Certificate Transparency: Require SCTs for EV certificates.

chrome/browser/profiles/off_the_record_profile_io_data.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/profiles/off_the_record_profile_io_data.h"
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/logging.h"
 #include "base/prefs/pref_service.h"
@@ skipping 208 matching lines @@
   main_context->set_fraudulent_certificate_reporter(
       fraudulent_certificate_reporter());
   main_context->set_proxy_service(proxy_service());
 
   main_context->set_throttler_manager(
       io_thread_globals->throttler_manager.get());
 
   main_context->set_cert_transparency_verifier(
       io_thread_globals->cert_transparency_verifier.get());
 
+  main_context->set_cert_policy_enforcer(
+      io_thread_globals->cert_policy_enforcer.get());
+
   // For incognito, we use the default non-persistent HttpServerPropertiesImpl.
   set_http_server_properties(
       scoped_ptr<net::HttpServerProperties>(
           new net::HttpServerPropertiesImpl()));
   main_context->set_http_server_properties(http_server_properties());
 
   // For incognito, we use a non-persistent channel ID store.
   net::ChannelIDService* channel_id_service =
       new net::ChannelIDService(
           new net::DefaultChannelIDStore(NULL),
@@ skipping 55 matching lines @@
   extensions_context->set_transport_security_state(transport_security_state());
 
   extensions_context->set_net_log(io_thread->net_log());
 
   extensions_context->set_throttler_manager(
       io_thread_globals->throttler_manager.get());
 
   extensions_context->set_cert_transparency_verifier(
       io_thread_globals->cert_transparency_verifier.get());
 
+  extensions_context->set_cert_policy_enforcer(
+      io_thread_globals->cert_policy_enforcer.get());
+
   // All we care about for extensions is the cookie store. For incognito, we
   // use a non-persistent cookie store.
   net::CookieMonster* extensions_cookie_store =
       content::CreateCookieStore(content::CookieStoreConfig())->
           GetCookieMonster();
   // Enable cookies for devtools and extension URLs.
   const char* const schemes[] = {
       content::kChromeDevToolsScheme,
       extensions::kExtensionScheme
   };
@@ skipping 91 matching lines @@
   return app_request_context;
 }
 
 net::URLRequestContext*
 OffTheRecordProfileIOData::AcquireIsolatedMediaRequestContext(
     net::URLRequestContext* app_context,
     const StoragePartitionDescriptor& partition_descriptor) const {
   NOTREACHED();
   return NULL;
 }