Certificate Transparency: Fetching of Signed Tree Heads (DRAFT)

net/cert/ct_log_verifier_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <string>
 
 #include "base/time/time.h"
 #include "net/cert/signed_certificate_timestamp.h"
@@ skipping 32 matching lines @@
 TEST_F(CTLogVerifierTest, VerifiesPrecertSCT) {
   ct::LogEntry precert_entry;
   ct::GetPrecertLogEntry(&precert_entry);
 
   scoped_refptr<ct::SignedCertificateTimestamp> precert_sct;
   ct::GetPrecertSCT(&precert_sct);
 
   EXPECT_TRUE(log_->Verify(precert_entry, *precert_sct.get()));
 }
 
+TEST_F(CTLogVerifierTest, CopyVerifiesCorrectly) {
+  ct::LogEntry cert_entry;
+  ct::GetX509CertLogEntry(&cert_entry);
+
+  scoped_refptr<ct::SignedCertificateTimestamp> cert_sct;
+  ct::GetX509CertSCT(&cert_sct);
+  CTLogVerifier verifier_copy(*log_.get());
+
+  EXPECT_TRUE(verifier_copy.Verify(cert_entry, *cert_sct));
+}
+
 TEST_F(CTLogVerifierTest, FailsInvalidTimestamp) {
   ct::LogEntry cert_entry;
   ct::GetX509CertLogEntry(&cert_entry);
 
   scoped_refptr<ct::SignedCertificateTimestamp> cert_sct;
   ct::GetX509CertSCT(&cert_sct);
 
   // Mangle the timestamp, so that it should fail signature validation.
   cert_sct->timestamp = base::Time::Now();
 
@@ skipping 31 matching lines @@
 TEST_F(CTLogVerifierTest, ExcessDataInPublicKey) {
   std::string key = ct::GetTestPublicKey();
   key += "extra";
 
   scoped_ptr<CTLogVerifier> log =
       CTLogVerifier::Create(key, "testlog", "https://ct.example.com");
   EXPECT_FALSE(log);
 }
 
 }  // namespace net