Implement the signature verification API.

base/base.gyp

 # Copyright (c) 2009 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'variables': {
     'chromium_code': 1,
   },
   'includes': [
     '../build/common.gypi',
   ],
   'targets': [
     {
       'target_name': 'base',
       'type': '<(library)',
       'dependencies': [
         '../third_party/icu38/icu38.gyp:icui18n',
         '../third_party/icu38/icu38.gyp:icuuc',
       ],
       'msvs_guid': '1832A374-8A74-4F9E-B536-69A699B3E165',
       'sources': [
         '../build/build_config.h',
+        'crypto/cssm_init.cc',
+        'crypto/cssm_init.h',
+        'crypto/signature_verifier.h',
+        'crypto/signature_verifier_mac.cc',
+        'crypto/signature_verifier_nss.cc',
+        'crypto/signature_verifier_win.cc',
         'third_party/dmg_fp/dmg_fp.h',
         'third_party/dmg_fp/dtoa.cc',
         'third_party/dmg_fp/g_fmt.cc',
         'third_party/nspr/prcpucfg.h',
         'third_party/nspr/prcpucfg_win.h',
         'third_party/nspr/prtime.cc',
         'third_party/nspr/prtime.h',
         'third_party/nspr/prtypes.h',
         'third_party/nss/blapi.h',
         'third_party/nss/blapit.h',
@@ skipping 119 matching lines @@
         'message_pump_glib.h',
         'message_pump_libevent.cc',
         'message_pump_libevent.h',
         'message_pump_mac.h',
         'message_pump_mac.mm',
         'message_pump_win.cc',
         'message_pump_win.h',
         'non_thread_safe.cc',
         'non_thread_safe.h',
         'nss_init.cc',
+        'nss_init.h',
         'object_watcher.cc',
         'object_watcher.h',
         'observer_list.h',
         'observer_list_threadsafe.h',
         'path_service.cc',
         'path_service.h',
         'pe_image.cc',
         'pe_image.h',
         'pickle.cc',
         'pickle.h',
@@ skipping 202 matching lines @@
             ],
             'link_settings': {
               'libraries': [
                 # We need rt for clock_gettime().
                 '-lrt',
               ],
             },
           },
           {  # else: OS != "linux"
             'sources!': [
+              'crypto/signature_verifier_nss.cc',
               'atomicops_internals_x86_gcc.cc',
               'directory_watcher_inotify.cc',
               'hmac_nss.cc',
               'idle_timer_none.cc',
               'message_pump_glib.cc',
               'nss_init.cc',
+              'nss_init.h',
               'time_posix.cc',
             ],
           }
         ],
         [ 'GENERATOR == "quentin"', {
             # Quentin builds don't have a recent enough glibc to include the
             # inotify headers
             'sources!': [
               'directory_watcher_inotify.cc',
             ],
             'sources': [
               'directory_watcher_stub.cc',
             ],
           },
         ],
         [ 'OS == "mac"', {
             'sources/': [ ['exclude', '_(linux|win)\\.cc$'] ],
             'sources!': [
             ],
             'link_settings': {
               'libraries': [
                 '$(SDKROOT)/System/Library/Frameworks/AppKit.framework',
                 '$(SDKROOT)/System/Library/Frameworks/Carbon.framework',
                 '$(SDKROOT)/System/Library/Frameworks/CoreFoundation.framework',
                 '$(SDKROOT)/System/Library/Frameworks/Foundation.framework',
+                '$(SDKROOT)/System/Library/Frameworks/Security.framework',
               ],
             },
           },
+          {  # else: OS != "mac"
+            'sources!': [
+              'crypto/cssm_init.cc',
+              'crypto/cssm_init.h',
+            ],
+          }
         ],
         [ 'OS == "win"', {
             'sources/': [ ['exclude', '_(linux|mac|posix)\\.cc$'],
                           ['exclude', '\\.mm?$' ] ],
             'sources!': [
               'data_pack.cc',
               'event_recorder_stubs.cc',
               'message_pump_libevent.cc',
               'string16.cc',
             ],
@@ skipping 80 matching lines @@
             'gfx/gtk_util.cc',
             ],
         }],
       ],
     },
     {
       'target_name': 'base_unittests',
       'type': 'executable',
       'msvs_guid': '27A30967-4BBA-48D1-8522-CDE95F7B1CEC',
       'sources': [
+        'crypto/signature_verifier_unittest.cc',
         'gfx/jpeg_codec_unittest.cc',
         'gfx/native_theme_unittest.cc',
         'gfx/png_codec_unittest.cc',
         'gfx/rect_unittest.cc',
         'at_exit_unittest.cc',
         'atomicops_unittest.cc',
         'clipboard_unittest.cc',
         'command_line_unittest.cc',
         'condition_variable_unittest.cc',
         'data_pack_unittest.cc',
@@ skipping 73 matching lines @@
         ['OS == "linux"', {
           'sources!': [
             'file_version_info_unittest.cc',
             # Linux has an implementation of idle_timer, but it's unclear
             # if we want it yet, so leave it 'unported' for now.
             'idletimer_unittest.cc',
             'worker_pool_linux_unittest.cc',
           ],
           'dependencies': [
             '../build/linux/system.gyp:gtk',
+            '../build/linux/system.gyp:nss',
           ],
         }],
         ['OS == "mac"', {
           'sources!': [
             'directory_watcher_unittest.cc',
           ],
         }, {  # OS != "mac"
           'sources!': [
             'mac_util_unittest.cc',
           ],
@@ skipping 59 matching lines @@
           'target_name': 'debug_message',
           'type': 'executable',
           'sources': [
             'debug_message.cc',
           ],
         },
       ],
     }],
   ],
 }