Add experimental feature info to certificate reports

components/certificate_reporting/cert_logger.proto

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // This protobuffer is intended to store reports from Chrome users of
 // certificate errors. A report will be sent from Chrome when it gets
 // e.g. a certificate for google.com that chains up to a root CA not expected by
 // Chrome for that origin, such as DigiNotar (compromised in July 2011), or
 // other pinning errors such as a blacklisted cert in the chain, or
 // (when opted in) other certificate validation errors like an expired
@@ skipping 26 matching lines @@
   }
 
   // The type of interstitial that was shown
   optional InterstitialReason interstitial_reason = 1;
   // True if the user clicked through to the offending website
   optional bool user_proceeded = 2;
   // True if the user was shown an option to click through
   optional bool overridable = 3;
 }
 
+// Contains information about features that are enabled/disabled that
+// might affect certificate validation.
+message CertLoggerFeaturesInfo {
+  message NetworkTimeQueryingInfo {
+    // True if the network time querying feature is enabled.
+    optional bool network_time_queries_enabled = 1;
+
+    // The experimental parameter controlling the behavior of network time
+    // queries (whether they happen on-demand when a certificate date error is
+    // encountered, in the background, or both).
+    enum NetworkTimeFetchBehavior {
+      NETWORK_TIME_FETCHES_UNKNOWN = 0;
+      NETWORK_TIME_FETCHES_BACKGROUND_ONLY = 1;
+      NETWORK_TIME_FETCHES_ON_DEMAND_ONLY = 2;
+      NETWORK_TIME_FETCHES_IN_BACKGROUND_AND_ON_DEMAND = 3;
+    }
+    optional NetworkTimeFetchBehavior network_time_query_behavior = 2;
+  }
+
+  optional NetworkTimeQueryingInfo network_time_querying_info = 2;

[battre (please use the other), 2016/11/11 21:32:08]

Nit: = 1?

[estark, 2016/11/11 22:24:38]

1 is assigned to |network_time_queries_enabled| on line 52.

+}
+
 message CertLoggerRequest {
   // The hostname being accessed (required as the cert could be valid for
   // multiple hosts, e.g. a wildcard or a SubjectAltName.
   required string hostname = 1;
   // The certificate chain as a series of PEM-encoded certificates, including
   // intermediates but not necessarily the root.
   required string cert_chain = 2;
   // The time (in usec since the epoch) when the client attempted to access the
   // site generating the pinning error.
   required int64 time_usec = 3;
@@ skipping 34 matching lines @@
   // series of PEM-encoded certificates. Can be different than
   // |cert_chain|, which is the chain the client built during
   // verification.
   optional string unverified_cert_chain = 8;
 
   // True if the certificate was rooted at a standard CA root ,as opposed to a
   // user-installed root, but is only meaningful if the underlying certificate
   // validation library built a trusted chain (i.e. the Chrome net stack set the
   // error, not the library).
   optional bool is_issued_by_known_root = 9;
+
+  // Information about features that were enabled or disabled for the
+  // user that might affect certificate validation.
+  optional CertLoggerFeaturesInfo features_info = 10;
 };