Certificate Transparency: Make DNS front-end required.

net/cert/ct_log_verifier.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <string.h>
 #include <openssl/bytestring.h>
 #include <openssl/evp.h>
 
@@ skipping 62 matching lines @@
 CTLogVerifier::CTLogVerifier(const base::StringPiece& description,
                              const GURL& url,
                              const base::StringPiece& dns_domain)
     : description_(description.as_string()),
       url_(url),
       dns_domain_(dns_domain.as_string()),
       hash_algorithm_(ct::DigitallySigned::HASH_ALGO_NONE),
       signature_algorithm_(ct::DigitallySigned::SIG_ALGO_ANONYMOUS),
       public_key_(NULL) {
   DCHECK(url_.is_valid());
+  DCHECK(!dns_domain_.empty());
 }
 
 bool CTLogVerifier::Verify(const ct::LogEntry& entry,
                            const ct::SignedCertificateTimestamp& sct) const {
   if (sct.log_id != key_id()) {
     DVLOG(1) << "SCT is not signed by this log.";
     return false;
   }
 
   if (!SignatureParametersMatch(sct.signature))
@@ skipping 212 matching lines @@
                                    data_to_sign.size()) &&
        1 == EVP_DigestVerifyFinal(
                 &ctx, reinterpret_cast<const uint8_t*>(signature.data()),
                 signature.size()));
 
   EVP_MD_CTX_cleanup(&ctx);
   return ok;
 }
 
 }  // namespace net