| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| 7 | 7 |
| 8 #include <stdint.h> |
| 9 |
| 8 #include "base/macros.h" | 10 #include "base/macros.h" |
| 9 #include "net/cert/cert_status_flags.h" | 11 #include "net/cert/cert_status_flags.h" |
| 10 #include "net/cert/sct_status_flags.h" | 12 #include "net/cert/sct_status_flags.h" |
| 11 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
| 12 #include "url/gurl.h" | 14 #include "url/gurl.h" |
| 13 | 15 |
| 14 namespace security_state { | 16 namespace security_state { |
| 15 | 17 |
| 16 class SecurityStateModelClient; | 18 class SecurityStateModelClient; |
| 17 | 19 |
| (...skipping 91 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 109 // The security strength, in bits, of the SSL cipher suite. In late | 111 // The security strength, in bits, of the SSL cipher suite. In late |
| 110 // 2015, 128 is considered the minimum. | 112 // 2015, 128 is considered the minimum. |
| 111 // | 113 // |
| 112 // 0 means the connection uses HTTPS but is not encrypted. -1 means | 114 // 0 means the connection uses HTTPS but is not encrypted. -1 means |
| 113 // the security strength is unknown or the connection does not use | 115 // the security strength is unknown or the connection does not use |
| 114 // HTTPS. | 116 // HTTPS. |
| 115 int security_bits; | 117 int security_bits; |
| 116 // Information about the SSL connection, such as protocol and | 118 // Information about the SSL connection, such as protocol and |
| 117 // ciphersuite. See ssl_connection_flags.h in net. | 119 // ciphersuite. See ssl_connection_flags.h in net. |
| 118 int connection_status; | 120 int connection_status; |
| 121 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 122 // unknown (older cache entries may not store the value) or not applicable. |
| 123 uint16_t key_exchange_group; |
| 119 // A mask that indicates which of the protocol version, | 124 // A mask that indicates which of the protocol version, |
| 120 // key exchange, or cipher for the connection is considered | 125 // key exchange, or cipher for the connection is considered |
| 121 // obsolete. See net::ObsoleteSSLMask for specific mask values. | 126 // obsolete. See net::ObsoleteSSLMask for specific mask values. |
| 122 int obsolete_ssl_status; | 127 int obsolete_ssl_status; |
| 123 | 128 |
| 124 // True if pinning was bypassed due to a local trust anchor. | 129 // True if pinning was bypassed due to a local trust anchor. |
| 125 bool pkp_bypassed; | 130 bool pkp_bypassed; |
| 126 }; | 131 }; |
| 127 | 132 |
| 128 // Contains the security state relevant to computing the SecurityInfo | 133 // Contains the security state relevant to computing the SecurityInfo |
| (...skipping 11 matching lines...) Expand all Loading... |
| 140 bool fails_malware_check; | 145 bool fails_malware_check; |
| 141 | 146 |
| 142 // CONNECTION SECURITY FIELDS | 147 // CONNECTION SECURITY FIELDS |
| 143 // Whether the connection security fields are initialized. | 148 // Whether the connection security fields are initialized. |
| 144 bool connection_info_initialized; | 149 bool connection_info_initialized; |
| 145 // The following fields contain information about the connection | 150 // The following fields contain information about the connection |
| 146 // used to load the page or request. | 151 // used to load the page or request. |
| 147 int cert_id; | 152 int cert_id; |
| 148 net::CertStatus cert_status; | 153 net::CertStatus cert_status; |
| 149 int connection_status; | 154 int connection_status; |
| 155 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 156 // unknown (older cache entries may not store the value) or not applicable. |
| 157 uint16_t key_exchange_group; |
| 150 int security_bits; | 158 int security_bits; |
| 151 // The verification statuses of the Signed Certificate | 159 // The verification statuses of the Signed Certificate |
| 152 // Timestamps (if any) that the server provided. | 160 // Timestamps (if any) that the server provided. |
| 153 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; | 161 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; |
| 154 // True if the page displayed passive mixed content. | 162 // True if the page displayed passive mixed content. |
| 155 bool displayed_mixed_content; | 163 bool displayed_mixed_content; |
| 156 // True if the page ran active mixed content. | 164 // True if the page ran active mixed content. |
| 157 bool ran_mixed_content; | 165 bool ran_mixed_content; |
| 158 // True if the page displayed passive subresources with certificate errors. | 166 // True if the page displayed passive subresources with certificate errors. |
| 159 bool displayed_content_with_cert_errors; | 167 bool displayed_content_with_cert_errors; |
| (...skipping 27 matching lines...) Expand all Loading... |
| 187 mutable VisibleSecurityState visible_security_state_; | 195 mutable VisibleSecurityState visible_security_state_; |
| 188 | 196 |
| 189 SecurityStateModelClient* client_; | 197 SecurityStateModelClient* client_; |
| 190 | 198 |
| 191 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); | 199 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); |
| 192 }; | 200 }; |
| 193 | 201 |
| 194 } // namespace security_state | 202 } // namespace security_state |
| 195 | 203 |
| 196 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 204 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| OLD | NEW |