Certificate Transparency: Threading the CT verifier into the SSL client socket.

net/base/net_error_list.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file intentionally does not have header guards, it's included
 // inside a macro to generate enum values.
 
 // This file contains the list of network errors.
 
 //
@@ skipping 390 matching lines @@
 NET_ERROR(CERT_WEAK_KEY, -211)
 
 // Add new certificate error codes here.
 //
 // Update the value of CERT_END whenever you add a new certificate error
 // code.
 
 // The value immediately past the last certificate error code.
 NET_ERROR(CERT_END, -212)
 
+// Certificate Transparency: All Signed Certificate Timestamps failed to verify.
+// XXX(eranm): Move this error to a more appropriate category.
+NET_ERROR(CT_NO_SCTS_VERIFIED_OK, -299)

[wtc, 2013/11/28 15:18:24]

Let's work on this next week. I remember if an error is not < ERR_CERT_END, then
it won't trigger the standard certificate error handling.

This error should start with "CERT_". I suggest something like
"CERT_CT_VERIFY_FAILED" or "CERT_SCT_INVALID".

Note: Although error codes are not persisted, error code numbers are displayed
in error pages and may be cited in bug reports. So to avoid confusion, we don't
change error code values. But we have plenty of time to change this error before
the Chrome 33 branch is created.

+
 // The URL is invalid.
 NET_ERROR(INVALID_URL, -300)
 
 // The scheme of the URL is disallowed.
 NET_ERROR(DISALLOWED_URL_SCHEME, -301)
 
 // The scheme of the URL is unknown.
 NET_ERROR(UNKNOWN_URL_SCHEME, -302)
 
 // Attempting to load an URL resulted in too many redirects.
@@ skipping 283 matching lines @@
 NET_ERROR(DNS_TIMED_OUT, -803)
 
 // The entry was not found in cache, for cache-only lookups.
 NET_ERROR(DNS_CACHE_MISS, -804)
 
 // Suffix search list rules prevent resolution of the given host name.
 NET_ERROR(DNS_SEARCH_EMPTY, -805)
 
 // Failed to sort addresses according to RFC3484.
 NET_ERROR(DNS_SORT_ERROR, -806)