Chromium Code Reviews Chromium Code Reviews
Issue 67513008:
Certificate Transparency: Add the high-level interface for verifying SCTs over multiple logs (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // This file intentionally does not have header guards, it's included | 5 // This file intentionally does not have header guards, it's included |
| 6 // inside a macro to generate enum values. | 6 // inside a macro to generate enum values. |
| 7 | 7 |
| 8 // This file contains the list of network errors. | 8 // This file contains the list of network errors. |
| 9 | 9 |
| 10 // | 10 // |
| (...skipping 690 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 701 NET_ERROR(DNS_TIMED_OUT, -803) | 701 NET_ERROR(DNS_TIMED_OUT, -803) |
| 702 | 702 |
| 703 // The entry was not found in cache, for cache-only lookups. | 703 // The entry was not found in cache, for cache-only lookups. |
| 704 NET_ERROR(DNS_CACHE_MISS, -804) | 704 NET_ERROR(DNS_CACHE_MISS, -804) |
| 705 | 705 |
| 706 // Suffix search list rules prevent resolution of the given host name. | 706 // Suffix search list rules prevent resolution of the given host name. |
| 707 NET_ERROR(DNS_SEARCH_EMPTY, -805) | 707 NET_ERROR(DNS_SEARCH_EMPTY, -805) |
| 708 | 708 |
| 709 // Failed to sort addresses according to RFC3484. | 709 // Failed to sort addresses according to RFC3484. |
| 710 NET_ERROR(DNS_SORT_ERROR, -806) | 710 NET_ERROR(DNS_SORT_ERROR, -806) |
| 711 | |
| 712 // Certificate Transparency-related errors | |
| 713 | |
| 714 // No Signed Certificate Timestamps present for | |
| 715 // a certificate. | |
| 716 NET_ERROR(NO_SCTS_PRESENT, -900) | |
| 717 | |
| 718 // Serialization of the Precertificate LogEntry or X.509 LogEntry failed | |
| 719 // That means that there were no embedded SCTs *and* the DER encoding of the | |
| 720 // certificate could not be created, which is surprising - as CT checks are | |
| 721 // only performed after SCTs have been validated. | |
| 722 // not be created. | |
| 723 NET_ERROR(CT_LOG_ENTRY_CREATION_FAILED, -901) | |
| 724 | |
| 725 // All SCTs are from unknown logs | |
| 726 NET_ERROR(NO_SCTS_FROM_KNOWN_LOGS, -902) | |
| 727 | |
| 728 // SCT(s) were present but failed to verify - this could indicate an attack | |
| 729 // or corrupted SCTs. | |
| 730 NET_ERROR(NO_SCTS_VERIFIED_OK, -903) | |
|
wtc
2013/11/21 23:26:34
I think CT-related errors seem to belong in the "2
Eran M. (Google)
2013/11/23 21:02:07
Done - reverted changes to this file.
As for inclu
| |
| OLD | NEW |
