Certificate Transparency: Require SCTs for EV certificates.

net/cert/multi_log_ct_verifier_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/multi_log_ct_verifier.h"
 
 #include <string>
 
 #include "base/files/file_path.h"
 #include "base/files/file_util.h"
@@ skipping 53 matching lines @@
         result.verified_scts[0]->log_description == kLogDescription;
   }
 
   bool CheckForSCTOrigin(
       const ct::CTVerifyResult& result,
       ct::SignedCertificateTimestamp::Origin origin) {
     return (result.verified_scts.size() > 0) &&
         (result.verified_scts[0]->origin == origin);
   }
 
-  bool CheckForEmbeddedSCTInNetLog(CapturingNetLog& net_log) {
+  bool CheckForEmbeddedSCTInNetLog(const CapturingNetLog& net_log) {
     CapturingNetLog::CapturedEntryList entries;
     net_log.GetEntries(&entries);
     if (entries.size() != 2)
       return false;
 
     const CapturingNetLog::CapturedEntry& received = entries[0];
     std::string embedded_scts;
     if (!received.GetStringValue("embedded_scts", &embedded_scts))
       return false;
     if (embedded_scts.empty())
@@ skipping 96 matching lines @@
   int NumEmbeddedSCTsInHistogram() {
     return GetValueFromHistogram("Net.CertificateTransparency.SCTOrigin",
                                  ct::SignedCertificateTimestamp::SCT_EMBEDDED);
   }
 
   int NumValidSCTsInStatusHistogram() {
     return GetValueFromHistogram("Net.CertificateTransparency.SCTStatus",
                                  ct::SCT_STATUS_OK);
   }
 
+  void FillResultWithSCTsOfOrigin(
+      ct::SignedCertificateTimestamp::Origin desired_origin,
+      int num_scts,
+      ct::CTVerifyResult* result) {
+    for (int i = 0; i < num_scts; ++i) {
+      scoped_refptr<ct::SignedCertificateTimestamp> sct(
+          new ct::SignedCertificateTimestamp());
+      sct->origin = desired_origin;
+      result->verified_scts.push_back(sct);
+    }
+  }
+
  protected:
   scoped_ptr<MultiLogCTVerifier> verifier_;
   scoped_refptr<X509Certificate> chain_;
   scoped_refptr<X509Certificate> embedded_sct_chain_;
 };
 
 TEST_F(MultiLogCTVerifierTest, VerifiesEmbeddedSCT) {
   ASSERT_TRUE(CheckPrecertificateVerification(embedded_sct_chain_));
 }
 
@@ skipping 93 matching lines @@
 TEST_F(MultiLogCTVerifierTest, CountsZeroSCTsCorrectly) {
   int connections_without_scts = GetValueFromHistogram(kSCTCountHistogram, 0);
   EXPECT_FALSE(VerifySinglePrecertificateChain(chain_));
   ASSERT_EQ(connections_without_scts + 1,
             GetValueFromHistogram(kSCTCountHistogram, 0));
 }
 
 }  // namespace
 
 }  // namespace net