Certificate Transparency: Fetching of Signed Tree Heads (DRAFT)

net/cert/ct_log_verifier_nss.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <cryptohi.h>
 #include <keyhi.h>
 #include <nss.h>
 #include <pk11pub.h>
@@ skipping 45 matching lines @@
   }
 }
 
 }  // namespace
 
 CTLogVerifier::~CTLogVerifier() {
   if (public_key_)
     SECKEY_DestroyPublicKey(public_key_);
 }
 
+CTLogVerifier::CTLogVerifier(const CTLogVerifier& other)
+    : key_id_(other.key_id_),
+      description_(other.description_),
+      url_(other.url_),
+      hash_algorithm_(other.hash_algorithm_),
+      signature_algorithm_(other.signature_algorithm_),
+      public_key_(NULL) {
+  public_key_ = SECKEY_CopyPublicKey(other.public_key_);
+}
+
 bool CTLogVerifier::Init(const base::StringPiece& public_key) {
   SECItem key_data;
 
   crypto::EnsureNSSInit();
 
   key_data.data = reinterpret_cast<unsigned char*>(
       const_cast<char*>(public_key.data()));
   key_data.len = public_key.size();
 
   CERTSubjectPublicKeyInfo* public_key_info =
@@ skipping 50 matching lines @@
   SECStatus rv = VFY_VerifyDataDirect(
       reinterpret_cast<const unsigned char*>(data_to_sign.data()),
       data_to_sign.size(), public_key_, &sig_data,
       GetNSSSigAlg(signature_algorithm_), GetNSSHashAlg(hash_algorithm_),
       NULL, NULL);
   DVLOG(1) << "Signature verification result: " << (rv == SECSuccess);
   return rv == SECSuccess;
 }
 
 }  // namespace net