Cache certificate verification results in memory.

chrome/browser/io_thread.h

Index: chrome/browser/io_thread.h
===================================================================
--- chrome/browser/io_thread.h	(revision 68922)
+++ chrome/browser/io_thread.h	(working copy)
@@ -30,6 +30,7 @@
 }  // namespace chrome_browser_net
 
 namespace net {
+class CertVerifier;
 class DnsRRResolver;
 class HostResolver;
 class HttpAuthHandlerFactory;
@@ -44,6 +45,7 @@
     ~Globals();
 
     scoped_ptr<net::HostResolver> host_resolver;
+    scoped_ptr<net::CertVerifier> cert_verifier;

[willchan no longer on Chromium, 2010/12/13 09:30:53]

I think you should put |cert_verifier| below |dnsrr_resolver| because, at least
in my mind, it's conceivable that |cert_verifier| may eventually depend on
|dnsrr_resolver|.

[agl, 2010/12/13 16:25:04]

I actually wouldn't worry about this. I don't want cert_verifier to depend on
dnsrr_resolver.

     scoped_ptr<net::DnsRRResolver> dnsrr_resolver;
     scoped_ptr<net::HttpAuthHandlerFactory> http_auth_handler_factory;
     scoped_ptr<net::URLSecurityManager> url_security_manager;