Blimp: add support for SSL connections.

blimp/net/blimp_cert_verifier.h

+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef BLIMP_NET_BLIMP_CERT_VERIFIER_H_
+#define BLIMP_NET_BLIMP_CERT_VERIFIER_H_
+
+#include <string>
+
+#include "blimp/net/blimp_net_export.h"
+#include "net/cert/cert_verifier.h"
+
+namespace blimp {
+
+// Checks if the peer certificate is an exact match to the X509 certificate
+// supplied out-of-band by the Blimp Assigner.
+// Rejects all other certificates.

[Wez, 2016/02/12 02:31:14]

Suggest: "Rejects all certificates other than the |engine_cert| specified at
construction time."

[Kevin M, 2016/02/13 00:44:18]

Done.

+class BLIMP_NET_EXPORT BlimpCertVerifier : public net::CertVerifier {

[Wez, 2016/02/12 21:42:38]

Is there anything actually Blimp specific about this verifier?

In general if a class has nothing Blimp-specific, let's not prefix it with Blimp
- that way it's more obvious that it could be considered for re-use elsewhere.

[Kevin M, 2016/02/13 00:44:18]

Done.

+ public:
+  // |assigned_cert|: The one allowable certificate.
+  explicit BlimpCertVerifier(scoped_refptr<net::X509Certificate> assigned_cert);
+
+  ~BlimpCertVerifier() override;
+
+  // net::CertVerifier implementation.
+  int Verify(net::X509Certificate* cert,
+             const std::string&,
+             const std::string&,
+             int,
+             net::CRLSet*,
+             net::CertVerifyResult* verify_result,
+             const net::CompletionCallback&,
+             scoped_ptr<net::CertVerifier::Request>*,
+             const net::BoundNetLog&) override;
+
+ private:
+  scoped_refptr<net::X509Certificate> assigned_cert_;
+
+  DISALLOW_COPY_AND_ASSIGN(BlimpCertVerifier);
+};
+
+}  // namespace blimp
+
+#endif  // BLIMP_NET_BLIMP_CERT_VERIFIER_H_