Certificate Transparency: Parse Signed Tree Heads and validate them

net/cert/ct_log_verifier_unittest.cc

Index: net/cert/ct_log_verifier_unittest.cc
diff --git a/net/cert/ct_log_verifier_unittest.cc b/net/cert/ct_log_verifier_unittest.cc
index b94f14a11c2f79fd054761460e20db37988d91e7..9b3211df2e04400449bbd12f38e1e5999b5e0826 100644
--- a/net/cert/ct_log_verifier_unittest.cc
+++ b/net/cert/ct_log_verifier_unittest.cc
@@ -8,6 +8,7 @@
 
 #include "base/time/time.h"
 #include "net/cert/signed_certificate_timestamp.h"
+#include "net/cert/signed_tree_head.h"
 #include "net/test/ct_test_util.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
@@ -75,4 +76,17 @@ TEST_F(CTLogVerifierTest, FailsInvalidLogID) {
   EXPECT_FALSE(log_->Verify(cert_entry, *cert_sct));
 }
 
+TEST_F(CTLogVerifierTest, SetsValidSTH) {
+  scoped_ptr<ct::SignedTreeHead> sth(new ct::SignedTreeHead());
+  ct::GetSignedTreeHead(sth.get());
+  ASSERT_TRUE(log_->SetSignedTreeHead(sth.Pass()));
+}
+
+TEST_F(CTLogVerifierTest, DoesNotSetInvalidSTH) {
+  scoped_ptr<ct::SignedTreeHead> sth(new ct::SignedTreeHead());
+  ct::GetSignedTreeHead(sth.get());
+  sth->sha256_root_hash[0] = '\x0';
+  ASSERT_FALSE(log_->SetSignedTreeHead(sth.Pass()));
+}
+
 }  // namespace net