OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 // Use the <code>chrome.platformKeys</code> API to access client certificates | 5 // Use the <code>chrome.platformKeys</code> API to access client certificates |
6 // managed by the platform. If the user or policy grants the permission, an | 6 // managed by the platform. If the user or policy grants the permission, an |
7 // extension can use such a certficate in its custom authentication protocol. | 7 // extension can use such a certficate in its custom authentication protocol. |
8 // E.g. this allows usage of platform managed certificates in third party VPNs | 8 // E.g. this allows usage of platform managed certificates in third party VPNs |
9 // (see $(ref:vpnProvider chrome.vpnProvider)). | 9 // (see $(ref:vpnProvider chrome.vpnProvider)). |
10 namespace platformKeys { | 10 [use_movable_types=true] namespace platformKeys { |
11 [noinline_doc] dictionary Match { | 11 [noinline_doc] dictionary Match { |
12 // The DER encoding of a X.509 certificate. | 12 // The DER encoding of a X.509 certificate. |
13 ArrayBuffer certificate; | 13 ArrayBuffer certificate; |
14 | 14 |
15 // The | 15 // The |
16 // <a href="http://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary"> | 16 // <a href="http://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary"> |
17 // KeyAlgorithm</a> of the certified key. This contains algorithm | 17 // KeyAlgorithm</a> of the certified key. This contains algorithm |
18 // parameters that are inherent to the key of the certificate (e.g. the key | 18 // parameters that are inherent to the key of the certificate (e.g. the key |
19 // length). Other parameters like the hash function used by the sign | 19 // length). Other parameters like the hash function used by the sign |
20 // function are not included. | 20 // function are not included. |
(...skipping 127 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
148 // specified and might change in the future. | 148 // specified and might change in the future. |
149 // The API implementation verifies certificate expiration, validates the | 149 // The API implementation verifies certificate expiration, validates the |
150 // certification path and checks trust by a known CA. | 150 // certification path and checks trust by a known CA. |
151 // The implementation is supposed to respect the EKU serverAuth and to | 151 // The implementation is supposed to respect the EKU serverAuth and to |
152 // support subject alternative names. | 152 // support subject alternative names. |
153 static void verifyTLSServerCertificate(VerificationDetails details, | 153 static void verifyTLSServerCertificate(VerificationDetails details, |
154 VerificationCallback callback); | 154 VerificationCallback callback); |
155 }; | 155 }; |
156 }; | 156 }; |
157 | 157 |
OLD | NEW |