[Cronet-iOS] Public-Key-Pinning Tests

components/cronet/ios/cronet_environment.mm

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/cronet/ios/cronet_environment.h"
 
 #include <utility>
 
 #include "base/at_exit.h"
 #include "base/atomicops.h"
@@ skipping 282 matching lines @@
       cache_path.value();  // Storage path for http cache and cookie storage.
   context_config_builder.user_agent =
       user_agent_;  // User-Agent request header field.
   context_config_builder.experimental_options =
       experimental_options_;  // Set experimental Cronet options.
   context_config_builder.mock_cert_verifier = std::move(
       mock_cert_verifier_);  // MockCertVerifier to use for testing purposes.
   std::unique_ptr<URLRequestContextConfig> config =
       context_config_builder.Build();
 
+  config->pkp_list = std::move(pkp_list_);
+
   net::URLRequestContextBuilder context_builder;
 
   context_builder.set_accept_language(accept_language_);
 
+  // Explicitly disable the persister for Cronet to avoid persistence of dynamic
+  // HPKP.  This is a safety measure ensuring that nobody enables the
+  // persistence of HPKP by specifying transport_security_persister_path in the
+  // future.
+  context_builder.set_transport_security_persister_path(base::FilePath());
+
   config->ConfigureURLRequestContextBuilder(&context_builder, net_log_.get(),
                                             file_thread_.get()->task_runner());
 
   std::unique_ptr<net::MappedHostResolver> mapped_host_resolver(
       new net::MappedHostResolver(
           net::HostResolver::CreateDefaultResolver(nullptr)));
 
   context_builder.set_host_resolver(std::move(mapped_host_resolver));
 
   // TODO(690969): This behavior matches previous behavior of CookieStoreIOS in
@@ skipping 13 matching lines @@
                                                 quic_hint.port());
     url::SchemeHostPort quic_hint_server("https", quic_hint.host(),
                                          quic_hint.port());
     http_server_properties->SetAlternativeService(
         quic_hint_server, alternative_service, base::Time::Max());
   }
 
   context_builder.SetHttpServerProperties(std::move(http_server_properties));
 
   main_context_ = context_builder.Build();
+
+  // Iterate trhough PKP configuration for every host.

[mef, 2017/06/12 22:25:23]

nit: through (sp)

[kapishnikov, 2017/06/16 20:11:04]

Done.

+  for (auto* const pkp : config->pkp_list) {
+    // Add the host pinning.
+    main_context_->transport_security_state()->AddHPKP(
+        pkp->host, pkp->expiration_date, pkp->include_subdomains,
+        pkp->pin_hashes, GURL::EmptyGURL());
+  }
 }
 
 std::string CronetEnvironment::user_agent() {
   const net::HttpUserAgentSettings* user_agent_settings =
       main_context_->http_user_agent_settings();
   if (!user_agent_settings) {
     return nullptr;
   }
 
   return user_agent_settings->GetUserAgent();
@@ skipping 25 matching lines @@
   event->Signal();
 }
 
 std::string CronetEnvironment::getDefaultQuicUserAgentId() const {
   return base::SysNSStringToUTF8([[NSBundle mainBundle]
              objectForInfoDictionaryKey:@"CFBundleDisplayName"]) +
          " Cronet/" + CRONET_VERSION;
 }
 
 }  // namespace cronet