OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ | 5 #ifndef NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ |
6 #define NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ | 6 #define NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 #include <vector> | 9 #include <vector> |
10 | 10 |
11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
12 #include "base/compiler_specific.h" | 12 #include "base/compiler_specific.h" |
13 #include "base/files/file_util.h" | 13 #include "base/files/file_util.h" |
14 #include "crypto/rsa_private_key.h" | 14 #include "crypto/rsa_private_key.h" |
15 #include "net/base/net_export.h" | 15 #include "net/base/net_export.h" |
16 #include "net/cert/x509_certificate.h" | 16 #include "net/cert/x509_certificate.h" |
17 #include "net/quic/crypto/proof_source.h" | 17 #include "net/quic/crypto/proof_source.h" |
18 | 18 |
19 namespace net { | 19 namespace net { |
20 | 20 |
21 // ProofSourceChromium implements the QUIC ProofSource interface. | 21 // ProofSourceChromium implements the QUIC ProofSource interface. |
22 // TODO(rtenneti): implement details of this class. | 22 // TODO(rtenneti): implement details of this class. |
23 class NET_EXPORT_PRIVATE ProofSourceChromium : public ProofSource { | 23 class NET_EXPORT_PRIVATE ProofSourceChromium : public ProofSource { |
24 public: | 24 public: |
25 ProofSourceChromium(); | 25 ProofSourceChromium(); |
26 ~ProofSourceChromium() override; | 26 ~ProofSourceChromium() override; |
27 | 27 |
28 // Initializes this object based on the certificate chain in |cert_path|, | 28 // Initializes this object based on the certificate chain in |cert_path|, |
29 // and the PKCS#8 RSA private key in |key_path|. | 29 // and the PKCS#8 RSA private key in |key_path|. Signed certificate |
| 30 // timestamp may be loaded from |sct_path| if it is non-empty. |
30 bool Initialize(const base::FilePath& cert_path, | 31 bool Initialize(const base::FilePath& cert_path, |
31 const base::FilePath& key_path); | 32 const base::FilePath& key_path, |
| 33 const base::FilePath& sct_path); |
32 | 34 |
33 // ProofSource interface | 35 // ProofSource interface |
34 bool GetProof(const IPAddressNumber& server_ip, | 36 bool GetProof(const IPAddressNumber& server_ip, |
35 const std::string& hostname, | 37 const std::string& hostname, |
36 const std::string& server_config, | 38 const std::string& server_config, |
37 bool ecdsa_ok, | 39 bool ecdsa_ok, |
38 const std::vector<std::string>** out_certs, | 40 const std::vector<std::string>** out_certs, |
39 std::string* out_signature) override; | 41 std::string* out_signature, |
| 42 std::string* out_leaf_cert_sct) override; |
40 | 43 |
41 private: | 44 private: |
42 scoped_ptr<crypto::RSAPrivateKey> private_key_; | 45 scoped_ptr<crypto::RSAPrivateKey> private_key_; |
43 std::vector<std::string> certificates_; | 46 std::vector<std::string> certificates_; |
| 47 std::string signed_certificate_timestamp_; |
44 | 48 |
45 DISALLOW_COPY_AND_ASSIGN(ProofSourceChromium); | 49 DISALLOW_COPY_AND_ASSIGN(ProofSourceChromium); |
46 }; | 50 }; |
47 | 51 |
48 } // namespace net | 52 } // namespace net |
49 | 53 |
50 #endif // NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ | 54 #endif // NET_QUIC_CRYPTO_PROOF_SOURCE_CHROMIUM_H_ |
OLD | NEW |