Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(208)

Side by Side Diff: components/certificate_transparency/tree_state_tracker.h

Issue 2650803004: Wire NetLog into the TreeStateTracker (Closed)
Patch Set: Looking for entry first Created 3 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright 2016 The Chromium Authors. All rights reserved. 1 // Copyright 2016 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_ 5 #ifndef COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_
6 #define COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_ 6 #define COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_
7 7
8 #include <map> 8 #include <map>
9 #include <memory> 9 #include <memory>
10 #include <string> 10 #include <string>
11 #include <vector> 11 #include <vector>
12 12
13 #include "base/memory/ref_counted.h" 13 #include "base/memory/ref_counted.h"
14 #include "net/cert/ct_verifier.h" 14 #include "net/cert/ct_verifier.h"
15 #include "net/cert/sth_observer.h" 15 #include "net/cert/sth_observer.h"
16 16
17 namespace net { 17 namespace net {
18 class NetLog;
18 class CTLogVerifier; 19 class CTLogVerifier;
19 class X509Certificate; 20 class X509Certificate;
20 21
21 namespace ct { 22 namespace ct {
22 struct SignedCertificateTimestamp; 23 struct SignedCertificateTimestamp;
23 struct SignedTreeHead; 24 struct SignedTreeHead;
24 } // namespace ct 25 } // namespace ct
25 26
26 } // namespace net 27 } // namespace net
27 28
28 namespace certificate_transparency { 29 namespace certificate_transparency {
29 class LogDnsClient; 30 class LogDnsClient;
30 class SingleTreeTracker; 31 class SingleTreeTracker;
31 32
32 // This class receives notifications of new Signed Tree Heads (STHs) and 33 // This class receives notifications of new Signed Tree Heads (STHs) and
33 // verified Signed Certificate Timestamps (SCTs) and delegates them to 34 // verified Signed Certificate Timestamps (SCTs) and delegates them to
34 // the SingleTreeTracker tracking the CT log they relate to. 35 // the SingleTreeTracker tracking the CT log they relate to.
35 // TODO(eranm): Export the inclusion check status of SCTs+Certs so it can 36 // TODO(eranm): Export the inclusion check status of SCTs+Certs so it can
36 // be used in the DevTools Security panel, for example. See 37 // be used in the DevTools Security panel, for example. See
37 // https://crbug.com/506227#c22. 38 // https://crbug.com/506227#c22.
38 class TreeStateTracker : public net::CTVerifier::Observer, 39 class TreeStateTracker : public net::CTVerifier::Observer,
39 public net::ct::STHObserver { 40 public net::ct::STHObserver {
40 public: 41 public:
41 // Tracks the state of the logs provided in |ct_logs|. An instance of this 42 // Tracks the state of the logs provided in |ct_logs|. An instance of this
42 // class only tracks the logs provided in the constructor. The implementation 43 // class only tracks the logs provided in the constructor. The implementation
43 // is based on the assumption that the list of recognized logs does not change 44 // is based on the assumption that the list of recognized logs does not change
44 // during the object's life time. 45 // during the object's life time.
45 // Observed STHs from logs not in this list will be simply ignored. 46 // Observed STHs from logs not in this list will be simply ignored.
46 explicit TreeStateTracker( 47 TreeStateTracker(std::vector<scoped_refptr<const net::CTLogVerifier>> ct_logs,
47 std::vector<scoped_refptr<const net::CTLogVerifier>> ct_logs); 48 net::NetLog* net_log);
48 ~TreeStateTracker() override; 49 ~TreeStateTracker() override;
49 50
50 // net::ct::CTVerifier::Observer implementation. 51 // net::ct::CTVerifier::Observer implementation.
51 // Delegates to the tree tracker corresponding to the log that issued the SCT. 52 // Delegates to the tree tracker corresponding to the log that issued the SCT.
52 void OnSCTVerified(net::X509Certificate* cert, 53 void OnSCTVerified(net::X509Certificate* cert,
53 const net::ct::SignedCertificateTimestamp* sct) override; 54 const net::ct::SignedCertificateTimestamp* sct) override;
54 55
55 // net::ct::STHObserver implementation. 56 // net::ct::STHObserver implementation.
56 // Delegates to the tree tracker corresponding to the log that issued the STH. 57 // Delegates to the tree tracker corresponding to the log that issued the STH.
57 void NewSTHObserved(const net::ct::SignedTreeHead& sth) override; 58 void NewSTHObserved(const net::ct::SignedTreeHead& sth) override;
58 59
59 private: 60 private:
60 // A Log DNS client for fetching inclusion proof and leaf indices from 61 // A Log DNS client for fetching inclusion proof and leaf indices from
61 // DNS front-end of CT logs. 62 // DNS front-end of CT logs.
62 // Shared between all SingleTreeTrackers, for rate-limiting across all 63 // Shared between all SingleTreeTrackers, for rate-limiting across all
63 // trackers. Must be deleted after the tree trackers. 64 // trackers. Must be deleted after the tree trackers.
64 std::unique_ptr<LogDnsClient> dns_client_; 65 std::unique_ptr<LogDnsClient> dns_client_;
65 66
66 // Holds the SingleTreeTracker for each log 67 // Holds the SingleTreeTracker for each log
67 std::map<std::string, std::unique_ptr<SingleTreeTracker>> tree_trackers_; 68 std::map<std::string, std::unique_ptr<SingleTreeTracker>> tree_trackers_;
68 69
69 DISALLOW_COPY_AND_ASSIGN(TreeStateTracker); 70 DISALLOW_COPY_AND_ASSIGN(TreeStateTracker);
70 }; 71 };
71 72
72 } // namespace certificate_transparency 73 } // namespace certificate_transparency
73 74
74 #endif // COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_ 75 #endif // COMPONENTS_CERTIFICATE_TRANSPARENCY_TREE_STATE_TRACKER_H_
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698