Add new functions to handle UPN and email addresses

net/cert/x509_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_H_
 #define NET_CERT_X509_UTIL_H_
 
 #include <stdint.h>
 
 #include <string>
@@ skipping 13 matching lines @@
 class X509Certificate;
 
 namespace x509_util {
 
 // Supported digest algorithms for signing certificates.
 enum DigestAlgorithm {
   DIGEST_SHA1,
   DIGEST_SHA256
 };
 
+// Microsoft User Principal Name: 1.3.6.1.4.1.311.20.2.3
+const uint8_t kUpnOid[] = {0x2b, 0x6,  0x1,  0x4, 0x1,
+                           0x82, 0x37, 0x14, 0x2, 0x3};

[Ryan Sleevi, 2016/02/27 00:38:45]

I don't like exposing the constant's value in the header; plus this
initialization syntax doesn't provide external linkage but instead duplicates
the constant.

[Kevin Cernekee, 2016/02/27 19:06:23]

Done.

+
 // Creates a public-private keypair and a self-signed certificate.
 // Subject, serial number and validity period are given as parameters.
 // The certificate is signed by the private key in |key|. The key length and
 // signature algorithm may be updated periodically to match best practices.
 //
 // |subject| is a distinguished name defined in RFC4514 with _only_ a CN
 // component, as in:
 //   CN=Michael Wong
 //
 // SECURITY WARNING
@@ skipping 43 matching lines @@
 
  private:
   base::Time now_;
 };
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_H_