Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(342)

Unified Diff: components/cast_certificate/cast_crl.h

Issue 2181013002: Revert of Cast device revocation checking. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 4 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: components/cast_certificate/cast_crl.h
diff --git a/components/cast_certificate/cast_crl.h b/components/cast_certificate/cast_crl.h
deleted file mode 100644
index e95faf4861d630d3a37aa224b82dfe3c8d1842e3..0000000000000000000000000000000000000000
--- a/components/cast_certificate/cast_crl.h
+++ /dev/null
@@ -1,64 +0,0 @@
-// Copyright 2016 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#ifndef COMPONENTS_CAST_CERTIFICATE_CAST_CRL_H_
-#define COMPONENTS_CAST_CERTIFICATE_CAST_CRL_H_
-
-#include <memory>
-#include <string>
-#include <vector>
-
-#include "base/compiler_specific.h"
-#include "base/memory/ref_counted.h"
-#include "base/time/time.h"
-#include "net/cert/internal/parsed_certificate.h"
-
-namespace cast_certificate {
-
-// This class represents the CRL information parsed from the binary proto.
-class CastCRL {
- public:
- virtual ~CastCRL(){};
-
- // Verifies the revocation status of a cast device certificate given a chain
- // of X.509 certificates.
- //
- // Inputs:
- // * |certs| is the verified chain of X.509 certificates:
- // * |certs[0]| is the target certificate (i.e. the device certificate).
- // * |certs[i]| is the certificate that issued certs[i-1].
- // * |certs.back()| is assumed to be a trusted root.
- //
- // * |time| is the unix timestamp to use for determining if the certificate
- // is revoked.
- //
- // Output:
- // Returns true if no certificate in the chain was revoked.
- virtual bool CheckRevocation(const net::ParsedCertificateList& certs,
- const base::Time& time) const = 0;
-};
-
-// Parses and verifies the CRL used to verify the revocation status of
-// Cast device certificates.
-//
-// Inputs:
-// * |crl_proto| is a serialized cast_certificate.CrlBundle proto.
-// * |time| is the unix timestamp to use for determining if the CRL is valid.
-//
-// Output:
-// Returns the CRL object if success, nullptr otherwise.
-std::unique_ptr<CastCRL> ParseAndVerifyCRL(const std::string& crl_proto,
- const base::Time& time);
-
-// Exposed only for testing, not for use in production code.
-//
-// Replaces trusted root certificates into the CastCRLTrustStore.
-//
-// Output:
-// Returns true if successful, false if nothing is changed.
-bool SetCRLTrustAnchorForTest(const std::string& cert) WARN_UNUSED_RESULT;
-
-} // namespace cast_certificate
-
-#endif // COMPONENTS_CAST_CERTIFICATE_CAST_CRL_H_
« no previous file with comments | « components/cast_certificate/cast_cert_validator_unittest.cc ('k') | components/cast_certificate/cast_crl.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698