Add production Cast CRL certificate.

components/cast_certificate/cast_crl.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cast_certificate/cast_crl.h"
 
 #include <unordered_map>
 #include <unordered_set>
 
 #include "base/base64.h"
@@ skipping 39 matching lines @@
 // Singleton for the Cast CRL trust store.
 class CastCRLTrustStore {
  public:
   static CastCRLTrustStore* GetInstance() {
     return base::Singleton<CastCRLTrustStore, base::LeakySingletonTraits<
                                                   CastCRLTrustStore>>::get();
   }
 
   static net::TrustStore& Get() { return GetInstance()->store_; }
 
+  static void Reinitialize() { GetInstance()->Initialize(); }
+
  private:
   friend struct base::DefaultSingletonTraits<CastCRLTrustStore>;
 
-  CastCRLTrustStore() {
+  CastCRLTrustStore() { Initialize(); }
+
+  void Initialize() {
+    store_.Clear();
     // Initialize the trust store with the root certificate.
-    // TODO(ryanchung): Add official Cast CRL Root here
-    // scoped_refptr<net::ParsedCertificate> root = net::ParsedCertificate::
-    //     net::ParsedCertificate::CreateFromCertificateData(
-    //         kCastCRLRootCaDer, sizeof(kCastCRLRootCaDer),
-    //         net::ParsedCertificate::DataSource::EXTERNAL_REFERENCE, {});
-    // CHECK(root);
-    // store_.AddTrustedCertificate(std::move(root));
+    scoped_refptr<net::ParsedCertificate> root =
+        net::ParsedCertificate::CreateFromCertificateData(
+            kCastCRLRootCaDer, sizeof(kCastCRLRootCaDer),
+            net::ParsedCertificate::DataSource::EXTERNAL_REFERENCE, {});
+    CHECK(root);
+    store_.AddTrustedCertificate(std::move(root));
   }
 
   net::TrustStore store_;
   DISALLOW_COPY_AND_ASSIGN(CastCRLTrustStore);
 };
 
 // Converts a uint64_t unix timestamp to net::der::GeneralizedTime.
 bool ConvertTimeSeconds(uint64_t seconds,
                         net::der::GeneralizedTime* generalized_time) {
   base::Time unix_timestamp =
@@ skipping 248 matching lines @@
 bool SetCRLTrustAnchorForTest(const std::string& cert) {
   scoped_refptr<net::ParsedCertificate> anchor(
       net::ParsedCertificate::CreateFromCertificateCopy(cert, {}));
   if (!anchor)
     return false;
   CastCRLTrustStore::Get().Clear();
   CastCRLTrustStore::Get().AddTrustedCertificate(std::move(anchor));
   return true;
 }
 
+void ResetCRLTrustAnchorForTest() {
+  CastCRLTrustStore::Reinitialize();
+}
+
 }  // namespace cast_certificate