Give more request types a TransportSecurityState.

chrome/browser/chromeos/web_socket_proxy.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/web_socket_proxy.h"
 
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
 
@@ skipping 36 matching lines @@
 #include "content/public/browser/notification_types.h"
 #include "content/public/common/url_constants.h"
 #include "extensions/common/constants.h"
 #include "googleurl/src/gurl.h"
 #include "googleurl/src/url_parse.h"
 #include "net/base/address_list.h"
 #include "net/base/host_port_pair.h"
 #include "net/base/io_buffer.h"
 #include "net/base/net_errors.h"
 #include "net/cert/cert_verifier.h"
+#include "net/http/transport_security_state.h"
 #include "net/socket/client_socket_factory.h"
 #include "net/socket/client_socket_handle.h"
 #include "net/socket/ssl_client_socket.h"
 #include "net/socket/stream_socket.h"
 #include "net/ssl/ssl_config_service.h"
 #include "third_party/libevent/evdns.h"
 #include "third_party/libevent/event.h"
 
 using content::BrowserThread;
 
@@ skipping 543 matching lines @@
       return;
     }
     net::ClientSocketHandle* handle = new net::ClientSocketHandle();
     handle->set_socket(socket_.release());
     net::ClientSocketFactory* factory =
         net::ClientSocketFactory::GetDefaultFactory();
     net::SSLClientSocketContext ssl_context;
     if (!cert_verifier_.get())
       cert_verifier_.reset(net::CertVerifier::CreateDefault());
     ssl_context.cert_verifier = cert_verifier_.get();
+    if (!transport_security_state_.get())
+      transport_security_state_.reset(new net::TransportSecurityState);
+    ssl_context.transport_security_state = transport_security_state_.get();
     socket_.reset(factory->CreateSSLClientSocket(
         handle, host_port_pair_, ssl_config_, ssl_context));
     if (!socket_.get()) {
       LOG(WARNING) << "Failed to create an SSL client socket.";
       OnSSLHandshakeCompleted(net::ERR_UNEXPECTED);
       return;
     }
     result = socket_->Connect(base::Bind(&SSLChan::OnSSLHandshakeCompleted,
                                          base::Unretained(this)));
     if (result != net::ERR_IO_PENDING)
@@ skipping 144 matching lines @@
           Shut(0);
         }
       }
     }
   }
 
   Phase phase_;
   scoped_ptr<net::StreamSocket> socket_;
   net::HostPortPair host_port_pair_;
   scoped_ptr<net::CertVerifier> cert_verifier_;
+  scoped_ptr<net::TransportSecurityState> transport_security_state_;
   net::SSLConfig ssl_config_;
   IOBufferQueue inbound_stream_;
   IOBufferQueue outbound_stream_;
   int read_pipe_;
   int write_pipe_;
   bool is_socket_read_pending_;
   bool is_socket_write_pending_;
   bool is_read_pipe_blocked_;
   bool is_write_pipe_blocked_;
   base::WeakPtrFactory<SSLChan> weak_factory_;
@@ skipping 1107 matching lines @@
 
 void WebSocketProxy::Shutdown() {
   static_cast<Serv*>(impl_)->Shutdown();
 }
 
 void WebSocketProxy::OnNetworkChange() {
   static_cast<Serv*>(impl_)->OnNetworkChange();
 }
 
 }  // namespace chromeos