Class for parsing and evaluating RFC 5280 NameConstraints.

net/cert/internal/test_helpers.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_TEST_HELPERS_H_
 #define NET_CERT_INTERNAL_TEST_HELPERS_H_
 
 #include <ostream>
 #include <string>
 #include <vector>
@@ skipping 15 matching lines @@
 // Creates a der::Input from an std::string. The lifetimes are a bit subtle
 // when using this function:
 //
 // The returned der::Input() is only valid so long as the input string is alive
 // and is not mutated.
 //
 // Note that the input parameter has been made a pointer to prevent callers
 // from accidentally passing an r-value.
 der::Input InputFromString(const std::string* s);
 
+// Parses |s| as a DER Sequence TLV and returns a der::Input corresponding to

[Ryan Sleevi, 2015/09/24 22:06:20]

s/Sequence/SEQUENCE/

[mattm, 2015/09/30 04:52:32]

Done.

+// the value portion. On error returns an empty der::Input and adds a gtest
+// failure.
+//
+// Returned value's lifetime validity is the same as for InputFromString.

[Ryan Sleevi, 2015/09/24 22:06:20]

Rather than back-reference to another function, it'd be helpful to be explicit
here.

[mattm, 2015/09/30 04:52:32]

Done.

+der::Input SequenceValueFromString(const std::string* s);

[Ryan Sleevi, 2015/09/24 22:06:20]

It's not entirely clear to me why this is needed; could you explain?

[mattm, 2015/09/30 04:52:32]

Depending on the context, Names can be implicitly tagged, or tagged normally as
a sequence. So the methods take only the value part. The test data is generated
as a normal sequence, so this helper is needed to extract the sequence value. We
could have the test data be just the sequence value, but there doesn't seem to
be a way with openssl asn1parse to do that directly so it'd require a bit of
extra hacking in the test data generation script.

+
 // Helper structure that maps a PEM block header (for instance "CERTIFICATE") to
 // the destination where the value for that block should be written.
 struct PemBlockMapping {
   // The name of the PEM header. Example "CERTIFICATE".
   const char* block_name;
 
   // The destination where the read value should be written to.
   std::string* value;
 
   // True to indicate that the block is not required to be present. If the
@@ skipping 26 matching lines @@
 template <size_t N>
 ::testing::AssertionResult ReadTestDataFromPemFile(
     const std::string& file_path_ascii,
     const PemBlockMapping(&mappings)[N]) {
   return ReadTestDataFromPemFile(file_path_ascii, mappings, N);
 }
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_TEST_HELPERS_H_