| Index: net/base/x509_certificate.h
|
| ===================================================================
|
| --- net/base/x509_certificate.h (revision 19005)
|
| +++ net/base/x509_certificate.h (working copy)
|
| @@ -133,6 +133,11 @@
|
| SOURCE_FROM_NETWORK = 2, // From the network.
|
| };
|
|
|
| + enum VerifyFlags {
|
| + VERIFY_REV_CHECKING_ENABLED = 1 << 0,
|
| + VERIFY_EV_CERT = 1 << 1,
|
| + };
|
| +
|
| // Create an X509Certificate from a handle to the certificate object
|
| // in the underlying crypto library. This is a transfer of ownership;
|
| // X509Certificate will properly dispose of |cert_handle| for you.
|
| @@ -207,16 +212,14 @@
|
| // |verify_result->cert_status|, and the error code for the most serious
|
| // error is returned.
|
| //
|
| - // If |rev_checking_enabled| is true, certificate revocation checking is
|
| - // performed.
|
| + // |flags| is bitwise OR'd of VerifyFlags.
|
| + // If VERIFY_REV_CHECKING_ENABLED is set in |flags|, certificate revocation
|
| + // checking is performed. If VERIFY_EV_CERT is set in |flags| too,
|
| + // EV certificate verification is performed.
|
| int Verify(const std::string& hostname,
|
| - bool rev_checking_enabled,
|
| + int flags,
|
| CertVerifyResult* verify_result) const;
|
|
|
| - // Returns true if the certificate is an extended-validation (EV)
|
| - // certificate.
|
| - bool IsEV(int cert_status) const;
|
| -
|
| OSCertHandle os_cert_handle() const { return cert_handle_; }
|
|
|
| private:
|
| @@ -258,6 +261,8 @@
|
| // Common object initialization code. Called by the constructors only.
|
| void Initialize();
|
|
|
| + bool VerifyEV() const;
|
| +
|
| // Creates an OS certificate handle from the BER-encoded representation.
|
| // Returns NULL on failure.
|
| static OSCertHandle CreateOSCertHandleFromBytes(const char* data,
|
|
|