| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/net/transport_security_persister.h" | 5 #include "chrome/browser/net/transport_security_persister.h" |
| 6 | 6 |
| 7 #include <map> | 7 #include <map> |
| 8 #include <string> | 8 #include <string> |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| 11 #include "base/file_util.h" | 11 #include "base/file_util.h" |
| 12 #include "base/files/file_path.h" | 12 #include "base/files/file_path.h" |
| 13 #include "base/files/scoped_temp_dir.h" | 13 #include "base/files/scoped_temp_dir.h" |
| 14 #include "base/message_loop.h" | 14 #include "base/message_loop.h" |
| 15 #include "content/public/test/test_browser_thread.h" | 15 #include "content/public/test/test_browser_thread.h" |
| 16 #include "net/base/transport_security_state.h" | 16 #include "net/http/transport_security_state.h" |
| 17 #include "testing/gtest/include/gtest/gtest.h" | 17 #include "testing/gtest/include/gtest/gtest.h" |
| 18 | 18 |
| 19 using net::TransportSecurityState; | 19 using net::TransportSecurityState; |
| 20 | 20 |
| 21 class TransportSecurityPersisterTest : public testing::Test { | 21 class TransportSecurityPersisterTest : public testing::Test { |
| 22 public: | 22 public: |
| 23 TransportSecurityPersisterTest() | 23 TransportSecurityPersisterTest() |
| 24 : message_loop_(MessageLoop::TYPE_IO), | 24 : message_loop_(MessageLoop::TYPE_IO), |
| 25 test_file_thread_(content::BrowserThread::FILE, &message_loop_), | 25 test_file_thread_(content::BrowserThread::FILE, &message_loop_), |
| 26 test_io_thread_(content::BrowserThread::IO, &message_loop_) { | 26 test_io_thread_(content::BrowserThread::IO, &message_loop_) { |
| (...skipping 179 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 206 EXPECT_TRUE(persister_->LoadEntries(ser, &dirty)); | 206 EXPECT_TRUE(persister_->LoadEntries(ser, &dirty)); |
| 207 EXPECT_TRUE(state_.GetDomainState(kTestDomain, false, &domain_state)); | 207 EXPECT_TRUE(state_.GetDomainState(kTestDomain, false, &domain_state)); |
| 208 EXPECT_EQ(1u, domain_state.dynamic_spki_hashes.size()); | 208 EXPECT_EQ(1u, domain_state.dynamic_spki_hashes.size()); |
| 209 EXPECT_EQ(sha1.tag, domain_state.dynamic_spki_hashes[0].tag); | 209 EXPECT_EQ(sha1.tag, domain_state.dynamic_spki_hashes[0].tag); |
| 210 EXPECT_EQ(0, memcmp(domain_state.dynamic_spki_hashes[0].data(), sha1.data(), | 210 EXPECT_EQ(0, memcmp(domain_state.dynamic_spki_hashes[0].data(), sha1.data(), |
| 211 sha1.size())); | 211 sha1.size())); |
| 212 } | 212 } |
| 213 | 213 |
| 214 TEST_F(TransportSecurityPersisterTest, ForcePreloads) { | 214 TEST_F(TransportSecurityPersisterTest, ForcePreloads) { |
| 215 // The static state for docs.google.com, defined in | 215 // The static state for docs.google.com, defined in |
| 216 // net/base/transport_security_state_static.h, has pins and mode strict. | 216 // net/http/transport_security_state_static.h, has pins and mode strict. |
| 217 // This new policy overrides that with no pins and a weaker mode. We apply | 217 // This new policy overrides that with no pins and a weaker mode. We apply |
| 218 // this new policy with |DeserializeFromCommandLine| and expect that the | 218 // this new policy with |DeserializeFromCommandLine| and expect that the |
| 219 // new policy is in effect, overriding the static policy. | 219 // new policy is in effect, overriding the static policy. |
| 220 std::string preload("{" | 220 std::string preload("{" |
| 221 "\"4AGT3lHihuMSd5rUj7B4u6At0jlSH3HFePovjPR+oLE=\": {" | 221 "\"4AGT3lHihuMSd5rUj7B4u6At0jlSH3HFePovjPR+oLE=\": {" |
| 222 "\"created\": 0.0," | 222 "\"created\": 0.0," |
| 223 "\"expiry\": 2000000000.0," | 223 "\"expiry\": 2000000000.0," |
| 224 "\"include_subdomains\": false," | 224 "\"include_subdomains\": false," |
| 225 "\"mode\": \"pinning-only\"" | 225 "\"mode\": \"pinning-only\"" |
| 226 "}}"); | 226 "}}"); |
| 227 | 227 |
| 228 EXPECT_TRUE(persister_->DeserializeFromCommandLine(preload)); | 228 EXPECT_TRUE(persister_->DeserializeFromCommandLine(preload)); |
| 229 | 229 |
| 230 TransportSecurityState::DomainState domain_state; | 230 TransportSecurityState::DomainState domain_state; |
| 231 EXPECT_TRUE(state_.GetDomainState("docs.google.com", true, &domain_state)); | 231 EXPECT_TRUE(state_.GetDomainState("docs.google.com", true, &domain_state)); |
| 232 EXPECT_FALSE(domain_state.HasPublicKeyPins()); | 232 EXPECT_FALSE(domain_state.HasPublicKeyPins()); |
| 233 EXPECT_FALSE(domain_state.ShouldUpgradeToSSL()); | 233 EXPECT_FALSE(domain_state.ShouldUpgradeToSSL()); |
| 234 } | 234 } |
| OLD | NEW |