Cast device revocation checking.

components/cast_certificate/cast_cert_validator.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_CAST_CERTIFICATE_CAST_CERT_VALIDATOR_H_
 #define COMPONENTS_CAST_CERTIFICATE_CAST_CERT_VALIDATOR_H_
 
 #include <memory>
 #include <string>
 #include <vector>
@@ skipping 58 matching lines @@
 //   * |context| is filled with an object that can be used to verify signatures
 //     using the device certificate's public key, as well as to extract other
 //     properties from the device certificate (Common Name).
 //   * |policy| is filled with an indication of the device certificate's policy
 //     (i.e. is it for audio-only devices or is it unrestricted?)
 bool VerifyDeviceCert(const std::vector<std::string>& certs,
                       const base::Time::Exploded& time,
                       std::unique_ptr<CertVerificationContext>* context,
                       CastDeviceCertPolicy* policy) WARN_UNUSED_RESULT;
 
+// Returns the DER-encoded certificate of the trust anchor with the name
+// provided.
+//
+// Input:
+//
+// * |name| is the DER-encoded name of the trust anchor's certificate
+//
+// Output:
+//
+// Returns the DER-encoded certificate of the trust anchor if the name of the
+// certificate matches the provided name. An empty string is returned if there
+// is no match.
+const std::string FindCastTrustAnchorByName(const std::string& name);
+
 // Exposed only for unit-tests, not for use in production code.
 // Production code would get a context from VerifyDeviceCert().
 //
 // Constructs a VerificationContext that uses the provided public key.
 // The common name will be hardcoded to some test value.
 std::unique_ptr<CertVerificationContext> CertVerificationContextImplForTest(
     const base::StringPiece& spki);
 
 // Exposed only for testing, not for use in production code.
 //
 // Injects trusted root certificates into the CastTrustStore.
 // |data| must remain valid and not be mutated throughout the lifetime of
 // the program.
 // Warning: Using this function concurrently with VerifyDeviceCert()
 //          is not thread safe.
 bool AddTrustAnchorForTest(const uint8_t* data,
                            size_t length) WARN_UNUSED_RESULT;
 
 }  // namespace cast_certificate
 
 #endif  // COMPONENTS_CAST_CERTIFICATE_CAST_CERT_VALIDATOR_H_