OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
7 | 7 |
| 8 #include <stdint.h> |
| 9 |
8 #include "base/macros.h" | 10 #include "base/macros.h" |
9 #include "net/cert/cert_status_flags.h" | 11 #include "net/cert/cert_status_flags.h" |
10 #include "net/cert/sct_status_flags.h" | 12 #include "net/cert/sct_status_flags.h" |
11 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
12 #include "url/gurl.h" | 14 #include "url/gurl.h" |
13 | 15 |
14 namespace security_state { | 16 namespace security_state { |
15 | 17 |
16 class SecurityStateModelClient; | 18 class SecurityStateModelClient; |
17 | 19 |
(...skipping 91 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
109 // The security strength, in bits, of the SSL cipher suite. In late | 111 // The security strength, in bits, of the SSL cipher suite. In late |
110 // 2015, 128 is considered the minimum. | 112 // 2015, 128 is considered the minimum. |
111 // | 113 // |
112 // 0 means the connection uses HTTPS but is not encrypted. -1 means | 114 // 0 means the connection uses HTTPS but is not encrypted. -1 means |
113 // the security strength is unknown or the connection does not use | 115 // the security strength is unknown or the connection does not use |
114 // HTTPS. | 116 // HTTPS. |
115 int security_bits; | 117 int security_bits; |
116 // Information about the SSL connection, such as protocol and | 118 // Information about the SSL connection, such as protocol and |
117 // ciphersuite. See ssl_connection_flags.h in net. | 119 // ciphersuite. See ssl_connection_flags.h in net. |
118 int connection_status; | 120 int connection_status; |
| 121 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 122 // unknown (older cache entries may not store the value) or not applicable. |
| 123 uint16_t key_exchange_group; |
119 // A mask that indicates which of the protocol version, | 124 // A mask that indicates which of the protocol version, |
120 // key exchange, or cipher for the connection is considered | 125 // key exchange, or cipher for the connection is considered |
121 // obsolete. See net::ObsoleteSSLMask for specific mask values. | 126 // obsolete. See net::ObsoleteSSLMask for specific mask values. |
122 int obsolete_ssl_status; | 127 int obsolete_ssl_status; |
123 | 128 |
124 // True if pinning was bypassed due to a local trust anchor. | 129 // True if pinning was bypassed due to a local trust anchor. |
125 bool pkp_bypassed; | 130 bool pkp_bypassed; |
126 }; | 131 }; |
127 | 132 |
128 // Contains the security state relevant to computing the SecurityInfo | 133 // Contains the security state relevant to computing the SecurityInfo |
(...skipping 11 matching lines...) Expand all Loading... |
140 bool fails_malware_check; | 145 bool fails_malware_check; |
141 | 146 |
142 // CONNECTION SECURITY FIELDS | 147 // CONNECTION SECURITY FIELDS |
143 // Whether the connection security fields are initialized. | 148 // Whether the connection security fields are initialized. |
144 bool connection_info_initialized; | 149 bool connection_info_initialized; |
145 // The following fields contain information about the connection | 150 // The following fields contain information about the connection |
146 // used to load the page or request. | 151 // used to load the page or request. |
147 scoped_refptr<net::X509Certificate> certificate; | 152 scoped_refptr<net::X509Certificate> certificate; |
148 net::CertStatus cert_status; | 153 net::CertStatus cert_status; |
149 int connection_status; | 154 int connection_status; |
| 155 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 156 // unknown (older cache entries may not store the value) or not applicable. |
| 157 uint16_t key_exchange_group; |
150 int security_bits; | 158 int security_bits; |
151 // The verification statuses of the Signed Certificate | 159 // The verification statuses of the Signed Certificate |
152 // Timestamps (if any) that the server provided. | 160 // Timestamps (if any) that the server provided. |
153 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; | 161 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; |
154 // True if the page displayed passive mixed content. | 162 // True if the page displayed passive mixed content. |
155 bool displayed_mixed_content; | 163 bool displayed_mixed_content; |
156 // True if the page ran active mixed content. | 164 // True if the page ran active mixed content. |
157 bool ran_mixed_content; | 165 bool ran_mixed_content; |
158 // True if the page displayed passive subresources with certificate errors. | 166 // True if the page displayed passive subresources with certificate errors. |
159 bool displayed_content_with_cert_errors; | 167 bool displayed_content_with_cert_errors; |
(...skipping 27 matching lines...) Expand all Loading... |
187 mutable VisibleSecurityState visible_security_state_; | 195 mutable VisibleSecurityState visible_security_state_; |
188 | 196 |
189 SecurityStateModelClient* client_; | 197 SecurityStateModelClient* client_; |
190 | 198 |
191 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); | 199 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); |
192 }; | 200 }; |
193 | 201 |
194 } // namespace security_state | 202 } // namespace security_state |
195 | 203 |
196 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 204 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
OLD | NEW |