Index: net/cert/ct_verifier.h |
diff --git a/net/cert/ct_verifier.h b/net/cert/ct_verifier.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..39cf6586fca6c54300de33df0fdd46edfe912d2e |
--- /dev/null |
+++ b/net/cert/ct_verifier.h |
@@ -0,0 +1,37 @@ |
+// Copyright (c) 2013 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef NET_CERT_CT_VERIFIER_H_ |
+#define NET_CERT_CT_VERIFIER_H_ |
+ |
+#include "net/base/net_export.h" |
+ |
+namespace net { |
+ |
+namespace ct { |
+struct CTVerifyResult; |
+} // namespace ct |
+ |
+class X509Certificate; |
+ |
+// High-level interface for verifying Signed Certificate Timestamps |
wtc
2013/11/21 02:05:02
Nit: remove "High-level"? unless there is also a l
Eran M. (Google)
2013/11/21 20:06:02
Done.
|
+// over a certificate. |
+class NET_EXPORT CTVerifier { |
+ public: |
+ virtual ~CTVerifier() {} |
+ |
+ // Verifies either embedded SCTs or SCTs obtained via TLS handshake/ |
+ // OCSP stapling on the given |verified_cert| |
wtc
2013/11/21 02:05:02
Nit: TLS handshake/OCSP stapling => the signed_cer
Eran M. (Google)
2013/11/21 20:06:02
Changed the comment. Would you like me to change t
wtc
2013/11/21 23:26:34
Yes, please. The enum should match the parameter n
Eran M. (Google)
2013/11/23 21:02:06
Done.
|
+ // |result| will be filled with these SCTs, divided into categories based on |
+ // the verification result. |
+ virtual int Verify(X509Certificate* verified_cert, |
wtc
2013/11/21 02:05:02
Nit: the first parameter should be simply named |c
Eran M. (Google)
2013/11/21 20:06:02
Done, in all classes.
|
+ const std::string& sct_list_from_ocsp, |
+ const std::string& sct_list_from_tls_handshake, |
wtc
2013/11/21 02:05:02
1. Nit: I suggest changing "from_tls_handshake" to
Eran M. (Google)
2013/11/21 20:06:02
1. Changed the name (in all classes), could also c
|
+ ct::CTVerifyResult* result) = 0; |
+ |
+}; |
+ |
+} // namespace net |
+ |
+#endif // NET_CERT_CT_VERIFIER_H_ |