| Index: components/cast_channel/cast_auth_util.h
|
| diff --git a/components/cast_channel/cast_auth_util.h b/components/cast_channel/cast_auth_util.h
|
| deleted file mode 100644
|
| index be187738ef944bcf98189a89c5634e67912f058a..0000000000000000000000000000000000000000
|
| --- a/components/cast_channel/cast_auth_util.h
|
| +++ /dev/null
|
| @@ -1,122 +0,0 @@
|
| -// Copyright 2014 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#ifndef COMPONENTS_CAST_CHANNEL_CAST_AUTH_UTIL_H_
|
| -#define COMPONENTS_CAST_CHANNEL_CAST_AUTH_UTIL_H_
|
| -
|
| -#include <string>
|
| -
|
| -#include "base/memory/ref_counted.h"
|
| -#include "base/time/time.h"
|
| -
|
| -namespace cast_certificate {
|
| -enum class CRLPolicy;
|
| -}
|
| -
|
| -namespace net {
|
| -class X509Certificate;
|
| -class TrustStore;
|
| -} // namespace net
|
| -
|
| -namespace cast_channel {
|
| -
|
| -class AuthResponse;
|
| -class CastMessage;
|
| -
|
| -struct AuthResult {
|
| - public:
|
| - enum ErrorType {
|
| - ERROR_NONE,
|
| - ERROR_PEER_CERT_EMPTY,
|
| - ERROR_WRONG_PAYLOAD_TYPE,
|
| - ERROR_NO_PAYLOAD,
|
| - ERROR_PAYLOAD_PARSING_FAILED,
|
| - ERROR_MESSAGE_ERROR,
|
| - ERROR_NO_RESPONSE,
|
| - ERROR_FINGERPRINT_NOT_FOUND,
|
| - ERROR_CERT_PARSING_FAILED,
|
| - ERROR_CERT_NOT_SIGNED_BY_TRUSTED_CA,
|
| - ERROR_CANNOT_EXTRACT_PUBLIC_KEY,
|
| - ERROR_SIGNED_BLOBS_MISMATCH,
|
| - ERROR_TLS_CERT_VALIDITY_PERIOD_TOO_LONG,
|
| - ERROR_TLS_CERT_VALID_START_DATE_IN_FUTURE,
|
| - ERROR_TLS_CERT_EXPIRED,
|
| - ERROR_CRL_INVALID,
|
| - ERROR_CERT_REVOKED,
|
| - ERROR_SENDER_NONCE_MISMATCH,
|
| - };
|
| -
|
| - enum PolicyType { POLICY_NONE = 0, POLICY_AUDIO_ONLY = 1 << 0 };
|
| -
|
| - // Constructs a AuthResult that corresponds to success.
|
| - AuthResult();
|
| -
|
| - AuthResult(const std::string& error_message, ErrorType error_type);
|
| -
|
| - ~AuthResult();
|
| -
|
| - static AuthResult CreateWithParseError(const std::string& error_message,
|
| - ErrorType error_type);
|
| -
|
| - bool success() const { return error_type == ERROR_NONE; }
|
| -
|
| - std::string error_message;
|
| - ErrorType error_type;
|
| - unsigned int channel_policies;
|
| -};
|
| -
|
| -class AuthContext {
|
| - public:
|
| - ~AuthContext();
|
| -
|
| - // Get an auth challenge context.
|
| - // The same context must be used in the challenge and reply.
|
| - static AuthContext Create();
|
| -
|
| - // Verifies the nonce received in the response is equivalent to the one sent.
|
| - // Returns success if |nonce_response| matches nonce_
|
| - AuthResult VerifySenderNonce(const std::string& nonce_response) const;
|
| -
|
| - // The nonce challenge.
|
| - const std::string& nonce() const { return nonce_; }
|
| -
|
| - private:
|
| - explicit AuthContext(const std::string& nonce);
|
| -
|
| - const std::string nonce_;
|
| -};
|
| -
|
| -// Authenticates the given |challenge_reply|:
|
| -// 1. Signature contained in the reply is valid.
|
| -// 2. Certficate used to sign is rooted to a trusted CA.
|
| -AuthResult AuthenticateChallengeReply(const CastMessage& challenge_reply,
|
| - const net::X509Certificate& peer_cert,
|
| - const AuthContext& auth_context);
|
| -
|
| -// Performs a quick check of the TLS certificate for time validity requirements.
|
| -AuthResult VerifyTLSCertificate(const net::X509Certificate& peer_cert,
|
| - std::string* peer_cert_der,
|
| - const base::Time& verification_time);
|
| -
|
| -// Auth-library specific implementation of cryptographic signature
|
| -// verification routines. Verifies that |response| contains a
|
| -// valid signature of |signature_input|.
|
| -AuthResult VerifyCredentials(const AuthResponse& response,
|
| - const std::string& signature_input);
|
| -
|
| -// Exposed for testing only.
|
| -//
|
| -// Overloaded version of VerifyCredentials that allows modifying
|
| -// the crl policy, trust stores, and verification times.
|
| -AuthResult VerifyCredentialsForTest(
|
| - const AuthResponse& response,
|
| - const std::string& signature_input,
|
| - const cast_certificate::CRLPolicy& crl_policy,
|
| - net::TrustStore* cast_trust_store,
|
| - net::TrustStore* crl_trust_store,
|
| - const base::Time& verification_time);
|
| -
|
| -} // namespace cast_channel
|
| -
|
| -#endif // COMPONENTS_CAST_CHANNEL_CAST_AUTH_UTIL_H_
|
|
|