Index: net/base/dnssec_chain_verifier.cc |
diff --git a/net/base/dnssec_chain_verifier.cc b/net/base/dnssec_chain_verifier.cc |
index a32c68351ebb3fbea6747dc8274bbfe7af8e2a0d..2dbacbc32edc849dd641544fa5c6aea3b6a6888b 100644 |
--- a/net/base/dnssec_chain_verifier.cc |
+++ b/net/base/dnssec_chain_verifier.cc |
@@ -10,6 +10,7 @@ |
#include "base/sha2.h" |
#include "base/string_util.h" |
#include "net/base/dns_util.h" |
+#include "net/base/dnssec_keyset.h" |
// We don't have a location for the spec yet, so we'll include it here until it |
// finds a better home. |
@@ -139,6 +140,15 @@ static const uint16 kRootKeyID = 19036; |
namespace net { |
+struct DNSSECChainVerifier::Zone { |
+ base::StringPiece name; |
+ // The number of consecutive labels which |name| shares with |target_|, |
+ // counting right-to-left from the root. |
+ unsigned matching_labels; |
+ DNSSECKeySet trusted_keys; |
+ Zone* prev; |
+}; |
+ |
DNSSECChainVerifier::DNSSECChainVerifier(const std::string& target, |
const base::StringPiece& chain) |
: current_zone_(NULL), |