Certificate Transparency: Add Venafi log

net/cert/ct_known_logs_static.h

Index: net/cert/ct_known_logs_static.h
diff --git a/net/cert/ct_known_logs_static.h b/net/cert/ct_known_logs_static.h
index 1a0333bb85c3b61523357675aa219ab508bd8337..159c1cab8368ec46d4299cbb86851def16dfd842 100644
--- a/net/cert/ct_known_logs_static.h
+++ b/net/cert/ct_known_logs_static.h
@@ -7,7 +7,7 @@
 #define NET_CERT_CT_KNOWN_LOGS_STATIC_H_
 
 struct CTLogInfo {
-  const char log_key[92];
+  const char log_key[295];

[Ryan Sleevi, 2015/09/14 21:15:25]

I'm wondering whether or not this string should be externalized. The result is
that you're allocating 295 bytes now for every log, but that's kinda gross.

That is, something like

const char kAviatorKey[] = {...};
const char kVenafiKey[] = {...};

struct CTLogInfo {
  const char* const log_key;
  size_t log_key_length;
  const char* const log_name;
  const char* const log_url;
};

const CTLogInfo kCTLogList[] = {
  { kAviatorKey, sizeof(kAviatorKey), ... },
   ...,
  { kVenafiKey, sizeof(kVenafiKey), ... },
};



(We should also consider renaming this from .h to something like -inc.cc /
-inc.h, to make it clear it's not meant to be a generic header, so that we don't
get into multi-translation unit size bloat from having the same constant in
multiple TUs)

   const char* const log_name;
   const char* const log_url;
 };
@@ -68,8 +68,28 @@ const CTLogInfo kCTLogList[] = {
      "\x8f\x6b\xbe\x72\xf4\x2a\xec\x1c\x42\xaa\x03\x2f\x1a\x7e\x28\x35\x76"
      "\x99\x08\x3d\x21\x14\x86",
      "Symantec log",
-     "https://ct.ws.symantec.com/"}};
+     "https://ct.ws.symantec.com/"},
+    {"\x30\x82\x01\x22\x30\x0d\x06\x09\x2a\x86\x48\x86\xf7\x0d\x01\x01\x01"
+     "\x05\x00\x03\x82\x01\x0f\x00\x30\x82\x01\x0a\x02\x82\x01\x01\x00\xa2"
+     "\x5a\x48\x1f\x17\x52\x95\x35\xcb\xa3\x5b\x3a\x1f\x53\x82\x76\x94\xa3"
+     "\xff\x80\xf2\x1c\x37\x3c\xc0\xb1\xbd\xc1\x59\x8b\xab\x2d\x65\x93\xd7"
+     "\xf3\xe0\x04\xd5\x9a\x6f\xbf\xd6\x23\x76\x36\x4f\x23\x99\xcb\x54\x28"
+     "\xad\x8c\x15\x4b\x65\x59\x76\x41\x4a\x9c\xa6\xf7\xb3\x3b\x7e\xb1\xa5"
+     "\x49\xa4\x17\x51\x6c\x80\xdc\x2a\x90\x50\x4b\x88\x24\xe9\xa5\x12\x32"
+     "\x93\x04\x48\x90\x02\xfa\x5f\x0e\x30\x87\x8e\x55\x76\x05\xee\x2a\x4c"
+     "\xce\xa3\x6a\x69\x09\x6e\x25\xad\x82\x76\x0f\x84\x92\xfa\x38\xd6\x86"
+     "\x4e\x24\x8f\x9b\xb0\x72\xcb\x9e\xe2\x6b\x3f\xe1\x6d\xc9\x25\x75\x23"
+     "\x88\xa1\x18\x58\x06\x23\x33\x78\xda\x00\xd0\x38\x91\x67\xd2\xa6\x7d"
+     "\x27\x97\x67\x5a\xc1\xf3\x2f\x17\xe6\xea\xd2\x5b\xe8\x81\xcd\xfd\x92"
+     "\x68\xe7\xf3\x06\xf0\xe9\x72\x84\xee\x01\xa5\xb1\xd8\x33\xda\xce\x83"
+     "\xa5\xdb\xc7\xcf\xd6\x16\x7e\x90\x75\x18\xbf\x16\xdc\x32\x3b\x6d\x8d"
+     "\xab\x82\x17\x1f\x89\x20\x8d\x1d\x9a\xe6\x4d\x23\x08\xdf\x78\x6f\xc6"
+     "\x05\xbf\x5f\xae\x94\x97\xdb\x5f\x64\xd4\xee\x16\x8b\xa3\x84\x6c\x71"
+     "\x2b\xf1\xab\x7f\x5d\x0d\x32\xee\x04\xe2\x90\xec\x41\x9f\xfb\x39\xc1"
+     "\x02\x03\x01\x00\x01",
+     "Venafi log",
+     "https://ctlog.api.venafi.com/"}};
 
-const size_t kNumKnownCTLogs = 7;
+const size_t kNumKnownCTLogs = sizeof(kCTLogList) / sizeof(CTLogInfo);

[Ryan Sleevi, 2015/09/14 21:15:25]

I've mentioned to Eran this wasn't needed. :) Chrome has a macro (arraysize)
that handles this. 

This constant is not used anywhere in Chrome (see
https://code.google.com/p/chromium/codesearch#chromium/src/net/cert/ct_known_...
), so you could just as well remove it. I thought he kept it - and its form -
for potential other consumers, in which case, it seems to make no difference
about hardcoding or not, since it's all generated. Hardcoding makes it ever so
slightly less work for the compiler :P

 
 #endif  // NET_CERT_CT_KNOWN_LOGS_STATIC_H_