net: add ability to distinguish user-added root CAs.

net/base/cert_verify_result.h

-// Copyright (c) 2009 The Chromium Authors. All rights reserved.
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_CERT_VERIFY_RESULT_H_
 #define NET_BASE_CERT_VERIFY_RESULT_H_
 #pragma once
 
 namespace net {
 
 // The result of certificate verification.  Eventually this may contain the
 // certificate chain that was constructed during certificate verification.
 class CertVerifyResult {
  public:
   CertVerifyResult() { Reset(); }
 
   void Reset() {
     cert_status = 0;
     has_md5 = false;
     has_md2 = false;
     has_md4 = false;
     has_md5_ca = false;
     has_md2_ca = false;
+    is_probably_mitm_cert = true;

[wtc, 2011/04/06 04:28:38]

Why does is_probably_mitm_cert default to true?  I guess
we have to presume a cert is probably a MITM cert.

You can define this member as is_issued_by_known_root.
Then it can default to false.  (The IsRootedAtKnownRoot
functions in x509_certificate_{mac,win}.cc can be renamed
IsIssuedByKnownRoot.)

[agl, 2011/04/06 19:02:02]

Done.

   }
 
   // Bitmask of CERT_STATUS_* from net/base/cert_status_flags.h
   int cert_status;
 
   // Properties of the certificate chain.
   bool has_md5;
   bool has_md2;
   bool has_md4;
   bool has_md5_ca;
   bool has_md2_ca;
+
+  // is_probably_mitm_cert is true if we believe that the certificate is a MITM
+  // certificate. This is determined by checking to see if the root of the
+  // certificate chain is a well known root. If it isn't then it's probably the
+  // case that this certificate was generated by a MITM proxy who's root has

[wtc, 2011/04/06 04:28:38]

Typo: who's => whose

[agl, 2011/04/06 19:02:02]

Done.

+  // been installed locally. This is meaningless if the certificate was not
+  // trusted.
+  bool is_probably_mitm_cert;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_CERT_VERIFY_RESULT_H_