| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2016 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 syntax = "proto2"; | |
| 6 | |
| 7 package cast_certificate; | |
| 8 | |
| 9 option optimize_for = LITE_RUNTIME; | |
| 10 | |
| 11 // A suite of test data to exercise Cast device certificate verification and | |
| 12 // revocation logic. | |
| 13 message DeviceCertTestSuite { | |
| 14 repeated DeviceCertTest tests = 1; | |
| 15 } | |
| 16 | |
| 17 enum VerificationResult { | |
| 18 // This should never be encountered in a valid test. | |
| 19 UNSPECIFIED = 0; | |
| 20 // The device certificate is valid. | |
| 21 SUCCESS = 1; | |
| 22 // Problem with device certificate or its path. | |
| 23 PATH_VERIFICATION_FAILED = 2; | |
| 24 // Problem with the CRL. | |
| 25 CRL_VERIFICATION_FAILED = 3; | |
| 26 // Device certificate or one of the certificates in its path did not pass the | |
| 27 // revocation check. | |
| 28 REVOCATION_CHECK_FAILED = 4; | |
| 29 // No CRL was provided, but revocation check is required, and therefore fails. | |
| 30 REVOCATION_CHECK_FAILED_WITHOUT_CRL = 5; | |
| 31 } | |
| 32 | |
| 33 message DeviceCertTest { | |
| 34 // Human-readable description of the test. | |
| 35 optional string description = 1; | |
| 36 | |
| 37 // Expected result of the certificate verification. | |
| 38 optional VerificationResult expected_result = 4; | |
| 39 | |
| 40 // Device certiticate path up to a trusted root. Root is not included. | |
| 41 repeated bytes der_cert_path = 2; | |
| 42 | |
| 43 // Serialized cast.CrlBundle proto if revocation check is required. | |
| 44 optional bytes crl_bundle = 3; | |
| 45 | |
| 46 // Time at which to verify the device certificate. | |
| 47 optional uint64 cert_verification_time_seconds = 5; | |
| 48 | |
| 49 // Time at which to verify the CRL. It this field is omitted, the CRL is | |
| 50 // verified at cert_verification_time_seconds. | |
| 51 optional uint64 crl_verification_time_seconds = 6; | |
| 52 | |
| 53 // Chooses between test and production trust anchors for device certificates | |
| 54 // and CRLs. Defaults to using the test trust anchors. | |
| 55 optional bool use_test_trust_anchors = 7 [default = true]; | |
| 56 } | |
| OLD | NEW |