net: add DigiCert to Twitter pins.

net/http/transport_security_state_static.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is automatically generated by transport_security_state_static_generate.go
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 
 // These are SubjectPublicKeyInfo hashes for public key pinning. The
@@ skipping 64 matching lines @@
     "\x40\xd6\x22\x08\xef\x22\xeb\xd1\x15\x1c";
 
 static const char kSPKIHash_RapidSSL[] =
     "\xa3\x93\x99\xc4\x04\xc3\xb2\x09\xb0\x81"
     "\xc2\x1f\x21\x62\x27\x78\xc2\x74\x8e\x4c";
 
 static const char kSPKIHash_DigiCertEVRoot[] =
     "\x83\x31\x7e\x62\x85\x42\x53\xd6\xd7\x78"
     "\x31\x90\xec\x91\x90\x56\xe9\x91\xb9\xe3";
 
+static const char kSPKIHash_DigiCertAssuredIDRoot[] =
+    "\x68\x33\x0e\x61\x35\x85\x21\x59\x29\x83"
+    "\xa3\xc8\xd2\xd2\xe1\x40\x6e\x7a\xb3\xc1";
+
+static const char kSPKIHash_DigiCertGlobalRoot[] =
+    "\xd5\x2e\x13\xc1\xab\xe3\x49\xda\xe8\xb4"
+    "\x95\x94\xef\x7c\x38\x43\x60\x64\x66\xbd";
+
 static const char kSPKIHash_Tor1[] =
     "\x8e\xe3\x71\x49\x3b\xfd\x50\x03\x66\xa4"
     "\x2f\x64\x17\x91\x8a\xa6\x65\x8d\xc7\x76";
 
 static const char kSPKIHash_Tor2[] =
     "\x96\x26\xb8\xde\x53\xe8\x97\x34\x8f\x54"
     "\x8a\xb7\xe0\x3c\x39\xee\xe6\x1c\x2c\x3f";
 
 static const char kSPKIHash_Tor3[] =
     "\xaf\x31\x32\x40\x82\x8e\x87\xbe\xe3\xf3"
@@ skipping 206 matching lines @@
   kSPKIHash_VeriSignClass2_G2,
   kSPKIHash_VeriSignClass3_G5,
   kSPKIHash_VeriSignUniversal,
   kSPKIHash_GeoTrustGlobal,
   kSPKIHash_GeoTrustGlobal2,
   kSPKIHash_GeoTrustUniversal,
   kSPKIHash_GeoTrustUniversal2,
   kSPKIHash_GeoTrustPrimary,
   kSPKIHash_GeoTrustPrimary_G2,
   kSPKIHash_GeoTrustPrimary_G3,
+  kSPKIHash_DigiCertGlobalRoot,
+  kSPKIHash_DigiCertEVRoot,
+  kSPKIHash_DigiCertAssuredIDRoot,
   kSPKIHash_Twitter1,
   NULL,
 };
 #define kTwitterComPins { \
   kTwitterComAcceptableCerts, \
   kNoRejectedPublicKeys, \
 }
 
 static const char* const kTwitterCDNAcceptableCerts[] = {
   kSPKIHash_VeriSignClass1,
   kSPKIHash_VeriSignClass3,
   kSPKIHash_VeriSignClass3_G4,
   kSPKIHash_VeriSignClass4_G3,
   kSPKIHash_VeriSignClass3_G3,
   kSPKIHash_VeriSignClass1_G3,
   kSPKIHash_VeriSignClass2_G3,
   kSPKIHash_VeriSignClass3_G2,
   kSPKIHash_VeriSignClass2_G2,
   kSPKIHash_VeriSignClass3_G5,
   kSPKIHash_VeriSignUniversal,
   kSPKIHash_GeoTrustGlobal,
   kSPKIHash_GeoTrustGlobal2,
   kSPKIHash_GeoTrustUniversal,
   kSPKIHash_GeoTrustUniversal2,
   kSPKIHash_GeoTrustPrimary,
   kSPKIHash_GeoTrustPrimary_G2,
   kSPKIHash_GeoTrustPrimary_G3,
+  kSPKIHash_DigiCertGlobalRoot,
+  kSPKIHash_DigiCertEVRoot,
+  kSPKIHash_DigiCertAssuredIDRoot,
   kSPKIHash_Twitter1,
   kSPKIHash_Entrust_2048,
   kSPKIHash_Entrust_EV,
   kSPKIHash_Entrust_G2,
   kSPKIHash_Entrust_SSL,
   kSPKIHash_AAACertificateServices,
   kSPKIHash_AddTrustClass1CARoot,
   kSPKIHash_AddTrustExternalCARoot,
   kSPKIHash_AddTrustPublicCARoot,
   kSPKIHash_AddTrustQualifiedCARoot,
@@ skipping 504 matching lines @@
   {11, false, "\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {16, false, "\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {15, false, "\003www\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {20, false, "\003www\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {22, true, "\020google-analytics\003com", false, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\014googlegroups\003com", false, kGooglePins, DOMAIN_GOOGLEGROUPS_COM },
 };
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 #endif // NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_