Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(230)

Side by Side Diff: net/tools/cert_verify_tool/verify_using_path_builder.cc

Issue 2252933002: Make TrustStore into an interface, move impl to TrustStoreInMemory. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: update cast_cert_validator_unittest.cc Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/net.gypi ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2016 The Chromium Authors. All rights reserved. 1 // Copyright 2016 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "net/tools/cert_verify_tool/verify_using_path_builder.h" 5 #include "net/tools/cert_verify_tool/verify_using_path_builder.h"
6 6
7 #include <iostream> 7 #include <iostream>
8 8
9 #include "base/memory/ptr_util.h" 9 #include "base/memory/ptr_util.h"
10 #include "base/strings/string_number_conversions.h" 10 #include "base/strings/string_number_conversions.h"
11 #include "base/strings/string_util.h" 11 #include "base/strings/string_util.h"
12 #include "crypto/sha2.h" 12 #include "crypto/sha2.h"
13 #include "net/base/net_errors.h" 13 #include "net/base/net_errors.h"
14 #include "net/base/test_completion_callback.h" 14 #include "net/base/test_completion_callback.h"
15 #include "net/cert/internal/cert_issuer_source_aia.h" 15 #include "net/cert/internal/cert_issuer_source_aia.h"
16 #include "net/cert/internal/cert_issuer_source_static.h" 16 #include "net/cert/internal/cert_issuer_source_static.h"
17 #include "net/cert/internal/parse_name.h" 17 #include "net/cert/internal/parse_name.h"
18 #include "net/cert/internal/parsed_certificate.h" 18 #include "net/cert/internal/parsed_certificate.h"
19 #include "net/cert/internal/path_builder.h" 19 #include "net/cert/internal/path_builder.h"
20 #include "net/cert/internal/signature_policy.h" 20 #include "net/cert/internal/signature_policy.h"
21 #include "net/cert/internal/trust_store.h" 21 #include "net/cert/internal/trust_store_in_memory.h"
22 #include "net/cert_net/cert_net_fetcher_impl.h" 22 #include "net/cert_net/cert_net_fetcher_impl.h"
23 #include "net/tools/cert_verify_tool/cert_verify_tool_util.h" 23 #include "net/tools/cert_verify_tool/cert_verify_tool_util.h"
24 #include "net/url_request/url_request_context.h" 24 #include "net/url_request/url_request_context.h"
25 #include "net/url_request/url_request_context_builder.h" 25 #include "net/url_request/url_request_context_builder.h"
26 26
27 #if defined(OS_LINUX) 27 #if defined(OS_LINUX)
28 #include "net/proxy/proxy_config.h" 28 #include "net/proxy/proxy_config.h"
29 #include "net/proxy/proxy_config_service_fixed.h" 29 #include "net/proxy/proxy_config_service_fixed.h"
30 #endif 30 #endif
31 31
(...skipping 92 matching lines...) Expand 10 before | Expand all | Expand 10 after
124 const base::Time at_time, 124 const base::Time at_time,
125 const base::FilePath& dump_prefix_path) { 125 const base::FilePath& dump_prefix_path) {
126 std::cout << "NOTE: CertPathBuilder does not currently use OS trust settings " 126 std::cout << "NOTE: CertPathBuilder does not currently use OS trust settings "
127 "(--roots must be specified).\n"; 127 "(--roots must be specified).\n";
128 std::cerr << "WARNING: --hostname is not yet verified with CertPathBuilder\n"; 128 std::cerr << "WARNING: --hostname is not yet verified with CertPathBuilder\n";
129 129
130 base::Time::Exploded exploded_time; 130 base::Time::Exploded exploded_time;
131 at_time.UTCExplode(&exploded_time); 131 at_time.UTCExplode(&exploded_time);
132 net::der::GeneralizedTime time = ConvertExplodedTime(exploded_time); 132 net::der::GeneralizedTime time = ConvertExplodedTime(exploded_time);
133 133
134 net::TrustStore trust_store; 134 net::TrustStoreInMemory trust_store;
135 for (const auto& der_cert : root_der_certs) { 135 for (const auto& der_cert : root_der_certs) {
136 scoped_refptr<net::ParsedCertificate> cert = 136 scoped_refptr<net::ParsedCertificate> cert =
137 net::ParsedCertificate::CreateFromCertificateCopy(der_cert.der_cert, 137 net::ParsedCertificate::CreateFromCertificateCopy(der_cert.der_cert,
138 {}); 138 {});
139 if (!cert) 139 if (!cert)
140 PrintCertError("ERROR: ParsedCertificate failed:", der_cert); 140 PrintCertError("ERROR: ParsedCertificate failed:", der_cert);
141 else { 141 else {
142 trust_store.AddTrustAnchor( 142 trust_store.AddTrustAnchor(
143 net::TrustAnchor::CreateFromCertificateNoConstraints(cert)); 143 net::TrustAnchor::CreateFromCertificateNoConstraints(cert));
144 } 144 }
(...skipping 81 matching lines...) Expand 10 before | Expand all | Expand 10 after
226 if (!DumpParsedCertificateChain( 226 if (!DumpParsedCertificateChain(
227 dump_prefix_path.AddExtension( 227 dump_prefix_path.AddExtension(
228 FILE_PATH_LITERAL(".CertPathBuilder.pem")), 228 FILE_PATH_LITERAL(".CertPathBuilder.pem")),
229 result.paths[result.best_result_index]->path)) { 229 result.paths[result.best_result_index]->path)) {
230 return false; 230 return false;
231 } 231 }
232 } 232 }
233 233
234 return result.error() == net::OK; 234 return result.error() == net::OK;
235 } 235 }
OLDNEW
« no previous file with comments | « net/net.gypi ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698