| Index: net/base/server_bound_cert_store.h
|
| diff --git a/net/base/server_bound_cert_store.h b/net/base/server_bound_cert_store.h
|
| deleted file mode 100644
|
| index 85e103504f1c24386d85d1ac7711e2dc73d56cb5..0000000000000000000000000000000000000000
|
| --- a/net/base/server_bound_cert_store.h
|
| +++ /dev/null
|
| @@ -1,138 +0,0 @@
|
| -// Copyright (c) 2012 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#ifndef NET_BASE_SERVER_BOUND_CERT_STORE_H_
|
| -#define NET_BASE_SERVER_BOUND_CERT_STORE_H_
|
| -
|
| -#include <list>
|
| -#include <string>
|
| -
|
| -#include "base/callback.h"
|
| -#include "base/threading/non_thread_safe.h"
|
| -#include "base/time.h"
|
| -#include "net/base/net_export.h"
|
| -#include "net/base/ssl_client_cert_type.h"
|
| -
|
| -namespace net {
|
| -
|
| -// An interface for storing and retrieving server bound certs.
|
| -// There isn't a domain bound certs spec yet, but the old origin bound
|
| -// certificates are specified in
|
| -// http://balfanz.github.com/tls-obc-spec/draft-balfanz-tls-obc-01.html.
|
| -
|
| -// Owned only by a single ServerBoundCertService object, which is responsible
|
| -// for deleting it.
|
| -class NET_EXPORT ServerBoundCertStore
|
| - : NON_EXPORTED_BASE(public base::NonThreadSafe) {
|
| - public:
|
| - // The ServerBoundCert class contains a private key in addition to the server
|
| - // cert, and cert type.
|
| - class NET_EXPORT ServerBoundCert {
|
| - public:
|
| - ServerBoundCert();
|
| - ServerBoundCert(const std::string& server_identifier,
|
| - SSLClientCertType type,
|
| - base::Time creation_time,
|
| - base::Time expiration_time,
|
| - const std::string& private_key,
|
| - const std::string& cert);
|
| - ~ServerBoundCert();
|
| -
|
| - // Server identifier. For domain bound certs, for instance "verisign.com".
|
| - const std::string& server_identifier() const { return server_identifier_; }
|
| - // TLS ClientCertificateType.
|
| - SSLClientCertType type() const { return type_; }
|
| - // The time the certificate was created, also the start of the certificate
|
| - // validity period.
|
| - base::Time creation_time() const { return creation_time_; }
|
| - // The time after which this certificate is no longer valid.
|
| - base::Time expiration_time() const { return expiration_time_; }
|
| - // The encoding of the private key depends on the type.
|
| - // rsa_sign: DER-encoded PrivateKeyInfo struct.
|
| - // ecdsa_sign: DER-encoded EncryptedPrivateKeyInfo struct.
|
| - const std::string& private_key() const { return private_key_; }
|
| - // DER-encoded certificate.
|
| - const std::string& cert() const { return cert_; }
|
| -
|
| - private:
|
| - std::string server_identifier_;
|
| - SSLClientCertType type_;
|
| - base::Time creation_time_;
|
| - base::Time expiration_time_;
|
| - std::string private_key_;
|
| - std::string cert_;
|
| - };
|
| -
|
| - typedef std::list<ServerBoundCert> ServerBoundCertList;
|
| -
|
| - typedef base::Callback<void(
|
| - const std::string&,
|
| - SSLClientCertType,
|
| - base::Time,
|
| - const std::string&,
|
| - const std::string&)> GetCertCallback;
|
| - typedef base::Callback<void(const ServerBoundCertList&)> GetCertListCallback;
|
| -
|
| - virtual ~ServerBoundCertStore() {}
|
| -
|
| - // GetServerBoundCert may return the result synchronously through the
|
| - // output parameters, in which case it will return true. Otherwise it will
|
| - // return false and the callback will be called with the result
|
| - // asynchronously.
|
| - // In either case, the type will be CLIENT_CERT_INVALID_TYPE if no cert
|
| - // existed for the given |server_identifier|.
|
| - virtual bool GetServerBoundCert(
|
| - const std::string& server_identifier,
|
| - SSLClientCertType* type,
|
| - base::Time* expiration_time,
|
| - std::string* private_key_result,
|
| - std::string* cert_result,
|
| - const GetCertCallback& callback) = 0;
|
| -
|
| - // Adds a server bound cert and the corresponding private key to the store.
|
| - virtual void SetServerBoundCert(
|
| - const std::string& server_identifier,
|
| - SSLClientCertType type,
|
| - base::Time creation_time,
|
| - base::Time expiration_time,
|
| - const std::string& private_key,
|
| - const std::string& cert) = 0;
|
| -
|
| - // Removes a server bound cert and the corresponding private key from the
|
| - // store.
|
| - virtual void DeleteServerBoundCert(
|
| - const std::string& server_identifier,
|
| - const base::Closure& completion_callback) = 0;
|
| -
|
| - // Deletes all of the server bound certs that have a creation_date greater
|
| - // than or equal to |delete_begin| and less than |delete_end|. If a
|
| - // base::Time value is_null, that side of the comparison is unbounded.
|
| - virtual void DeleteAllCreatedBetween(
|
| - base::Time delete_begin,
|
| - base::Time delete_end,
|
| - const base::Closure& completion_callback) = 0;
|
| -
|
| - // Removes all server bound certs and the corresponding private keys from
|
| - // the store.
|
| - virtual void DeleteAll(const base::Closure& completion_callback) = 0;
|
| -
|
| - // Returns all server bound certs and the corresponding private keys.
|
| - virtual void GetAllServerBoundCerts(const GetCertListCallback& callback) = 0;
|
| -
|
| - // Helper function that adds all certs from |list| into this instance.
|
| - void InitializeFrom(const ServerBoundCertList& list);
|
| -
|
| - // Returns the number of certs in the store. May return 0 if the backing
|
| - // store is not loaded yet.
|
| - // Public only for unit testing.
|
| - virtual int GetCertCount() = 0;
|
| -
|
| - // When invoked, instructs the store to keep session related data on
|
| - // destruction.
|
| - virtual void SetForceKeepSessionState() = 0;
|
| -};
|
| -
|
| -} // namespace net
|
| -
|
| -#endif // NET_BASE_SERVER_BOUND_CERT_STORE_H_
|
|
|