#ifndef NET_CERT_CERT_VERIFY_PROC_NSS_H_
#define NET_CERT_CERT_VERIFY_PROC_NSS_H_
+#include <certt.h>
+
#include "net/base/net_export.h"
#include "net/cert/cert_verify_proc.h"
protected:
virtual ~CertVerifyProcNSS();
+ // Like VerifyInternal, but adds a |chain_verify_callback| to override trust
+ // decisions. See the documentation for CERTChainVerifyCallback and
+ // CERTChainVerifyCallbackFunc in NSS's lib/certdb/certt.h.
+ int VerifyInternalImpl(X509Certificate* cert,
+ const std::string& hostname,
+ int flags,
+ CRLSet* crl_set,
+ const CertificateList& additional_trust_anchors,
+ CERTChainVerifyCallback* chain_verify_callback,
+ CertVerifyResult* verify_result);
+
private:
virtual int VerifyInternal(X509Certificate* cert,
const std::string& hostname,