FBTF: Move a bunch of code to the headers and remove includes.

net/base/dnssec_chain_verifier.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/dnssec_chain_verifier.h"
 
 #include "base/logging.h"
 #include "base/scoped_ptr.h"
 #include "base/sha1.h"
 #include "base/sha2.h"
 #include "base/string_util.h"
 #include "net/base/dns_util.h"
+#include "net/base/dnssec_keyset.h"
 
 // We don't have a location for the spec yet, so we'll include it here until it
 // finds a better home.
 
 /*
 When connecting to a host www.example.com, www.example.com may present a certificate which includes a DNSSEC chain embedded in it. The aim of the embedded chain is to prove that the fingerprint of the public key is valid DNSSEC data. This is achieved by proving a CERT record for the target domain.
 
 Initially, the target domain is constructed by prepending _ssl. For example, the initial target domain for www.example.com is _ssl.www.example.com.
 
 A DNSSEC chain verifier can be in one of two states: entering a zone, or within a zone. Initially, the verifier is entering the root zone.
@@ skipping 109 matching lines @@
  0x9c, 0x2e, 0x6a, 0xab, 0x02, 0x64, 0x4b, 0x28, 0x13, 0xf5, 0x75, 0xfc, 0x21,
  0x60, 0x1e, 0x0d, 0xee, 0x49, 0xcd, 0x9e, 0xe9, 0x6a, 0x43, 0x10, 0x3e, 0x52,
  0x4d, 0x62, 0x87, 0x3d,
 };
 
 // kRootKeyID is the key id for kRootKey
 static const uint16 kRootKeyID = 19036;
 
 namespace net {
 
+struct DNSSECChainVerifier::Zone {
+  base::StringPiece name;
+  // The number of consecutive labels which |name| shares with |target_|,
+  // counting right-to-left from the root.
+  unsigned matching_labels;
+  DNSSECKeySet trusted_keys;
+  Zone* prev;
+};
+
 DNSSECChainVerifier::DNSSECChainVerifier(const std::string& target,
                                          const base::StringPiece& chain)
     : current_zone_(NULL),
       target_(target),
       chain_(chain),
       ignore_timestamps_(false),
       valid_(false),
       already_entered_zone_(false),
       rrtype_(0) {
 }
@@ skipping 638 matching lines @@
     } else {
       c = 0;
     }
 
     a.remove_prefix(a_length);
     b.remove_prefix(b_length);
   }
 }
 
 }  // namespace net