Enable passing cast channel certificate authority keys.

net/cert/x509_certificate.h

Index: net/cert/x509_certificate.h
diff --git a/net/cert/x509_certificate.h b/net/cert/x509_certificate.h
index 97906ed0461f02c4d8705e2e3db8109484f21f1b..97711add0aa152463c672fbc8943064fa74f4c83 100644
--- a/net/cert/x509_certificate.h
+++ b/net/cert/x509_certificate.h
@@ -217,6 +217,12 @@ class NET_EXPORT X509Certificate
   // The fingerprint of this certificate.
   const SHA1HashValue& fingerprint() const { return fingerprint_; }
 
+  // The SHA-256 fingerprint of this certificate.
+  const SHA256HashValue fingerprint256() const {
+    net::X509Certificate::OSCertHandles intermediate;
+    return CalculateChainFingerprint256(os_cert_handle(), intermediate);
+  }

[Ryan Sleevi, 2014/10/17 19:53:21]

STYLE: Don't inline this. It violates the trivial inline rule.
DESIGN: NACK on this. It should be a static method ala CalculateFingerprint that
takes a single OSCertHandle. CalculateFingerprint256

(That said, this is being added in
https://codereview.chromium.org/547603002/diff/260001/net/cert/x509_certifica...
, but that CL may take a bit longer to review. You should reach out to Eran and
split off just that portion of his CL into a **NEW** CL, then land that, then
make this CL depend on that)

[vadimgo, 2014/10/20 23:35:28]

Moved from incline to code file and contacted Eran to see if his change can be
split off.

+
   // The fingerprint of the intermediate CA certificates.
   const SHA1HashValue& ca_fingerprint() const {
     return ca_fingerprint_;