net: add DigiCert to Twitter pins.

net: add DigiCert to Twitter pins.

BUG=none

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=221021

[palmer, 2013-08-30 17:04:03]

Verified the PEMs look right and that the SPKI hashes match the PEMs. LGTM.

[commit-bot: I haz the power, 2013-09-03 14:41:53]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/agl@chromium.org/22865046/3001

[commit-bot: I haz the power, 2013-09-03 14:41:55]

Failed to apply patch for net/http/transport_security_state_static.h:
While running patch -p1 --forward --force --no-backup-if-mismatch;
  patching file net/http/transport_security_state_static.h
  Hunk #1 succeeded at 82 (offset 4 lines).
  Hunk #2 succeeded at 316 (offset 5 lines).
  Hunk #3 succeeded at 346 (offset 5 lines).
  Hunk #4 FAILED at 429.
  1 out of 4 hunks FAILED -- saving rejects to file
net/http/transport_security_state_static.h.rej

Patch:       net/http/transport_security_state_static.h
Index: net/http/transport_security_state_static.h
diff --git a/net/http/transport_security_state_static.h
b/net/http/transport_security_state_static.h
index
f7ca89d1457fd06359fd6bcb56d33983cba78625..3e79068827b153427d27542bd2cf720ed2d0e65d
100644
--- a/net/http/transport_security_state_static.h
+++ b/net/http/transport_security_state_static.h
@@ -78,6 +78,14 @@ static const char kSPKIHash_DigiCertEVRoot[] =
     "\x83\x31\x7e\x62\x85\x42\x53\xd6\xd7\x78"
     "\x31\x90\xec\x91\x90\x56\xe9\x91\xb9\xe3";
 
+static const char kSPKIHash_DigiCertAssuredIDRoot[] =
+    "\x68\x33\x0e\x61\x35\x85\x21\x59\x29\x83"
+    "\xa3\xc8\xd2\xd2\xe1\x40\x6e\x7a\xb3\xc1";
+
+static const char kSPKIHash_DigiCertGlobalRoot[] =
+    "\xd5\x2e\x13\xc1\xab\xe3\x49\xda\xe8\xb4"
+    "\x95\x94\xef\x7c\x38\x43\x60\x64\x66\xbd";
+
 static const char kSPKIHash_Tor1[] =
     "\x8e\xe3\x71\x49\x3b\xfd\x50\x03\x66\xa4"
     "\x2f\x64\x17\x91\x8a\xa6\x65\x8d\xc7\x76";
@@ -303,6 +311,9 @@ static const char* const kTwitterComAcceptableCerts[] = {
   kSPKIHash_GeoTrustPrimary,
   kSPKIHash_GeoTrustPrimary_G2,
   kSPKIHash_GeoTrustPrimary_G3,
+  kSPKIHash_DigiCertGlobalRoot,
+  kSPKIHash_DigiCertEVRoot,
+  kSPKIHash_DigiCertAssuredIDRoot,
   kSPKIHash_Twitter1,
   NULL,
 };
@@ -330,6 +341,9 @@ static const char* const kTwitterCDNAcceptableCerts[] = {
   kSPKIHash_GeoTrustPrimary,
   kSPKIHash_GeoTrustPrimary_G2,
   kSPKIHash_GeoTrustPrimary_G3,
+  kSPKIHash_DigiCertGlobalRoot,
+  kSPKIHash_DigiCertEVRoot,
+  kSPKIHash_DigiCertAssuredIDRoot,
   kSPKIHash_Twitter1,
   kSPKIHash_Entrust_2048,
   kSPKIHash_Entrust_EV,
@@ -415,12 +429,12 @@ static const struct HSTSPreload kPreloadedSTS[] = {
   {17, true, "\004code\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM
},
   {16, true, "\012googlecode\003com", false, kGooglePins, DOMAIN_GOOGLECODE_COM
},
   {15, true, "\002dl\006google\003com", true, kGooglePins, DOMAIN_GOOGLE_COM },
+  {26, true, "\011translate\012googleapis\003com", true, kGooglePins,
DOMAIN_GOOGLEAPIS_COM },
   {23, true, "\005chart\004apis\006google\003com", false, kGooglePins,
DOMAIN_GOOGLE_COM },
   {11, true, "\005ytimg\003com", false, kGooglePins, DOMAIN_YTIMG_COM },
   {23, true, "\021googleusercontent\003com", false, kGooglePins,
DOMAIN_GOOGLEUSERCONTENT_COM },
   {13, true, "\007youtube\003com", false, kGooglePins, DOMAIN_YOUTUBE_COM },
   {16, true, "\012googleapis\003com", false, kGooglePins, DOMAIN_GOOGLEAPIS_COM
},
-  {26, true, "\011translate\012googleapis\003com", true, kGooglePins,
DOMAIN_GOOGLEAPIS_COM },
   {22, true, "\020googleadservices\003com", false, kGooglePins,
DOMAIN_GOOGLEADSERVICES_COM },
   {13, true, "\007appspot\003com", false, kGooglePins, DOMAIN_APPSPOT_COM },
   {23, true, "\021googlesyndication\003com", false, kGooglePins,
DOMAIN_GOOGLESYNDICATION_COM },

[commit-bot: I haz the power, 2013-09-03 15:21:20]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/agl@chromium.org/22865046/9001

[commit-bot: I haz the power, 2013-09-03 21:09:31]

Change committed as 221021