| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_CERT_X509_UTIL_NSS_H_ | 5 #ifndef NET_CERT_X509_UTIL_NSS_H_ |
| 6 #define NET_CERT_X509_UTIL_NSS_H_ | 6 #define NET_CERT_X509_UTIL_NSS_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 #include <vector> | 9 #include <vector> |
| 10 | 10 |
| 11 #include "base/time/time.h" | 11 #include "base/time/time.h" |
| 12 #include "net/base/net_export.h" | 12 #include "net/base/net_export.h" |
| 13 #include "net/cert/x509_certificate.h" | 13 #include "net/cert/x509_certificate.h" |
| 14 | 14 |
| 15 class PickleIterator; | 15 class PickleIterator; |
| 16 | 16 |
| 17 typedef struct CERTCertificateStr CERTCertificate; | 17 typedef struct CERTCertificateStr CERTCertificate; |
| 18 typedef struct CERTNameStr CERTName; | 18 typedef struct CERTNameStr CERTName; |
| 19 typedef struct PK11SlotInfoStr PK11SlotInfo; | 19 typedef struct PK11SlotInfoStr PK11SlotInfo; |
| 20 typedef struct PLArenaPool PLArenaPool; | 20 typedef struct PLArenaPool PLArenaPool; |
| 21 typedef struct SECItemStr SECItem; | 21 typedef struct SECItemStr SECItem; |
| 22 | 22 |
| 23 namespace net { | 23 namespace net { |
| 24 | 24 |
| 25 namespace x509_util { | 25 namespace x509_util { |
| 26 | 26 |
| 27 #if defined(USE_NSS) || defined(OS_IOS) | 27 #if defined(USE_NSS) || defined(OS_IOS) |
| 28 // Parses the Principal attribute from |name| and outputs the result in | 28 // Parses the Principal attribute from |name| and outputs the result in |
| 29 // |principal|. | 29 // |principal|. |
| 30 void ParsePrincipal(CERTName* name, | 30 void ParsePrincipal(CERTName* name, CertPrincipal* principal); |
| 31 CertPrincipal* principal); | |
| 32 | 31 |
| 33 // Parses the date from |der_date| and outputs the result in |result|. | 32 // Parses the date from |der_date| and outputs the result in |result|. |
| 34 void ParseDate(const SECItem* der_date, base::Time* result); | 33 void ParseDate(const SECItem* der_date, base::Time* result); |
| 35 | 34 |
| 36 // Parses the serial number from |certificate|. | 35 // Parses the serial number from |certificate|. |
| 37 std::string ParseSerialNumber(const CERTCertificate* certificate); | 36 std::string ParseSerialNumber(const CERTCertificate* certificate); |
| 38 | 37 |
| 39 // Gets the subjectAltName extension field from the certificate, if any. | 38 // Gets the subjectAltName extension field from the certificate, if any. |
| 40 void GetSubjectAltName(CERTCertificate* cert_handle, | 39 void GetSubjectAltName(CERTCertificate* cert_handle, |
| 41 std::vector<std::string>* dns_names, | 40 std::vector<std::string>* dns_names, |
| (...skipping 18 matching lines...) Expand all Loading... |
| 60 size_t* size_bits, | 59 size_t* size_bits, |
| 61 X509Certificate::PublicKeyType* type); | 60 X509Certificate::PublicKeyType* type); |
| 62 | 61 |
| 63 // Create a list of CERTName objects from a list of DER-encoded X.509 | 62 // Create a list of CERTName objects from a list of DER-encoded X.509 |
| 64 // DistinguishedName items. All objects are created in a given arena. | 63 // DistinguishedName items. All objects are created in a given arena. |
| 65 // |encoded_issuers| is the list of encoded DNs. | 64 // |encoded_issuers| is the list of encoded DNs. |
| 66 // |arena| is the arena used for all allocations. | 65 // |arena| is the arena used for all allocations. |
| 67 // |out| will receive the result list on success. | 66 // |out| will receive the result list on success. |
| 68 // Return true on success. On failure, the caller must free the | 67 // Return true on success. On failure, the caller must free the |
| 69 // intermediate CERTName objects pushed to |out|. | 68 // intermediate CERTName objects pushed to |out|. |
| 70 bool GetIssuersFromEncodedList( | 69 bool GetIssuersFromEncodedList(const std::vector<std::string>& issuers, |
| 71 const std::vector<std::string>& issuers, | 70 PLArenaPool* arena, |
| 72 PLArenaPool* arena, | 71 std::vector<CERTName*>* out); |
| 73 std::vector<CERTName*>* out); | |
| 74 | 72 |
| 75 // Returns true iff a certificate is issued by any of the issuers listed | 73 // Returns true iff a certificate is issued by any of the issuers listed |
| 76 // by name in |valid_issuers|. | 74 // by name in |valid_issuers|. |
| 77 // |cert_chain| is the certificate's chain. | 75 // |cert_chain| is the certificate's chain. |
| 78 // |valid_issuers| is a list of strings, where each string contains | 76 // |valid_issuers| is a list of strings, where each string contains |
| 79 // a DER-encoded X.509 Distinguished Name. | 77 // a DER-encoded X.509 Distinguished Name. |
| 80 bool IsCertificateIssuedBy(const std::vector<CERTCertificate*>& cert_chain, | 78 bool IsCertificateIssuedBy(const std::vector<CERTCertificate*>& cert_chain, |
| 81 const std::vector<CERTName*>& valid_issuers); | 79 const std::vector<CERTName*>& valid_issuers); |
| 82 | 80 |
| 83 // Generates a unique nickname for |slot|, returning |nickname| if it is | 81 // Generates a unique nickname for |slot|, returning |nickname| if it is |
| 84 // already unique. | 82 // already unique. |
| 85 // | 83 // |
| 86 // Note: The nickname returned will NOT include the token name, thus the | 84 // Note: The nickname returned will NOT include the token name, thus the |
| 87 // token name must be prepended if calling an NSS function that expects | 85 // token name must be prepended if calling an NSS function that expects |
| 88 // <token>:<nickname>. | 86 // <token>:<nickname>. |
| 89 // TODO(gspencer): Internationalize this: it's wrong to hard-code English. | 87 // TODO(gspencer): Internationalize this: it's wrong to hard-code English. |
| 90 std::string GetUniqueNicknameForSlot(const std::string& nickname, | 88 std::string GetUniqueNicknameForSlot(const std::string& nickname, |
| 91 const SECItem* subject, | 89 const SECItem* subject, |
| 92 PK11SlotInfo* slot); | 90 PK11SlotInfo* slot); |
| 93 #endif // defined(USE_NSS) || defined(OS_IOS) | 91 #endif // defined(USE_NSS) || defined(OS_IOS) |
| 94 | 92 |
| 95 } // namespace x509_util | 93 } // namespace x509_util |
| 96 | 94 |
| 97 } // namespace net | 95 } // namespace net |
| 98 | 96 |
| 99 #endif // NET_CERT_X509_UTIL_NSS_H_ | 97 #endif // NET_CERT_X509_UTIL_NSS_H_ |
| OLD | NEW |