| Index: components/cast_certificate/cast_cert_validator.h
|
| diff --git a/components/cast_certificate/cast_cert_validator.h b/components/cast_certificate/cast_cert_validator.h
|
| index a918dd582070f1c496f7e40120922f3f46669e02..1ef400d31bc21816e1fd936c4a279ef54ae221b6 100644
|
| --- a/components/cast_certificate/cast_cert_validator.h
|
| +++ b/components/cast_certificate/cast_cert_validator.h
|
| @@ -78,8 +78,8 @@ class CertVerificationContext {
|
| // * |crl| is the CRL to check for certificate revocation status.
|
| // If this is a nullptr, then revocation checking is currently disabled.
|
| //
|
| -// * |crl_options| is for choosing how to handle the absence of a CRL.
|
| -// If crl_required is set to true, then an empty |crl| input would result
|
| +// * |crl_policy| is for choosing how to handle the absence of a CRL.
|
| +// If CRL_REQUIRED is passed, then an empty |crl| input would result
|
| // in a failed verification. Otherwise, |crl| is ignored if it is absent.
|
| //
|
| // Outputs:
|
| @@ -99,17 +99,19 @@ bool VerifyDeviceCert(const std::vector<std::string>& certs,
|
| const CastCRL* crl,
|
| CRLPolicy crl_policy) WARN_UNUSED_RESULT;
|
|
|
| -// Exposed only for testing, not for use in production code.
|
| -//
|
| // This is an overloaded version of VerifyDeviceCert that allows
|
| // the input of a custom TrustStore.
|
| -bool VerifyDeviceCertForTest(const std::vector<std::string>& certs,
|
| - const base::Time& time,
|
| - std::unique_ptr<CertVerificationContext>* context,
|
| - CastDeviceCertPolicy* policy,
|
| - const CastCRL* crl,
|
| - CRLPolicy crl_policy,
|
| - net::TrustStore* trust_store) WARN_UNUSED_RESULT;
|
| +//
|
| +// For production use pass |trust_store| as nullptr to use the production trust
|
| +// store.
|
| +bool VerifyDeviceCertUsingCustomTrustStore(
|
| + const std::vector<std::string>& certs,
|
| + const base::Time& time,
|
| + std::unique_ptr<CertVerificationContext>* context,
|
| + CastDeviceCertPolicy* policy,
|
| + const CastCRL* crl,
|
| + CRLPolicy crl_policy,
|
| + net::TrustStore* trust_store) WARN_UNUSED_RESULT;
|
|
|
| // Exposed only for unit-tests, not for use in production code.
|
| // Production code would get a context from VerifyDeviceCert().
|
|
|