Extend the webRequest.onCompleted event details object with TLS/SSL information

extensions/common/api/web_request.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 [
   {
     "namespace": "webRequest",
     "description": "Use the <code>chrome.webRequest</code> API to observe and analyze traffic and to intercept, block, or modify requests in-flight.",
     "properties": {
       "MAX_HANDLER_BEHAVIOR_CHANGED_CALLS_PER_10_MINUTES": {
@@ skipping 132 matching lines @@
             "optional": true,
             "description": "An ArrayBuffer with a copy of the data."
           },
           "file": {
             "type": "string",
             "optional": true,
             "description": "A string with the file's path and name."
           }
         },
         "description": "Contains data uploaded in a URL request."
+      },
+      {
+        "id": "SSLVersions",
+        "type": "string",
+        "enum": ["UNKNOWN", "SSL 2.0", "SSL 3.0", "TLS 1.0", "TLS 1.1", "TLS 1.2", "QUIC"]
+      },
+      {
+        "id": "CipherNames",
+        "type": "string",
+        "enum": ["UNKNOWN", "NULL", "RC4_40", "RC4_128", "RC2_CBC_40", "IDEA_CBC", "DES40_CBC", "DES_CBC", "3DES_EDE_CBC", "AES_128_CBC", "AES_256_CBC", "CAMELLIA_128_CBC", "CAMELLIA_256_CBC", "SEED_CBC", "AES_128_GCM", "AES_256_GCM", "CAMELLIA_128_GCM", "CAMELLIA_256_GCM", "CHACHA20_POLY1305"]
+      },
+      {
+        "id": "KeyExchangeNames",
+        "type": "string",
+        "enum": ["UNKNOWN", "NULL", "RSA", "RSA_EXPORT", "DH_DSS_EXPORT", "DH_DSS", "DH_RSA_EXPORT", "DH_RSA", "DHE_DSS_EXPORT", "DHE_DSS", "DHE_RSA_EXPORT", "DHE_RSA", "DH_anon_EXPORT", "DH_anon", "ECDH_ECDSA", "ECDHE_ECDSA", "ECDH_RSA", "ECDHE_RSA", "ECDH_anon"]
+      },
+      {
+        "id": "MACNames",
+        "type": "string",
+        "enum": ["UNKNOWN", "NULL", "HMAC-MD5", "HMAC-SHA1", "HMAC-SHA256", "HMAC-SHA384"]
+      },
+      {
+        "id": "ValidationErrors",
+        "type": "string",
+        "enum": ["ERR_CERT_REVOKED", "ERR_CERT_INVALID", "ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN", "ERR_CERT_AUTHORITY_INVALID", "ERR_CERT_COMMON_NAME_INVALID", "ERR_CERT_NAME_CONSTRAINT_VIOLATION", "ERR_CERT_WEAK_SIGNATURE_ALGORITHM", "ERR_CERT_WEAK_KEY", "ERR_CERT_DATE_INVALID", "ERR_CERT_VALIDITY_TOO_LONG", "ERR_CERT_UNABLE_TO_CHECK_REVOCATION", "ERR_CERT_NO_REVOCATION_MECHANISM"]
+      },
+      {
+        "id": "DistinguishedName",
+        "type": "object",
+        "properties": {
+          "commonName": {
+            "type": "string",
+            "optional": true,
+            "description": "Subject Common Name."
+          },
+          "localityName": {
+            "type": "string",
+            "optional": true,
+            "description": "Subject Locality Name."
+          },
+          "stateOrProvinceName": {
+            "type": "string",
+            "optional": true,
+            "description": "Subject State or Province Name."
+          },
+          "countryName": {
+            "type": "string",
+            "optional": true,
+            "description": "Subject Country Name."
+          },
+          "streetAddresses": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Subject Street Addresses."
+          },
+          "organizationNames": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Subject Organization Names."
+          },
+          "organizationUnitNames": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Subject Organization Unit."
