Add support for fetching Certificate Transparency SCTs over a TLS extension

net/ssl/ssl_config_service.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONFIG_SERVICE_H_
 #define NET_SSL_SSL_CONFIG_SERVICE_H_
 
 #include <vector>
 
 #include "base/basictypes.h"
@@ skipping 81 matching lines @@
   // Though cipher suites are sent in TLS as "uint8 CipherSuite[2]", in
   // big-endian form, they should be declared in host byte order, with the
   // first uint8 occupying the most significant byte.
   // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to
   // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002.
   std::vector<uint16> disabled_cipher_suites;
 
   bool cached_info_enabled;  // True if TLS cached info extension is enabled.
   bool channel_id_enabled;   // True if TLS channel ID extension is enabled.
   bool false_start_enabled;  // True if we'll use TLS False Start.
+  // True if the Certificate Transparency signed_certificate_timestamp
+  // TLS extension is enabled.
+  bool signed_cert_timestamps_enabled;
 
   // require_forward_secrecy, if true, causes only (EC)DHE cipher suites to be
   // enabled. NOTE: this only applies to server sockets currently, although
   // that could be extended if needed.
   bool require_forward_secrecy;
 
   // If |unrestricted_ssl3_fallback_enabled| is true, SSL 3.0 fallback will be
   // enabled for all sites.
   // If |unrestricted_ssl3_fallback_enabled| is false, SSL 3.0 fallback will be
   // disabled for a site pinned to the Google pin list (indicating that it is a
@@ skipping 55 matching lines @@
   class NET_EXPORT Observer {
    public:
     // Notify observers if SSL settings have changed.  We don't check all of the
     // data in SSLConfig, just those that qualify as a user config change.
     // The following settings are considered user changes:
     //     rev_checking_enabled
     //     version_min
     //     version_max
     //     disabled_cipher_suites
     //     channel_id_enabled
     //     false_start_enabled

[wtc, 2013/11/26 17:32:55]

We may need to list signed_cert_timestamps_enabled here as well.

     //     require_forward_secrecy
     virtual void OnSSLConfigChanged() = 0;
 
    protected:
     virtual ~Observer() {}
   };
 
   SSLConfigService();
 
   // May not be thread-safe, should only be called on the IO thread.
@@ skipping 39 matching lines @@
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONFIG_SERVICE_H_