Certificate Transparency: Fetching of Signed Tree Heads (DRAFT)

net/cert/ct_log_verifier.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_CT_LOG_VERIFIER_H_
 #define NET_CERT_CT_LOG_VERIFIER_H_
 
 #include <string>
 
 #include "base/gtest_prod_util.h"
@@ skipping 28 matching lines @@
   static scoped_ptr<CTLogVerifier> Create(const base::StringPiece& public_key,
                                           const base::StringPiece& description,
                                           const base::StringPiece& url);
 
   ~CTLogVerifier();
 
   // Returns the log's key ID (RFC6962, Section 3.2)
   const std::string& key_id() const { return key_id_; }
   // Returns the log's human-readable description.
   const std::string& description() const { return description_; }
+  // Returns the log's URL
+  const GURL& url() const { return url_; }
 
   // Verifies that |sct| contains a valid signature for |entry|.
   bool Verify(const ct::LogEntry& entry,
               const ct::SignedCertificateTimestamp& sct);
 
   // Verifies and sets |signed_tree_head|. If |signed_tree_head|'s signature is
   // valid, stores it and returns true. Otherwise, discards the sth and
   // returns false.
-  bool SetSignedTreeHead(scoped_ptr<ct::SignedTreeHead> signed_tree_head);

[davidben, 2015/05/07 21:59:38]

I'm assume this'll go away in a rebase? I remember reviewing this already.

[Eran Messeri, 2015/07/10 13:15:48]

Correct.

+  bool VerifySignedTreeHead(const ct::SignedTreeHead* signed_tree_head);
 
  private:
   FRIEND_TEST_ALL_PREFIXES(CTLogVerifierTest, VerifySignature);
 
   CTLogVerifier(const base::StringPiece& description, const GURL& url);
 
   // Performs crypto-library specific initialization.
   bool Init(const base::StringPiece& public_key);
 
   // Performs the underlying verification using the selected public key. Note
   // that |signature| contains the raw signature data (eg: without any
   // DigitallySigned struct encoding).
   bool VerifySignature(const base::StringPiece& data_to_sign,
                        const base::StringPiece& signature);
 
   // Returns true if the signature and hash algorithms in |signature|
   // match those of the log
   bool SignatureParametersMatch(const ct::DigitallySigned& signature);
 
   std::string key_id_;
   std::string description_;
   GURL url_;
   ct::DigitallySigned::HashAlgorithm hash_algorithm_;
   ct::DigitallySigned::SignatureAlgorithm signature_algorithm_;
-  scoped_ptr<ct::SignedTreeHead> signed_tree_head_;
 
 #if defined(USE_OPENSSL)
   EVP_PKEY* public_key_;
 #else
   SECKEYPublicKey* public_key_;
 #endif
 };
 
 }  // namespace net
 
 #endif  // NET_CERT_CT_LOG_VERIFIER_H_