Chromium Code Reviews| Index: net/http/transport_security_state.h |
| diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h |
| index 14c080a4b65ae6e72f4a37f965dfa8974fc89dd1..b74b78d64fdb60664dfd3de3b0c2cd41e420b0dc 100644 |
| --- a/net/http/transport_security_state.h |
| +++ b/net/http/transport_security_state.h |
| @@ -198,6 +198,23 @@ class NET_EXPORT TransportSecurityState |
| GURL report_uri; |
| }; |
| + // An ExpectStapleState describes a site that expects valid OCSP information |
| + // to be stapled to its certificate on every connection. |
| + class NET_EXPORT ExpectStapleState { |
| + public: |
| + ExpectStapleState(); |
| + ~ExpectStapleState(); |
| + |
| + // The domain which matched during a search for this Expect-Staple entry |
| + std::string domain; |
| + |
| + // The URI reports are sent to if a valid OCSP response is not stapled |
| + GURL report_uri; |
| + |
| + // True if subdomains are subject to this policy |
| + bool include_subdomains; |
| + }; |
| + |
| // An interface for asynchronously sending HPKP violation reports. |
| class NET_EXPORT ReportSender { |
| public: |
| @@ -447,6 +464,14 @@ class NET_EXPORT TransportSecurityState |
| bool GetStaticExpectCTState(const std::string& host, |
| ExpectCTState* expect_ct_result) const; |
| + // Returns true and updates |*expect_staple_result| iff there is a static |
| + // (built-in) state for |host| with expect_staple=true, or if |host| is a |
| + // subdomain of another domain with expect_staple=true and |
| + // include_subdomains_for_expect_staple=true. |
| + bool GetStaticExpectStapleState( |
| + const std::string& host, |
| + ExpectStapleState* expect_staple_result) const; |
| + |
| // The sets of hosts that have enabled TransportSecurity. |domain| will always |
| // be empty for a STSState or PKPState in these maps; the domain |
| // comes from the map keys instead. In addition, |upgrade_mode| in the |
| @@ -465,6 +490,9 @@ class NET_EXPORT TransportSecurityState |
| // True if static expect-CT state should be used. |
| bool enable_static_expect_ct_; |
| + // True if static expect-staple state should be used. |
| + bool enable_static_expect_staple_; |
|
estark
2016/06/03 22:31:36
need to initialize this in the TSS constructor
|
| + |
| ExpectCTReporter* expect_ct_reporter_; |
| // Keeps track of reports that have been sent recently for |