+          },
+          "domainComponents": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Additional domain components."
+          }
+        }
+      },
+      {
+        "id": "Certificate",
+        "type": "object",
+        "properties": {
+          "raw": {
+            "type": "binary",
+            "optional": true,
+            "description": "ArrayBuffer containing the DER encoded certificate."
+          },
+          "serialNumber": {
+            "type": "string",
+            "description": "The serial number of the certificate."
+          },
+          "subject": {
+            "$ref": "DistinguishedName",
+            "description": "The subject of the certificate"
+          },
+          "issuer": {
+            "$ref": "DistinguishedName",
+            "optional": true,
+            "description": "The issuer subject of the certificate"
+          },
+          "expired": {
+            "type": "boolean",
+            "description": "True if the certificate is expired."
+          },
+          "notBefore": {
+            "type": "number",
+            "description": "notBefore time of the certificate"
+          },
+          "notAfter": {
+            "type": "number",
+            "description": "notAfter time of the certificate"
+          },
+          "DNSNames": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Array of DNS names contained in the certificate."
+          },
+          "IPAddresses": {
+            "type": "array",
+            "items": { "type": "string" },
+            "optional": true,
+            "description": "Array of IP Addresses contained in the certificate."
+          }
+        }
+      },
+      {
+        "id": "ConnectionInfo",
+        "type": "object",
+        "properties": {
+          "cipherSuiteStrength": {
+            "type": "integer",
+            "description": "Strength, in bits, of the cipher suite used."
+          },
+          "clientCertificateSent": {
+            "type": "boolean",
+            "description": "True if a client certificate was sent to the server."
+          },
+          "channelIDSent": {
+             "type": "boolean",
+             "description": "True if a channel ID was sent to the server."
+          },
+          "tokenBindingNegotiated": {
+             "type": "boolean",
+             "description": "True if Token Binding was negotiated with the server and verion and key params were agreed on."
+          },
+          "cipherName": {
+            "$ref": "CipherNames",
+            "description" :"Name of cipher used"
+          },
+          "keyExchangeName": {
+            "$ref": "KeyExchangeNames",
+            "description" :"Name of key exchange technique used."
+          },
+          "macName": {
+            "$ref": "MACNames",
+            "optional": true,
+            "description" :"Name of MAC used."
+          },
+          "aeadSuite": {
+            "type": "boolean",
+            "optional": true,
+            "description": "True if the cipher suite is AEAD."
+          },
+          "deflateCompression": {
+            "type": "boolean",
+            "optional": true,
+            "description": "True if deflate compression was used."
+          },
+          "sslVersion": {
+            "$ref": "SSLVersions",
+            "description": "The version of TLS used"
+          },
+          "versionFallback": {
+            "type": "boolean",
+            "optional": true,
+            "description": "True if TLS fallback occurred."
+          },
+          "noRenegotiationExtension": {
+            "type": "boolean",
+            "optional": true,
+            "description": "True if the no renegotiation extension was sent."
+          }
+        }
+      },
+      {
+        "id": "SSLInfo",
+        "type": "object",
+        "properties": {
+          "connectionInfo": {
+            "$ref": "ConnectionInfo",
+            "description": "Information about the ciphers and protocols used to establish the underlying connection."
+          },
+          "sentChain": {
+            "type": "array",
+            "optional": true,
+            "description": "Array of Certificates that was sent by the server.",
+            "items": {
+              "$ref": "Certificate"
+            }
+          },
+          "builtChain": {
+            "type": "object",
+            "optional": true,
+            "description": "An object containing information about the certificate chain that was built from the sent certificates.",
+            "properties": {
+              "valid": {
+                "type": "boolean",
+                "description": "True if built chain is valid."
+              },
+              "issuedByKnownRoot": {
+                "type": "boolean",
+                "description": "True if the leaf certificate issued by known root."
