Verify the signature on user cloud policy downloads.

chrome/browser/policy/policy_builder.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_POLICY_BUILDER_H_
 #define CHROME_BROWSER_POLICY_POLICY_BUILDER_H_
 
 #include <string>
+#include <vector>
 
 #include "base/basictypes.h"
 #include "base/compiler_specific.h"
 #include "base/memory/scoped_ptr.h"
 #include "chrome/browser/policy/proto/cloud_policy.pb.h"
 #include "chrome/browser/policy/proto/device_management_local.pb.h"
 #include "crypto/rsa_private_key.h"
 
 namespace enterprise_management {
 class ChromeDeviceSettingsProto;
@@ skipping 52 matching lines @@
   // Assembles the policy components. The resulting policy protobuf is available
   // through policy() after this call.
   virtual void Build();
 
   // Returns a copy of policy().
   scoped_ptr<enterprise_management::PolicyFetchResponse> GetCopy();
 
   // Returns a binary policy blob, i.e. an encoded PolicyFetchResponse.
   std::string GetBlob();
 
+  // Writes the public key corresponding to |signing_key_| to |public_key|.
+  void GetPublicKey(std::vector<uint8>* public_key);
+
+  // Writes the public key corresponding to |new_signing_key_| to |public_key|.
+  void GetNewPublicKey(std::vector<uint8>* public_key);
+
   // These return hard-coded testing keys. Don't use in production!
   static scoped_ptr<crypto::RSAPrivateKey> CreateTestSigningKey();
   static scoped_ptr<crypto::RSAPrivateKey> CreateTestNewSigningKey();
 
  private:
   // Produces |key|'s signature over |data| and stores it in |signature|.
   void SignData(const std::string& data,
                 crypto::RSAPrivateKey* key,
                 std::string* signature);
 
@@ skipping 35 matching lines @@
 };
 
 typedef TypedPolicyBuilder<enterprise_management::CloudPolicySettings>
     UserPolicyBuilder;
 typedef TypedPolicyBuilder<enterprise_management::ChromeDeviceSettingsProto>
     DevicePolicyBuilder;
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_POLICY_BUILDER_H_