De-prioritize 2.23.140.1.1 when searching for EV policy.

net/cert/ev_root_ca_metadata.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ev_root_ca_metadata.h"
 
 #if defined(USE_NSS_CERTS)
 #include <cert.h>
 #include <pkcs11n.h>
 #include <secerr.h>
@@ skipping 648 matching lines @@
   if (iter == ev_policy_.end())
     return false;
   for (std::vector<PolicyOID>::const_iterator
        j = iter->second.begin(); j != iter->second.end(); ++j) {
     if (*j == policy_oid)
       return true;
   }
   return false;
 }
 
+// static
+bool EVRootCAMetadata::IsCaBrowserForumEvOid(PolicyOID policy_oid) {
+  // OID: 2.23.140.1.1
+  const uint8_t kCabEvOid[] = {0x67, 0x81, 0x0c, 0x01, 0x01};
+  SECItem item;
+  item.data = const_cast<uint8_t*>(&kCabEvOid[0]);
+  item.len = sizeof(kCabEvOid);
+  return policy_oid == SECOID_FindOIDTag(&item);
+}
+
 bool EVRootCAMetadata::AddEVCA(const SHA1HashValue& fingerprint,
                                const char* policy) {
   if (ev_policy_.find(fingerprint) != ev_policy_.end())
     return false;
 
   PolicyOID oid;
   if (!RegisterOID(policy, &oid))
     return false;
 
   ev_policy_[fingerprint].push_back(oid);
@@ skipping 67 matching lines @@
       if (strcmp(policy_oid, ev_root_ca_metadata[i].policy_oids[j]) == 0)
         return true;
     }
     return false;
   }
 
   ExtraEVCAMap::const_iterator it = extra_cas_.find(fingerprint);
   return it != extra_cas_.end() && it->second == policy_oid;
 }
 
+// static
+bool EVRootCAMetadata::IsCaBrowserForumEvOid(PolicyOID policy_oid) {
+  return strcmp(policy_oid, "2.23.140.1.1") == 0;
+}
+
 bool EVRootCAMetadata::AddEVCA(const SHA1HashValue& fingerprint,
                                const char* policy) {
   for (size_t i = 0; i < arraysize(ev_root_ca_metadata); i++) {
     if (fingerprint == ev_root_ca_metadata[i].fingerprint)
       return false;
   }
 
   if (extra_cas_.find(fingerprint) != extra_cas_.end())
     return false;
 
@@ skipping 33 matching lines @@
   PolicyOIDMap::const_iterator iter = ev_policy_.find(fingerprint);
   if (iter == ev_policy_.end())
     return false;
   for (const std::string& ev_oid : iter->second) {
     if (der::Input(&ev_oid) == policy_oid)
       return true;
   }
   return false;
 }
 
+// static
+bool EVRootCAMetadata::IsCaBrowserForumEvOid(PolicyOID policy_oid) {
+  const uint8_t kCabEvOid[] = {0x67, 0x81, 0x0c, 0x01, 0x01};
+  return der::Input(kCabEvOid) == policy_oid;
+}
+
 bool EVRootCAMetadata::AddEVCA(const SHA1HashValue& fingerprint,
                                const char* policy) {
   if (ev_policy_.find(fingerprint) != ev_policy_.end())
     return false;
 
   std::string der_policy = OIDStringToDER(policy);
   if (der_policy.empty())
     return false;
 
   ev_policy_[fingerprint].push_back(der_policy);
@@ skipping 67 matching lines @@
       ev_policy_[metadata.fingerprint].push_back(policy_der);
       policy_oids_.insert(policy_der);
     }
   }
 #endif
 }
 
 EVRootCAMetadata::~EVRootCAMetadata() { }
 
 }  // namespace net