OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 5 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
6 #define NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 6 #define NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
7 | 7 |
8 #include <certt.h> | 8 #include <certt.h> |
9 #include <keyt.h> | 9 #include <keyt.h> |
10 #include <nspr.h> | 10 #include <nspr.h> |
(...skipping 18 matching lines...) Expand all Loading... |
29 #include "net/ssl/channel_id_service.h" | 29 #include "net/ssl/channel_id_service.h" |
30 #include "net/ssl/ssl_config_service.h" | 30 #include "net/ssl/ssl_config_service.h" |
31 | 31 |
32 namespace base { | 32 namespace base { |
33 class SequencedTaskRunner; | 33 class SequencedTaskRunner; |
34 } | 34 } |
35 | 35 |
36 namespace net { | 36 namespace net { |
37 | 37 |
38 class BoundNetLog; | 38 class BoundNetLog; |
| 39 class CertPolicyEnforcer; |
39 class CertVerifier; | 40 class CertVerifier; |
40 class ChannelIDService; | 41 class ChannelIDService; |
41 class CTVerifier; | 42 class CTVerifier; |
42 class ClientSocketHandle; | 43 class ClientSocketHandle; |
43 class SingleRequestCertVerifier; | 44 class SingleRequestCertVerifier; |
44 class TransportSecurityState; | 45 class TransportSecurityState; |
45 class X509Certificate; | 46 class X509Certificate; |
46 | 47 |
47 // An SSL client socket implemented with Mozilla NSS. | 48 // An SSL client socket implemented with Mozilla NSS. |
48 class SSLClientSocketNSS : public SSLClientSocket { | 49 class SSLClientSocketNSS : public SSLClientSocket { |
(...skipping 145 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
194 // TODO(rsleevi): http://crbug.com/130616 - Remove this member once | 195 // TODO(rsleevi): http://crbug.com/130616 - Remove this member once |
195 // ExportKeyingMaterial is updated to be asynchronous. | 196 // ExportKeyingMaterial is updated to be asynchronous. |
196 PRFileDesc* nss_fd_; | 197 PRFileDesc* nss_fd_; |
197 | 198 |
198 BoundNetLog net_log_; | 199 BoundNetLog net_log_; |
199 | 200 |
200 base::TimeTicks start_cert_verification_time_; | 201 base::TimeTicks start_cert_verification_time_; |
201 | 202 |
202 TransportSecurityState* transport_security_state_; | 203 TransportSecurityState* transport_security_state_; |
203 | 204 |
| 205 CertPolicyEnforcer* const policy_enforcer_; |
| 206 |
204 // pinning_failure_log contains a message produced by | 207 // pinning_failure_log contains a message produced by |
205 // TransportSecurityState::CheckPublicKeyPins in the event of a | 208 // TransportSecurityState::CheckPublicKeyPins in the event of a |
206 // pinning failure. It is a (somewhat) human-readable string. | 209 // pinning failure. It is a (somewhat) human-readable string. |
207 std::string pinning_failure_log_; | 210 std::string pinning_failure_log_; |
208 | 211 |
209 // The following two variables are added for debugging bug 65948. Will | 212 // The following two variables are added for debugging bug 65948. Will |
210 // remove this code after fixing bug 65948. | 213 // remove this code after fixing bug 65948. |
211 // Added the following code Debugging in release mode. | 214 // Added the following code Debugging in release mode. |
212 mutable base::Lock lock_; | 215 mutable base::Lock lock_; |
213 // This is mutable so that CalledOnValidThread can set it. | 216 // This is mutable so that CalledOnValidThread can set it. |
214 // It's guarded by |lock_|. | 217 // It's guarded by |lock_|. |
215 mutable base::PlatformThreadId valid_thread_id_; | 218 mutable base::PlatformThreadId valid_thread_id_; |
216 }; | 219 }; |
217 | 220 |
218 } // namespace net | 221 } // namespace net |
219 | 222 |
220 #endif // NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 223 #endif // NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
OLD | NEW |