Extend the webRequest.onCompleted event details object with TLS/SSL information

extensions/browser/api/web_request/web_request_api_helpers.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Helper classes and functions used for the WebRequest API.
 
 #ifndef EXTENSIONS_BROWSER_API_WEB_REQUEST_WEB_REQUEST_API_HELPERS_H_
 #define EXTENSIONS_BROWSER_API_WEB_REQUEST_WEB_REQUEST_API_HELPERS_H_
 
 #include <list>
 #include <memory>
 #include <set>
 #include <string>
 
 #include "base/macros.h"
 #include "base/memory/linked_ptr.h"
 #include "base/memory/ref_counted.h"
 #include "base/time/time.h"
 #include "content/public/common/resource_type.h"
 #include "extensions/browser/warning_set.h"
 #include "net/base/auth.h"
+#include "net/cert/x509_certificate.h"
 #include "net/http/http_request_headers.h"
 #include "net/http/http_response_headers.h"
+#include "net/ssl/ssl_info.h"
 #include "url/gurl.h"
 
 namespace base {
 class ListValue;
 class DictionaryValue;
 }
 
 namespace extensions {
 class Extension;
 }
 
 namespace net {
 class NetLogWithSource;
+class X509Certificate;
 }
 
 namespace extension_web_request_api_helpers {
 
 typedef std::pair<std::string, std::string> ResponseHeader;
 typedef std::vector<ResponseHeader> ResponseHeaders;
 
 // Internal representation of the extraInfoSpec parameter on webRequest
 // events, used to specify extra information to be included with network
 // events.
@@ skipping 289 matching lines @@
 // Returns a string representation of |type| or |other| if |type| is not handled
 // by the web request API.
 const char* ResourceTypeToString(content::ResourceType type);
 
 // Stores a |content::ResourceType| representation in |types| if |type_str| is
 // a resource type handled by the web request API. Returns true in case of
 // success.
 bool ParseResourceType(const std::string& type_str,
                        std::vector<content::ResourceType>* types);
 
+// Returns a list of dictionaries containing various information about the chain
+// of certificates referenced by |cert|. Ownership is passed to the caller.
+base::ListValue* ExtractCertificateChain(
+    scoped_refptr<net::X509Certificate> cert);
+
+// Returns a list of SSL errors contained within |status|. Ownership is passed

[palmer, 2017/01/21 01:16:30]

I'd say "X.509 validation errors" rather than "SSL" (or "TLS"), since they are
not TLS protocol errors. (And, indeed, it might (?) be useful to expose those
someday...?)

+// to the caller.
+base::ListValue* ParseCertificateStatusErrors(net::CertStatus status);
+
 }  // namespace extension_web_request_api_helpers
 
 #endif  // EXTENSIONS_BROWSER_API_WEB_REQUEST_WEB_REQUEST_API_HELPERS_H_