Index: net/base/test_root_certs.h |
diff --git a/net/base/test_root_certs.h b/net/base/test_root_certs.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..72b215f087cf32cfd816206e67bec1ea589d9d6a |
--- /dev/null |
+++ b/net/base/test_root_certs.h |
@@ -0,0 +1,99 @@ |
+// Copyright (c) 2010 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef NET_BASE_TEST_ROOT_CERTS_H_ |
+#define NET_BASE_TEST_ROOT_CERTS_H_ |
+#pragma once |
+ |
+#include "base/singleton.h" |
+#include "build/build_config.h" |
+ |
+#if defined(OS_WIN) |
+#include <windows.h> |
+#include <wincrypt.h> |
+#elif defined(OS_MACOSX) |
+#include <CoreFoundation/CFArray.h> |
+#include <Security/SecTrust.h> |
+#include "base/mac/scoped_cftyperef.h" |
+#elif defined(USE_NSS) |
+#include <list> |
+#endif |
+ |
+class FilePath; |
+ |
+namespace net { |
+ |
+class X509Certificate; |
+ |
+// TestRootCerts is a helper class for unit tests that is used to |
+// artificially mark a certificate as trusted, independent of the local |
+// machine configuration. |
+class TestRootCerts { |
+ public: |
+ // Obtains the Singleton instance to the trusted certificates. |
+ static TestRootCerts* GetInstance(); |
+ |
+ // Marks |certificate| as trusted for X509Certificate::Verify(). Returns |
+ // false if the certificate could not be marked trusted. |
+ bool Add(X509Certificate* certificate); |
+ |
+ // Reads a single certificate from |file| and marks it as trusted. Returns |
+ // false if an error is encountered, such as being unable to read |file| |
+ // or more than one certificate existing in |file|. |
+ bool AddFromFile(const FilePath& file); |
+ |
+ // Clears the trusted status of any certificates that were previously |
+ // marked trusted via Add(). |
+ void Clear(); |
+ |
+ // Returns true if there are no certificates that have been marked trusted. |
+ bool IsEmpty() const; |
+ |
+#if defined(OS_MACOSX) |
+ CFArrayRef temporary_roots() const { return temporary_roots_; } |
+ |
+ // Modifies the root certificates of |trust_ref| to include the |
+ // certificates stored in |temporary_roots_|. If IsEmpty() is true, this |
+ // does not modify |trust_ref|. |
+ OSStatus FixupSecTrustRef(SecTrustRef trust_ref) const; |
+#elif defined(OS_WIN) |
+ HCERTSTORE temporary_roots() const { return temporary_roots_; } |
+ |
+ // Overrides any trust failures in |chain_context| that were caused by an |
+ // untrusted CA certificate that was previously added. In order to more |
+ // closely match the behaviour of CryptoAPI, intermediate CA certificates |
+ // are also allowed to be trust anchors, as described in RFC 3280, in |
+ // addition to root (self-signed) certificates. If IsEmpty() is true, |
+ // |chain_context| is not modified. |
+ void FixupChainContext(PCERT_CHAIN_CONTEXT chain_context) const; |
+#endif |
+ |
+ private: |
+ friend struct DefaultSingletonTraits<TestRootCerts>; |
+ |
+ TestRootCerts(); |
+ ~TestRootCerts(); |
+ |
+#if defined(OS_MACOSX) |
+ base::mac::ScopedCFTypeRef<CFMutableArrayRef> temporary_roots_; |
+#elif defined(OS_WIN) |
+ HCERTSTORE temporary_roots_; |
+#elif defined(USE_NSS) |
+ // It is necessary to maintain a cache of the original certificate trust |
+ // settings, in order to restore them when Clear() is called. |
+ class TrustEntry; |
+ std::list<TrustEntry*> trust_cache_; |
+#endif |
+ |
+#if defined(OS_WIN) || defined(USE_OPENSSL) |
+ // True if there are no temporarily trusted root certificates. |
+ bool empty_; |
+#endif |
+ |
+ DISALLOW_COPY_AND_ASSIGN(TestRootCerts); |
+}; |
+ |
+} // namespace net |
+ |
+#endif // NET_BASE_TEST_ROOT_CERTS_H_ |