| Index: net/cert/ct_policy_enforcer.h
|
| diff --git a/net/cert/ct_policy_enforcer.h b/net/cert/ct_policy_enforcer.h
|
| index 8c29da5ecb3a9891ef2be90a55ae873ab61c91d4..4367d6af061c77cc74c9e8336f1e76e129cb369a 100644
|
| --- a/net/cert/ct_policy_enforcer.h
|
| +++ b/net/cert/ct_policy_enforcer.h
|
| @@ -20,23 +20,25 @@ class EVCertsWhitelist;
|
|
|
| class X509Certificate;
|
|
|
| -// Class for checking that a given certificate conforms to security-related
|
| -// policies.
|
| +// Class for checking that a given certificate conforms to
|
| +// Certificate-Transparency-related policies.
|
| class NET_EXPORT CTPolicyEnforcer {
|
| public:
|
| CTPolicyEnforcer() {}
|
| virtual ~CTPolicyEnforcer() {}
|
|
|
| // Returns true if the collection of SCTs for the given certificate
|
| - // conforms with the CT/EV policy. Conformance details are logged to
|
| + // conforms with the CT policy. Conformance details are logged to
|
| // |net_log|.
|
| // |cert| is the certificate for which the SCTs apply.
|
| + // |ev_whitelist| is a whitelist of EV certificates for which CT policy need
|
| + // not apply.
|
| // |ct_result| must contain the result of verifying any SCTs associated with
|
| // |cert| prior to invoking this method.
|
| - virtual bool DoesConformToCTEVPolicy(X509Certificate* cert,
|
| - const ct::EVCertsWhitelist* ev_whitelist,
|
| - const ct::CTVerifyResult& ct_result,
|
| - const BoundNetLog& net_log);
|
| + virtual bool DoesConformToCTPolicy(X509Certificate* cert,
|
| + const ct::EVCertsWhitelist* ev_whitelist,
|
| + const ct::CTVerifyResult& ct_result,
|
| + const BoundNetLog& net_log);
|
| };
|
|
|
| } // namespace net
|
|
|