| OLD | NEW |
| 1 // Copyright (c) 2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2008 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_BASE_CERT_VERIFIER_H_ | 5 #ifndef NET_BASE_CERT_VERIFIER_H_ |
| 6 #define NET_BASE_CERT_VERIFIER_H_ | 6 #define NET_BASE_CERT_VERIFIER_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| (...skipping 24 matching lines...) Expand all Loading... |
| 35 | 35 |
| 36 // Verifies the given certificate against the given hostname. Returns OK if | 36 // Verifies the given certificate against the given hostname. Returns OK if |
| 37 // successful or an error code upon failure. | 37 // successful or an error code upon failure. |
| 38 // | 38 // |
| 39 // The |*verify_result| structure, including the |verify_result->cert_status| | 39 // The |*verify_result| structure, including the |verify_result->cert_status| |
| 40 // bitmask, is always filled out regardless of the return value. If the | 40 // bitmask, is always filled out regardless of the return value. If the |
| 41 // certificate has multiple errors, the corresponding status flags are set in | 41 // certificate has multiple errors, the corresponding status flags are set in |
| 42 // |verify_result->cert_status|, and the error code for the most serious | 42 // |verify_result->cert_status|, and the error code for the most serious |
| 43 // error is returned. | 43 // error is returned. |
| 44 // | 44 // |
| 45 // If |rev_checking_enabled| is true, certificate revocation checking is | 45 // |flags| is OR'd of X509Certificate::VerifyFlags. |
| 46 // performed. | 46 // If VERIFY_REV_CHECKING_ENABLED is set on |flags|, certificate revocation |
| 47 // checking is performed. |
| 48 // |
| 49 // If VERIFY_EV_CERT is set on |flags| too, EV certificate verification is |
| 50 // performed. If |flags| is VERIFY_EV_CERT (that is, |
| 51 // VERIFY_REV_CHECKING_ENABLED is not set), EV certificate verification will |
| 52 // not be performed. |
| 47 // | 53 // |
| 48 // When callback is null, the operation completes synchronously. | 54 // When callback is null, the operation completes synchronously. |
| 49 // | 55 // |
| 50 // When callback is non-null, ERR_IO_PENDING is returned if the operation | 56 // When callback is non-null, ERR_IO_PENDING is returned if the operation |
| 51 // could not be completed synchronously, in which case the result code will | 57 // could not be completed synchronously, in which case the result code will |
| 52 // be passed to the callback when available. | 58 // be passed to the callback when available. |
| 53 // | 59 // |
| 54 int Verify(X509Certificate* cert, const std::string& hostname, | 60 int Verify(X509Certificate* cert, const std::string& hostname, |
| 55 bool rev_checking_enabled, CertVerifyResult* verify_result, | 61 int flags, CertVerifyResult* verify_result, |
| 56 CompletionCallback* callback); | 62 CompletionCallback* callback); |
| 57 | 63 |
| 58 private: | 64 private: |
| 59 class Request; | 65 class Request; |
| 60 friend class Request; | 66 friend class Request; |
| 61 scoped_refptr<Request> request_; | 67 scoped_refptr<Request> request_; |
| 62 DISALLOW_COPY_AND_ASSIGN(CertVerifier); | 68 DISALLOW_COPY_AND_ASSIGN(CertVerifier); |
| 63 }; | 69 }; |
| 64 | 70 |
| 65 } // namespace net | 71 } // namespace net |
| 66 | 72 |
| 67 #endif // NET_BASE_CERT_VERIFIER_H_ | 73 #endif // NET_BASE_CERT_VERIFIER_H_ |
| OLD | NEW |