Enable Certificate Transparency in the OpenSSL port.

net/cert/asn1_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_ASN1_UTIL_H_
 #define NET_CERT_ASN1_UTIL_H_
 
 #include <vector>
 
 #include "base/strings/string_piece.h"
 #include "net/base/net_export.h"
 
 namespace net {
 
 namespace asn1 {
 
 // These are the DER encodings of the tag byte for ASN.1 objects.
 static const unsigned kBOOLEAN = 0x01;
 static const unsigned kINTEGER = 0x02;
 static const unsigned kBITSTRING = 0x03;
 static const unsigned kOCTETSTRING = 0x04;
 static const unsigned kOID = 0x06;
+static const unsigned kENUMERATED = 0x0a;

[Ryan Sleevi, 2014/09/02 19:49:06]

Pure pedantry nit: 0x0A;

You can send me hate-mail through interoffice mail.

[davidben, 2014/09/02 22:13:45]

Done.

 static const unsigned kSEQUENCE = 0x30;
 
 // These are flags that can be ORed with the above tag numbers.
 static const unsigned kContextSpecific = 0x80;
 static const unsigned kConstructed = 0x20;
 
 // kAny matches any tag value;
 static const unsigned kAny = 0x10000;
 // kOptional denotes an optional element.
 static const unsigned kOptional = 0x20000;
@@ skipping 13 matching lines @@
 bool ParseElement(base::StringPiece* in,
                   unsigned tag_value,
                   base::StringPiece* out,
                   unsigned *out_header_len);
 
 // GetElement performs the same actions as ParseElement, except that the header
 // bytes are not included in the output.
 //
 // If |tag_value & kOptional| is true then this function cannot distinguish
 // between a missing optional element and an empty one.
-bool GetElement(base::StringPiece* in,
-                unsigned tag_value,
-                base::StringPiece* out);
+NET_EXPORT_PRIVATE bool GetElement(base::StringPiece* in,
+                                   unsigned tag_value,
+                                   base::StringPiece* out);
 
 // ExtractSPKIFromDERCert parses the DER encoded certificate in |cert| and
 // extracts the bytes of the SubjectPublicKeyInfo. On successful return,
 // |spki_out| is set to contain the SPKI, pointing into |cert|.
 NET_EXPORT_PRIVATE bool ExtractSPKIFromDERCert(base::StringPiece cert,
                                                base::StringPiece* spki_out);
 
 // ExtractSubjectPublicKeyFromSPKI parses the DER encoded SubjectPublicKeyInfo
 // in |spki| and extracts the bytes of the SubjectPublicKey. On successful
 // return, |spk_out| is set to contain the public key, pointing into |spki|.
@@ skipping 15 matching lines @@
 // several locations as far as a CRL filter is concerned.
 NET_EXPORT_PRIVATE bool ExtractCRLURLsFromDERCert(
     base::StringPiece cert,
     std::vector<base::StringPiece>* urls_out);
 
 } // namespace asn1
 
 } // namespace net
 
 #endif // NET_CERT_ASN1_UTIL_H_