OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 5 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 6 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
7 | 7 |
| 8 #include <stdint.h> |
| 9 |
8 #include "base/macros.h" | 10 #include "base/macros.h" |
9 #include "net/cert/cert_status_flags.h" | 11 #include "net/cert/cert_status_flags.h" |
10 #include "net/cert/sct_status_flags.h" | 12 #include "net/cert/sct_status_flags.h" |
11 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
12 #include "url/gurl.h" | 14 #include "url/gurl.h" |
13 | 15 |
14 namespace security_state { | 16 namespace security_state { |
15 | 17 |
16 class SecurityStateModelClient; | 18 class SecurityStateModelClient; |
17 | 19 |
(...skipping 89 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
107 net::CertStatus cert_status; | 109 net::CertStatus cert_status; |
108 int cert_id; | 110 int cert_id; |
109 // The security strength, in bits, of the SSL cipher suite. In late | 111 // The security strength, in bits, of the SSL cipher suite. In late |
110 // 2015, 128 is considered the minimum. | 112 // 2015, 128 is considered the minimum. |
111 // 0 means the connection is not encrypted. | 113 // 0 means the connection is not encrypted. |
112 // -1 means the security strength is unknown. | 114 // -1 means the security strength is unknown. |
113 int security_bits; | 115 int security_bits; |
114 // Information about the SSL connection, such as protocol and | 116 // Information about the SSL connection, such as protocol and |
115 // ciphersuite. See ssl_connection_flags.h in net. | 117 // ciphersuite. See ssl_connection_flags.h in net. |
116 int connection_status; | 118 int connection_status; |
| 119 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 120 // unknown (older cache entries may not store the value) or not applicable. |
| 121 uint16_t key_exchange_group; |
117 // A mask that indicates which of the protocol version, | 122 // A mask that indicates which of the protocol version, |
118 // key exchange, or cipher for the connection is considered | 123 // key exchange, or cipher for the connection is considered |
119 // obsolete. See net::ObsoleteSSLMask for specific mask values. | 124 // obsolete. See net::ObsoleteSSLMask for specific mask values. |
120 int obsolete_ssl_status; | 125 int obsolete_ssl_status; |
121 | 126 |
122 // True if pinning was bypassed due to a local trust anchor. | 127 // True if pinning was bypassed due to a local trust anchor. |
123 bool pkp_bypassed; | 128 bool pkp_bypassed; |
124 }; | 129 }; |
125 | 130 |
126 // Contains the security state relevant to computing the SecurityInfo | 131 // Contains the security state relevant to computing the SecurityInfo |
(...skipping 11 matching lines...) Expand all Loading... |
138 bool fails_malware_check; | 143 bool fails_malware_check; |
139 | 144 |
140 // CONNECTION SECURITY FIELDS | 145 // CONNECTION SECURITY FIELDS |
141 // Whether the connection security fields are initialized. | 146 // Whether the connection security fields are initialized. |
142 bool connection_info_initialized; | 147 bool connection_info_initialized; |
143 // The following fields contain information about the connection | 148 // The following fields contain information about the connection |
144 // used to load the page or request. | 149 // used to load the page or request. |
145 int cert_id; | 150 int cert_id; |
146 net::CertStatus cert_status; | 151 net::CertStatus cert_status; |
147 int connection_status; | 152 int connection_status; |
| 153 // The ID of the (EC)DH group used by the key exchange. The value is zero if |
| 154 // unknown (older cache entries may not store the value) or not applicable. |
| 155 uint16_t key_exchange_group; |
148 int security_bits; | 156 int security_bits; |
149 // The verification statuses of the Signed Certificate | 157 // The verification statuses of the Signed Certificate |
150 // Timestamps (if any) that the server provided. | 158 // Timestamps (if any) that the server provided. |
151 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; | 159 std::vector<net::ct::SCTVerifyStatus> sct_verify_statuses; |
152 // True if the page displayed passive mixed content. | 160 // True if the page displayed passive mixed content. |
153 bool displayed_mixed_content; | 161 bool displayed_mixed_content; |
154 // True if the page ran active mixed content. | 162 // True if the page ran active mixed content. |
155 bool ran_mixed_content; | 163 bool ran_mixed_content; |
156 // True if the page displayed passive subresources with certificate errors. | 164 // True if the page displayed passive subresources with certificate errors. |
157 bool displayed_content_with_cert_errors; | 165 bool displayed_content_with_cert_errors; |
(...skipping 27 matching lines...) Expand all Loading... |
185 mutable VisibleSecurityState visible_security_state_; | 193 mutable VisibleSecurityState visible_security_state_; |
186 | 194 |
187 SecurityStateModelClient* client_; | 195 SecurityStateModelClient* client_; |
188 | 196 |
189 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); | 197 DISALLOW_COPY_AND_ASSIGN(SecurityStateModel); |
190 }; | 198 }; |
191 | 199 |
192 } // namespace security_state | 200 } // namespace security_state |
193 | 201 |
194 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ | 202 #endif // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_ |
OLD | NEW |