Introduce the ability to require CT for specific hosts

net/base/net_error_list.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum values.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 338 matching lines @@
 // Resolving a hostname to an IP address list included the IPv4 address
 // "127.0.53.53". This is a special IP address which ICANN has recommended to
 // indicate there was a name collision, and alert admins to a potential
 // problem.
 NET_ERROR(ICANN_NAME_COLLISION, -166)
 
 // The SSL server presented a certificate which could not be decoded. This is
 // not a certificate error code as no X509Certificate object is available. This
 // error is fatal.
 NET_ERROR(SSL_SERVER_CERT_BAD_FORMAT, -167)
+
 // Certificate Transparency: Received a signed tree head that failed to parse.
 NET_ERROR(CT_STH_PARSING_FAILED, -168)
+
 // Certificate Transparency: Received a signed tree head whose JSON parsing was
 // OK but was missing some of the fields.
 NET_ERROR(CT_STH_INCOMPLETE, -169)
 
 // The attempt to reuse a connection to send proxy auth credentials failed
 // before the AuthController was used to generate credentials. The caller should
 // reuse the controller with a new connection. This error is only used
 // internally by the network stack.
 NET_ERROR(UNABLE_TO_REUSE_CONNECTION_FOR_PROXY_AUTH, -170)
 
@@ skipping 96 matching lines @@
 // The server responded with a certificate that contains a weak key (e.g.
 // a too-small RSA key).
 NET_ERROR(CERT_WEAK_KEY, -211)
 
 // The certificate claimed DNS names that are in violation of name constraints.
 NET_ERROR(CERT_NAME_CONSTRAINT_VIOLATION, -212)
 
 // The certificate's validity period is too long.
 NET_ERROR(CERT_VALIDITY_TOO_LONG, -213)
 
+// Certificate Transparency was required for this connection, but the server
+// did not provide CT information that complied with the policy.
+NET_ERROR(CERTIFICATE_TRANSPARENCY_REQUIRED, -214)
+
 // Add new certificate error codes here.
 //
 // Update the value of CERT_END whenever you add a new certificate error
 // code.
 
 // The value immediately past the last certificate error code.
-NET_ERROR(CERT_END, -214)
+NET_ERROR(CERT_END, -215)
 
 // The URL is invalid.
 NET_ERROR(INVALID_URL, -300)
 
 // The scheme of the URL is disallowed.
 NET_ERROR(DISALLOWED_URL_SCHEME, -301)
 
 // The scheme of the URL is unknown.
 NET_ERROR(UNKNOWN_URL_SCHEME, -302)
 
@@ skipping 330 matching lines @@
 NET_ERROR(DNS_TIMED_OUT, -803)
 
 // The entry was not found in cache, for cache-only lookups.
 NET_ERROR(DNS_CACHE_MISS, -804)
 
 // Suffix search list rules prevent resolution of the given host name.
 NET_ERROR(DNS_SEARCH_EMPTY, -805)
 
 // Failed to sort addresses according to RFC3484.
 NET_ERROR(DNS_SORT_ERROR, -806)