Index: net/base/x509_certificate.h |
diff --git a/net/base/x509_certificate.h b/net/base/x509_certificate.h |
index b75098c5edacb45d232f2d58fcff9481bc1a8bf5..ab4c5c9bda6a1bb2c4c6250030fdcd0824d42d5a 100644 |
--- a/net/base/x509_certificate.h |
+++ b/net/base/x509_certificate.h |
@@ -88,34 +88,6 @@ class NET_EXPORT X509Certificate |
bool operator() (X509Certificate* lhs, X509Certificate* rhs) const; |
}; |
- enum VerifyFlags { |
- // If set, enables online revocation checking via CRLs and OCSP for the |
- // certificate chain. |
- VERIFY_REV_CHECKING_ENABLED = 1 << 0, |
- |
- // If set, and the certificate being verified may be an EV certificate, |
- // attempt to verify the certificate according to the EV processing |
- // guidelines. In order to successfully verify a certificate as EV, |
- // either an online or offline revocation check must be successfully |
- // completed. To ensure it's possible to complete a revocation check, |
- // callers should also specify either VERIFY_REV_CHECKING_ENABLED or |
- // VERIFY_REV_CHECKING_ENABLED_EV_ONLY (to enable online checks), and |
- // VERIFY_CERT_IO_ENABLED (to enable network fetches for online checks). |
- VERIFY_EV_CERT = 1 << 1, |
- |
- // If set, permits NSS to use the network when verifying certificates, |
- // such as to fetch missing intermediates or to check OCSP or CRLs. |
- // TODO(rsleevi): http://crbug.com/143300 - Define this flag for all |
- // verification engines with well-defined semantics, rather than being |
- // NSS only. |
- VERIFY_CERT_IO_ENABLED = 1 << 2, |
- |
- // If set, enables online revocation checking via CRLs or OCSP, but only |
- // for certificates which may be EV, and only when VERIFY_EV_CERT is also |
- // set. |
- VERIFY_REV_CHECKING_ENABLED_EV_ONLY = 1 << 3, |
- }; |
- |
enum Format { |
// The data contains a single DER-encoded certificate, or a PEM-encoded |
// DER certificate with the PEM encoding block name of "CERTIFICATE". |