| Index: components/cast_certificate/cast_crl_unittest.cc
|
| diff --git a/components/cast_certificate/cast_crl_unittest.cc b/components/cast_certificate/cast_crl_unittest.cc
|
| index 1062e8756e7e303753a4525d644c758a9dcb19b8..dc8b2d5912703ad4401186ec0100ecc7528a055b 100644
|
| --- a/components/cast_certificate/cast_crl_unittest.cc
|
| +++ b/components/cast_certificate/cast_crl_unittest.cc
|
| @@ -13,30 +13,6 @@
|
| namespace cast_certificate {
|
| namespace {
|
|
|
| -// Creates a trust store using the test roots encoded in the PEM file at |path|.
|
| -std::unique_ptr<net::TrustStoreInMemory> CreateTrustStoreFromFile(
|
| - const std::string& path) {
|
| - std::unique_ptr<net::TrustStoreInMemory> trust_store(
|
| - new net::TrustStoreInMemory());
|
| - const auto trusted_test_roots =
|
| - cast_certificate::testing::ReadCertificateChainFromFile(path);
|
| - for (const auto& trusted_root : trusted_test_roots) {
|
| - scoped_refptr<net::ParsedCertificate> cert(
|
| - net::ParsedCertificate::CreateFromCertificateCopy(trusted_root, {}));
|
| - EXPECT_TRUE(cert);
|
| - scoped_refptr<net::TrustAnchor> anchor =
|
| - net::TrustAnchor::CreateFromCertificateWithConstraints(std::move(cert));
|
| - trust_store->AddTrustAnchor(std::move(anchor));
|
| - }
|
| - return trust_store;
|
| -}
|
| -
|
| -// Converts uint64_t unix timestamp in seconds to base::Time.
|
| -base::Time ConvertUnixTimestampSeconds(uint64_t time) {
|
| - return base::Time::UnixEpoch() +
|
| - base::TimeDelta::FromMilliseconds(time * 1000);
|
| -}
|
| -
|
| // Indicates the expected result of test step's verification.
|
| enum TestStepResult {
|
| RESULT_SUCCESS,
|
| @@ -52,10 +28,10 @@ bool TestVerifyCertificate(TestStepResult expected_result,
|
| std::unique_ptr<CertVerificationContext> context;
|
| CastDeviceCertPolicy policy;
|
| int result;
|
| - if (cast_trust_store != nullptr) {
|
| - result = VerifyDeviceCertForTest(certificate_chain, time, &context, &policy,
|
| - nullptr, CRLPolicy::CRL_OPTIONAL,
|
| - cast_trust_store);
|
| + if (cast_trust_store) {
|
| + result = VerifyDeviceCertUsingCustomTrustStore(
|
| + certificate_chain, time, &context, &policy, nullptr,
|
| + CRLPolicy::CRL_OPTIONAL, cast_trust_store);
|
| } else {
|
| result = VerifyDeviceCert(certificate_chain, time, &context, &policy,
|
| nullptr, CRLPolicy::CRL_OPTIONAL);
|
| @@ -76,11 +52,13 @@ bool TestVerifyCRL(TestStepResult expected_result,
|
| const base::Time& time,
|
| net::TrustStore* crl_trust_store) {
|
| std::unique_ptr<CastCRL> crl;
|
| - if (crl_trust_store != nullptr) {
|
| - crl = ParseAndVerifyCRLForTest(crl_bundle, time, crl_trust_store);
|
| + if (crl_trust_store) {
|
| + crl = ParseAndVerifyCRLUsingCustomTrustStore(crl_bundle, time,
|
| + crl_trust_store);
|
| } else {
|
| crl = ParseAndVerifyCRL(crl_bundle, time);
|
| }
|
| +
|
| if (expected_result != RESULT_SUCCESS) {
|
| EXPECT_EQ(crl, nullptr);
|
| return crl == nullptr;
|
| @@ -104,8 +82,9 @@ bool TestVerifyRevocation(TestStepResult expected_result,
|
| net::TrustStore* crl_trust_store) {
|
| std::unique_ptr<CastCRL> crl;
|
| if (!crl_bundle.empty()) {
|
| - if (crl_trust_store != nullptr) {
|
| - crl = ParseAndVerifyCRLForTest(crl_bundle, crl_time, crl_trust_store);
|
| + if (crl_trust_store) {
|
| + crl = ParseAndVerifyCRLUsingCustomTrustStore(crl_bundle, crl_time,
|
| + crl_trust_store);
|
| } else {
|
| crl = ParseAndVerifyCRL(crl_bundle, crl_time);
|
| }
|
| @@ -118,10 +97,10 @@ bool TestVerifyRevocation(TestStepResult expected_result,
|
| if (!crl_required)
|
| crl_policy = CRLPolicy::CRL_OPTIONAL;
|
| int result;
|
| - if (cast_trust_store != nullptr) {
|
| - result =
|
| - VerifyDeviceCertForTest(certificate_chain, cert_time, &context, &policy,
|
| - crl.get(), crl_policy, cast_trust_store);
|
| + if (cast_trust_store) {
|
| + result = VerifyDeviceCertUsingCustomTrustStore(
|
| + certificate_chain, cert_time, &context, &policy, crl.get(), crl_policy,
|
| + cast_trust_store);
|
| } else {
|
| result = VerifyDeviceCert(certificate_chain, cert_time, &context, &policy,
|
| crl.get(), crl_policy);
|
| @@ -139,10 +118,10 @@ bool RunTest(const DeviceCertTest& test_case) {
|
| std::unique_ptr<net::TrustStoreInMemory> crl_trust_store;
|
| std::unique_ptr<net::TrustStoreInMemory> cast_trust_store;
|
| if (test_case.use_test_trust_anchors()) {
|
| - crl_trust_store =
|
| - CreateTrustStoreFromFile("certificates/cast_crl_test_root_ca.pem");
|
| + crl_trust_store = testing::CreateTrustStoreFromFile(
|
| + "certificates/cast_crl_test_root_ca.pem");
|
| cast_trust_store =
|
| - CreateTrustStoreFromFile("certificates/cast_test_root_ca.pem");
|
| + testing::CreateTrustStoreFromFile("certificates/cast_test_root_ca.pem");
|
|
|
| EXPECT_TRUE(crl_trust_store.get());
|
| EXPECT_TRUE(cast_trust_store.get());
|
| @@ -153,12 +132,12 @@ bool RunTest(const DeviceCertTest& test_case) {
|
| certificate_chain.push_back(cert);
|
| }
|
|
|
| - base::Time cert_verification_time =
|
| - ConvertUnixTimestampSeconds(test_case.cert_verification_time_seconds());
|
| + base::Time cert_verification_time = testing::ConvertUnixTimestampSeconds(
|
| + test_case.cert_verification_time_seconds());
|
|
|
| uint64_t crl_verify_time = test_case.crl_verification_time_seconds();
|
| base::Time crl_verification_time =
|
| - ConvertUnixTimestampSeconds(crl_verify_time);
|
| + testing::ConvertUnixTimestampSeconds(crl_verify_time);
|
| if (crl_verify_time == 0)
|
| crl_verification_time = cert_verification_time;
|
|
|
|
|