Check TBSCertificate.algorithm and Certificate.signatureAlgorithm for

net/cert/x509_certificate_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/x509_certificate.h"
 
 #include <memory>
 
 #include "base/logging.h"
 #include "base/memory/free_deleter.h"
@@ skipping 403 matching lines @@
       break;
     case CALG_ECDSA:
       *type = kPublicKeyTypeECDSA;
       break;
     case CALG_ECDH:
       *type = kPublicKeyTypeECDH;
       break;
   }
 }
 
-X509Certificate::SignatureHashAlgorithm
-X509Certificate::GetSignatureHashAlgorithm(OSCertHandle cert_handle) {
-  const char* algorithm = cert_handle->pCertInfo->SignatureAlgorithm.pszObjId;
-  if (strcmp(algorithm, szOID_RSA_MD5RSA) == 0) {
-    // md5WithRSAEncryption: 1.2.840.113549.1.1.4
-    return kSignatureHashAlgorithmMd5;
-  }
-  if (strcmp(algorithm, szOID_RSA_MD2RSA) == 0) {
-    // md2WithRSAEncryption: 1.2.840.113549.1.1.2
-    return kSignatureHashAlgorithmMd2;
-  }
-  if (strcmp(algorithm, szOID_RSA_MD4RSA) == 0) {
-    // md4WithRSAEncryption: 1.2.840.113549.1.1.3
-    return kSignatureHashAlgorithmMd4;
-  }
-  if (strcmp(algorithm, szOID_RSA_SHA1RSA) == 0 ||
-      strcmp(algorithm, szOID_X957_SHA1DSA) == 0 ||
-      strcmp(algorithm, szOID_ECDSA_SHA1) == 0) {
-    // sha1WithRSAEncryption: 1.2.840.113549.1.1.5
-    // id-dsa-with-sha1: 1.2.840.10040.4.3
-    // ecdsa-with-SHA1: 1.2.840.10045.4.1
-    return kSignatureHashAlgorithmSha1;
-  }
-
-  return kSignatureHashAlgorithmOther;
-}
-
 bool X509Certificate::IsIssuedByEncoded(
     const std::vector<std::string>& valid_issuers) {
 
   // If the certificate's issuer in the list?
   if (IsCertNameBlobInIssuerList(&cert_handle_->pCertInfo->Issuer,
                                  valid_issuers)) {
     return true;
   }
   // Otherwise, is any of the intermediate CA subjects in the list?
   for (OSCertHandles::iterator it = intermediate_ca_certs_.begin();
@@ skipping 15 matching lines @@
       CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT,
       reinterpret_cast<void*>(const_cast<PCERT_CONTEXT>(cert_handle)), 0, NULL);
   if (!valid_signature)
     return false;
   return !!CertCompareCertificateName(X509_ASN_ENCODING,
                                       &cert_handle->pCertInfo->Subject,
                                       &cert_handle->pCertInfo->Issuer);
 }
 
 }  // namespace net