| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include <cert.h> | 5 #include <cert.h> |
| 6 #include <pk11pub.h> | 6 #include <pk11pub.h> |
| 7 | 7 |
| 8 #include <algorithm> | 8 #include <algorithm> |
| 9 | 9 |
| 10 #include "base/file_path.h" | 10 #include "base/file_path.h" |
| (...skipping 524 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 535 | 535 |
| 536 EXPECT_EQ(CertDatabase::UNTRUSTED, | 536 EXPECT_EQ(CertDatabase::UNTRUSTED, |
| 537 cert_db_.GetCertTrust(goog_cert.get(), SERVER_CERT)); | 537 cert_db_.GetCertTrust(goog_cert.get(), SERVER_CERT)); |
| 538 psm::nsNSSCertTrust goog_trust(goog_cert->os_cert_handle()->trust); | 538 psm::nsNSSCertTrust goog_trust(goog_cert->os_cert_handle()->trust); |
| 539 EXPECT_TRUE(goog_trust.HasPeer(PR_TRUE, PR_TRUE, PR_TRUE)); | 539 EXPECT_TRUE(goog_trust.HasPeer(PR_TRUE, PR_TRUE, PR_TRUE)); |
| 540 | 540 |
| 541 int flags = 0; | 541 int flags = 0; |
| 542 CertVerifyResult verify_result; | 542 CertVerifyResult verify_result; |
| 543 int error = goog_cert->Verify("www.google.com", flags, &verify_result); | 543 int error = goog_cert->Verify("www.google.com", flags, &verify_result); |
| 544 EXPECT_EQ(OK, error); | 544 EXPECT_EQ(OK, error); |
| 545 EXPECT_EQ(0, verify_result.cert_status); | 545 EXPECT_EQ(0U, verify_result.cert_status); |
| 546 } | 546 } |
| 547 | 547 |
| 548 TEST_F(CertDatabaseNSSTest, ImportServerCert_SelfSigned) { | 548 TEST_F(CertDatabaseNSSTest, ImportServerCert_SelfSigned) { |
| 549 CertificateList certs; | 549 CertificateList certs; |
| 550 ASSERT_TRUE(ReadCertIntoList("punycodetest.der", &certs)); | 550 ASSERT_TRUE(ReadCertIntoList("punycodetest.der", &certs)); |
| 551 | 551 |
| 552 CertDatabase::ImportCertFailureList failed; | 552 CertDatabase::ImportCertFailureList failed; |
| 553 EXPECT_TRUE(cert_db_.ImportServerCert(certs, &failed)); | 553 EXPECT_TRUE(cert_db_.ImportServerCert(certs, &failed)); |
| 554 | 554 |
| 555 EXPECT_EQ(0U, failed.size()); | 555 EXPECT_EQ(0U, failed.size()); |
| (...skipping 15 matching lines...) Expand all Loading... |
| 571 | 571 |
| 572 // TODO(mattm): this should be SERVER_CERT, not CA_CERT, but that does not | 572 // TODO(mattm): this should be SERVER_CERT, not CA_CERT, but that does not |
| 573 // work due to NSS bug: https://bugzilla.mozilla.org/show_bug.cgi?id=531160 | 573 // work due to NSS bug: https://bugzilla.mozilla.org/show_bug.cgi?id=531160 |
| 574 EXPECT_TRUE(cert_db_.SetCertTrust( | 574 EXPECT_TRUE(cert_db_.SetCertTrust( |
| 575 puny_cert.get(), CA_CERT, | 575 puny_cert.get(), CA_CERT, |
| 576 CertDatabase::TRUSTED_SSL | CertDatabase::TRUSTED_EMAIL)); | 576 CertDatabase::TRUSTED_SSL | CertDatabase::TRUSTED_EMAIL)); |
| 577 | 577 |
| 578 verify_result.Reset(); | 578 verify_result.Reset(); |
| 579 error = puny_cert->Verify("xn--wgv71a119e.com", flags, &verify_result); | 579 error = puny_cert->Verify("xn--wgv71a119e.com", flags, &verify_result); |
| 580 EXPECT_EQ(OK, error); | 580 EXPECT_EQ(OK, error); |
| 581 EXPECT_EQ(0, verify_result.cert_status); | 581 EXPECT_EQ(0U, verify_result.cert_status); |
| 582 } | 582 } |
| 583 | 583 |
| 584 } // namespace net | 584 } // namespace net |
| OLD | NEW |