Add --ignore-certificate-errors-spki-list switch and UMA histogram.

net/cert/mock_cert_verifier.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/mock_cert_verifier.h"
 
 #include <memory>
 #include <utility>
 
 #include "base/memory/ref_counted.h"
@@ skipping 18 matching lines @@
     DCHECK(cert);
     DCHECK(result.verified_cert);
   }
 
   scoped_refptr<X509Certificate> cert;
   std::string hostname;
   CertVerifyResult result;
   int rv;
 };
 
-MockCertVerifier::MockCertVerifier() : default_result_(ERR_CERT_INVALID) {}
+MockCertVerifier::MockCertVerifier()
+    : default_result_(ERR_CERT_INVALID), async_(false) {}
 
 MockCertVerifier::~MockCertVerifier() {}
 
 int MockCertVerifier::Verify(const RequestParams& params,
                              CRLSet* crl_set,
                              CertVerifyResult* verify_result,
                              const CompletionCallback& callback,
                              std::unique_ptr<Request>* out_req,
                              const NetLogWithSource& net_log) {
+  int result;
   RuleList::const_iterator it;
   for (it = rules_.begin(); it != rules_.end(); ++it) {
     // Check just the server cert. Intermediates will be ignored.
     if (!it->cert->Equals(params.certificate().get()))
       continue;
     if (!base::MatchPattern(params.hostname(), it->hostname))
       continue;
     *verify_result = it->result;
-    return it->rv;
+    result = it->rv;
+    goto exit;

[Ryan Sleevi, 2017/04/07 16:08:05]

We don't use goto in Chromium code

[martinkr, 2017/04/07 21:40:57]

Done.

   }
 
   // Fall through to the default.
   verify_result->verified_cert = params.certificate();
   verify_result->cert_status = MapNetErrorToCertStatus(default_result_);
-  return default_result_;
+  result = default_result_;
+
+exit:
+  if (async_) {
+    callback.Run(result);
+    return ERR_IO_PENDING;
+  }
+  return result;
 }
 
 void MockCertVerifier::AddResultForCert(scoped_refptr<X509Certificate> cert,
                                         const CertVerifyResult& verify_result,
                                         int rv) {
   AddResultForCertAndHost(std::move(cert), "*", verify_result, rv);
 }
 
 void MockCertVerifier::AddResultForCertAndHost(
     scoped_refptr<X509Certificate> cert,
     const std::string& host_pattern,
     const CertVerifyResult& verify_result,
     int rv) {
   rules_.push_back(Rule(std::move(cert), host_pattern, verify_result, rv));
 }
 
 }  // namespace net