| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // Use the <code>chrome.platformKeys</code> API to access client certificates | 5 // Use the <code>chrome.platformKeys</code> API to access client certificates |
| 6 // managed by the platform. If the user or policy grants the permission, an | 6 // managed by the platform. If the user or policy grants the permission, an |
| 7 // extension can use such a certficate in its custom authentication protocol. | 7 // extension can use such a certficate in its custom authentication protocol. |
| 8 // E.g. this allows usage of platform managed certificates in third party VPNs | 8 // E.g. this allows usage of platform managed certificates in third party VPNs |
| 9 // (see $(ref:vpnProvider chrome.vpnProvider)). | 9 // (see $(ref:vpnProvider chrome.vpnProvider)). |
| 10 [use_movable_types=true] namespace platformKeys { | 10 namespace platformKeys { |
| 11 [noinline_doc] dictionary Match { | 11 [noinline_doc] dictionary Match { |
| 12 // The DER encoding of a X.509 certificate. | 12 // The DER encoding of a X.509 certificate. |
| 13 ArrayBuffer certificate; | 13 ArrayBuffer certificate; |
| 14 | 14 |
| 15 // The | 15 // The |
| 16 // <a href="http://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary"> | 16 // <a href="http://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary"> |
| 17 // KeyAlgorithm</a> of the certified key. This contains algorithm | 17 // KeyAlgorithm</a> of the certified key. This contains algorithm |
| 18 // parameters that are inherent to the key of the certificate (e.g. the key | 18 // parameters that are inherent to the key of the certificate (e.g. the key |
| 19 // length). Other parameters like the hash function used by the sign | 19 // length). Other parameters like the hash function used by the sign |
| 20 // function are not included. | 20 // function are not included. |
| (...skipping 127 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 148 // specified and might change in the future. | 148 // specified and might change in the future. |
| 149 // The API implementation verifies certificate expiration, validates the | 149 // The API implementation verifies certificate expiration, validates the |
| 150 // certification path and checks trust by a known CA. | 150 // certification path and checks trust by a known CA. |
| 151 // The implementation is supposed to respect the EKU serverAuth and to | 151 // The implementation is supposed to respect the EKU serverAuth and to |
| 152 // support subject alternative names. | 152 // support subject alternative names. |
| 153 static void verifyTLSServerCertificate(VerificationDetails details, | 153 static void verifyTLSServerCertificate(VerificationDetails details, |
| 154 VerificationCallback callback); | 154 VerificationCallback callback); |
| 155 }; | 155 }; |
| 156 }; | 156 }; |
| 157 | 157 |
| OLD | NEW |