Make SSLConfigManager notify clients if the SHA-1 policy changes

net/ssl/ssl_config_service_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/ssl_config_service.h"
 
 #include <vector>
 
 #include "testing/gmock/include/gmock/gmock.h"
 #include "testing/gtest/include/gtest/gtest.h"
@@ skipping 47 matching lines @@
 
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(0);
   mock_service->SetSSLConfig(initial_config);
 
   mock_service->RemoveObserver(&observer);
 }
 
 TEST(SSLConfigServiceTest, ConfigUpdatesNotifyObservers) {
   SSLConfig initial_config;
   initial_config.rev_checking_enabled = true;
+  initial_config.rev_checking_required_local_anchors = false;
+  initial_config.sha1_local_anchors_enabled = true;
   initial_config.false_start_enabled = false;
   initial_config.version_min = SSL_PROTOCOL_VERSION_TLS1;
   initial_config.version_max = SSL_PROTOCOL_VERSION_TLS1_2;
 
   scoped_refptr<MockSSLConfigService> mock_service(
       new MockSSLConfigService(initial_config));
   MockSSLConfigServiceObserver observer;
   mock_service->AddObserver(&observer);
 
   // Test that the basic boolean preferences trigger updates.
   initial_config.rev_checking_enabled = false;
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
   mock_service->SetSSLConfig(initial_config);
 
+  initial_config.rev_checking_required_local_anchors = true;
+  EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
+  mock_service->SetSSLConfig(initial_config);
+
+  initial_config.sha1_local_anchors_enabled = false;
+  EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
+  mock_service->SetSSLConfig(initial_config);
+
   initial_config.false_start_enabled = true;
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
   mock_service->SetSSLConfig(initial_config);
 
   // Test that changing the SSL version range triggers updates.
   initial_config.version_min = SSL_PROTOCOL_VERSION_TLS1_1;
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
   mock_service->SetSSLConfig(initial_config);
 
   initial_config.version_max = SSL_PROTOCOL_VERSION_TLS1_1;
@@ skipping 20 matching lines @@
   // cipher suites disabled, triggers an update.
   disabled_ciphers.pop_back();
   initial_config.disabled_cipher_suites = disabled_ciphers;
   EXPECT_CALL(observer, OnSSLConfigChanged()).Times(1);
   mock_service->SetSSLConfig(initial_config);
 
   mock_service->RemoveObserver(&observer);
 }
 
 }  // namespace net