Add CRL set updater.

This is just a dormant component updater for CRL sets. Since the call to start
the initial load is commented out it's actually inactive, but it helps to split
the CRL set change into parts to make it more easily reviewable.

BUG=none
TEST=none

Review URL: http://codereview.chromium.org/8056013

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@103466 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 8 insertions, 0 deletions

diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h
index 3e32587..8f2e9d2 100644
--- a/net/base/ssl_config_service.h
+++ b/net/base/ssl_config_service.h
@@ -13,6 +13,7 @@
 #include "base/observer_list.h"
 #include "base/string_piece.h"
 #include "net/base/cert_status_flags.h"
+#include "net/base/crl_set.h"
 #include "net/base/net_export.h"
 #include "net/base/x509_certificate.h"
 
@@ -104,6 +105,8 @@ struct NET_EXPORT SSLConfig {
   std::string next_protos;
 
   scoped_refptr<X509Certificate> client_cert;
+
+  scoped_refptr<CRLSet> crl_set;
 };
 
 // The interface for retrieving the SSL configuration.  This interface
@@ -154,6 +157,11 @@ class NET_EXPORT SSLConfigService
   static void EnableDNSCertProvenanceChecking();
   static bool dns_cert_provenance_checking_enabled();
 
+  // Sets and gets the current, global CRL set.
+  // TODO(agl): currently unused.
+  static void SetCRLSet(scoped_refptr<CRLSet> crl_set);
+  static scoped_refptr<CRLSet> GetCRLSet();
+
   // Enables the TLS cached info extension, which allows the server to send
   // just a digest of its certificate chain.
   static void EnableCachedInfo();