[refactor] Extract the CertVerifyResult assignment of has_md2, has_md4,

net/cert/x509_certificate_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/x509_certificate.h"
 
 #include <memory>
 
 #include "base/logging.h"
 #include "base/memory/free_deleter.h"
@@ skipping 403 matching lines @@
       break;
     case CALG_ECDSA:
       *type = kPublicKeyTypeECDSA;
       break;
     case CALG_ECDH:
       *type = kPublicKeyTypeECDH;
       break;
   }
 }
 
+X509Certificate::SignatureHashAlgorithm
+X509Certificate::GetSignatureHashAlgorithm(OSCertHandle cert_handle) {
+  const char* algorithm = cert_handle->pCertInfo->SignatureAlgorithm.pszObjId;
+  if (strcmp(algorithm, szOID_RSA_MD5RSA) == 0) {
+    // md5WithRSAEncryption: 1.2.840.113549.1.1.4
+    return kSignatureHashAlgorithmMd5;
+  }
+  if (strcmp(algorithm, szOID_RSA_MD2RSA) == 0) {
+    // md2WithRSAEncryption: 1.2.840.113549.1.1.2
+    return kSignatureHashAlgorithmMd2;
+  }
+  if (strcmp(algorithm, szOID_RSA_MD4RSA) == 0) {
+    // md4WithRSAEncryption: 1.2.840.113549.1.1.3
+    return kSignatureHashAlgorithmMd4;
+  }
+  if (strcmp(algorithm, szOID_RSA_SHA1RSA) == 0 ||
+      strcmp(algorithm, szOID_X957_SHA1DSA) == 0 ||
+      strcmp(algorithm, szOID_ECDSA_SHA1) == 0) {
+    // sha1WithRSAEncryption: 1.2.840.113549.1.1.5
+    // id-dsa-with-sha1: 1.2.840.10040.4.3
+    // ecdsa-with-SHA1: 1.2.840.10045.4.1
+    return kSignatureHashAlgorithmSha1;
+  }
+
+  return kSignatureHashAlgorithmOther;
+}
+
 bool X509Certificate::IsIssuedByEncoded(
     const std::vector<std::string>& valid_issuers) {
 
   // If the certificate's issuer in the list?
   if (IsCertNameBlobInIssuerList(&cert_handle_->pCertInfo->Issuer,
                                  valid_issuers)) {
     return true;
   }
   // Otherwise, is any of the intermediate CA subjects in the list?
   for (OSCertHandles::iterator it = intermediate_ca_certs_.begin();
@@ skipping 15 matching lines @@
       CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT,
       reinterpret_cast<void*>(const_cast<PCERT_CONTEXT>(cert_handle)), 0, NULL);
   if (!valid_signature)
     return false;
   return !!CertCompareCertificateName(X509_ASN_ENCODING,
                                       &cert_handle->pCertInfo->Subject,
                                       &cert_handle->pCertInfo->Issuer);
 }
 
 }  // namespace net