Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(5361)

Unified Diff: chrome/browser/net/transport_security_persister.cc

Issue 18554002: Distinguish STS observation times from PKP observation times. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Declarations close to use; add comment. Created 7 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | net/http/transport_security_state.h » ('j') | net/http/transport_security_state.h » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: chrome/browser/net/transport_security_persister.cc
diff --git a/chrome/browser/net/transport_security_persister.cc b/chrome/browser/net/transport_security_persister.cc
index 20647d6e37cef715c05953377c8ce218942ad90d..d3ad0abf50b7b8bcc2fd4e046e380d5b3adf6ab0 100644
--- a/chrome/browser/net/transport_security_persister.cc
+++ b/chrome/browser/net/transport_security_persister.cc
@@ -80,6 +80,8 @@ const char kStrict[] = "strict";
const char kDefault[] = "default";
const char kPinningOnly[] = "pinning-only";
const char kCreated[] = "created";
+const char kStsObserved[] = "sts_observed";
+const char kPkpObserved[] = "pkp_observed";
} // namespace
@@ -174,7 +176,8 @@ bool TransportSecurityPersister::SerializeData(std::string* output) {
domain_state.sts_include_subdomains);
serialized->SetBoolean(kPkpIncludeSubdomains,
domain_state.pkp_include_subdomains);
- serialized->SetDouble(kCreated, domain_state.created.ToDoubleT());
+ serialized->SetDouble(kStsObserved, domain_state.sts_observed.ToDoubleT());
+ serialized->SetDouble(kPkpObserved, domain_state.pkp_observed.ToDoubleT());
serialized->SetDouble(kExpiry, domain_state.upgrade_expiry.ToDoubleT());
serialized->SetDouble(kDynamicSPKIHashesExpiry,
domain_state.dynamic_spki_hashes_expiry.ToDoubleT());
@@ -237,7 +240,6 @@ bool TransportSecurityPersister::Deserialize(const std::string& serialized,
}
std::string mode_string;
- double created;
double expiry;
double dynamic_spki_hashes_expiry = 0.0;
TransportSecurityState::DomainState domain_state;
@@ -297,13 +299,27 @@ bool TransportSecurityPersister::Deserialize(const std::string& serialized,
domain_state.upgrade_expiry = base::Time::FromDoubleT(expiry);
domain_state.dynamic_spki_hashes_expiry =
base::Time::FromDoubleT(dynamic_spki_hashes_expiry);
- if (parsed->GetDouble(kCreated, &created)) {
- domain_state.created = base::Time::FromDoubleT(created);
+
+ double sts_observed;
+ double pkp_observed;
+ if (parsed->GetDouble(kStsObserved, &sts_observed)) {
+ domain_state.sts_observed = base::Time::FromDoubleT(sts_observed);
+ } else if (parsed->GetDouble(kCreated, &sts_observed)) {
+ // kCreated is a legacy synonym for both kStsObserved and kPkpObserved.
+ domain_state.sts_observed = base::Time::FromDoubleT(sts_observed);
} else {
// We're migrating an old entry with no creation date. Make sure we
// write the new date back in a reasonable time frame.
dirtied = true;
- domain_state.created = base::Time::Now();
+ domain_state.sts_observed = base::Time::Now();
+ }
+ if (parsed->GetDouble(kPkpObserved, &pkp_observed)) {
+ domain_state.pkp_observed = base::Time::FromDoubleT(pkp_observed);
+ } else if (parsed->GetDouble(kCreated, &pkp_observed)) {
+ domain_state.pkp_observed = base::Time::FromDoubleT(pkp_observed);
+ } else {
+ dirtied = true;
+ domain_state.pkp_observed = base::Time::Now();
}
if (domain_state.upgrade_expiry <= current_time &&
« no previous file with comments | « no previous file | net/http/transport_security_state.h » ('j') | net/http/transport_security_state.h » ('J')

Powered by Google App Engine
This is Rietveld 408576698