Certificate Transparency: Logging SCTs to the NetLog.

net/base/net_log_event_type_list.h

Index: net/base/net_log_event_type_list.h
diff --git a/net/base/net_log_event_type_list.h b/net/base/net_log_event_type_list.h
index f31bccae3656a6b07a77054f779b16d8c7dd63b9..fbb36f7a89774b1d04f65b556f15206f8bdd8b01 100644
--- a/net/base/net_log_event_type_list.h
+++ b/net/base/net_log_event_type_list.h
@@ -558,6 +558,40 @@ EVENT_TYPE(SOCKET_WRITE_ERROR)
 //  }
 EVENT_TYPE(SSL_CERTIFICATES_RECEIVED)
 
+// Signed Certificate Timestamps were received from the server.
+// This event is only present when logging at LOG_ALL.

[eroman, 2013/11/27 00:03:20]

I don't see any evidence that this is logged exclusively in the presence of
LOG_ALL...

[Eran M. (Google), 2013/11/27 12:40:22]

Sorry, that's leftover comment from the description of
EVENT_TYPE(SSL_CERTIFICATES_RECEIVED). 
SSL_CERTIFICATES_RECEIVED claims the same thing but the code (in
net/cert/x509_certificate_net_log_param.cc) does not do anything with the
log_level parameter.

Removed the comment.

+// The following parameters are attached to the event:
+// {
+//    "embedded_scts": Base64-encoded SignedCertificateTimestampList,
+//    "scts_from_ocsp_response": Base64-encoded SignedCertificateTimestampList,
+//    "scts_from_tls_extension": Base64-encoded SignedCertificateTimestampList,
+// }
+//
+// The SignedCertificateTimestampList is defined in RFC6962 and is exactly as
+// received from the server.
+EVENT_TYPE(SSL_SIGNED_CERTIFICATE_TIMESTAMPS_RECEIVED)
+
+// Signed Certificate Timestamps were checked.
+// This event is only present when logging at LOG_ALL.
+// The following parameters are attached to the event:
+// {
+//    "verified_scts": <A list of SCTs>,
+//    "failed_to_verify_scts": <A list of SCTs>,
+//    "scts_from_unknown_logs": <A list of SCTs>,
+// }
+//
+// Where each SCT is an object:
+// {
+//    "origin": <one of: embedded_in_certificate, tls_extension, ocsp>,
+//    "version": <numeric version>,
+//    "log_id": <base64-encoded log id>,
+//    "timestamp": <numeric timestamp in milliseconds since epoch>,
+//    "hash_algorithm": <numeric indicator of hash algorithm>,
+//    "signature_algorithm": <numeric indicator of signature algorithm>,
+//    "signature_data": <base64-encoded signature bytes>,
+// }
+EVENT_TYPE(SSL_SIGNED_CERTIFICATE_TIMESTAMPS_CHECKED)
+
 // ------------------------------------------------------------------------
 // DatagramSocket
 // ------------------------------------------------------------------------