| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ | 5 #ifndef NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ |
| 6 #define NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ | 6 #define NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ |
| 7 | 7 |
| 8 #include <stddef.h> | 8 #include <stddef.h> |
| 9 #include <stdint.h> | 9 #include <stdint.h> |
| 10 | 10 |
| (...skipping 40 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 51 // trust anchors during verification, provided that the underlying | 51 // trust anchors during verification, provided that the underlying |
| 52 // CertVerifyProc supports additional trust beyond the default implementation. | 52 // CertVerifyProc supports additional trust beyond the default implementation. |
| 53 // The CertTrustAnchorProvider will only be accessed on the same | 53 // The CertTrustAnchorProvider will only be accessed on the same |
| 54 // thread that Verify() is called on; that is, it will not be | 54 // thread that Verify() is called on; that is, it will not be |
| 55 // accessed from worker threads. | 55 // accessed from worker threads. |
| 56 // It must outlive the MultiThreadedCertVerifier. | 56 // It must outlive the MultiThreadedCertVerifier. |
| 57 void SetCertTrustAnchorProvider( | 57 void SetCertTrustAnchorProvider( |
| 58 CertTrustAnchorProvider* trust_anchor_provider); | 58 CertTrustAnchorProvider* trust_anchor_provider); |
| 59 | 59 |
| 60 // CertVerifier implementation | 60 // CertVerifier implementation |
| 61 int Verify(X509Certificate* cert, | 61 int Verify(const RequestParams& params, |
| 62 const std::string& hostname, | |
| 63 const std::string& ocsp_response, | |
| 64 int flags, | |
| 65 CRLSet* crl_set, | 62 CRLSet* crl_set, |
| 66 CertVerifyResult* verify_result, | 63 CertVerifyResult* verify_result, |
| 67 const CompletionCallback& callback, | 64 const CompletionCallback& callback, |
| 68 std::unique_ptr<Request>* out_req, | 65 std::unique_ptr<Request>* out_req, |
| 69 const BoundNetLog& net_log) override; | 66 const BoundNetLog& net_log) override; |
| 70 | 67 |
| 71 bool SupportsOCSPStapling() override; | 68 bool SupportsOCSPStapling() override; |
| 72 | 69 |
| 73 private: | 70 private: |
| 74 struct JobToRequestParamsComparator; | 71 struct JobToRequestParamsComparator; |
| (...skipping 40 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 115 bool operator()(const CacheValidityPeriod& now, | 112 bool operator()(const CacheValidityPeriod& now, |
| 116 const CacheValidityPeriod& expiration) const; | 113 const CacheValidityPeriod& expiration) const; |
| 117 }; | 114 }; |
| 118 | 115 |
| 119 struct JobComparator { | 116 struct JobComparator { |
| 120 bool operator()(const CertVerifierJob* job1, | 117 bool operator()(const CertVerifierJob* job1, |
| 121 const CertVerifierJob* job2) const; | 118 const CertVerifierJob* job2) const; |
| 122 }; | 119 }; |
| 123 | 120 |
| 124 using JobSet = std::set<CertVerifierJob*, JobComparator>; | 121 using JobSet = std::set<CertVerifierJob*, JobComparator>; |
| 125 using CertVerifierCache = ExpiringCache<CertVerifier::RequestParams, | 122 using CertVerifierCache = ExpiringCache<RequestParams, |
| 126 CachedResult, | 123 CachedResult, |
| 127 CacheValidityPeriod, | 124 CacheValidityPeriod, |
| 128 CacheExpirationFunctor>; | 125 CacheExpirationFunctor>; |
| 129 | 126 |
| 130 // Saves |result| into the cache, keyed by |key|, which began validation at | 127 // Saves |result| into the cache, keyed by |key|, which began validation at |
| 131 // |start_time|. | 128 // |start_time|. |
| 132 void SaveResultToCache(const CertVerifier::RequestParams& key, | 129 void SaveResultToCache(const RequestParams& key, |
| 133 const base::Time& start_time, | 130 const base::Time& start_time, |
| 134 const CachedResult& result); | 131 const CachedResult& result); |
| 135 | 132 |
| 136 // CertDatabase::Observer methods: | 133 // CertDatabase::Observer methods: |
| 137 void OnCACertChanged(const X509Certificate* cert) override; | 134 void OnCACertChanged(const X509Certificate* cert) override; |
| 138 | 135 |
| 139 // Returns an inflight job for |key|. If there is no such job then returns | 136 // Returns an inflight job for |key|. If there is no such job then returns |
| 140 // null. | 137 // null. |
| 141 CertVerifierJob* FindJob(const CertVerifier::RequestParams& key); | 138 CertVerifierJob* FindJob(const RequestParams& key); |
| 142 | 139 |
| 143 // Removes |job| from the inflight set, and passes ownership back to the | 140 // Removes |job| from the inflight set, and passes ownership back to the |
| 144 // caller. |job| must already be |inflight_|. | 141 // caller. |job| must already be |inflight_|. |
| 145 std::unique_ptr<CertVerifierJob> RemoveJob(CertVerifierJob* job); | 142 std::unique_ptr<CertVerifierJob> RemoveJob(CertVerifierJob* job); |
| 146 | 143 |
| 147 // For unit testing. | 144 // For unit testing. |
| 148 void ClearCache() { cache_.Clear(); } | 145 void ClearCache() { cache_.Clear(); } |
| 149 size_t GetCacheSize() const { return cache_.size(); } | 146 size_t GetCacheSize() const { return cache_.size(); } |
| 150 uint64_t cache_hits() const { return cache_hits_; } | 147 uint64_t cache_hits() const { return cache_hits_; } |
| 151 uint64_t requests() const { return requests_; } | 148 uint64_t requests() const { return requests_; } |
| (...skipping 12 matching lines...) Expand all Loading... |
| 164 scoped_refptr<CertVerifyProc> verify_proc_; | 161 scoped_refptr<CertVerifyProc> verify_proc_; |
| 165 | 162 |
| 166 CertTrustAnchorProvider* trust_anchor_provider_; | 163 CertTrustAnchorProvider* trust_anchor_provider_; |
| 167 | 164 |
| 168 DISALLOW_COPY_AND_ASSIGN(MultiThreadedCertVerifier); | 165 DISALLOW_COPY_AND_ASSIGN(MultiThreadedCertVerifier); |
| 169 }; | 166 }; |
| 170 | 167 |
| 171 } // namespace net | 168 } // namespace net |
| 172 | 169 |
| 173 #endif // NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ | 170 #endif // NET_CERT_MULTI_THREADED_CERT_VERIFIER_H_ |
| OLD | NEW |