| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_CERT_TEST_ROOT_CERTS_H_ | 5 #ifndef NET_CERT_TEST_ROOT_CERTS_H_ |
| 6 #define NET_CERT_TEST_ROOT_CERTS_H_ | 6 #define NET_CERT_TEST_ROOT_CERTS_H_ |
| 7 | 7 |
| 8 #include "base/lazy_instance.h" | 8 #include "base/lazy_instance.h" |
| 9 #include "base/memory/ref_counted.h" | 9 #include "base/memory/ref_counted.h" |
| 10 #include "build/build_config.h" | 10 #include "build/build_config.h" |
| 11 #include "net/base/net_export.h" | 11 #include "net/base/net_export.h" |
| 12 | 12 |
| 13 #if defined(USE_NSS) || defined(OS_IOS) | 13 #if defined(USE_NSS) || defined(OS_IOS) |
| 14 #include <list> | 14 #include <list> |
| 15 #elif defined(USE_OPENSSL) && !defined(OS_ANDROID) | 15 #elif defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID) |
| 16 #include <vector> | 16 #include <vector> |
| 17 #elif defined(OS_WIN) | 17 #elif defined(OS_WIN) |
| 18 #include <windows.h> | 18 #include <windows.h> |
| 19 #include <wincrypt.h> | 19 #include <wincrypt.h> |
| 20 #elif defined(OS_MACOSX) | 20 #elif defined(OS_MACOSX) |
| 21 #include <CoreFoundation/CFArray.h> | 21 #include <CoreFoundation/CFArray.h> |
| 22 #include <Security/SecTrust.h> | 22 #include <Security/SecTrust.h> |
| 23 #include "base/mac/scoped_cftyperef.h" | 23 #include "base/mac/scoped_cftyperef.h" |
| 24 #endif | 24 #endif |
| 25 | 25 |
| 26 #if defined(USE_NSS) | 26 #if defined(USE_NSS) |
| 27 typedef struct CERTCertificateStr CERTCertificate; | 27 typedef struct CERTCertificateStr CERTCertificate; |
| 28 #elif defined(USE_OPENSSL) && !defined(OS_ANDROID) | 28 #elif defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID) |
| 29 typedef struct x509_st X509; | 29 typedef struct x509_st X509; |
| 30 #endif | 30 #endif |
| 31 | 31 |
| 32 namespace base { | 32 namespace base { |
| 33 class FilePath; | 33 class FilePath; |
| 34 } | 34 } |
| 35 | 35 |
| 36 namespace net { | 36 namespace net { |
| 37 | 37 |
| 38 class X509Certificate; | 38 class X509Certificate; |
| (...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 71 | 71 |
| 72 // Modifies the root certificates of |trust_ref| to include the | 72 // Modifies the root certificates of |trust_ref| to include the |
| 73 // certificates stored in |temporary_roots_|. If IsEmpty() is true, this | 73 // certificates stored in |temporary_roots_|. If IsEmpty() is true, this |
| 74 // does not modify |trust_ref|. | 74 // does not modify |trust_ref|. |
| 75 OSStatus FixupSecTrustRef(SecTrustRef trust_ref) const; | 75 OSStatus FixupSecTrustRef(SecTrustRef trust_ref) const; |
| 76 | 76 |
| 77 // Configures whether or not the default/system root store should also | 77 // Configures whether or not the default/system root store should also |
| 78 // be trusted. By default, this is true, indicating that the TestRootCerts | 78 // be trusted. By default, this is true, indicating that the TestRootCerts |
| 79 // are used in addition to OS trust store. | 79 // are used in addition to OS trust store. |
| 80 void SetAllowSystemTrust(bool allow_system_trust); | 80 void SetAllowSystemTrust(bool allow_system_trust); |
| 81 #elif defined(USE_OPENSSL) && !defined(OS_ANDROID) | 81 #elif defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID) |
| 82 const std::vector<scoped_refptr<X509Certificate> >& | 82 const std::vector<scoped_refptr<X509Certificate> >& |
| 83 temporary_roots() const { return temporary_roots_; } | 83 temporary_roots() const { return temporary_roots_; } |
