Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1599)

Side by Side Diff: net/quic/crypto/proof_verifier_chromium.h

Issue 1216943003: Use the CT policy enforcer for QUIC, if specified. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Rebased Created 5 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/net.gypi ('k') | net/quic/crypto/proof_verifier_chromium.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2013 The Chromium Authors. All rights reserved. 1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ 5 #ifndef NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
6 #define NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ 6 #define NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
7 7
8 #include <set> 8 #include <set>
9 #include <string> 9 #include <string>
10 #include <vector> 10 #include <vector>
11 11
12 #include "base/basictypes.h" 12 #include "base/basictypes.h"
13 #include "base/compiler_specific.h" 13 #include "base/compiler_specific.h"
14 #include "base/memory/scoped_ptr.h" 14 #include "base/memory/scoped_ptr.h"
15 #include "net/base/net_export.h" 15 #include "net/base/net_export.h"
16 #include "net/cert/cert_verify_result.h" 16 #include "net/cert/cert_verify_result.h"
17 #include "net/cert/x509_certificate.h" 17 #include "net/cert/x509_certificate.h"
18 #include "net/log/net_log.h" 18 #include "net/log/net_log.h"
19 #include "net/quic/crypto/proof_verifier.h" 19 #include "net/quic/crypto/proof_verifier.h"
20 20
21 namespace net { 21 namespace net {
22 22
23 class CertPolicyEnforcer;
23 class CertVerifier; 24 class CertVerifier;
24 class TransportSecurityState; 25 class TransportSecurityState;
25 26
26 // ProofVerifyDetailsChromium is the implementation-specific information that a 27 // ProofVerifyDetailsChromium is the implementation-specific information that a
27 // ProofVerifierChromium returns about a certificate verification. 28 // ProofVerifierChromium returns about a certificate verification.
28 class NET_EXPORT_PRIVATE ProofVerifyDetailsChromium 29 class NET_EXPORT_PRIVATE ProofVerifyDetailsChromium
29 : public ProofVerifyDetails { 30 : public ProofVerifyDetails {
30 public: 31 public:
31 32
32 // ProofVerifyDetails implementation 33 // ProofVerifyDetails implementation
(...skipping 16 matching lines...) Expand all
49 50
50 int cert_verify_flags; 51 int cert_verify_flags;
51 BoundNetLog net_log; 52 BoundNetLog net_log;
52 }; 53 };
53 54
54 // ProofVerifierChromium implements the QUIC ProofVerifier interface. It is 55 // ProofVerifierChromium implements the QUIC ProofVerifier interface. It is
55 // capable of handling multiple simultaneous requests. 56 // capable of handling multiple simultaneous requests.
56 class NET_EXPORT_PRIVATE ProofVerifierChromium : public ProofVerifier { 57 class NET_EXPORT_PRIVATE ProofVerifierChromium : public ProofVerifier {
57 public: 58 public:
58 ProofVerifierChromium(CertVerifier* cert_verifier, 59 ProofVerifierChromium(CertVerifier* cert_verifier,
60 CertPolicyEnforcer* cert_policy_enforcer,
59 TransportSecurityState* transport_security_state); 61 TransportSecurityState* transport_security_state);
60 ~ProofVerifierChromium() override; 62 ~ProofVerifierChromium() override;
61 63
62 // ProofVerifier interface 64 // ProofVerifier interface
63 QuicAsyncStatus VerifyProof(const std::string& hostname, 65 QuicAsyncStatus VerifyProof(const std::string& hostname,
64 const std::string& server_config, 66 const std::string& server_config,
65 const std::vector<std::string>& certs, 67 const std::vector<std::string>& certs,
66 const std::string& signature, 68 const std::string& signature,
67 const ProofVerifyContext* verify_context, 69 const ProofVerifyContext* verify_context,
68 std::string* error_details, 70 std::string* error_details,
69 scoped_ptr<ProofVerifyDetails>* verify_details, 71 scoped_ptr<ProofVerifyDetails>* verify_details,
70 ProofVerifierCallback* callback) override; 72 ProofVerifierCallback* callback) override;
71 73
72 private: 74 private:
73 class Job; 75 class Job;
74 typedef std::set<Job*> JobSet; 76 typedef std::set<Job*> JobSet;
75 77
76 void OnJobComplete(Job* job); 78 void OnJobComplete(Job* job);
77 79
78 // Set owning pointers to active jobs. 80 // Set owning pointers to active jobs.
79 JobSet active_jobs_; 81 JobSet active_jobs_;
80 82
81 // Underlying verifier used to verify certificates. 83 // Underlying verifier used to verify certificates.
82 CertVerifier* const cert_verifier_; 84 CertVerifier* const cert_verifier_;
85 CertPolicyEnforcer* const cert_policy_enforcer_;
83 86
84 TransportSecurityState* const transport_security_state_; 87 TransportSecurityState* const transport_security_state_;
85 88
86 DISALLOW_COPY_AND_ASSIGN(ProofVerifierChromium); 89 DISALLOW_COPY_AND_ASSIGN(ProofVerifierChromium);
87 }; 90 };
88 91
89 } // namespace net 92 } // namespace net
90 93
91 #endif // NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ 94 #endif // NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
OLDNEW
« no previous file with comments | « net/net.gypi ('k') | net/quic/crypto/proof_verifier_chromium.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698