Certificate Transparency: Adding finch and NetLog logging for EV certs

net/cert/cert_policy_enforcer.h

Index: net/cert/cert_policy_enforcer.h
diff --git a/net/cert/cert_policy_enforcer.h b/net/cert/cert_policy_enforcer.h
index 68039b3cd8c73976b558d0c8f76cee3e342901f7..f0938f84356074f060afe21768c95cffce96a1a7 100644
--- a/net/cert/cert_policy_enforcer.h
+++ b/net/cert/cert_policy_enforcer.h
@@ -7,6 +7,7 @@
 #include <stddef.h>
 
 #include "net/base/net_export.h"
+#include "net/base/net_log.h"
 
 namespace net {
 
@@ -38,7 +39,8 @@ class NET_EXPORT CertPolicyEnforcer {
   // |cert| prior to invoking this method.

[davidben, 2014/12/08 22:42:35]

I'd add a sentence: If it is non-conforming, the certificate is logged to
|net_log|.

[Eran Messeri, 2014/12/09 19:58:15]

Done.

   bool DoesConformToCTEVPolicy(X509Certificate* cert,
                                const ct::EVCertsWhitelist* ev_whitelist,
-                               const ct::CTVerifyResult& ct_result);
+                               const ct::CTVerifyResult& ct_result,
+                               const BoundNetLog& net_log);
 
  private:
   bool IsCertificateInWhitelist(X509Certificate* cert,