Fixed failing DCHECK on connector start.

jingle/glue/xmpp_client_socket_factory.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "jingle/glue/xmpp_client_socket_factory.h"
 
 #include "base/logging.h"
 #include "jingle/glue/fake_ssl_client_socket.h"
 #include "jingle/glue/proxy_resolving_client_socket.h"
 #include "net/socket/client_socket_factory.h"
@@ skipping 30 matching lines @@
 }
 
 net::SSLClientSocket* XmppClientSocketFactory::CreateSSLClientSocket(
     net::ClientSocketHandle* transport_socket,
     const net::HostPortPair& host_and_port) {
   net::SSLClientSocketContext context;
   context.cert_verifier =
       request_context_getter_->GetURLRequestContext()->cert_verifier();
   context.transport_security_state = request_context_getter_->
       GetURLRequestContext()->transport_security_state();
-  DCHECK(context.transport_security_state);

[Sergey Ulanov, 2012/08/13 17:48:47]

transport_security_state is used for HSTS (http://dev.chromium.org/sts). HSTS
limits set of certs that can be used for some domains (specifically there are
preloaded restrictions for google.com domains) so it provides much better
protection against PKI attacks. It would be better if you could fix cloud print
to set this value in the context. It should be trivial change (e.g.
https://chromiumcodereview.appspot.com/10808094/diff/5033/remoting/host/url_r...
)

   // TODO(rkn): context.server_bound_cert_service is NULL because the
   // ServerBoundCertService class is not thread safe.
   return client_socket_factory_->CreateSSLClientSocket(
       transport_socket, host_and_port, ssl_config_, context);
 }
 
 
 }  // namespace jingle_glue