Include both certificate chains in invalid cert reporting

net/cert/cert_verify_result.h

Index: net/cert/cert_verify_result.h
diff --git a/net/cert/cert_verify_result.h b/net/cert/cert_verify_result.h
index 9e6732552932b84e1d962becad0e508848d3c213..01caf2a074cff0eabd27f38284fb7942ae9ca5fa 100644
--- a/net/cert/cert_verify_result.h
+++ b/net/cert/cert_verify_result.h
@@ -37,6 +37,9 @@ class NET_EXPORT CertVerifyResult {
   // running within the sandbox.
   scoped_refptr<X509Certificate> verified_cert;
 
+  // The certificate and chain as sent by the server.
+  scoped_refptr<X509Certificate> unverified_server_cert;

[Ryan Sleevi, 2015/02/25 23:15:41]

This doesn't seem like it belongs in the CertVerifyResult, as it's a function of
the socket, not verification.

+
   // Bitmask of CERT_STATUS_* from net/base/cert_status_flags.h. Note that
   // these status flags apply to the certificate chain returned in
   // |verified_cert|, rather than the originally supplied certificate