| OLD | NEW |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/tools/cert_verify_tool/verify_using_path_builder.h" | 5 #include "net/tools/cert_verify_tool/verify_using_path_builder.h" |
| 6 | 6 |
| 7 #include <iostream> | 7 #include <iostream> |
| 8 | 8 |
| 9 #include "base/memory/ptr_util.h" | 9 #include "base/memory/ptr_util.h" |
| 10 #include "base/strings/string_number_conversions.h" | 10 #include "base/strings/string_number_conversions.h" |
| 11 #include "base/strings/string_util.h" | 11 #include "base/strings/string_util.h" |
| 12 #include "crypto/sha2.h" | 12 #include "crypto/sha2.h" |
| 13 #include "net/base/net_errors.h" | 13 #include "net/base/net_errors.h" |
| 14 #include "net/base/test_completion_callback.h" | 14 #include "net/base/test_completion_callback.h" |
| 15 #include "net/cert/internal/cert_issuer_source_aia.h" | 15 #include "net/cert/internal/cert_issuer_source_aia.h" |
| 16 #include "net/cert/internal/cert_issuer_source_static.h" | 16 #include "net/cert/internal/cert_issuer_source_static.h" |
| 17 #include "net/cert/internal/parse_name.h" | 17 #include "net/cert/internal/parse_name.h" |
| 18 #include "net/cert/internal/parsed_certificate.h" | 18 #include "net/cert/internal/parsed_certificate.h" |
| 19 #include "net/cert/internal/path_builder.h" | 19 #include "net/cert/internal/path_builder.h" |
| 20 #include "net/cert/internal/signature_policy.h" | 20 #include "net/cert/internal/signature_policy.h" |
| 21 #include "net/cert/internal/trust_store.h" | 21 #include "net/cert/internal/trust_store_in_memory.h" |
| 22 #include "net/cert_net/cert_net_fetcher_impl.h" | 22 #include "net/cert_net/cert_net_fetcher_impl.h" |
| 23 #include "net/tools/cert_verify_tool/cert_verify_tool_util.h" | 23 #include "net/tools/cert_verify_tool/cert_verify_tool_util.h" |
| 24 #include "net/url_request/url_request_context.h" | 24 #include "net/url_request/url_request_context.h" |
| 25 #include "net/url_request/url_request_context_builder.h" | 25 #include "net/url_request/url_request_context_builder.h" |
| 26 | 26 |
| 27 #if defined(OS_LINUX) | 27 #if defined(OS_LINUX) |
| 28 #include "net/proxy/proxy_config.h" | 28 #include "net/proxy/proxy_config.h" |
| 29 #include "net/proxy/proxy_config_service_fixed.h" | 29 #include "net/proxy/proxy_config_service_fixed.h" |
| 30 #endif | 30 #endif |
| 31 | 31 |
| (...skipping 92 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 124 const base::Time at_time, | 124 const base::Time at_time, |
| 125 const base::FilePath& dump_prefix_path) { | 125 const base::FilePath& dump_prefix_path) { |
| 126 std::cout << "NOTE: CertPathBuilder does not currently use OS trust settings " | 126 std::cout << "NOTE: CertPathBuilder does not currently use OS trust settings " |
| 127 "(--roots must be specified).\n"; | 127 "(--roots must be specified).\n"; |
| 128 std::cerr << "WARNING: --hostname is not yet verified with CertPathBuilder\n"; | 128 std::cerr << "WARNING: --hostname is not yet verified with CertPathBuilder\n"; |
| 129 | 129 |
| 130 base::Time::Exploded exploded_time; | 130 base::Time::Exploded exploded_time; |
| 131 at_time.UTCExplode(&exploded_time); | 131 at_time.UTCExplode(&exploded_time); |
| 132 net::der::GeneralizedTime time = ConvertExplodedTime(exploded_time); | 132 net::der::GeneralizedTime time = ConvertExplodedTime(exploded_time); |
| 133 | 133 |
| 134 net::TrustStore trust_store; | 134 net::TrustStoreInMemory trust_store; |
| 135 for (const auto& der_cert : root_der_certs) { | 135 for (const auto& der_cert : root_der_certs) { |
| 136 scoped_refptr<net::ParsedCertificate> cert = | 136 scoped_refptr<net::ParsedCertificate> cert = |
| 137 net::ParsedCertificate::CreateFromCertificateCopy(der_cert.der_cert, | 137 net::ParsedCertificate::CreateFromCertificateCopy(der_cert.der_cert, |
| 138 {}); | 138 {}); |
| 139 if (!cert) | 139 if (!cert) |
| 140 PrintCertError("ERROR: ParsedCertificate failed:", der_cert); | 140 PrintCertError("ERROR: ParsedCertificate failed:", der_cert); |
| 141 else { | 141 else { |
| 142 trust_store.AddTrustAnchor( | 142 trust_store.AddTrustAnchor( |
| 143 net::TrustAnchor::CreateFromCertificateNoConstraints(cert)); | 143 net::TrustAnchor::CreateFromCertificateNoConstraints(cert)); |
| 144 } | 144 } |
| (...skipping 81 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 226 if (!DumpParsedCertificateChain( | 226 if (!DumpParsedCertificateChain( |
| 227 dump_prefix_path.AddExtension( | 227 dump_prefix_path.AddExtension( |
| 228 FILE_PATH_LITERAL(".CertPathBuilder.pem")), | 228 FILE_PATH_LITERAL(".CertPathBuilder.pem")), |
| 229 result.paths[result.best_result_index]->path)) { | 229 result.paths[result.best_result_index]->path)) { |
| 230 return false; | 230 return false; |
| 231 } | 231 } |
| 232 } | 232 } |
| 233 | 233 |
| 234 return result.error() == net::OK; | 234 return result.error() == net::OK; |
| 235 } | 235 } |
| OLD | NEW |