Certificate Transparency: Add the high-level interface for verifying SCTs over multiple logs

net/cert/ct_serialization.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_serialization.h"
 
 #include "base/basictypes.h"
 #include "base/logging.h"
 
 namespace net {
@@ skipping 299 matching lines @@
     return false;
   }
 
   if (!input->empty() || result.empty())
     return false;
   output->swap(result);
   return true;
 }
 
 bool DecodeSignedCertificateTimestamp(base::StringPiece* input,
     scoped_refptr<SignedCertificateTimestamp>* output) {

[wtc, 2013/11/25 23:15:50]

The function's two parameters should be aligned. (This comes from Al's code, I
think.)

[Eran M. (Google), 2013/11/26 10:10:24]

Done.

   scoped_refptr<SignedCertificateTimestamp> result(
       new SignedCertificateTimestamp());
   unsigned version;
   if (!ReadUint(kVersionLength, input, &version))
     return false;
   if (version != SignedCertificateTimestamp::SCT_VERSION_1) {
     DVLOG(1) << "Unsupported/invalid version " << version;
     return false;
   }
 
@@ skipping 17 matching lines @@
   log_id.CopyToString(&result->log_id);
   extensions.CopyToString(&result->extensions);
   result->timestamp =
       base::Time::UnixEpoch() +
       base::TimeDelta::FromMilliseconds(static_cast<int64>(timestamp));
 
   output->swap(result);
   return true;
 }
 
+bool EncodeSCTListForTesting(const base::StringPiece& sct,
+                             std::string* output) {
+  std::string encoded_sct;
+  return WriteVariableBytes(kSerializedSCTLengthBytes, sct, &encoded_sct) &&
+      WriteVariableBytes(kSCTListLengthBytes, encoded_sct, output);
+}
+
 }  // namespace ct
 
 }  // namespace net