Include both certificate chains in invalid cert reporting

net/cert/cert_verify_proc.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc.h"
 
 #include <stdint.h>
 
 #include "base/basictypes.h"
 #include "base/metrics/histogram.h"
@@ skipping 177 matching lines @@
 CertVerifyProc::~CertVerifyProc() {}
 
 int CertVerifyProc::Verify(X509Certificate* cert,
                            const std::string& hostname,
                            int flags,
                            CRLSet* crl_set,
                            const CertificateList& additional_trust_anchors,
                            CertVerifyResult* verify_result) {
   verify_result->Reset();
   verify_result->verified_cert = cert;
+  // |verified_cert| will later be set to the actual verified
+  // certificate chain if verification is successful. Keep around the
+  // chain as sent by the server in |unverified_server_cert|.
+  verify_result->unverified_server_cert = cert;
 
   if (IsBlacklisted(cert)) {
     verify_result->cert_status |= CERT_STATUS_REVOKED;
     return ERR_CERT_REVOKED;
   }
 
   // We do online revocation checking for EV certificates that aren't covered
   // by a fresh CRLSet.
   // TODO(rsleevi): http://crbug.com/142974 - Allow preferences to fully
   // disable revocation checking.
@@ skipping 455 matching lines @@
     return true;
 
   // For certificates issued after 1 April 2015: 39 months.
   if (start >= time_2015_04_01 && month_diff > 39)
     return true;
 
   return false;
 }
 
 }  // namespace net