Add parsing for RFC 5280's PolicyMappings certificate extension.

net/cert/internal/parsed_certificate.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_
 #define NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_
 
 #include <map>
 #include <memory>
 #include <vector>
@@ skipping 190 matching lines @@
   // Returns true if the certificate has a PolicyConstraints extension.
   bool has_policy_constraints() const { return has_policy_constraints_; }
 
   // Returns the ParsedPolicyConstraints struct. Caller must check
   // has_policy_constraints() before accessing this.
   const ParsedPolicyConstraints& policy_constraints() const {
     DCHECK(has_policy_constraints_);
     return policy_constraints_;
   }
 
+  // Returns true if the certificate has a PolicyMappings extension.
+  bool has_policy_mappings() const { return has_policy_mappings_; }
+
+  // Returns the PolicyMappings extension. Caller must check
+  // has_policy_mappings() before accessing this.
+  const std::vector<ParsedPolicyMapping>& policy_mappings() const {
+    DCHECK(has_policy_mappings_);
+    return policy_mappings_;
+  }
+
+  // Returns true if the certificate has a InhibitAnyPolicy extension.
+  bool has_inhibit_any_policy() const { return has_inhibit_any_policy_; }
+
+  // Returns the Inhibit Any Policy extension. Caller must check
+  // has_inhibit_any_policy() before accessing this.
+  uint8_t inhibit_any_policy() const {
+    DCHECK(has_inhibit_any_policy_);
+    return inhibit_any_policy_;
+  }
+
   // Returns a map of all the extensions in the certificate.
   const ExtensionsMap& extensions() const { return extensions_; }
 
   // Gets the value for extension matching |extension_oid|. Returns false if the
   // extension is not present.
   bool GetExtension(const der::Input& extension_oid,
                     ParsedExtension* parsed_extension) const;
 
  private:
   friend class base::RefCountedThreadSafe<ParsedCertificate>;
@@ skipping 60 matching lines @@
   std::vector<base::StringPiece> ocsp_uris_;
 
   // Policies extension.
   bool has_policy_oids_ = false;
   std::vector<der::Input> policy_oids_;
 
   // Policy constraints extension.
   bool has_policy_constraints_ = false;
   ParsedPolicyConstraints policy_constraints_;
 
+  // Policy mappings extension.
+  bool has_policy_mappings_ = false;
+  std::vector<ParsedPolicyMapping> policy_mappings_;
+
+  // Inhibit Any Policy extension.
+  bool has_inhibit_any_policy_ = false;
+  uint8_t inhibit_any_policy_;
+
   // All of the extensions.
   ExtensionsMap extensions_;
 
   DISALLOW_COPY_AND_ASSIGN(ParsedCertificate);
 };
 
 }  // namespace net
 
 #endif  // NET_CERT_INTERNAL_PARSED_CERTIFICATE_H_