| 84 bool Contains(X509* cert) const; | 84 bool Contains(X509* cert) const; |
| 85 #elif defined(OS_WIN) | 85 #elif defined(OS_WIN) |
| 86 HCERTSTORE temporary_roots() const { return temporary_roots_; } | 86 HCERTSTORE temporary_roots() const { return temporary_roots_; } |
| 87 | 87 |
| 88 // Returns an HCERTCHAINENGINE suitable to be used for certificate | 88 // Returns an HCERTCHAINENGINE suitable to be used for certificate |
| 89 // validation routines, or NULL to indicate that the default system chain | 89 // validation routines, or NULL to indicate that the default system chain |
| 90 // engine is appropriate. The caller is responsible for freeing the | 90 // engine is appropriate. The caller is responsible for freeing the |
| 91 // returned HCERTCHAINENGINE. | 91 // returned HCERTCHAINENGINE. |
| 92 HCERTCHAINENGINE GetChainEngine() const; | 92 HCERTCHAINENGINE GetChainEngine() const; |
| 93 #endif | 93 #endif |
| 94 | 94 |
| 95 private: | 95 private: |
| 96 friend struct base::DefaultLazyInstanceTraits<TestRootCerts>; | 96 friend struct base::DefaultLazyInstanceTraits<TestRootCerts>; |
| 97 | 97 |
| 98 TestRootCerts(); | 98 TestRootCerts(); |
| 99 ~TestRootCerts(); | 99 ~TestRootCerts(); |
| 100 | 100 |
| 101 // Performs platform-dependent initialization. | 101 // Performs platform-dependent initialization. |
| 102 void Init(); | 102 void Init(); |
| 103 | 103 |
| 104 #if defined(USE_NSS) || defined(OS_IOS) | 104 #if defined(USE_NSS) || defined(OS_IOS) |
| 105 // It is necessary to maintain a cache of the original certificate trust | 105 // It is necessary to maintain a cache of the original certificate trust |
| 106 // settings, in order to restore them when Clear() is called. | 106 // settings, in order to restore them when Clear() is called. |
| 107 class TrustEntry; | 107 class TrustEntry; |
| 108 std::list<TrustEntry*> trust_cache_; | 108 std::list<TrustEntry*> trust_cache_; |
| 109 #elif defined(USE_OPENSSL) && !defined(OS_ANDROID) | 109 #elif defined(USE_OPENSSL_CERTS) && !defined(OS_ANDROID) |
| 110 std::vector<scoped_refptr<X509Certificate> > temporary_roots_; | 110 std::vector<scoped_refptr<X509Certificate> > temporary_roots_; |
| 111 #elif defined(OS_WIN) | 111 #elif defined(OS_WIN) |
| 112 HCERTSTORE temporary_roots_; | 112 HCERTSTORE temporary_roots_; |
| 113 #elif defined(OS_MACOSX) | 113 #elif defined(OS_MACOSX) |
| 114 base::ScopedCFTypeRef<CFMutableArrayRef> temporary_roots_; | 114 base::ScopedCFTypeRef<CFMutableArrayRef> temporary_roots_; |
| 115 bool allow_system_trust_; | 115 bool allow_system_trust_; |
| 116 #endif | 116 #endif |
| 117 | 117 |
| 118 #if defined(OS_WIN) || defined(OS_ANDROID) | 118 #if defined(OS_WIN) || defined(OS_ANDROID) |
| 119 // True if there are no temporarily trusted root certificates. | 119 // True if there are no temporarily trusted root certificates. |
| (...skipping 20 matching lines...) Expand all Loading... |
| 140 | 140 |
| 141 private: | 141 private: |
| 142 scoped_refptr<X509Certificate> cert_; | 142 scoped_refptr<X509Certificate> cert_; |
| 143 | 143 |
| 144 DISALLOW_COPY_AND_ASSIGN(ScopedTestRoot); | 144 DISALLOW_COPY_AND_ASSIGN(ScopedTestRoot); |
| 145 }; | 145 }; |
| 146 | 146 |
| 147 } // namespace net | 147 } // namespace net |
| 148 | 148 |
| 149 #endif // NET_CERT_TEST_ROOT_CERTS_H_ | 149 #endif // NET_CERT_TEST_ROOT_CERTS_H_ |
| OLD | NEW |