // Fallback data reduction proxy.
       const std::string& data_reduction_fallback_proxy,
       // Data reduction proxy secure proxy check URL.
       const std::string& data_reduction_secure_proxy_check_url,
+      // Enable pinning of the locat trust anchors
+      bool pin_local_trust_anchors,
       // MockCertVerifier to use for testing purposes.
       std::unique_ptr<net::CertVerifier> mock_cert_verifier);
   ~URLRequestContextConfig();
 
   // Configure |context_builder| based on |this|.
   void ConfigureURLRequestContextBuilder(
       net::URLRequestContextBuilder* context_builder,
       net::NetLog* net_log,
       const scoped_refptr<base::SequencedTaskRunner>& file_task_runner);
 
@@ skipping 21 matching lines @@
   // is a JSON object with the name of the experiment as the key, and the
   // configuration options as the value. An example:
   //   {"experiment1": {"option1": "option_value1", "option2": "option_value2",
   //    ...}, "experiment2: {"option3", "option_value3", ...}, ...}
   const std::string experimental_options;
   // Enable Data Reduction Proxy with authentication key.
   const std::string data_reduction_proxy_key;
   const std::string data_reduction_primary_proxy;
   const std::string data_reduction_fallback_proxy;
   const std::string data_reduction_secure_proxy_check_url;
+  // Enable pinning of local trust anchors
+  const bool pin_local_trust_anchors;
 
   // Certificate verifier for testing.
   std::unique_ptr<net::CertVerifier> mock_cert_verifier;
 
   // App-provided list of servers that support QUIC.
   ScopedVector<QuicHint> quic_hints;
 
   // The list of public key pins.
   ScopedVector<Pkp> pkp_list;
 
  private:
   DISALLOW_COPY_AND_ASSIGN(URLRequestContextConfig);
 };
 
 }  // namespace cronet
 
 #endif  // COMPONENTS_CRONET_URL_REQUEST_CONTEXT_CONFIG_H_