| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_BASE_CRL_FILTER_H_ | 5 #ifndef NET_BASE_CRL_FILTER_H_ |
| 6 #define NET_BASE_CRL_FILTER_H_ | 6 #define NET_BASE_CRL_FILTER_H_ |
| 7 #pragma once | 7 #pragma once |
| 8 | 8 |
| 9 #include <set> | 9 #include <set> |
| 10 #include <string> | 10 #include <string> |
| 11 #include <utility> | 11 #include <utility> |
| 12 #include <vector> | 12 #include <vector> |
| 13 | 13 |
| 14 #include "base/memory/ref_counted.h" | 14 #include "base/memory/ref_counted.h" |
| 15 #include "base/memory/scoped_ptr.h" | 15 #include "base/memory/scoped_ptr.h" |
| 16 #include "base/string_piece.h" | 16 #include "base/string_piece.h" |
| 17 #include "base/synchronization/lock.h" | 17 #include "base/synchronization/lock.h" |
| 18 #include "net/base/net_api.h" | 18 #include "net/base/net_export.h" |
| 19 | 19 |
| 20 namespace net { | 20 namespace net { |
| 21 | 21 |
| 22 class GolombCompressedSet; | 22 class GolombCompressedSet; |
| 23 | 23 |
| 24 // A CRLFilter is a probabilistic data structure for eliminating certificate | 24 // A CRLFilter is a probabilistic data structure for eliminating certificate |
| 25 // revocation checks. A CRL filter contains information about some number of | 25 // revocation checks. A CRL filter contains information about some number of |
| 26 // globally well known CRLs. Those CRLs are said to be `covered' by the filter. | 26 // globally well known CRLs. Those CRLs are said to be `covered' by the filter. |
| 27 // | 27 // |
| 28 // If a certificate specifies a CRL that is covered then the CRLFilter can give | 28 // If a certificate specifies a CRL that is covered then the CRLFilter can give |
| 29 // a firm "not revoked" answer or a probabilistic "revoked" answer. | 29 // a firm "not revoked" answer or a probabilistic "revoked" answer. |
| 30 // Additionally, a CRLFilter can contain a list of blocked public keys and, in | 30 // Additionally, a CRLFilter can contain a list of blocked public keys and, in |
| 31 // that case, it can give a firm "revoked" answer. | 31 // that case, it can give a firm "revoked" answer. |
| 32 class NET_TEST CRLFilter : public base::RefCounted<CRLFilter> { | 32 class NET_EXPORT_PRIVATE CRLFilter : public base::RefCounted<CRLFilter> { |
| 33 public: | 33 public: |
| 34 enum Result { | 34 enum Result { |
| 35 REVOKED, // the certificate should be rejected. | 35 REVOKED, // the certificate should be rejected. |
| 36 PROBABLY_REVOKED, // the certificate should be checked. | 36 PROBABLY_REVOKED, // the certificate should be checked. |
| 37 NOT_REVOKED, // the certificate is acceptable. | 37 NOT_REVOKED, // the certificate is acceptable. |
| 38 UNKNOWN, // no information available. | 38 UNKNOWN, // no information available. |
| 39 }; | 39 }; |
| 40 | 40 |
| 41 ~CRLFilter(); | 41 ~CRLFilter(); |
| 42 | 42 |
| (...skipping 62 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 105 std::string header_bytes_; | 105 std::string header_bytes_; |
| 106 | 106 |
| 107 std::set<std::pair<std::string, std::string> > crls_included_; | 107 std::set<std::pair<std::string, std::string> > crls_included_; |
| 108 std::string gcs_bytes_; | 108 std::string gcs_bytes_; |
| 109 scoped_ptr<GolombCompressedSet> gcs_; | 109 scoped_ptr<GolombCompressedSet> gcs_; |
| 110 }; | 110 }; |
| 111 | 111 |
| 112 } // namespace net | 112 } // namespace net |
| 113 | 113 |
| 114 #endif // NET_BASE_CRL_FILTER_H_ | 114 #endif // NET_BASE_CRL_FILTER_H_ |
| OLD | NEW |