Certificate Transparency: Require SCTs for EV certificates.

chrome/browser/io_thread.cc

Index: chrome/browser/io_thread.cc
diff --git a/chrome/browser/io_thread.cc b/chrome/browser/io_thread.cc
index c70c0358122bb0ae1746874e9411614a24d52687..5fa7c579101639edd9d941068aae7137ef16d294 100644
--- a/chrome/browser/io_thread.cc
+++ b/chrome/browser/io_thread.cc
@@ -52,6 +52,7 @@
 #include "content/public/browser/cookie_store_factory.h"
 #include "net/base/host_mapping_rules.h"
 #include "net/base/net_util.h"
+#include "net/cert/cert_policy_enforcer.h"
 #include "net/cert/cert_verifier.h"
 #include "net/cert/cert_verify_proc.h"
 #include "net/cert/ct_known_logs.h"
@@ -599,6 +600,10 @@ void IOThread::InitAsync() {
   net::MultiLogCTVerifier* ct_verifier = new net::MultiLogCTVerifier();
   globals_->cert_transparency_verifier.reset(ct_verifier);
 
+  if (command_line.HasSwitch(switches::kRequireCTForEV)) {
+    net::CertPolicyEnforcer::SetEnforceCTEVPolicy(true);
+  }
+
   // Add built-in logs
   ct_verifier->AddLogs(net::ct::CreateLogVerifiersForKnownLogs());