Certificate Transparency: Fetching of Signed Tree Heads (DRAFT)

net/cert/multi_log_ct_verifier.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/multi_log_ct_verifier.h"
 
 #include <vector>
 
 #include "base/bind.h"
 #include "base/callback_helpers.h"
@@ skipping 42 matching lines @@
                               10,
                               11);
 }
 
 }  // namespace
 
 MultiLogCTVerifier::MultiLogCTVerifier() { }
 
 MultiLogCTVerifier::~MultiLogCTVerifier() { }
 
-void MultiLogCTVerifier::AddLog(scoped_ptr<CTLogVerifier> log_verifier) {
-  DCHECK(log_verifier);
-  if (!log_verifier)
-    return;
-
-  linked_ptr<CTLogVerifier> log(log_verifier.release());
-  logs_[log->key_id()] = log;
-}
-
 void MultiLogCTVerifier::AddLogs(
-    ScopedVector<CTLogVerifier> log_verifiers) {
-  for (ScopedVector<CTLogVerifier>::iterator it =
-       log_verifiers.begin(); it != log_verifiers.end(); ++it) {
+    const std::vector<linked_ptr<CTLogVerifier>>& log_verifiers) {
+  for (auto it = log_verifiers.begin(); it != log_verifiers.end(); ++it) {
     linked_ptr<CTLogVerifier> log(*it);
     VLOG(1) << "Adding CT log: " << log->description();
     logs_[log->key_id()] = log;
   }
+}
 
-  // Ownership of the pointers in |log_verifiers| is transferred to |logs_|
-  log_verifiers.weak_clear();
+void MultiLogCTVerifier::SetObserver(Observer* observer) {
+  observer_ = observer;
 }
 
 int MultiLogCTVerifier::Verify(
     X509Certificate* cert,
     const std::string& stapled_ocsp_response,
     const std::string& sct_list_from_tls_extension,
     ct::CTVerifyResult* result,
     const BoundNetLog& net_log)  {
   DCHECK(cert);
   DCHECK(result);
@@ skipping 131 matching lines @@
   // SCT verified ok, just make sure the timestamp is legitimate.
   if (sct->timestamp > base::Time::Now()) {
     DVLOG(1) << "SCT is from the future!";
     result->invalid_scts.push_back(sct);
     LogSCTStatusToUMA(ct::SCT_STATUS_INVALID);
     return false;
   }
 
   LogSCTStatusToUMA(ct::SCT_STATUS_OK);
   result->verified_scts.push_back(sct);
+  if (observer_)
+    observer_->OnSCTVerified(sct.get(), it->second.get());
   return true;
 }
 
+void MultiLogCTVerifier::StopNotifications() {
+  DVLOG(1) << "Stopping notifications.";
+  observer_ = nullptr;
+}
+
 } // namespace net