| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_CERT_X509_UTIL_H_ | 5 #ifndef NET_CERT_X509_UTIL_H_ |
| 6 #define NET_CERT_X509_UTIL_H_ | 6 #define NET_CERT_X509_UTIL_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/memory/ref_counted.h" | 10 #include "base/memory/ref_counted.h" |
| (...skipping 26 matching lines...) Expand all Loading... |
| 37 // See Internet Draft draft-balfanz-tls-obc-00 for more details: | 37 // See Internet Draft draft-balfanz-tls-obc-00 for more details: |
| 38 // http://tools.ietf.org/html/draft-balfanz-tls-obc-00 | 38 // http://tools.ietf.org/html/draft-balfanz-tls-obc-00 |
| 39 NET_EXPORT_PRIVATE bool CreateDomainBoundCertEC( | 39 NET_EXPORT_PRIVATE bool CreateDomainBoundCertEC( |
| 40 crypto::ECPrivateKey* key, | 40 crypto::ECPrivateKey* key, |
| 41 const std::string& domain, | 41 const std::string& domain, |
| 42 uint32 serial_number, | 42 uint32 serial_number, |
| 43 base::Time not_valid_before, | 43 base::Time not_valid_before, |
| 44 base::Time not_valid_after, | 44 base::Time not_valid_after, |
| 45 std::string* der_cert); | 45 std::string* der_cert); |
| 46 | 46 |
| 47 // Creates a self-signed certificate containing the public key in |key|. |
| 48 // Common name, serial number and validity period are given as parameters. |
| 49 // The certificate is signed by the private key in |key|. |
| 50 // The hashing algorithm for the signature is SHA-1. |
| 51 NET_EXPORT_PRIVATE bool CreateSelfSignedCertEC( |
| 52 crypto::ECPrivateKey* key, |
| 53 const std::string& common_name, |
| 54 uint32 serial_number, |
| 55 base::Time not_valid_before, |
| 56 base::Time not_valid_after, |
| 57 std::string* der_cert); |
| 58 |
| 47 // Comparator for use in STL algorithms that will sort client certificates by | 59 // Comparator for use in STL algorithms that will sort client certificates by |
| 48 // order of preference. | 60 // order of preference. |
| 49 // Returns true if |a| is more preferable than |b|, allowing it to be used | 61 // Returns true if |a| is more preferable than |b|, allowing it to be used |
| 50 // with any algorithm that compares according to strict weak ordering. | 62 // with any algorithm that compares according to strict weak ordering. |
| 51 // | 63 // |
| 52 // Criteria include: | 64 // Criteria include: |
| 53 // - Prefer certificates that have a longer validity period (later | 65 // - Prefer certificates that have a longer validity period (later |
| 54 // expiration dates) | 66 // expiration dates) |
| 55 // - If equal, prefer certificates that were issued more recently | 67 // - If equal, prefer certificates that were issued more recently |
| 56 // - If equal, prefer shorter chains (if available) | 68 // - If equal, prefer shorter chains (if available) |
| 57 class NET_EXPORT_PRIVATE ClientCertSorter { | 69 class NET_EXPORT_PRIVATE ClientCertSorter { |
| 58 public: | 70 public: |
| 59 ClientCertSorter(); | 71 ClientCertSorter(); |
| 60 | 72 |
| 61 bool operator()( | 73 bool operator()( |
| 62 const scoped_refptr<X509Certificate>& a, | 74 const scoped_refptr<X509Certificate>& a, |
| 63 const scoped_refptr<X509Certificate>& b) const; | 75 const scoped_refptr<X509Certificate>& b) const; |
| 64 | 76 |
| 65 private: | 77 private: |
| 66 base::Time now_; | 78 base::Time now_; |
| 67 }; | 79 }; |
| 68 | 80 |
| 69 } // namespace x509_util | 81 } // namespace x509_util |
| 70 | 82 |
| 71 } // namespace net | 83 } // namespace net |
| 72 | 84 |
| 73 #endif // NET_CERT_X509_UTIL_H_ | 85 #endif // NET_CERT_X509_UTIL_H_ |
| OLD | NEW |