Add certificate error handling to devtools.

third_party/WebKit/Source/core/inspector/browser_protocol.json

Index: third_party/WebKit/Source/core/inspector/browser_protocol.json
diff --git a/third_party/WebKit/Source/core/inspector/browser_protocol.json b/third_party/WebKit/Source/core/inspector/browser_protocol.json
index 70690810f21c812eab6cdcd4aa245ec98356d109..cf8b9a27cd2a9f94d1f945d720c34b49f5ebfbad 100644
--- a/third_party/WebKit/Source/core/inspector/browser_protocol.json
+++ b/third_party/WebKit/Source/core/inspector/browser_protocol.json
@@ -906,6 +906,12 @@
                     { "name": "displayedInsecureContentStyle", "$ref": "SecurityState", "description": "Security state representing a page that displayed insecure content." }
                 ],
                 "description": "Information about insecure content on the page."
+            },
+            {
+                "id": "CertificateErrorAction",
+                "type": "string",
+                "enum": ["continue", "cancel", "deny"],
+                "description": "The action to take when a certificate error occurs. continue will continue processing the request, cancel will cancel the request and deny will deny the request."
             }
         ],
         "commands": [
@@ -920,6 +926,21 @@
             {
                 "name": "showCertificateViewer",
                 "description": "Displays native dialog with the certificate details."
+            },
+            {
+                "name": "handleCertificateError",
+                "description": "Handles a certificate error.",

[estark, 2017/02/28 23:34:05]

Does this handle all certificate errors, or only top-level navigations? It would
be best if it were only the latter, since we don't give a way for the user to
bypass cert errors on subresources right now.

[irisu, 2017/03/06 11:56:49]

Done. Added a comment to clarify that this is for responding to certificateError
events when setOverrideCertificateErrors is set and the events should only
trigger for top-level navigations.

+                "parameters": [
+                    { "name": "eventID", "type": "integer", "description": "The ID of the event."},
+                    { "name": "action", "$ref": "CertificateErrorAction", "description": "The action to take on the certificate error." }
+                ]
+            },
+            {
+                "name": "setOverrideCertificateErrors",
+                "description": "Enable/disable overriding certificate errors.",

[Eric Seckler, 2017/02/28 08:41:17]

maybe add "If enabled, all certificate error events need to be handled by the
DevTools client and should be answered with handleCertificateError commands."

[irisu, 2017/02/28 23:30:25]

Done.

+                "parameters": [
+                    { "name": "override", "type": "boolean", "description": "If true, certificate errors will be overriden."}

[Eric Seckler, 2017/02/28 08:41:17]

nit: overridden. 

[irisu, 2017/02/28 23:30:25]

Done.

+                ]
             }
         ],
         "events": [
@@ -933,6 +954,15 @@
                     { "name": "insecureContentStatus", "$ref": "InsecureContentStatus", "description": "Information about insecure content on the page." },
                     { "name": "summary", "type": "string", "description": "Overrides user-visible description of the state.", "optional": true }
                 ]
+            },
+            {
+                "name": "certificateError",
+                "description": "There is a certificate error.",
+                "parameters": [
+                    { "name": "eventID", "type": "integer", "description": "The ID of the event."},
+                    { "name": "errorType", "type": "string", "description": "The type of the error."},
+                    { "name": "requestURL", "type": "string", "description": "The url that was requested."}
+                ]
             }
         ]
     },