$OpenBSD$

index 0a64b9d..d38603b 100644
--- security/pkix/include/pkix/pkixtypes.h.orig	Fri Feb 20 15:40:39 2015
+++ security/pkix/include/pkix/pkixtypes.h	Fri Feb 20 15:40:39 2015
@@ -120,6 +120,11 @@ public:
                                     PRTime time,
                        /*optional*/ const SECItem* stapledOCSPresponse) = 0;
 
+  // Called as soon as we think we have a valid chain but before revocation
+  // checks are done. Called to compute additional chain level checks, by the
+  // TrustDomain.
+  virtual SECStatus IsChainValid(const CERTCertList* certChain) = 0;
+
 protected:
   TrustDomain() { }