Add CertIssuerSourceAia: authorityInfoAccess fetching for CertPathBuilder.

net/cert/internal/parsed_certificate.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_
 #define NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_
 
 #include <map>
 #include <memory>
 #include <vector>
@@ skipping 134 matching lines @@
   // Returns true if the certificate has a NameConstraints extension.
   bool has_name_constraints() const { return name_constraints_ != nullptr; }
 
   // Returns the parsed NameConstraints extension. Must not be called if
   // has_name_constraints() is false.
   const NameConstraints& name_constraints() const {
     DCHECK(name_constraints_);
     return *name_constraints_;
   }
 
+  // Returns true if the certificate has an AuthorityInfoAccess extension.
+  bool has_authority_info_access() const { return has_authority_info_access_; }
+  // Returns the ParsedExtension struct for the AuthorityInfoAccess extension.
+  const ParsedExtension& authority_info_access_extension() const {
+    return authority_info_access_extension_;
+  }
+  // Returns any caIssuers URIs from the AuthorityInfoAccess extension.

[eroman, 2016/06/04 01:08:48]

nit: space after closing bracket (and elsewhere). Not sure if the style guide
requires this, but reads more easily for me and I think it is more common in our
code, but feel free to challenge.

[mattm, 2016/06/04 03:24:09]

Done.

+  const std::vector<base::StringPiece>& ca_issuers_uris() const {
+    return ca_issuers_uris_;
+  }
+  // Returns any ocsp URIs from the AuthorityInfoAccess extension.

[eroman, 2016/06/04 01:08:48]

nit: ocsp --> OCSP

[mattm, 2016/06/04 03:24:09]

Done.

+  const std::vector<base::StringPiece>& ocsp_uris() const { return ocsp_uris_; }
+
   // Returns a map of unhandled extensions (excludes the ones above).
   const ExtensionsMap& unparsed_extensions() const {
     return unparsed_extensions_;
   }
 
  private:
   friend class base::RefCountedThreadSafe<ParsedCertificate>;
   ParsedCertificate();
   ~ParsedCertificate();
 
@@ skipping 30 matching lines @@
   der::BitString key_usage_;
 
   // Raw SubjectAltName extension.
   ParsedExtension subject_alt_names_extension_;
   // Parsed SubjectAltName extension.
   std::unique_ptr<GeneralNames> subject_alt_names_;
 
   // NameConstraints extension.
   std::unique_ptr<NameConstraints> name_constraints_;
 
+  // AuthorityInfoAccess extension.
+  bool has_authority_info_access_;
+  ParsedExtension authority_info_access_extension_;
+  // CaIssuers and Ocsp URIs parsed from the AuthorityInfoAccess extension. Note
+  // that the AuthorityInfoAccess may have contained other AccessDescriptions
+  // which are not represented here.
+  std::vector<base::StringPiece> ca_issuers_uris_;
+  std::vector<base::StringPiece> ocsp_uris_;
+
   // The remaining extensions (excludes the standard ones above).
   ExtensionsMap unparsed_extensions_;
 
   DISALLOW_COPY_AND_ASSIGN(ParsedCertificate);
 };
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_