+              },
+              "extendedValidation": {
+                "type": "boolean",
+                "description": "True if the leaf certificate is EV."
+              },
+              "revocationCheckingEnabled": {
+                "type": "boolean",
+                "description": "True if reovcation checking for certificates in the chain is enabled."
+              },
+              "errors": {
+                "type": "array",
+                "description": "List of validation errors.",
+                "optional": true,
+                "items": {
+                  "$ref": "ValidationErrors"
+                }
+              },
+              "nonUniqueName": {
+                "type": "boolean",
+                "optional": true,
+                "description": "True if a certificate in the chain contains non unique names."
+              },
+              "sha1SignaturePresent": {
+                "type": "boolean",
+                "optional": true,
+                "description": "True if a certificate in the chain uses a SHA1 signature."
+              },
+              "ctComplianceFailed": {
+                "type": "boolean",
+                "optional": true,
+                "description": "True if a certificate in the chain fails CT compliance checks."
+              },
+              "chain": {
+                "type": "array",
+                "description": "Array of Certificates built from the sent chain.",
+                "items": {
+                  "$ref": "Certificate"
+                }
+              }
+            }
+          }
+        }
       }
     ],
     "functions": [
       {
         "name": "handlerBehaviorChanged",
         "type": "function",
         "description": "Needs to be called when the behavior of the webRequest handlers has changed to prevent incorrect handling due to caching. This function call is expensive. Don't call it often.",
         "parameters": [
           {"type": "function", "name": "callback", "optional": true, "parameters": []}
         ]
@@ skipping 355 matching lines @@
               "method": {"type": "string", "description": "Standard HTTP method."},
               "frameId": {"type": "integer", "description": "The value 0 indicates that the request happens in the main frame; a positive value indicates the ID of a subframe in which the request happens. If the document of a (sub-)frame is loaded (<code>type</code> is <code>main_frame</code> or <code>sub_frame</code>), <code>frameId</code> indicates the ID of this frame, not the ID of the outer frame. Frame IDs are unique within a tab."},
               "parentFrameId": {"type": "integer", "description": "ID of frame that wraps the frame which sent the request. Set to -1 if no parent frame exists."},
               "tabId": {"type": "integer", "description": "The ID of the tab in which the request takes place. Set to -1 if the request isn't related to a tab."},
               "type": {"$ref": "ResourceType", "description": "How the requested resource will be used."},
               "timeStamp": {"type": "number", "description": "The time when this signal is triggered, in milliseconds since the epoch."},
               "ip": {"type": "string", "optional": true, "description": "The server IP address that the request was actually sent to. Note that it may be a literal IPv6 address."},
               "fromCache": {"type": "boolean", "description": "Indicates if this response was fetched from disk cache."},
               "statusCode": {"type": "integer", "description": "Standard HTTP status code returned by the server."},
               "responseHeaders": {"$ref": "HttpHeaders", "optional": true, "description": "The HTTP response headers that were received along with this response."},
-              "statusLine": {"type": "string", "description": "HTTP status line of the response or the 'HTTP/0.9 200 OK' string for HTTP/0.9 responses (i.e., responses that lack a status line) or an empty string if there are no headers."}
+              "statusLine": {"type": "string", "description": "HTTP status line of the response or the 'HTTP/0.9 200 OK' string for HTTP/0.9 responses (i.e., responses that lack a status line) or an empty string if there are no headers."},
+              "sslInfo": {"$ref": "SSLInfo", "optional": true, "description": "Optional information about the underlying SSL/TLS transport, if one was used."}
             }
           }
         ],
         "extraParameters": [
           {
             "$ref": "RequestFilter",
             "name": "filter",
             "description": "A set of filters that restricts the events that will be sent to this listener."
           },
           {
@@ skipping 34 matching lines @@
           {
             "$ref": "RequestFilter",
             "name": "filter",
             "description": "A set of filters that restricts the events that will be sent to this listener."
           }
         ]
       }
     ]
   }
 ]