Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(3)

Unified Diff: extensions/browser/api/cast_channel/cast_auth_util.h

Issue 2913033003: [cast_channel] Move cast_channel related files from //extensions to //components (Closed)
Patch Set: fix buildbot compile errors Created 3 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « extensions/browser/api/cast_channel/BUILD.gn ('k') | extensions/browser/api/cast_channel/cast_auth_util.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: extensions/browser/api/cast_channel/cast_auth_util.h
diff --git a/extensions/browser/api/cast_channel/cast_auth_util.h b/extensions/browser/api/cast_channel/cast_auth_util.h
deleted file mode 100644
index d578c569ac69d3233fd5e6112dbc25c0c1c90233..0000000000000000000000000000000000000000
--- a/extensions/browser/api/cast_channel/cast_auth_util.h
+++ /dev/null
@@ -1,126 +0,0 @@
-// Copyright 2014 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#ifndef EXTENSIONS_BROWSER_API_CAST_CHANNEL_CAST_AUTH_UTIL_H_
-#define EXTENSIONS_BROWSER_API_CAST_CHANNEL_CAST_AUTH_UTIL_H_
-
-#include <string>
-
-#include "base/memory/ref_counted.h"
-#include "base/time/time.h"
-
-namespace cast_certificate {
-enum class CRLPolicy;
-}
-
-namespace net {
-class X509Certificate;
-class TrustStore;
-} // namespace net
-
-namespace extensions {
-namespace api {
-namespace cast_channel {
-
-class AuthResponse;
-class CastMessage;
-
-struct AuthResult {
- public:
- enum ErrorType {
- ERROR_NONE,
- ERROR_PEER_CERT_EMPTY,
- ERROR_WRONG_PAYLOAD_TYPE,
- ERROR_NO_PAYLOAD,
- ERROR_PAYLOAD_PARSING_FAILED,
- ERROR_MESSAGE_ERROR,
- ERROR_NO_RESPONSE,
- ERROR_FINGERPRINT_NOT_FOUND,
- ERROR_CERT_PARSING_FAILED,
- ERROR_CERT_NOT_SIGNED_BY_TRUSTED_CA,
- ERROR_CANNOT_EXTRACT_PUBLIC_KEY,
- ERROR_SIGNED_BLOBS_MISMATCH,
- ERROR_TLS_CERT_VALIDITY_PERIOD_TOO_LONG,
- ERROR_TLS_CERT_VALID_START_DATE_IN_FUTURE,
- ERROR_TLS_CERT_EXPIRED,
- ERROR_CRL_INVALID,
- ERROR_CERT_REVOKED,
- ERROR_SENDER_NONCE_MISMATCH,
- };
-
- enum PolicyType { POLICY_NONE = 0, POLICY_AUDIO_ONLY = 1 << 0 };
-
- // Constructs a AuthResult that corresponds to success.
- AuthResult();
-
- AuthResult(const std::string& error_message, ErrorType error_type);
-
- ~AuthResult();
-
- static AuthResult CreateWithParseError(const std::string& error_message,
- ErrorType error_type);
-
- bool success() const { return error_type == ERROR_NONE; }
-
- std::string error_message;
- ErrorType error_type;
- unsigned int channel_policies;
-};
-
-class AuthContext {
- public:
- ~AuthContext();
-
- // Get an auth challenge context.
- // The same context must be used in the challenge and reply.
- static AuthContext Create();
-
- // Verifies the nonce received in the response is equivalent to the one sent.
- // Returns success if |nonce_response| matches nonce_
- AuthResult VerifySenderNonce(const std::string& nonce_response) const;
-
- // The nonce challenge.
- const std::string& nonce() const { return nonce_; }
-
- private:
- explicit AuthContext(const std::string& nonce);
-
- const std::string nonce_;
-};
-
-// Authenticates the given |challenge_reply|:
-// 1. Signature contained in the reply is valid.
-// 2. Certficate used to sign is rooted to a trusted CA.
-AuthResult AuthenticateChallengeReply(const CastMessage& challenge_reply,
- const net::X509Certificate& peer_cert,
- const AuthContext& auth_context);
-
-// Performs a quick check of the TLS certificate for time validity requirements.
-AuthResult VerifyTLSCertificate(const net::X509Certificate& peer_cert,
- std::string* peer_cert_der,
- const base::Time& verification_time);
-
-// Auth-library specific implementation of cryptographic signature
-// verification routines. Verifies that |response| contains a
-// valid signature of |signature_input|.
-AuthResult VerifyCredentials(const AuthResponse& response,
- const std::string& signature_input);
-
-// Exposed for testing only.
-//
-// Overloaded version of VerifyCredentials that allows modifying
-// the crl policy, trust stores, and verification times.
-AuthResult VerifyCredentialsForTest(
- const AuthResponse& response,
- const std::string& signature_input,
- const cast_certificate::CRLPolicy& crl_policy,
- net::TrustStore* cast_trust_store,
- net::TrustStore* crl_trust_store,
- const base::Time& verification_time);
-
-} // namespace cast_channel
-} // namespace api
-} // namespace extensions
-
-#endif // EXTENSIONS_BROWSER_API_CAST_CHANNEL_CAST_AUTH_UTIL_H_
« no previous file with comments | « extensions/browser/api/cast_channel/BUILD.gn ('k') | extensions/browser/api/cast_channel/cast_auth_util.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698