Verify certificate of Privet v3 device

chrome/browser/local_discovery/privet_http.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_LOCAL_DISCOVERY_PRIVET_HTTP_H_
 #define CHROME_BROWSER_LOCAL_DISCOVERY_PRIVET_HTTP_H_
 
 #include <string>
 
 #include "base/callback.h"
@@ skipping 44 matching lines @@
       const PrivetJSONOperation::ResultCallback& callback) = 0;
 
   // Creates a URL fetcher for PrivetV1.
   virtual scoped_ptr<PrivetURLFetcher> CreateURLFetcher(
       const GURL& url,
       net::URLFetcher::RequestType request_type,
       PrivetURLFetcher::Delegate* delegate) = 0;
 
   virtual void RefreshPrivetToken(
       const PrivetURLFetcher::TokenCallback& token_callback) = 0;
+
+  // After this call only HTTPS will be used. Only requests to the server with
+  // matching certificate will be allowed.
+  // Privet v3 devices must supports HTTPS. However the device has self-signed
+  // certificate so normal validation is not useful. The only know information
+  // about device is fingerprint of the certificate.
+  // Before using HTTPS, Privet v3 pairing generates a shared secret using
+  // SPAKE2 over an insecure channel. Then the device sends the fingerprint
+  // to the client, over the insecure channel, but signed using the shared
+  // secret.
+  // More info on pairing:
+  // https://developers.google.com/cloud-devices/v1/reference/local-api/pairing_start
+  virtual void SwitchToHttps(
+      uint16_t port,
+      const net::SHA256HashValue& certificate_fingerprint) = 0;
+
+  virtual bool IsInHttpsMode() const = 0;
 };
 
 class PrivetDataReadOperation {
  public:
   enum ResponseType {
     RESPONSE_TYPE_ERROR,
     RESPONSE_TYPE_STRING,
     RESPONSE_TYPE_FILE
   };
 
@@ skipping 19 matching lines @@
 // complete action. Some intervention from the caller is required to display the
 // claim URL to the user (noted in OnPrivetRegisterClaimURL).
 class PrivetRegisterOperation {
  public:
   enum FailureReason {
     FAILURE_NETWORK,
     FAILURE_HTTP_ERROR,
     FAILURE_JSON_ERROR,
     FAILURE_MALFORMED_RESPONSE,
     FAILURE_TOKEN,
-    FAILURE_RETRY
+    FAILURE_UNKNOWN,
   };
 
   class Delegate {
    public:
     ~Delegate() {}
 
     // Called when a user needs to claim the printer by visiting the given URL.
     virtual void OnPrivetRegisterClaimToken(
         PrivetRegisterOperation* operation,
         const std::string& token,
@@ skipping 90 matching lines @@
   virtual scoped_ptr<PrivetJSONOperation> CreateCapabilitiesOperation(
       const PrivetJSONOperation::ResultCallback& callback) = 0;
 
   // Creates operation to submit print job to local printer.
   virtual scoped_ptr<PrivetLocalPrintOperation> CreateLocalPrintOperation(
       PrivetLocalPrintOperation::Delegate* delegate) = 0;
 };
 
 }  // namespace local_discovery
 #endif  // CHROME_BROWSER_LOCAL_DISCOVERY_PRIVET_HTTP_H_