Add certificate error handling to devtools.

content/browser/devtools/protocol/security_handler.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/devtools/protocol/security_handler.h"
 
 #include <string>
 
 #include "content/browser/frame_host/render_frame_host_impl.h"
 #include "content/public/browser/navigation_controller.h"
@@ skipping 118 matching lines @@
           .Build();
 
   frontend_->SecurityStateChanged(
       security_state,
       security_style_explanations.scheme_is_cryptographic,
       std::move(explanations),
       std::move(insecure_status),
       Maybe<std::string>(security_style_explanations.summary));
 }
 
+bool SecurityHandler::NotifyCertificateError(CertErrorHandler handler) {
+  handlers_[++cert_error_id_] = handler;

[Eric Seckler, 2017/01/19 11:42:28]

nit: with next_cert_error_id_, this should become next_cert_error_id_++.
alternative is last_cert_error_id_ if you prefer :)

[irisu, 2017/02/07 23:30:19]

Done.

+  frontend_->CertificateError(cert_error_id_);
+  return true;
+}
+
 Response SecurityHandler::Enable() {
   enabled_ = true;
   if (host_)
     AttachToRenderFrameHost();
 
   return Response::OK();
 }
 
 Response SecurityHandler::Disable() {
   enabled_ = false;
   WebContentsObserver::Observe(nullptr);
   return Response::OK();
 }
 
 Response SecurityHandler::ShowCertificateViewer() {
   if (!host_)
     return Response::InternalError();
   WebContents* web_contents = WebContents::FromRenderFrameHost(host_);
   scoped_refptr<net::X509Certificate> certificate =
       web_contents->GetController().GetVisibleEntry()->GetSSL().certificate;
   if (!certificate)
     return Response::Error("Could not find certificate");
   web_contents->GetDelegate()->ShowCertificateViewerInDevTools(
       web_contents, certificate);
   return Response::OK();
 }
 
+Response SecurityHandler::HandleCertificateError(int event_id,
+                                                 const String& in_action) {
+  content::CertificateRequestResultType type =
+      content::CERTIFICATE_REQUEST_RESULT_TYPE_DENY;
+  Response response = Response::OK();
+  if (in_action == "continue") {
+    type = content::CERTIFICATE_REQUEST_RESULT_TYPE_CONTINUE;
+  } else if (in_action == "cancel") {
+    type = content::CERTIFICATE_REQUEST_RESULT_TYPE_CANCEL;
+  } else if (in_action == "deny") {
+    type = content::CERTIFICATE_REQUEST_RESULT_TYPE_DENY;
+  } else {
+    response = Response::Error(
+        String("Unknown Certificate Error Action: " + in_action));
+  }
+  handlers_[event_id].Run(type);

[Eric Seckler, 2017/01/19 11:42:28]

We should probably check above whether the provided event_id is valid, and
otherwise answer with an error, too.

[irisu, 2017/02/07 23:30:19]

Done.

+  handlers_.erase(event_id);
+  return response;
+}
+
 }  // namespace protocol
 }  // namespace content