Remember user decision for bad ssl certs.

ios/web/web_state/ui/crw_web_controller.mm

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/web/web_state/ui/crw_web_controller.h"
 
 #import <WebKit/WebKit.h>
 
 #import <objc/runtime.h>
 #include <stddef.h>
@@ skipping 4376 matching lines @@
   // Ask web client if this cert error should be allowed.
   web::GetWebClient()->AllowCertificateError(
       self.webState, net::MapCertStatusToNetError(info.cert_status), info,
       net::GURLWithNSURL(requestURL), recoverable,
       base::BindBlock(^(bool proceed) {
         if (proceed) {
           DCHECK(recoverable);
           [_certVerificationController allowCert:leafCert
                                          forHost:host
                                           status:info.cert_status];
+          [self.sessionController.sessionCertificatePolicyManager
+              registerAllowedCertificate:leafCert
+                                 forHost:base::SysNSStringToUTF8(host)
+                                  status:info.cert_status];
           [self loadCurrentURL];
         }
       }));
 
   [self didUpdateSSLStatusForCurrentNavigationItem];
   [self loadCancelled];
 }
 
 - (void)ensureWebViewCreated {
   WKWebViewConfiguration* config =
@@ skipping 1121 matching lines @@
   }
 
   return web::WEB_VIEW_DOCUMENT_TYPE_GENERIC;
 }
 
 - (NSString*)refererFromNavigationAction:(WKNavigationAction*)action {
   return [action.request valueForHTTPHeaderField:@"Referer"];
 }
 
 @end