Add production Cast CRL certificate.

components/cast_certificate/cast_cert_validator.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cast_certificate/cast_cert_validator.h"
 
 #include <stddef.h>
 #include <stdint.h>
 
 #include <algorithm>
@@ skipping 37 matching lines @@
 // Singleton for the Cast trust store.
 class CastTrustStore {
  public:
   static CastTrustStore* GetInstance() {
     return base::Singleton<CastTrustStore,
                            base::LeakySingletonTraits<CastTrustStore>>::get();
   }
 
   static net::TrustStore& Get() { return GetInstance()->store_; }
 
+  static void Reinitialize() { GetInstance()->Initialize(); }

[eroman, 2016/08/03 22:47:58]

How about ReinitializeForTest() ?

Or make a comment regarding thread-safety, or that this should not ordinarily be
called.

[ryanchung, 2016/08/04 18:46:43]

Removed this code. It's no longer needed due to the change of approach.

+
  private:
   friend struct base::DefaultSingletonTraits<CastTrustStore>;
 
-  CastTrustStore() {
+  CastTrustStore() { Initialize(); }
+
+  void Initialize() {
+    store_.Clear();
     AddAnchor(kCastRootCaDer);
     AddAnchor(kEurekaRootCaDer);
   }
 
   // Adds a trust anchor given a DER-encoded certificate from static
   // storage.
   template <size_t N>
   void AddAnchor(const uint8_t (&data)[N]) {
     scoped_refptr<net::ParsedCertificate> root =
         net::ParsedCertificate::CreateFromCertificateData(
@@ skipping 262 matching lines @@
   scoped_refptr<net::ParsedCertificate> anchor(
       net::ParsedCertificate::CreateFromCertificateCopy(
           cert, GetCertParsingOptions()));
   if (!anchor)
     return false;
   CastTrustStore::Get().Clear();
   CastTrustStore::Get().AddTrustedCertificate(std::move(anchor));
   return true;
 }
 
+void ResetTrustAnchorForTest() {
+  CastTrustStore::Reinitialize();
+}
+
 }  // namespace cast_certificate