Index: net/base/cert_status_flags.h |
=================================================================== |
--- net/base/cert_status_flags.h (revision 102325) |
+++ net/base/cert_status_flags.h (working copy) |
@@ -6,45 +6,49 @@ |
#define NET_BASE_CERT_STATUS_FLAGS_H_ |
#pragma once |
+#include "base/basictypes.h" |
+ |
namespace net { |
-// Status flags, such as errors and extended validation. |
-enum { |
- // Bits 0 to 15 are for errors. |
- CERT_STATUS_ALL_ERRORS = 0xFFFF, |
- CERT_STATUS_COMMON_NAME_INVALID = 1 << 0, |
- CERT_STATUS_DATE_INVALID = 1 << 1, |
- CERT_STATUS_AUTHORITY_INVALID = 1 << 2, |
- // 1 << 3 is reserved for ERR_CERT_CONTAINS_ERRORS (not useful with WinHTTP). |
- CERT_STATUS_NO_REVOCATION_MECHANISM = 1 << 4, |
- CERT_STATUS_UNABLE_TO_CHECK_REVOCATION = 1 << 5, |
- CERT_STATUS_REVOKED = 1 << 6, |
- CERT_STATUS_INVALID = 1 << 7, |
- CERT_STATUS_WEAK_SIGNATURE_ALGORITHM = 1 << 8, |
- CERT_STATUS_NOT_IN_DNS = 1 << 9, |
- CERT_STATUS_NON_UNIQUE_NAME = 1 << 10, |
+// Bitmask of status flags of a certificate, representing any errors, as well as |
+// other non-error status information such as whether the certificate is EV. |
+typedef uint32 CertStatus; |
- // Bits 16 to 30 are for non-error statuses. |
- CERT_STATUS_IS_EV = 1 << 16, |
- CERT_STATUS_REV_CHECKING_ENABLED = 1 << 17, |
- CERT_STATUS_IS_DNSSEC = 1 << 18, |
+// The possible status bits for CertStatus. |
+// NOTE: Because these names have appeared in bug reports, we preserve them as |
+// MACRO_STYLE for continuity, instead of renaming them to kConstantStyle as |
+// befits most static consts. |
+// Bits 0 to 15 are for errors. |
+static const CertStatus CERT_STATUS_ALL_ERRORS = 0xFFFF; |
+static const CertStatus CERT_STATUS_COMMON_NAME_INVALID = 1 << 0; |
+static const CertStatus CERT_STATUS_DATE_INVALID = 1 << 1; |
+static const CertStatus CERT_STATUS_AUTHORITY_INVALID = 1 << 2; |
+// 1 << 3 is reserved for ERR_CERT_CONTAINS_ERRORS (not useful with WinHTTP). |
+static const CertStatus CERT_STATUS_NO_REVOCATION_MECHANISM = 1 << 4; |
+static const CertStatus CERT_STATUS_UNABLE_TO_CHECK_REVOCATION = 1 << 5; |
+static const CertStatus CERT_STATUS_REVOKED = 1 << 6; |
+static const CertStatus CERT_STATUS_INVALID = 1 << 7; |
+static const CertStatus CERT_STATUS_WEAK_SIGNATURE_ALGORITHM = 1 << 8; |
+static const CertStatus CERT_STATUS_NOT_IN_DNS = 1 << 9; |
+static const CertStatus CERT_STATUS_NON_UNIQUE_NAME = 1 << 10; |
- // 1 << 31 (the sign bit) is reserved so that the cert status will never be |
- // negative. |
-}; |
+// Bits 16 to 31 are for non-error statuses. |
+static const CertStatus CERT_STATUS_IS_EV = 1 << 16; |
+static const CertStatus CERT_STATUS_REV_CHECKING_ENABLED = 1 << 17; |
+static const CertStatus CERT_STATUS_IS_DNSSEC = 1 << 18; |
// Returns true if the specified cert status has an error set. |
-static inline bool IsCertStatusError(int status) { |
+static inline bool IsCertStatusError(CertStatus status) { |
return (CERT_STATUS_ALL_ERRORS & status) != 0; |
} |
// Maps a network error code to the equivalent certificate status flag. If |
// the error code is not a certificate error, it is mapped to 0. |
-int MapNetErrorToCertStatus(int error); |
+CertStatus MapNetErrorToCertStatus(int error); |
// Maps the most serious certificate error in the certificate status flags |
// to the equivalent network error code. |
-int MapCertStatusToNetError(int cert_status); |
+int MapCertStatusToNetError(CertStatus cert_status); |
} // namespace net |