Add OCSPVerifyResult for tracking stapled OCSP responses cross-platform.

net/cert/cert_verify_result.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_CERT_VERIFY_RESULT_H_
 #define NET_CERT_CERT_VERIFY_RESULT_H_
 
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
 #include "net/cert/cert_status_flags.h"
+#include "net/cert/ocsp_verify_result.h"
 #include "net/cert/x509_cert_types.h"
 
 namespace net {
 
 class X509Certificate;
 
 // The result of certificate verification.
 class NET_EXPORT CertVerifyResult {
  public:
   CertVerifyResult();
@@ skipping 36 matching lines @@
   // meaningless if the certificate was not trusted.
   bool is_issued_by_known_root;
 
   // is_issued_by_additional_trust_anchor is true if the root CA used for this
   // verification came from the list of additional trust anchors.
   bool is_issued_by_additional_trust_anchor;
 
   // True if a fallback to the common name was used when matching the host
   // name, rather than using the subjectAltName.
   bool common_name_fallback_used;
+
+  // Verification of stapled OCSP response, if present.
+  OCSPVerifyResult ocsp;

[Ryan Sleevi, 2016/07/18 20:08:08]

NAMING: ocsp_status / ocsp_result ? Simply naming the variable "ocsp" doesn't
feel very descriptive/like a good name.

[dadrian, 2016/07/18 22:23:32]

Done. Switched to |ocsp_result|.

 };
 
 }  // namespace net
 
 #endif  // NET_CERT_CERT_VERIFY_RESULT_H_