add setter for enable_pkp_bypass_etc

components/cronet/ios/test/cronet_pkp_test.mm

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import <Cronet/Cronet.h>
 
 #include "components/cronet/ios/test/start_cronet.h"
 #include "components/grpc_support/test/quic_test_server.h"
 #include "cronet_test_base.h"
 #include "net/base/mac/url_conversions.h"
@@ skipping 122 matching lines @@
   CalculatePublicKeySha256(*cert, &hash_value);
   ASSERT_EQ(32ul, hash_value.size());
   NSData* matching_hash =
       [NSData dataWithBytes:hash_value.data() length:hash_value.size()];
 
   AddPkpAndStartCronet(server_host_, matching_hash, kEXCLUDE_SUBDOMAINS,
                        distant_future);
   ASSERT_NO_FATAL_FAILURE(sendRequestAndAssertResult(request_url_, kSUCCESS));
 }
 
+TEST_F(PkpTest, TestBypass) {
+  [Cronet setMockCertVerifier:CreateMockCertVerifier({kSERVER_CERT}, NO)];
+  [Cronet setEnablePublicKeyPinningBypassForLocalTrustAnchors:YES];

[mef, 2017/06/13 21:12:42]

This seems to test the default case as if it is not called at all.
Should we have different test where this is set to NO?

+  AddPkpAndStartCronet(server_host_, NonMatchingHash(), kEXCLUDE_SUBDOMAINS,
+                       distant_future);
+  ASSERT_NO_FATAL_FAILURE(sendRequestAndAssertResult(request_url_, kSUCCESS));
+}
+
 // Tests the case when the pin hash does not match and the client accesses the
 // subdomain of the configured PKP host with includeSubdomains flag set to true.
 // The client is expected to receive the error response.
 TEST_F(PkpTest, TestIncludeSubdomainsFlagEqualTrue) {
   AddPkpAndStartCronet(domain_, NonMatchingHash(), kINCLUDE_SUBDOMAINS,
                        distant_future);
   ASSERT_NO_FATAL_FAILURE(sendRequestAndAssertResult(request_url_, kERROR));
 }
 
 // Tests the case when the pin hash does not match and the client accesses the
@@ skipping 33 matching lines @@
   ASSERT_NO_FATAL_FAILURE(sendRequestAndAssertResult(request_url_, kERROR));
   [Cronet shutdownForTesting];
 
   // Restart Cronet engine and try the same request again. Since the pins are
   // not persisted, a successful response is expected.
   StartCronet(grpc_support::GetQuicTestServerPort());
   ASSERT_NO_FATAL_FAILURE(sendRequestAndAssertResult(request_url_, kSUCCESS));
 }
 
 }  // namespace cronet