| Index: net/cert/signed_certificate_timestamp.h
|
| diff --git a/net/cert/signed_certificate_timestamp.h b/net/cert/signed_certificate_timestamp.h
|
| index 96eded2c54bd95abf7738f275c0fa9904129e513..a23b70810b55fc30ed99a8f06cb38d02c3d55a69 100644
|
| --- a/net/cert/signed_certificate_timestamp.h
|
| +++ b/net/cert/signed_certificate_timestamp.h
|
| @@ -24,16 +24,29 @@ namespace net {
|
| // Structures related to Certificate Transparency (RFC6962).
|
| namespace ct {
|
|
|
| -// LogEntry struct in RFC 6962, Section 3.1
|
| -struct NET_EXPORT LogEntry {
|
| +// Contains the data necessary to reconstruct the signed_entry of a
|
| +// SignedCertificateTimestamp, from RFC 6962, Section 3.2.
|
| +//
|
| +// All the data necessary to validate a SignedCertificateTimestamp is present
|
| +// within the SignedCertificateTimestamp, except for the signature_type,
|
| +// entry_type, and the actual entry. The only supported signature_type at
|
| +// present is certificate_timestamp. The entry_type is implicit from the
|
| +// context in which it is received (those in the X.509 extension are
|
| +// precert_entry, all others are x509_entry). The signed_entry itself is
|
| +// reconstructed from the certificate being verified, or from the corresponding
|
| +// precertificate.
|
| +//
|
| +// The SignedEntryData contains this reconstructed data, and can be used to
|
| +// either generate or verify the signature in SCTs.
|
| +struct NET_EXPORT SignedEntryData {
|
| // LogEntryType enum in RFC 6962, Section 3.1
|
| enum Type {
|
| LOG_ENTRY_TYPE_X509 = 0,
|
| LOG_ENTRY_TYPE_PRECERT = 1
|
| };
|
|
|
| - LogEntry();
|
| - ~LogEntry();
|
| + SignedEntryData();
|
| + ~SignedEntryData();
|
| void Reset();
|
|
|
| Type type;
|
|
|