OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "net/ssl/ssl_config_service.h" | 5 #include "net/ssl/ssl_config_service.h" |
6 | 6 |
7 #include "base/lazy_instance.h" | 7 #include "base/lazy_instance.h" |
8 #include "base/memory/ref_counted.h" | 8 #include "base/memory/ref_counted.h" |
9 #include "base/synchronization/lock.h" | 9 #include "base/synchronization/lock.h" |
10 #include "net/cert/crl_set.h" | 10 #include "net/cert/crl_set.h" |
(...skipping 26 matching lines...) Expand all Loading... |
37 | 37 |
38 SSLConfig::SSLConfig() | 38 SSLConfig::SSLConfig() |
39 : rev_checking_enabled(false), | 39 : rev_checking_enabled(false), |
40 rev_checking_required_local_anchors(false), | 40 rev_checking_required_local_anchors(false), |
41 version_min(g_default_version_min), | 41 version_min(g_default_version_min), |
42 version_max(g_default_version_max), | 42 version_max(g_default_version_max), |
43 channel_id_enabled(true), | 43 channel_id_enabled(true), |
44 false_start_enabled(true), | 44 false_start_enabled(true), |
45 signed_cert_timestamps_enabled(true), | 45 signed_cert_timestamps_enabled(true), |
46 require_forward_secrecy(false), | 46 require_forward_secrecy(false), |
47 unrestricted_ssl3_fallback_enabled(false), | |
48 send_client_cert(false), | 47 send_client_cert(false), |
49 verify_ev_cert(false), | 48 verify_ev_cert(false), |
50 version_fallback(false), | 49 version_fallback(false), |
51 cert_io_enabled(true) { | 50 cert_io_enabled(true) { |
52 } | 51 } |
53 | 52 |
54 SSLConfig::~SSLConfig() { | 53 SSLConfig::~SSLConfig() { |
55 } | 54 } |
56 | 55 |
57 bool SSLConfig::IsAllowedBadCert(X509Certificate* cert, | 56 bool SSLConfig::IsAllowedBadCert(X509Certificate* cert, |
(...skipping 84 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
142 (orig_config.rev_checking_enabled != new_config.rev_checking_enabled) || | 141 (orig_config.rev_checking_enabled != new_config.rev_checking_enabled) || |
143 (orig_config.rev_checking_required_local_anchors != | 142 (orig_config.rev_checking_required_local_anchors != |
144 new_config.rev_checking_required_local_anchors) || | 143 new_config.rev_checking_required_local_anchors) || |
145 (orig_config.version_min != new_config.version_min) || | 144 (orig_config.version_min != new_config.version_min) || |
146 (orig_config.version_max != new_config.version_max) || | 145 (orig_config.version_max != new_config.version_max) || |
147 (orig_config.disabled_cipher_suites != | 146 (orig_config.disabled_cipher_suites != |
148 new_config.disabled_cipher_suites) || | 147 new_config.disabled_cipher_suites) || |
149 (orig_config.channel_id_enabled != new_config.channel_id_enabled) || | 148 (orig_config.channel_id_enabled != new_config.channel_id_enabled) || |
150 (orig_config.false_start_enabled != new_config.false_start_enabled) || | 149 (orig_config.false_start_enabled != new_config.false_start_enabled) || |
151 (orig_config.require_forward_secrecy != | 150 (orig_config.require_forward_secrecy != |
152 new_config.require_forward_secrecy) || | 151 new_config.require_forward_secrecy); |
153 (orig_config.unrestricted_ssl3_fallback_enabled != | |
154 new_config.unrestricted_ssl3_fallback_enabled); | |
155 | 152 |
156 if (config_changed) | 153 if (config_changed) |
157 NotifySSLConfigChange(); | 154 NotifySSLConfigChange(); |
158 } | 155 } |
159 | 156 |
160 // static | 157 // static |
161 bool SSLConfigService::IsSNIAvailable(SSLConfigService* service) { | 158 bool SSLConfigService::IsSNIAvailable(SSLConfigService* service) { |
162 if (!service) | 159 if (!service) |
163 return false; | 160 return false; |
164 | 161 |
165 SSLConfig ssl_config; | 162 SSLConfig ssl_config; |
166 service->GetSSLConfig(&ssl_config); | 163 service->GetSSLConfig(&ssl_config); |
167 return ssl_config.version_max >= SSL_PROTOCOL_VERSION_TLS1; | 164 return ssl_config.version_max >= SSL_PROTOCOL_VERSION_TLS1; |
168 } | 165 } |
169 | 166 |
170 } // namespace net | 167 } // namespace net |
OLD | NEW |