Add OCSPVerifyResult for tracking stapled OCSP responses cross-platform.

net/cert/internal/parse_ocsp.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_PARSE_OCSP_H_
 #define NET_CERT_INTERNAL_PARSE_OCSP_H_
 
 #include <memory>
 #include <string>
 #include <vector>
 
 #include "net/base/hash_value.h"
 #include "net/cert/internal/parse_certificate.h"
 #include "net/cert/internal/signature_algorithm.h"
+#include "net/cert/ocsp_revocation_status.h"
 #include "net/der/input.h"
 #include "net/der/parse_values.h"
 #include "net/der/parser.h"
 #include "net/der/tag.h"
 
 namespace base {
 class Time;
 class TimeDelta;
 }
 
@@ skipping 43 matching lines @@
 //      superseded              (4),
 //      cessationOfOperation    (5),
 //      certificateHold         (6),
 //           -- value 7 is not used
 //      removeFromCRL           (8),
 //      privilegeWithdrawn      (9),
 //      aACompromise           (10)
 // }
 // (from RFC 5280)
 struct OCSPCertStatus {
-  enum class Status {
-    GOOD,
-    REVOKED,
-    UNKNOWN,
-  };
 
   // Correspond to the values of CRLReason
   enum class RevocationReason {
     UNSPECIFIED = 0,
     KEY_COMPROMISE = 1,
     CA_COMPROMISE = 2,
     AFFILIATION_CHANGED = 3,
     SUPERSEDED = 4,
     CESSATION_OF_OPERATION = 5,
     CERTIFICATE_HOLD = 6,
     UNUSED = 7,
     REMOVE_FROM_CRL = 8,
     PRIVILEGE_WITHDRAWN = 9,
     AA_COMPROMISE = 10,
 
     LAST = AA_COMPROMISE,
   };
 
-  Status status;
+  OCSPRevocationStatus status;
   der::GeneralizedTime revocation_time;
   bool has_reason;
   RevocationReason revocation_reason;
 };
 
 // OCSPSingleResponse contains a representation of a DER-encoded RFC 6960
 // "SingleResponse". The |cert_id_tlv| and |extensions| fields are pointers to
 // the original object and are only valid as long as it is alive. They also
 // aren't verified until they are parsed. |next_update| is only valid if
 // |has_next_update| is true and |extensions| is only valid if |has_extensions|
@@ skipping 176 matching lines @@
 // |max_age|. Expressed differently, returns true if |response.thisUpdate| <=
 // |verify_time| < response.nextUpdate, and |response.thisUpdate| >=
 // |verify_time| - |max_age|.
 NET_EXPORT_PRIVATE bool CheckOCSPDateValid(const OCSPSingleResponse& response,
                                            const base::Time& verify_time,
                                            const base::TimeDelta& max_age);
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_PARSE_OCSP_H_