Certificate Transparency: Code for unpacking EV cert hashes whitelist

net/ssl/ssl_config_service.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONFIG_SERVICE_H_
 #define NET_SSL_SSL_CONFIG_SERVICE_H_
 
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "base/observer_list.h"
 #include "net/base/net_export.h"
 #include "net/cert/crl_set.h"
+#include "net/cert/ct_ev_whitelist.h"
 #include "net/ssl/ssl_config.h"
 
 namespace net {
 
 // The interface for retrieving the SSL configuration.  This interface
 // does not cover setting the SSL configuration, as on some systems, the
 // SSLConfigService objects may not have direct access to the configuration, or
 // live longer than the configuration preferences.
 class NET_EXPORT SSLConfigService
     : public base::RefCountedThreadSafe<SSLConfigService> {
@@ skipping 19 matching lines @@
 
   SSLConfigService();
 
   // May not be thread-safe, should only be called on the IO thread.
   virtual void GetSSLConfig(SSLConfig* config) = 0;
 
   // Sets and gets the current, global CRL set.
   static void SetCRLSet(scoped_refptr<CRLSet> crl_set);
   static scoped_refptr<CRLSet> GetCRLSet();
 
+  // Sets the EV certificates whitelist to be used in the SSLConfig
+  // this class provides.
+  virtual void SetEVCertsWhitelist(
+      scoped_refptr<ct::EVCertsWhitelist> ev_whitelist);
+
   // Add an observer of this service.
   void AddObserver(Observer* observer);
 
   // Remove an observer of this service.
   void RemoveObserver(Observer* observer);
 
   // Calls the OnSSLConfigChanged method of registered observers. Should only be
   // called on the IO thread.
   void NotifySSLConfigChange();
 
  protected:
   friend class base::RefCountedThreadSafe<SSLConfigService>;
 
   virtual ~SSLConfigService();
 
   // Process before/after config update.
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONFIG_SERVICE_H_