Certificate Transparency: Per-profile CT verification

net/cert/ct_log_verifier_openssl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <openssl/evp.h>
 #include <openssl/x509.h>
 
 #include "base/logging.h"
@@ skipping 68 matching lines @@
   if (signature_algorithm_ == ct::DigitallySigned::SIG_ALGO_RSA &&
       EVP_PKEY_size(public_key_) < 256) {
     DVLOG(1) << "Too small a public key.";
     return false;
   }
 
   return true;
 }
 
 bool CTLogVerifier::VerifySignature(const base::StringPiece& data_to_sign,
-                                    const base::StringPiece& signature) {
+                                    const base::StringPiece& signature) const {
   crypto::OpenSSLErrStackTracer err_tracer(FROM_HERE);
 
   const EVP_MD* hash_alg = GetEvpAlg(hash_algorithm_);
   if (hash_alg == NULL)
     return false;
 
   EVP_MD_CTX ctx;
   EVP_MD_CTX_init(&ctx);
 
   bool ok = (
       1 == EVP_DigestVerifyInit(&ctx, NULL, hash_alg, NULL, public_key_) &&
       1 == EVP_DigestVerifyUpdate(
           &ctx, data_to_sign.data(), data_to_sign.size()) &&
       1 == EVP_DigestVerifyFinal(
           &ctx,
           reinterpret_cast<const uint8_t*>(signature.data()),
           signature.size()));
 
   EVP_MD_CTX_cleanup(&ctx);
   return ok;
 }
 
 }  // namespace net