Extract Certificate Transparency SCTs from stapled OCSP responses

net/socket/ssl_client_socket.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/ssl_client_socket.h"
 
 #include "base/metrics/histogram.h"
 #include "base/strings/string_util.h"
 #include "crypto/ec_private_key.h"
 #include "net/ssl/server_bound_cert_service.h"
 #include "net/ssl/ssl_config_service.h"
 
 namespace net {
 
 SSLClientSocket::SSLClientSocket()
     : was_npn_negotiated_(false),
       was_spdy_negotiated_(false),
       protocol_negotiated_(kProtoUnknown),
       channel_id_sent_(false),
-      signed_cert_timestamps_received_(false) {
+      signed_cert_timestamps_received_(false),
+      stapled_ocsp_response_received_(false) {
 }
 
 // static
 NextProto SSLClientSocket::NextProtoFromString(
     const std::string& proto_string) {
   if (proto_string == "http1.1" || proto_string == "http/1.1") {
     return kProtoHTTP11;
   } else if (proto_string == "spdy/2") {
     return kProtoDeprecatedSPDY2;
   } else if (proto_string == "spdy/3") {
@@ skipping 111 matching lines @@
 }
 
 void SSLClientSocket::set_channel_id_sent(bool channel_id_sent) {
   channel_id_sent_ = channel_id_sent;
 }
 
 bool SSLClientSocket::WereSignedCertTimestampsReceived() const {
   return signed_cert_timestamps_received_;
 }
 
+bool SSLClientSocket::WasStapledOCSPResponseReceived() const {
+  return stapled_ocsp_response_received_;
+}
+
 void SSLClientSocket::set_signed_cert_timestamps_received(
     bool signed_cert_timestamps_received) {
   signed_cert_timestamps_received_ = signed_cert_timestamps_received;
 }
 
+void SSLClientSocket::set_stapled_ocsp_response_received(
+    bool stapled_ocsp_response_received) {
+  stapled_ocsp_response_received_ = stapled_ocsp_response_received;
+}
+
 // static
 void SSLClientSocket::RecordChannelIDSupport(
     ServerBoundCertService* server_bound_cert_service,
     bool negotiated_channel_id,
     bool channel_id_enabled,
     bool supports_ecc) {
   // Since this enum is used for a histogram, do not change or re-use values.
   enum {
     DISABLED = 0,
     CLIENT_ONLY = 1,
@@ skipping 35 matching lines @@
   }
   if (!server_bound_cert_service->IsSystemTimeValid()) {
     DVLOG(1) << "System time is not within the supported range for certificate "
                 "generation, not enabling channel ID.";
     return false;
   }
   return true;
 }
 
 }  // namespace net