net/cert/internal/parse_ocsp.h - Issue 2040513003: Implement Expect-Staple - Code Review

Chromium Code Reviews

chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out

(186)

My Issues | Starred Open | Closed | All

Unified Diff: net/cert/internal/parse_ocsp.h

Issue 2040513003: Implement Expect-Staple (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: Move OCSP into cert_verify_proc Created 4 years, 6 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

« net/cert/cert_verify_proc.cc ('K') | « net/cert/cert_verify_result.cc ('k') | net/cert/internal/parse_ocsp.cc » ('j') | net/cert/ocsp_verify_result.h » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

Index: net/cert/internal/parse_ocsp.h

diff --git a/net/cert/internal/parse_ocsp.h b/net/cert/internal/parse_ocsp.h

index b9052aee9f6df9c4e4797a928b5c7024a917ba4e..16176a11c287b74baf6e6ae0ff2dedffdd75fda5 100644

--- a/net/cert/internal/parse_ocsp.h

+++ b/net/cert/internal/parse_ocsp.h

@@ -9,6 +9,7 @@

#include <string>

#include <vector>

+#include "base/time/time.h"

#include "net/base/hash_value.h"

#include "net/cert/internal/parse_certificate.h"

#include "net/cert/internal/signature_algorithm.h"

@@ -278,6 +279,12 @@ NET_EXPORT_PRIVATE bool GetOCSPCertStatus(

const der::Input& cert_tbs_certificate_tlv,

OCSPCertStatus* out);

+// Checks that thisUpdate <= verify_time < nextUpdate, and that thisUpdate >=

+// verify_time - max_age.

svaldez 2016/06/23 14:03:15 Might want to reword to "verify_time <= thisUpdate

+NET_EXPORT_PRIVATE bool CheckOCSPDateValid(const OCSPSingleResponse& response,

+ const base::Time& verify_time,

+ const base::TimeDelta& max_age);

+

} // namespace net

#endif // NET_CERT_INTERNAL_PARSE_OCSP_H_

« net/cert/cert_verify_proc.cc ('K') | « net/cert/cert_verify_result.cc ('k') | net/cert/internal/parse_ocsp.cc » ('j') | net/cert/ocsp_verify_result.h » ('J')

Powered by Google App Engine

This is Rietveld 408576698