Certificate Transparency: Per-profile CT verification

net/cert/ct_log_verifier_nss.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <cryptohi.h>
 #include <keyhi.h>
 #include <nss.h>
 #include <pk11pub.h>
@@ skipping 99 matching lines @@
   if (signature_algorithm_ == ct::DigitallySigned::SIG_ALGO_RSA &&
       SECKEY_PublicKeyStrengthInBits(public_key_) < 2048) {
     DVLOG(1) << "Too small a public key.";
     return false;
   }
 
   return true;
 }
 
 bool CTLogVerifier::VerifySignature(const base::StringPiece& data_to_sign,
-                                    const base::StringPiece& signature) {
+                                    const base::StringPiece& signature) const {
   SECItem sig_data;
   sig_data.data = reinterpret_cast<unsigned char*>(const_cast<char*>(
       signature.data()));
   sig_data.len = signature.size();
 
   SECStatus rv = VFY_VerifyDataDirect(
       reinterpret_cast<const unsigned char*>(data_to_sign.data()),
       data_to_sign.size(), public_key_, &sig_data,
       GetNSSSigAlg(signature_algorithm_), GetNSSHashAlg(hash_algorithm_),
       NULL, NULL);
   DVLOG(1) << "Signature verification result: " << (rv == SECSuccess);
   return rv == SECSuccess;
 }
 
 }  // namespace net