Move chain building/verification out of X509Certificate

net/base/cert_verifier.h

 // Copyright (c) 2008-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_CERT_VERIFIER_H_
 #define NET_BASE_CERT_VERIFIER_H_
 #pragma once
 
 #include <string>
 
@@ skipping 22 matching lines @@
 
   // Verifies the given certificate against the given hostname.  Returns OK if
   // successful or an error code upon failure.
   //
   // The |*verify_result| structure, including the |verify_result->cert_status|
   // bitmask, is always filled out regardless of the return value.  If the
   // certificate has multiple errors, the corresponding status flags are set in
   // |verify_result->cert_status|, and the error code for the most serious
   // error is returned.
   //
-  // |flags| is bitwise OR'd of X509Certificate::VerifyFlags.
+  // |flags| is bitwise OR'd of x509_chain::VerifyFlags.
   // If VERIFY_REV_CHECKING_ENABLED is set in |flags|, certificate revocation
   // checking is performed.
   //
   // If VERIFY_EV_CERT is set in |flags| too, EV certificate verification is
   // performed.  If |flags| is VERIFY_EV_CERT (that is,
   // VERIFY_REV_CHECKING_ENABLED is not set), EV certificate verification will
   // not be performed.
   //
   // When callback is null, the operation completes synchronously.
   //
   // When callback is non-null, ERR_IO_PENDING is returned if the operation
   // could not be completed synchronously, in which case the result code will
   // be passed to the callback when available.
   //
   int Verify(X509Certificate* cert, const std::string& hostname,
              int flags, CertVerifyResult* verify_result,
              CompletionCallback* callback);
 
  private:
   class Request;
   friend class Request;
   scoped_refptr<Request> request_;
   DISALLOW_COPY_AND_ASSIGN(CertVerifier);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_CERT_VERIFIER_H_