| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| 7 | 7 |
| 8 #include <stdint.h> |
| 9 |
| 8 #include "base/macros.h" | 10 #include "base/macros.h" |
| 9 #include "net/cert/cert_status_flags.h" | 11 #include "net/cert/cert_status_flags.h" |
| 10 #include "net/cert/sct_status_flags.h" | 12 #include "net/cert/sct_status_flags.h" |
| 11 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
| 12 #include "url/gurl.h" | 14 #include "url/gurl.h" |
| 13 | 15 |
| 14 namespace security_state { | 16 namespace security_state { |
| 15 | 17 |
| 16 class SecurityStateModelClient; | 18 class SecurityStateModelClient; |
| 17 | 19 |
| (...skipping 89 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 107 net::CertStatus cert_status; | 109 net::CertStatus cert_status; |
| 108 int cert_id; | 110 int cert_id; |
| 109 // The security strength, in bits, of the SSL cipher suite. In late | 111 // The security strength, in bits, of the SSL cipher suite. In late |
| 110 // 2015, 128 is considered the minimum. | 112 // 2015, 128 is considered the minimum. |
| 111 // 0 means the connection is not encrypted. | 113 // 0 means the connection is not encrypted. |
| 112 // -1 means the security strength is unknown. | 114 // -1 means the security strength is unknown. |
| 113 int security_bits; | 115 int security_bits; |
| 114 // Information about the SSL connection, such as protocol and | 116 // Information about the SSL connection, such as protocol and |
| 115 // ciphersuite. See ssl_connection_flags.h in net. | 117 // ciphersuite. See ssl_connection_flags.h in net. |
| 116 int connection_status; | 118 int connection_status; |
| 119 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 120 // unknown (older cache entries may not store the value) or not applicable. |
| 121 uint16_t key_exchange_group; |
| 117 // A mask that indicates which of the protocol version, | 122 // A mask that indicates which of the protocol version, |
| 118 // key exchange, or cipher for the connection is considered | 123 // key exchange, or cipher for the connection is considered |
| 119 // obsolete. See net::ObsoleteSSLMask for specific mask values. | 124 // obsolete. See net::ObsoleteSSLMask for specific mask values. |
| 120 int obsolete_ssl_status; | 125 int obsolete_ssl_status; |
| 121 | 126 |
| 122 // True if pinning was bypassed due to a local trust anchor. | 127 // True if pinning was bypassed due to a local trust anchor. |
| 123 bool pkp_bypassed; | 128 bool pkp_bypassed; |
| 124 }; | 129 }; |
| 125 | 130 |
| 126 // Contains the security state relevant to computing the SecurityInfo | 131 // Contains the security state relevant to computing the SecurityInfo |
| (...skipping 11 matching lines...) Expand all Loading... |
| 138 bool fails_malware_check; | 143 bool fails_malware_check; |
| 139 | 144 |
| 140 // CONNECTION SECURITY FIELDS | 145 // CONNECTION SECURITY FIELDS |
| 141 // Whether the connection security fields are initialized. | 146 // Whether the connection security fields are initialized. |
| 142 bool connection_info_initialized; | 147 bool connection_info_initialized; |
| 143 // The following fields contain information about the connection | 148 // The following fields contain information about the connection |
| 144 // used to load the page or request. | 149 // used to load the page or request. |
| 145 int cert_id; | 150 int cert_id; |
| 146 net::CertStatus cert_status; | 151 net::CertStatus cert_status; |
| 147 int connection_status; | 152 int connection_status; |
| 153 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 154 // unknown (older cache entries may not store the value) or not applicable. |
| 155 uint16_t key_exchange_group; |
| 148 int security_bits; | 156 int security_bits; |
| 149 // The verification statuses of the Signed Certificate | 157 // The verification statuses of the Signed Certificate |
| 150 // Timestamps (if any) that the server provided. | 158 // Timestamps (if any) that the server provided. |
| 151 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; | 159 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; |
| 152 // True if the page displayed passive mixed content. | 160 // True if the page displayed passive mixed content. |
| 153 bool displayed_mixed_content; | 161 bool displayed_mixed_content; |
| 154 // True if the page ran active mixed content. | 162 // True if the page ran active mixed content. |
| 155 bool ran_mixed_content; | 163 bool ran_mixed_content; |
| 156 // True if the page displayed passive subresources with certificate errors. | 164 // True if the page displayed passive subresources with certificate errors. |
| 157 bool displayed_content_with_cert_errors; | 165 bool displayed_content_with_cert_errors; |
| (...skipping 27 matching lines...) Expand all Loading... |
| 185 mutable VisibleSecurityState visible_security_state_; | 193 mutable VisibleSecurityState visible_security_state_; |
| 186 | 194 |
| 187 SecurityStateModelClient* client_; | 195 SecurityStateModelClient* client_; |
| 188 | 196 |
| 189 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); | 197 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); |
| 190 }; | 198 }; |
| 191 | 199 |
| 192 } // namespace security_state | 200 } // namespace security_state |
| 193 | 201 |
| 194 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 202 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
| OLD | NEW |