CT: Adding SCT verification functionality: A CTLogVerifier instance can verify SCTs signed by a sin…

net/net.gyp

 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     'chromium_code': 1,
 
     'linux_link_kerberos%': 0,
     'use_tracing_cache_backend%': 0,
@@ skipping 252 matching lines @@
         'cert/cert_verify_proc_nss.cc',
         'cert/cert_verify_proc_nss.h',
         'cert/cert_verify_proc_openssl.cc',
         'cert/cert_verify_proc_openssl.h',
         'cert/cert_verify_proc_win.cc',
         'cert/cert_verify_proc_win.h',
         'cert/cert_verify_result.cc',
         'cert/cert_verify_result.h',
         'cert/crl_set.cc',
         'cert/crl_set.h',
+        'cert/ct_log_verifier.cc',
+        'cert/ct_log_verifier.h',
+        'cert/ct_log_verifier_nss.cc',
+        'cert/ct_log_verifier_openssl.cc',
         'cert/ct_serialization.cc',
         'cert/ct_serialization.h',
         'cert/ev_root_ca_metadata.cc',
         'cert/ev_root_ca_metadata.h',
         'cert/jwk_serializer_nss.cc',
         'cert/jwk_serializer_openssl.cc',
         'cert/jwk_serializer.h',
         'cert/multi_threaded_cert_verifier.cc',
         'cert/multi_threaded_cert_verifier.h',
         'cert/nss_cert_database.cc',
@@ skipping 964 matching lines @@
           ],
          }],
         ['use_openssl==1', {
             'sources!': [
               'base/crypto_module_nss.cc',
               'base/keygen_handler_nss.cc',
               'base/nss_memio.c',
               'base/nss_memio.h',
               'cert/cert_database_nss.cc',
               'cert/cert_verify_proc_nss.cc',
               'cert/cert_verify_proc_nss.h',

[wtc, 2013/11/08 21:04:00]

Should we exclude the source file 'cert/ct_log_verifier_nss.cc' here?

[Eran M. (Google), 2013/11/12 12:01:28]

Probably so - added.

               'cert/jwk_serializer_nss.cc',
               'cert/nss_cert_database.cc',
               'cert/nss_cert_database.h',
               'cert/test_root_certs_nss.cc',
               'cert/x509_certificate_nss.cc',
               'cert/x509_util_nss.cc',
               'cert/x509_util_nss.h',
               'ocsp/nss_ocsp.cc',
               'ocsp/nss_ocsp.h',
               'quic/crypto/aes_128_gcm_12_decrypter_nss.cc',
@@ skipping 18 matching lines @@
           {  # else !use_openssl: remove the unneeded files
             'sources!': [
               'base/crypto_module_openssl.cc',
               'base/keygen_handler_openssl.cc',
               'base/openssl_private_key_store.h',
               'base/openssl_private_key_store_android.cc',
               'base/openssl_private_key_store_memory.cc',
               'cert/cert_database_openssl.cc',
               'cert/cert_verify_proc_openssl.cc',
               'cert/cert_verify_proc_openssl.h',
+              'cert/ct_log_verifier_openssl.cc',
               'cert/jwk_serializer_openssl.cc',
               'cert/test_root_certs_openssl.cc',
               'cert/x509_certificate_openssl.cc',
               'cert/x509_util_openssl.cc',
               'cert/x509_util_openssl.h',
               'quic/crypto/aes_128_gcm_12_decrypter_openssl.cc',
               'quic/crypto/aes_128_gcm_12_encrypter_openssl.cc',
               'quic/crypto/channel_id_openssl.cc',
               'quic/crypto/p256_key_exchange_openssl.cc',
               'quic/crypto/scoped_evp_cipher_ctx.cc',
@@ skipping 266 matching lines @@
         'base/registry_controlled_domains/registry_controlled_domain_unittest.cc',
         'base/sdch_filter_unittest.cc',
         'base/static_cookie_policy_unittest.cc',
         'base/test_completion_callback_unittest.cc',
         'base/upload_bytes_element_reader_unittest.cc',
         'base/upload_data_stream_unittest.cc',
         'base/upload_file_element_reader_unittest.cc',
         'base/url_util_unittest.cc',
         'cert/cert_verify_proc_unittest.cc',
         'cert/crl_set_unittest.cc',
+        'cert/ct_log_verifier_unittest.cc',
         'cert/ct_serialization_unittest.cc',
         'cert/ev_root_ca_metadata_unittest.cc',
         'cert/jwk_serializer_unittest.cc',
         'cert/multi_threaded_cert_verifier_unittest.cc',
         'cert/nss_cert_database_unittest.cc',
         'cert/pem_tokenizer_unittest.cc',
         'cert/test_root_certs_unittest.cc',
         'cert/x509_certificate_unittest.cc',
         'cert/x509_cert_types_unittest.cc',
         'cert/x509_util_unittest.cc',
@@ skipping 1437 matching lines @@
             'net_unittests.isolate',
           ],
           'sources': [
             'net_unittests.isolate',
           ],
         },
       ],
     }],
   ],
 }