net: add ability to distinguish user-added root CAs.

net/base/cert_verify_result.h

-// Copyright (c) 2009 The Chromium Authors. All rights reserved.
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_CERT_VERIFY_RESULT_H_
 #define NET_BASE_CERT_VERIFY_RESULT_H_
 #pragma once
 
 namespace net {
 
 // The result of certificate verification.  Eventually this may contain the
 // certificate chain that was constructed during certificate verification.
 class CertVerifyResult {
  public:
   CertVerifyResult() { Reset(); }
 
   void Reset() {
     cert_status = 0;
     has_md5 = false;
     has_md2 = false;
     has_md4 = false;
     has_md5_ca = false;
     has_md2_ca = false;
+    is_issued_by_known_root = false;
   }
 
   // Bitmask of CERT_STATUS_* from net/base/cert_status_flags.h
   int cert_status;
 
   // Properties of the certificate chain.
   bool has_md5;
   bool has_md2;
   bool has_md4;
   bool has_md5_ca;
   bool has_md2_ca;
+
+  // is_issued_by_known_root is true if recognise the root CA as a standard

[wtc, 2011/04/07 05:01:54]

Nit: add "we" before "recognise"?

[agl, 2011/04/07 15:02:49]

Done.

+  // root.  If it isn't then it's probably the case that this certificate was
+  // generated by a MITM proxy whose root has been installed locally. This is
+  // meaningless if the certificate was not trusted.
+  bool is_issued_by_known_root;
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_CERT_VERIFY_RESULT_H_