Index: chrome/browser/chromeos/policy/policy_cert_verifier.h |
diff --git a/chrome/browser/chromeos/policy/policy_cert_verifier.h b/chrome/browser/chromeos/policy/policy_cert_verifier.h |
index c671161b3cc2661c04c787693bc709602bd3c7a2..07b1679cac2642b1149de9731efd86498b0ae82b 100644 |
--- a/chrome/browser/chromeos/policy/policy_cert_verifier.h |
+++ b/chrome/browser/chromeos/policy/policy_cert_verifier.h |
@@ -12,10 +12,12 @@ |
#include "base/compiler_specific.h" |
#include "base/memory/ref_counted.h" |
#include "base/memory/scoped_ptr.h" |
+#include "net/base/completion_callback.h" |
#include "net/cert/cert_trust_anchor_provider.h" |
#include "net/cert/cert_verifier.h" |
namespace net { |
+class CertVerifyResult; |
class X509Certificate; |
typedef std::vector<scoped_refptr<X509Certificate> > CertificateList; |
} |
@@ -27,15 +29,18 @@ namespace policy { |
class PolicyCertVerifier : public net::CertVerifier, |
public net::CertTrustAnchorProvider { |
public: |
- // This object must be created on the UI thread. It's member functions and |
- // destructor must be called on the IO thread. |anchor_used_callback| is |
- // called on the IO thread everytime a certificate from the additional trust |
- // anchors (set with SetTrustAnchors) is used. |
+ // Except for tests, PolicyCertVerifier should only be created by |
+ // PolicyCertService, which is the counterpart of this class on the UI thread. |
+ // Except of the constructor, all methods and the destructor must be called on |
+ // the IO thread. Calls |anchor_used_callback| on the IO thread everytime a |
+ // certificate from the additional trust anchors (set with SetTrustAnchors) is |
+ // used. |
explicit PolicyCertVerifier(const base::Closure& anchor_used_callback); |
virtual ~PolicyCertVerifier(); |
void InitializeOnIOThread(); |
+ // Sets the additional trust anchors. |
void SetTrustAnchors(const net::CertificateList& trust_anchors); |
// CertVerifier: |