Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(13)

Side by Side Diff: net/cert/multi_log_ct_verifier.h

Issue 1216153010: Certificate Transparency: Add observer for Signed Certificate Timestamps (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Addressing nits Created 5 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/cert/ct_verifier.h ('k') | net/cert/multi_log_ct_verifier.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_CERT_MULTI_LOG_CT_VERIFIER_H_ 5 #ifndef NET_CERT_MULTI_LOG_CT_VERIFIER_H_
6 #define NET_CERT_MULTI_LOG_CT_VERIFIER_H_ 6 #define NET_CERT_MULTI_LOG_CT_VERIFIER_H_
7 7
8 #include <map> 8 #include <map>
9 #include <string> 9 #include <string>
10 10
(...skipping 22 matching lines...) Expand all
33 33
34 void AddLogs(const std::vector<scoped_refptr<CTLogVerifier>>& log_verifiers); 34 void AddLogs(const std::vector<scoped_refptr<CTLogVerifier>>& log_verifiers);
35 35
36 // CTVerifier implementation: 36 // CTVerifier implementation:
37 int Verify(X509Certificate* cert, 37 int Verify(X509Certificate* cert,
38 const std::string& stapled_ocsp_response, 38 const std::string& stapled_ocsp_response,
39 const std::string& sct_list_from_tls_extension, 39 const std::string& sct_list_from_tls_extension,
40 ct::CTVerifyResult* result, 40 ct::CTVerifyResult* result,
41 const BoundNetLog& net_log) override; 41 const BoundNetLog& net_log) override;
42 42
43 void SetObserver(Observer* observer) override;
44
43 private: 45 private:
44 // Verify a list of SCTs from |encoded_sct_list| over |expected_entry|, 46 // Verify a list of SCTs from |encoded_sct_list| over |expected_entry|,
45 // placing the verification results in |result|. The SCTs in the list 47 // placing the verification results in |result|. The SCTs in the list
46 // come from |origin| (as will be indicated in the origin field of each SCT). 48 // come from |origin| (as will be indicated in the origin field of each SCT).
47 bool VerifySCTs(const std::string& encoded_sct_list, 49 bool VerifySCTs(const std::string& encoded_sct_list,
48 const ct::LogEntry& expected_entry, 50 const ct::LogEntry& expected_entry,
49 ct::SignedCertificateTimestamp::Origin origin, 51 ct::SignedCertificateTimestamp::Origin origin,
52 X509Certificate* cert,
50 ct::CTVerifyResult* result); 53 ct::CTVerifyResult* result);
51 54
52 // Verifies a single, parsed SCT against all logs. 55 // Verifies a single, parsed SCT against all logs.
53 bool VerifySingleSCT( 56 bool VerifySingleSCT(scoped_refptr<ct::SignedCertificateTimestamp> sct,
54 scoped_refptr<ct::SignedCertificateTimestamp> sct, 57 const ct::LogEntry& expected_entry,
55 const ct::LogEntry& expected_entry, 58 X509Certificate* cert,
56 ct::CTVerifyResult* result); 59 ct::CTVerifyResult* result);
57 60
58 // Mapping from a log's ID to the verifier for this log. 61 // Mapping from a log's ID to the verifier for this log.
59 // A log's ID is the SHA-256 of the log's key, as defined in section 3.2. 62 // A log's ID is the SHA-256 of the log's key, as defined in section 3.2.
60 // of RFC6962. 63 // of RFC6962.
61 std::map<std::string, scoped_refptr<CTLogVerifier>> logs_; 64 std::map<std::string, scoped_refptr<CTLogVerifier>> logs_;
62 65
66 Observer* observer_;
67
63 DISALLOW_COPY_AND_ASSIGN(MultiLogCTVerifier); 68 DISALLOW_COPY_AND_ASSIGN(MultiLogCTVerifier);
64 }; 69 };
65 70
66 } // namespace net 71 } // namespace net
67 72
68 #endif // NET_CERT_MULTI_LOG_CT_VERIFIER_H_ 73 #endif // NET_CERT_MULTI_LOG_CT_VERIFIER_H_
OLDNEW
« no previous file with comments | « net/cert/ct_verifier.h ('k') | net/cert/multi_log_ct_verifier.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698