| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "extensions/common/cast/cast_cert_validator.h" | 5 #include "components/cast_certificate/cast_cert_validator.h" |
| 6 | 6 |
| 7 #include <stddef.h> | 7 #include <stddef.h> |
| 8 #include <stdint.h> | 8 #include <stdint.h> |
| 9 | 9 |
| 10 #include <algorithm> | 10 #include <algorithm> |
| 11 #include <memory> | 11 #include <memory> |
| 12 #include <utility> | 12 #include <utility> |
| 13 | 13 |
| 14 #include "base/memory/ptr_util.h" | 14 #include "base/memory/ptr_util.h" |
| 15 #include "base/memory/singleton.h" | 15 #include "base/memory/singleton.h" |
| 16 #include "net/cert/internal/certificate_policies.h" | 16 #include "net/cert/internal/certificate_policies.h" |
| 17 #include "net/cert/internal/extended_key_usage.h" | 17 #include "net/cert/internal/extended_key_usage.h" |
| 18 #include "net/cert/internal/parse_certificate.h" | 18 #include "net/cert/internal/parse_certificate.h" |
| 19 #include "net/cert/internal/parse_name.h" | 19 #include "net/cert/internal/parse_name.h" |
| 20 #include "net/cert/internal/signature_algorithm.h" | 20 #include "net/cert/internal/signature_algorithm.h" |
| 21 #include "net/cert/internal/signature_policy.h" | 21 #include "net/cert/internal/signature_policy.h" |
| 22 #include "net/cert/internal/verify_certificate_chain.h" | 22 #include "net/cert/internal/verify_certificate_chain.h" |
| 23 #include "net/cert/internal/verify_signed_data.h" | 23 #include "net/cert/internal/verify_signed_data.h" |
| 24 #include "net/der/input.h" | 24 #include "net/der/input.h" |
| 25 | 25 |
| 26 namespace extensions { | 26 namespace cast_certificate { |
| 27 namespace api { | |
| 28 namespace cast_crypto { | |
| 29 namespace { | 27 namespace { |
| 30 | 28 |
| 31 // ------------------------------------------------------------------------- | 29 // ------------------------------------------------------------------------- |
| 32 // Cast trust anchors. | 30 // Cast trust anchors. |
| 33 // ------------------------------------------------------------------------- | 31 // ------------------------------------------------------------------------- |
| 34 | 32 |
| 35 // There are two trusted roots for Cast certificate chains: | 33 // There are two trusted roots for Cast certificate chains: |
| 36 // | 34 // |
| 37 // (1) CN=Cast Root CA (kCastRootCaDer) | 35 // (1) CN=Cast Root CA (kCastRootCaDer) |
| 38 // (2) CN=Eureka Root CA (kEurekaRootCaDer) | 36 // (2) CN=Eureka Root CA (kEurekaRootCaDer) |
| 39 // | 37 // |
| 40 // These constants are defined by the files included next: | 38 // These constants are defined by the files included next: |
| 41 | 39 |
| 42 #include "extensions/common/cast/cast_root_ca_cert_der-inc.h" | 40 #include "components/cast_certificate/cast_root_ca_cert_der-inc.h" |
| 43 #include "extensions/common/cast/eureka_root_ca_der-inc.h" | 41 #include "components/cast_certificate/eureka_root_ca_der-inc.h" |
| 44 | 42 |
| 45 // Singleton for the Cast trust store. | 43 // Singleton for the Cast trust store. |
| 46 class CastTrustStore { | 44 class CastTrustStore { |
| 47 public: | 45 public: |
| 48 static CastTrustStore* GetInstance() { | 46 static CastTrustStore* GetInstance() { |
| 49 return base::Singleton<CastTrustStore, | 47 return base::Singleton<CastTrustStore, |
| 50 base::LeakySingletonTraits<CastTrustStore>>::get(); | 48 base::LeakySingletonTraits<CastTrustStore>>::get(); |
| 51 } | 49 } |
| 52 | 50 |
| 53 static net::TrustStore& Get() { return GetInstance()->store_; } | 51 static net::TrustStore& Get() { return GetInstance()->store_; } |
| (...skipping 181 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 235 | 233 |
| 236 // Get the Common Name for the certificate. | 234 // Get the Common Name for the certificate. |
| 237 std::string common_name; | 235 std::string common_name; |
| 238 if (!GetCommonNameFromSubject(tbs.subject_tlv, &common_name)) | 236 if (!GetCommonNameFromSubject(tbs.subject_tlv, &common_name)) |
| 239 return false; | 237 return false; |
| 240 | 238 |
| 241 context->reset(new CertVerificationContextImpl(tbs.spki_tlv, common_name)); | 239 context->reset(new CertVerificationContextImpl(tbs.spki_tlv, common_name)); |
| 242 return true; | 240 return true; |
| 243 } | 241 } |
| 244 | 242 |
| 245 | |
| 246 // Converts a base::Time::Exploded to a net::der::GeneralizedTime. | 243 // Converts a base::Time::Exploded to a net::der::GeneralizedTime. |
| 247 net::der::GeneralizedTime ConvertExplodedTime( | 244 net::der::GeneralizedTime ConvertExplodedTime( |
| 248 const base::Time::Exploded& exploded) { | 245 const base::Time::Exploded& exploded) { |
| 249 net::der::GeneralizedTime result; | 246 net::der::GeneralizedTime result; |
| 250 result.year = exploded.year; | 247 result.year = exploded.year; |
| 251 result.month = exploded.month; | 248 result.month = exploded.month; |
| 252 result.day = exploded.day_of_month; | 249 result.day = exploded.day_of_month; |
| 253 result.hours = exploded.hour; | 250 result.hours = exploded.hour; |
| 254 result.minutes = exploded.minute; | 251 result.minutes = exploded.minute; |
| 255 result.seconds = exploded.second; | 252 result.seconds = exploded.second; |
| (...skipping 34 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 290 // verification by unittests. | 287 // verification by unittests. |
| 291 return base::WrapUnique( | 288 return base::WrapUnique( |
| 292 new CertVerificationContextImpl(net::der::Input(spki), "CommonName")); | 289 new CertVerificationContextImpl(net::der::Input(spki), "CommonName")); |
| 293 } | 290 } |
| 294 | 291 |
| 295 bool AddTrustAnchorForTest(const uint8_t* data, size_t length) { | 292 bool AddTrustAnchorForTest(const uint8_t* data, size_t length) { |
| 296 return CastTrustStore::Get().AddTrustedCertificateWithoutCopying(data, | 293 return CastTrustStore::Get().AddTrustedCertificateWithoutCopying(data, |
| 297 length); | 294 length); |
| 298 } | 295 } |
| 299 | 296 |
| 300 } // namespace cast_crypto | 297 } // namespace cast_certificate |
| 301 } // namespace api | |
| 302 } // namespace extensions | |
| OLD | NEW |