net: add pinning for liberty.lavabit.com.

net/http/transport_security_state_static.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is automatically generated by transport_security_state_static_generate.go
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 
 // These are SubjectPublicKeyInfo hashes for public key pinning. The
@@ skipping 228 matching lines @@
     "\x94\x97\xfe\xc6\x5e\xfb\x48\xe3\x33\xb1";
 
 static const char kSPKIHash_AlphaSSL_G2[] =
     "\xe5\x24\xe9\x8e\x31\x7d\xc8\xfc\xad\x90"
     "\x53\x7c\x91\xe7\x0d\xa4\x70\x93\x90\x5f";
 
 static const char kSPKIHash_CryptoCat1[] =
     "\x4c\x87\xce\x85\x2c\xf4\xc0\x4d\x67\xa9"
     "\xe0\xec\x51\x0c\x7f\x3b\x14\xb3\xe9\xc9";
 
+static const char kSPKIHash_Libertylavabitcom[] =
+    "\x41\xbb\x3b\x8b\xc7\xcf\x3d\x13\x3f\x17"
+    "\xb3\x25\x7e\xe4\x03\xca\x8a\x5c\x6d\x36";
+
 // The following is static data describing the hosts that are hardcoded with
 // certificate pins or HSTS information.
 
 // kNoRejectedPublicKeys is a placeholder for when no public keys are rejected.
 static const char* const kNoRejectedPublicKeys[] = {
   NULL,
 };
 
 static const char* const kTestAcceptableCerts[] = {
   kSPKIHash_TestSPKI,
@@ skipping 133 matching lines @@
 static const char* const kCryptoCatAcceptableCerts[] = {
   kSPKIHash_DigiCertEVRoot,
   kSPKIHash_CryptoCat1,
   NULL,
 };
 #define kCryptoCatPins { \
   kCryptoCatAcceptableCerts, \
   kNoRejectedPublicKeys, \
 }
 
+static const char* const kLavabitAcceptableCerts[] = {
+  kSPKIHash_Libertylavabitcom,
+  NULL,
+};
+#define kLavabitPins { \
+  kLavabitAcceptableCerts, \
+  kNoRejectedPublicKeys, \
+}
+
 #define kNoPins {\
   NULL, NULL, \
 }
 
 static const struct HSTSPreload kPreloadedSTS[] = {
   {25, true, "\013pinningtest\007appspot\003com", false, kTestPins, DOMAIN_APPSPOT_COM },
   {12, true, "\006google\003com", false, kGooglePins, DOMAIN_GOOGLE_COM },
   {19, true, "\006wallet\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {21, true, "\010checkout\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {19, true, "\006chrome\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
@@ skipping 461 matching lines @@
   {23, true, "\021strongest-privacy\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {25, true, "\011ecosystem\011atlassian\003net", true, kNoPins, DOMAIN_NOT_PINNED },
   {18, true, "\002id\011atlassian\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {15, false, "\011bitbucket\003org", true, kNoPins, DOMAIN_NOT_PINNED },
   {12, true, "\007cupcake\002io", true, kNoPins, DOMAIN_NOT_PINNED },
   {12, true, "\007cupcake\002is", true, kNoPins, DOMAIN_NOT_PINNED },
   {9, true, "\004tent\002io", true, kNoPins, DOMAIN_NOT_PINNED },
   {12, true, "\006cybozu\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {17, true, "\013davidlyness\003com", true, kNoPins, DOMAIN_NOT_PINNED },
   {12, true, "\006medium\003com", true, kNoPins, DOMAIN_NOT_PINNED },
+  {21, true, "\007liberty\007lavabit\003com", true, kLavabitPins, DOMAIN_LAVABIT_COM },
 };
 static const size_t kNumPreloadedSTS = ARRAYSIZE_UNSAFE(kPreloadedSTS);
 
 static const struct HSTSPreload kPreloadedSNISTS[] = {
   {11, false, "\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {16, false, "\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {15, false, "\003www\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {20, false, "\003www\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {22, true, "\020google-analytics\003com", false, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\014googlegroups\003com", false, kGooglePins, DOMAIN_GOOGLEGROUPS_COM },
 };
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 #endif // NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_