net: add HSTS and pinning for Dropbox.

net/http/transport_security_state_static.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is automatically generated by transport_security_state_static_generate.go
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 
 // These are SubjectPublicKeyInfo hashes for public key pinning. The
@@ skipping 208 matching lines @@
     "\x15\x67\xe7\xf2\xab\xaf\xd6\x2b\x67\x75";
 
 static const char kSPKIHash_GlobalSignRootCA_R2[] =
     "\xa5\x06\x8a\x78\xcf\x84\xbd\x74\x32\xdd"
     "\x58\xf9\x65\xeb\x3a\x55\xe7\xc7\x80\xdc";
 
 static const char kSPKIHash_GlobalSignRootCA_R3[] =
     "\xf7\x93\x19\xef\xdf\xc1\xf5\x20\xfb\xac"
     "\x85\x55\x2c\xf2\xd2\x8f\x5a\xb9\xca\x0b";
 
+static const char kSPKIHash_EntrustRootEC1[] =
+    "\x07\x23\x2d\x45\x65\x87\xb9\xd7\xb1\xd9"
+    "\x7d\xd1\xc5\xfb\x65\xc5\x89\xbf\x92\x96";
+
+static const char kSPKIHash_TheGoDaddyGroupClass2[] =
+    "\xee\xe5\x9f\x1e\x2a\xa5\x44\xc3\xcb\x25"
+    "\x43\xa6\x9a\x5b\xd4\x6a\x25\xbc\xbb\x8e";
+
+static const char kSPKIHash_GoDaddyRoot_G2[] =
+    "\x21\x0f\x2c\x89\xf7\xc4\xcd\x5d\x1b\x82"
+    "\x5e\x38\xd6\xc6\x59\x3b\xa6\x93\x75\xae";
+
+static const char kSPKIHash_GoDaddySecure[] =
+    "\xba\x2e\xb5\xa8\x3e\x13\x23\xd9\x53\x4b"
+    "\x5e\x65\xbc\xe7\xa3\x13\x5d\xd0\xa9\x96";
+
+static const char kSPKIHash_ThawtePremiumServer[] =
+    "\x5f\xf3\x24\x6c\x8f\x91\x24\xaf\x9b\x5f"
+    "\x3e\xb0\x34\x6a\xf4\x2d\x5c\xa8\x5d\xcc";
+
+static const char kSPKIHash_ThawtePrimaryRootCA_G2[] =
+    "\x6a\x25\x23\x9d\x62\x75\xcd\x52\x21\x69"
+    "\x5c\x31\xe9\x89\xc4\xd5\x38\xb8\xc4\xea";
+
+static const char kSPKIHash_ThawtePrimaryRootCA_G3[] =
+    "\xab\x76\x88\xf4\xe5\xe1\x38\xc9\xe9\x50"
+    "\x17\xcd\xcd\xb3\x18\x17\xb3\x3e\x8c\xf5";
+
+static const char kSPKIHash_ThawtePrimaryRootCA[] =
+    "\x6c\xca\xbd\x7d\xb4\x7e\x94\xa5\x75\x99"
+    "\x01\xb6\xa7\xdf\xd4\x5d\x1c\x09\x1c\xcc";
+
 // The following is static data describing the hosts that are hardcoded with
 // certificate pins or HSTS information.
 
 // kNoRejectedPublicKeys is a placeholder for when no public keys are rejected.
 static const char* const kNoRejectedPublicKeys[] = {
   NULL,
 };
 
 static const char* const kTestAcceptableCerts[] = {
   kSPKIHash_TestSPKI,
@@ skipping 130 matching lines @@
 
 static const char* const kLavabitAcceptableCerts[] = {
   kSPKIHash_Libertylavabitcom,
   NULL,
 };
 #define kLavabitPins { \
   kLavabitAcceptableCerts, \
   kNoRejectedPublicKeys, \
 }
 
+static const char* const kDropboxAcceptableCerts[] = {
+  kSPKIHash_DigiCertAssuredIDRoot,
+  kSPKIHash_DigiCertGlobalRoot,
+  kSPKIHash_DigiCertEVRoot,
+  kSPKIHash_EntrustRootEC1,
+  kSPKIHash_Entrust_G2,
+  kSPKIHash_Entrust_EV,
+  kSPKIHash_Entrust_2048,
+  kSPKIHash_GeoTrustGlobal,
+  kSPKIHash_GeoTrustPrimary_G2,
+  kSPKIHash_GeoTrustPrimary_G3,
+  kSPKIHash_GeoTrustPrimary,
+  kSPKIHash_TheGoDaddyGroupClass2,
+  kSPKIHash_GoDaddyRoot_G2,
+  kSPKIHash_GoDaddySecure,
+  kSPKIHash_ThawtePremiumServer,
+  kSPKIHash_ThawtePrimaryRootCA_G2,
+  kSPKIHash_ThawtePrimaryRootCA_G3,
+  kSPKIHash_ThawtePrimaryRootCA,
+  NULL,
+};
+#define kDropboxPins { \
+  kDropboxAcceptableCerts, \
+  kNoRejectedPublicKeys, \
+}
+
 #define kNoPins {\
   NULL, NULL, \
 }
 
 static const struct HSTSPreload kPreloadedSTS[] = {
   {25, true, "\013pinningtest\007appspot\003com", false, kTestPins, DOMAIN_APPSPOT_COM },
   {12, true, "\006google\003com", false, kGooglePins, DOMAIN_GOOGLE_COM },
   {19, true, "\006wallet\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {21, true, "\010checkout\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {19, true, "\006chrome\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
@@ skipping 596 matching lines @@
   {21, false, "\017tinfoilsecurity\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {25, false, "\003www\017tinfoilsecurity\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {11, false, "\006imouto\002my", true, kNoPins, DOMAIN_NOT_PINNED },
   {13, true, "\010vocaloid\002my", true, kNoPins, DOMAIN_NOT_PINNED },
   {17, true, "\006sakaki\005anime\002my", true, kNoPins, DOMAIN_NOT_PINNED },
   {18, true, "\007reviews\005anime\002my", true, kNoPins, DOMAIN_NOT_PINNED },
   {17, true, "\004miku\007hatsune\002my", true, kNoPins, DOMAIN_NOT_PINNED },
   {19, true, "\012webcollect\003org\002uk", true, kNoPins, DOMAIN_NOT_PINNED },
   {24, false, "\003www\016capitainetrain\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {22, true, "\010accounts\007firefox\003com", true, kNoPins, DOMAIN_NOT_PINNED },
+  {13, false, "\007dropbox\003com", true, kDropboxPins, DOMAIN_DROPBOX_COM },
+  {17, true, "\003www\007dropbox\003com", true, kDropboxPins, DOMAIN_DROPBOX_COM },
 };
 static const size_t kNumPreloadedSTS = ARRAYSIZE_UNSAFE(kPreloadedSTS);
 
 static const struct HSTSPreload kPreloadedSNISTS[] = {
   {11, false, "\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {16, false, "\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {15, false, "\003www\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {20, false, "\003www\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {22, true, "\020google-analytics\003com", false, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\014googlegroups\003com", false, kGooglePins, DOMAIN_GOOGLEGROUPS_COM },
   {13, true, "\007mykolab\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {17, true, "\013semenkovich\003com", true, kNoPins, DOMAIN_NOT_PINNED },
 };
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 #endif // NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_