Require a CTVerifier and CTPolicyEnforcer for TLS/QUIC sockets

remoting/protocol/ssl_hmac_channel_authenticator.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef REMOTING_PROTOCOL_SSL_HMAC_CHANNEL_AUTHENTICATOR_H_
 #define REMOTING_PROTOCOL_SSL_HMAC_CHANNEL_AUTHENTICATOR_H_
 
 #include <memory>
 #include <string>
 
 #include "base/callback.h"
 #include "base/macros.h"
 #include "base/memory/ref_counted.h"
 #include "base/threading/non_thread_safe.h"
 #include "remoting/protocol/channel_authenticator.h"
 
 namespace net {
 class CertVerifier;
+class CTPolicyEnforcer;
+class CTVerifier;
 class DrainableIOBuffer;
 class GrowableIOBuffer;
 class SSLServerContext;
 class SSLSocket;
 class TransportSecurityState;
 }  // namespace net
 
 namespace remoting {
 
 class RsaKeyPair;
@@ skipping 57 matching lines @@
 
   // Used in the SERVER mode only.
   std::string local_cert_;
   scoped_refptr<RsaKeyPair> local_key_pair_;
   std::unique_ptr<net::SSLServerContext> server_context_;
 
   // Used in the CLIENT mode only.
   std::string remote_cert_;
   std::unique_ptr<net::TransportSecurityState> transport_security_state_;
   std::unique_ptr<net::CertVerifier> cert_verifier_;
+  std::unique_ptr<net::CTVerifier> ct_verifier_;
+  std::unique_ptr<net::CTPolicyEnforcer> ct_policy_enforcer_;
 
   std::unique_ptr<net::SSLSocket> socket_;
   DoneCallback done_callback_;
 
   scoped_refptr<net::DrainableIOBuffer> auth_write_buf_;
   scoped_refptr<net::GrowableIOBuffer> auth_read_buf_;
 
   DISALLOW_COPY_AND_ASSIGN(SslHmacChannelAuthenticator);
 };
 
 }  // namespace protocol
 }  // namespace remoting
 
 #endif  // REMOTING_PROTOCOL_SSL_HMAC_CHANNEL_AUTHENTICATOR_H_