Index: net/cert/signed_certificate_timestamp.h |
diff --git a/net/cert/signed_certificate_timestamp.h b/net/cert/signed_certificate_timestamp.h |
index 96eded2c54bd95abf7738f275c0fa9904129e513..4276ce55c42017d5d81f49ac5356e09c7cd241c7 100644 |
--- a/net/cert/signed_certificate_timestamp.h |
+++ b/net/cert/signed_certificate_timestamp.h |
@@ -24,16 +24,28 @@ namespace net { |
// Structures related to Certificate Transparency (RFC6962). |
namespace ct { |
-// LogEntry struct in RFC 6962, Section 3.1 |
-struct NET_EXPORT LogEntry { |
+// Contains the data necessary to reconstruct the signed_entry of a |
+// SignedCertificateTimestamp, from RFC 6962, Section 3.2. |
+// |
+// All the data necessary to validate a SignedCertificateTimestamp is present |
+// within the SignedCertificateTimestamp, except for the signature_type, |
+// entry_type, and the actual entry. The only supported signature_type at |
+// present is certificate_timestamp. The entry_type is implicit from the |
+// context in which it is received (those in the X.509 extension are |
+// precert_entry, all others are x509_entry). The signed_entry itself is |
+// reconstructed from the certificate (or precertificate) being verified. |
+// |
+// The SignedEntryData contains this reconstructed data, and can be used to |
+// either generate or verify SCTs. |
+struct NET_EXPORT SignedEntryData { |
// LogEntryType enum in RFC 6962, Section 3.1 |
enum Type { |
LOG_ENTRY_TYPE_X509 = 0, |
LOG_ENTRY_TYPE_PRECERT = 1 |
}; |
- LogEntry(); |
- ~LogEntry(); |
+ SignedEntryData(); |
+ ~SignedEntryData(); |
void Reset(); |
Type type; |