CT: Adding preliminary Certificate Transparency support to Chromium.

chrome/browser/ui/website_settings/website_settings.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/website_settings/website_settings.h"
 
 #include <string>
 #include <vector>
 
 #include "base/bind.h"
@@ skipping 71 matching lines @@
     content::CertStore* cert_store)
     : TabSpecificContentSettings::SiteDataObserver(
           tab_specific_content_settings),
       ui_(ui),
       infobar_service_(infobar_service),
       show_info_bar_(false),
       site_url_(url),
       site_identity_status_(SITE_IDENTITY_STATUS_UNKNOWN),
       cert_id_(0),
       site_connection_status_(SITE_CONNECTION_STATUS_UNKNOWN),
+      cert_transparency_status_(CERT_TRANSPARENCY_STATUS_UNKNOWN),
       cert_store_(cert_store),
       content_settings_(profile->GetHostContentSettingsMap()) {
   Init(profile, url, ssl);
 
   HistoryService* history_service = HistoryServiceFactory::GetForProfile(
       profile, Profile::EXPLICIT_ACCESS);
   if (history_service) {
     history_service->GetVisibleVisitCountToHost(
         site_url_,
         &visit_count_request_consumer_,
@@ skipping 253 matching lines @@
       site_identity_details_ += errors[i].short_description();
     }
 
     if (ssl.cert_status & net::CERT_STATUS_NON_UNIQUE_NAME) {
       site_identity_details_ += ASCIIToUTF16("\n\n");
       site_identity_details_ += l10n_util::GetStringUTF16(
           IDS_PAGE_INFO_SECURITY_TAB_NON_UNIQUE_NAME);
     }
   }
 
+
+  // Certificate Transparency: Priority for indicators:
+  // 1. Has valid SCT from known log.
+  // 2. Has SCT which could not be verified from a known log.
+  // 3. Has SCT(s) from unknown logs
+  // 4. No CT information
+  if (ssl.cert_id) {
+    if (ssl.cert_status & net::CERT_STATUS_HAS_VALID_SCT) {
+      cert_transparency_status_ = CERT_TRANSPARENCY_STATUS_HAS_VALID_SCT;
+      cert_transparency_details_.assign(l10n_util::GetStringUTF16(
+          IDS_PAGE_INFO_SECURITY_TAB_CT_VERIFIED));
+    } else if (ssl.cert_status & net::CERT_STATUS_HAS_SCT_FROM_KNOWN_LOG) {
+      cert_transparency_status_ = CERT_TRANSPARENCY_STATUS_HAS_SCT;
+      cert_transparency_details_.assign(l10n_util::GetStringUTF16(
+          IDS_PAGE_INFO_SECURITY_TAB_CT_NOT_VERIFIED));
+    } else if (ssl.cert_status & net::CERT_STATUS_HAS_ANY_SCT) {
+      cert_transparency_status_ = CERT_TRANSPARENCY_STATUS_HAS_SCT;
+      cert_transparency_details_.assign(l10n_util::GetStringUTF16(
+          IDS_PAGE_INFO_SECURITY_TAB_CT_HAS_SCT));
+    } else {
+      // No CT information
+      cert_transparency_status_ = CERT_TRANSPARENCY_STATUS_UNKNOWN;
+      cert_transparency_details_.assign(l10n_util::GetStringUTF16(
+          IDS_PAGE_INFO_SECURITY_TAB_CT_NO_SCT));
+    }
+  }
+
   // Site Connection
   // We consider anything less than 80 bits encryption to be weak encryption.
   // TODO(wtc): Bug 1198735: report mixed/unsafe content for unencrypted and
   // weakly encrypted connections.
   site_connection_status_ = SITE_CONNECTION_STATUS_UNKNOWN;
 
   if (!ssl.cert_id) {
     // Not HTTPS.
     DCHECK_EQ(ssl.security_style, content::SECURITY_STYLE_UNAUTHENTICATED);
     if (ssl.security_style == content::SECURITY_STYLE_UNAUTHENTICATED)
@@ skipping 210 matching lines @@
   else
     info.site_identity = site_url_.host();
 
   info.connection_status = site_connection_status_;
   info.connection_status_description =
       UTF16ToUTF8(site_connection_details_);
   info.identity_status = site_identity_status_;
   info.identity_status_description =
       UTF16ToUTF8(site_identity_details_);
   info.cert_id = cert_id_;
+
+  info.cert_transparency_status = cert_transparency_status_;
+  info.cert_transparency_description = UTF16ToUTF8(cert_transparency_details_);
+
   ui_->SetIdentityInfo(info);
 }
 
 void WebsiteSettings::PresentHistoryInfo(base::Time first_visit) {
   if (first_visit == base::Time()) {
     ui_->SetFirstVisit(string16());
     return;
   }
 
   bool visited_before_today = false;
   base::Time today = base::Time::Now().LocalMidnight();
   base::Time first_visit_midnight = first_visit.LocalMidnight();
   visited_before_today = (first_visit_midnight < today);
 
   string16 first_visit_text;
   if (visited_before_today) {
     first_visit_text = l10n_util::GetStringFUTF16(
         IDS_PAGE_INFO_SECURITY_TAB_VISITED_BEFORE_TODAY,
         base::TimeFormatShortDate(first_visit));
   } else {
     first_visit_text = l10n_util::GetStringUTF16(
         IDS_PAGE_INFO_SECURITY_TAB_FIRST_VISITED_TODAY);
 
   }
   ui_->SetFirstVisit(first_visit_text);
 }