Resolve certificate references in ONC by PEM.

chromeos/network/onc/onc_signature.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/network/onc/onc_signature.h"
 
 #include "chromeos/network/onc/onc_constants.h"
 #include "third_party/cros_system_api/dbus/service_constants.h"
 
 using base::Value;
@@ skipping 39 matching lines @@
   { kRecommended, &kRecommendedSignature },
   { eap::kAnonymousIdentity, &kStringSignature },
   { eap::kClientCertPattern, &kCertificatePatternSignature },
   { eap::kClientCertRef, &kStringSignature },
   { eap::kClientCertType, &kStringSignature },
   { eap::kIdentity, &kStringSignature },
   { eap::kInner, &kStringSignature },
   { eap::kOuter, &kStringSignature },
   { eap::kPassword, &kStringSignature },
   { eap::kSaveCredentials, &kBoolSignature },
+  { eap::kServerCAFingerprint, &kStringSignature },
   { eap::kServerCARef, &kStringSignature },
   { eap::kUseSystemCAs, &kBoolSignature },
   { NULL }
 };
 
 const OncFieldSignature ipsec_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { vpn::kAuthenticationType, &kStringSignature },
   { vpn::kClientCertPattern, &kCertificatePatternSignature },
   { vpn::kClientCertRef, &kStringSignature },
   { vpn::kClientCertType, &kStringSignature },
   { vpn::kGroup, &kStringSignature },
   { vpn::kIKEVersion, &kIntegerSignature },
   { vpn::kPSK, &kStringSignature },
   { vpn::kSaveCredentials, &kBoolSignature },
+  { vpn::kServerCAFingerprint, &kStringSignature },
   { vpn::kServerCARef, &kStringSignature },
   // Not yet supported.
   //  { vpn::kEAP, &kEAPSignature },
   //  { vpn::kXAUTH, &kXAUTHSignature },
   { NULL }
 };
 
 const OncFieldSignature l2tp_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { vpn::kPassword, &kStringSignature },
@@ skipping 17 matching lines @@
   { vpn::kNsCertType, &kStringSignature },
   { vpn::kPassword, &kStringSignature },
   { vpn::kPort, &kIntegerSignature },
   { vpn::kProto, &kStringSignature },
   { vpn::kPushPeerInfo, &kBoolSignature },
   { vpn::kRemoteCertEKU, &kStringSignature },
   { vpn::kRemoteCertKU, &kStringListSignature },
   { vpn::kRemoteCertTLS, &kStringSignature },
   { vpn::kRenegSec, &kIntegerSignature },
   { vpn::kSaveCredentials, &kBoolSignature },
+  { vpn::kServerCAFingerprint, &kStringSignature },
   { vpn::kServerCARef, &kStringSignature },
   // Not supported, yet.
+  { vpn::kServerCertFingerprint, &kStringSignature },
   { vpn::kServerCertRef, &kStringSignature },
   { vpn::kServerPollTimeout, &kIntegerSignature },
   { vpn::kShaper, &kIntegerSignature },
   { vpn::kStaticChallenge, &kStringSignature },
   { vpn::kTLSAuthContents, &kStringSignature },
   { vpn::kTLSRemote, &kStringSignature },
   { vpn::kUsername, &kStringSignature },
   // Not supported, yet.
   { vpn::kVerb, &kStringSignature },
   { NULL }
@@ skipping 269 matching lines @@
     if (&signature == entry->value_signature &&
         onc_field_name == entry->field_name) {
       return true;
     }
   }
   return false;
 }
 
 }  // namespace onc
 }  // namespace chromeos