[Telemetry] Use --ignore-certificate-errors-spki-list to bypass cert errors

telemetry/telemetry/internal/backends/chrome/chrome_browser_backend.py

 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import logging
 import pprint
 import shlex
 import sys
 
 from telemetry.core import exceptions
@@ skipping 110 matching lines @@
     return args
 
   def GetReplayBrowserStartupArgs(self):
     replay_args = []
     network_backend = self.platform_backend.network_controller_backend
     if not network_backend.is_initialized:
       return []
     proxy_port = network_backend.forwarder.port_pair.remote_port
     replay_args.append('--proxy-server=socks://localhost:%s' % proxy_port)
     if not network_backend.is_test_ca_installed:
-      # Ignore certificate errors if the platform backend has not created
-      # and installed a root certificate.
-      replay_args.append('--ignore-certificate-errors')
+      # Ignore certificate errors for certs that are signed with Wpr's root.
+      # openssl x509 -noout -pubkey -in wpr_cert.pem |
+      # openssl pkey -pubin -outform der |
+      # openssl dgst -sha256 -binary |
+      # base64

[nednguyen, 2017/08/22 15:40:50]

I think this string probably should be managed by wprgo code base. Maybe stored
in a file like ca_root.txt.

Then with this, we can add PRESUBMIT so that if people change wpr_cert.pem,
presubmit will validate whether the string in ca_root.txt is in sync. 

[xunjieli, 2017/08/22 21:05:43]

Done.

+      replay_args.append('--ignore-certificate-errors-spki-list='

[nednguyen, 2017/08/22 15:40:50]

nits: also link the discussion in crbug.com/757508 to here 

+                         'PhrPvGIaAMmd29hj8BCZOq096yj7uMpRNHpn5PDxI6I=')
     return replay_args
 
   def HasBrowserFinishedLaunching(self):
     assert self._port, 'No DevTools port info available.'
     return devtools_client_backend.IsDevToolsAgentAvailable(
         self._port,
         self._browser_target, self)
 
   def _WaitForBrowserToComeUp(self, remote_devtools_port=None):
     """ Wait for browser to come up.
@@ skipping 160 matching lines @@
   def supports_cpu_metrics(self):
     return True
 
   @property
   def supports_memory_metrics(self):
     return True
 
   @property
   def supports_power_metrics(self):
     return True