Add effective-expiration-date to Expect-CT reports

net/http/transport_security_state.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 
 #include <stdint.h>
 
 #include <map>
@@ skipping 299 matching lines @@
   // site expects valid Certificate Transparency information but it
   // wasn't supplied.
   class NET_EXPORT ExpectCTReporter {
    public:
     // Called when the host in |host_port_pair| has opted in to have
     // reports about Expect CT policy violations sent to |report_uri|,
     // and such a violation has occurred.
     virtual void OnExpectCTFailed(
         const net::HostPortPair& host_port_pair,
         const GURL& report_uri,
+        base::Time expiration,
         const X509Certificate* validated_certificate_chain,
         const X509Certificate* served_certificate_chain,
         const SignedCertificateTimestampAndStatusList&
             signed_certificate_timestamps) = 0;
 
    protected:
     virtual ~ExpectCTReporter() {}
   };
 
   // Indicates whether or not a public key pin check should send a
@@ skipping 334 matching lines @@
   // (built-in) state for |host| with expect_staple=true, or if |host| is a
   // subdomain of another domain with expect_staple=true and
   // include_subdomains_for_expect_staple=true.
   bool GetStaticExpectStapleState(
       const std::string& host,
       ExpectStapleState* expect_staple_result) const;
 
   void MaybeNotifyExpectCTFailed(
       const HostPortPair& host_port_pair,
       const GURL& report_uri,
+      base::Time expiration,
       const X509Certificate* validated_certificate_chain,
       const X509Certificate* served_certificate_chain,
       const SignedCertificateTimestampAndStatusList&
           signed_certificate_timestamps);
 
   // The sets of hosts that have enabled TransportSecurity. |domain| will always
   // be empty for a STSState, PKPState, or ExpectCTState in these maps; the
   // domain comes from the map keys instead. In addition, |upgrade_mode| in the
   // STSState is never MODE_DEFAULT and |HasPublicKeyPins| in the PKPState
   // always returns true.
@@ skipping 27 matching lines @@
   ReportCache sent_expect_ct_reports_cache_;
 
   THREAD_CHECKER(thread_checker_);
 
   DISALLOW_COPY_AND_ASSIGN(TransportSecurityState);
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_TRANSPORT_SECURITY_STATE_H_