An implementation of chrome.socket.secure().

chrome/browser/extensions/api/socket/socket.h

Index: chrome/browser/extensions/api/socket/socket.h
diff --git a/chrome/browser/extensions/api/socket/socket.h b/chrome/browser/extensions/api/socket/socket.h
index 2e73cb0d1fee27a496af8b9d77ca2f0a4391b8e5..a7433974c8d9f4aaf7010c009a82168dc82a9775 100644
--- a/chrome/browser/extensions/api/socket/socket.h
+++ b/chrome/browser/extensions/api/socket/socket.h
@@ -42,9 +42,18 @@ class Socket : public ApiResource {
   enum SocketType {
     TYPE_TCP,
     TYPE_UDP,
+    TYPE_TLS
   };
 
   virtual ~Socket();
+
+  void set_hostname(const std::string& hostname) {
+    hostname_ = hostname;
+  }
+  const std::string& hostname() const {
+    return hostname_;
+  }
+
   virtual void Connect(const std::string& address,
                        int port,
                        const CompletionCallback& callback) = 0;
@@ -102,7 +111,8 @@ class Socket : public ApiResource {
                         const net::CompletionCallback& callback) = 0;
   virtual void OnWriteComplete(int result);
 
-  const std::string address_;
+  // The name given to Connect(), used when verifying a TLS certificate.
+  std::string hostname_;

[Ryan Sleevi, 2013/12/17 00:37:40]

This is not consistent with the implementation, given that you allow
set_hostname to replace the hostname given to Connect().

[lally, 2014/01/09 18:47:16]

Connect() wants a resolved hostname (the string contains an IP address).  I've
updated the documentation.

   bool is_connected_;
 
  private: