| Index: components/certificate_transparency/tree_state_tracker.cc
|
| diff --git a/components/certificate_transparency/tree_state_tracker.cc b/components/certificate_transparency/tree_state_tracker.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..118cec0fedb94f4f149281c106a09ee730534cf7
|
| --- /dev/null
|
| +++ b/components/certificate_transparency/tree_state_tracker.cc
|
| @@ -0,0 +1,49 @@
|
| +// Copyright 2015 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "components/certificate_transparency/tree_state_tracker.h"
|
| +
|
| +#include "components/certificate_transparency/single_tree_tracker.h"
|
| +#include "net/cert/ct_log_verifier.h"
|
| +#include "net/cert/signed_certificate_timestamp.h"
|
| +#include "net/cert/signed_tree_head.h"
|
| +#include "net/cert/x509_certificate.h"
|
| +
|
| +using net::X509Certificate;
|
| +using net::CTLogVerifier;
|
| +using net::ct::SignedCertificateTimestamp;
|
| +using net::ct::SignedTreeHead;
|
| +
|
| +namespace certificate_transparency {
|
| +
|
| +TreeStateTracker::TreeStateTracker(
|
| + std::vector<scoped_refptr<const CTLogVerifier>> ct_logs) {
|
| + for (const auto& log : ct_logs)
|
| + tree_trackers_[log->key_id()].reset(new SingleTreeTracker(log));
|
| +}
|
| +
|
| +TreeStateTracker::~TreeStateTracker() {}
|
| +
|
| +void TreeStateTracker::OnSCTVerified(X509Certificate* cert,
|
| + const SignedCertificateTimestamp* sct) {
|
| + auto it = tree_trackers_.find(sct->log_id);
|
| + // Ignore if the SCT is from an unknown log.
|
| + if (it == tree_trackers_.end())
|
| + return;
|
| +
|
| + it->second->OnSCTVerified(cert, sct);
|
| +}
|
| +
|
| +void TreeStateTracker::NewSTHObserved(const SignedTreeHead& sth) {
|
| + auto it = tree_trackers_.find(sth.log_id);
|
| + // Is the STH from a known log? Since STHs can be provided from external
|
| + // sources for logs not yet recognized by this client, return, rather than
|
| + // DCHECK.
|
| + if (it == tree_trackers_.end())
|
| + return;
|
| +
|
| + it->second->NewSTHObserved(sth);
|
| +}
|
| +
|
| +} // namespace certificate_transparency
|
|
|