OLD | NEW |
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_BASE_CRL_FILTER_H_ | 5 #ifndef NET_BASE_CRL_FILTER_H_ |
6 #define NET_BASE_CRL_FILTER_H_ | 6 #define NET_BASE_CRL_FILTER_H_ |
7 #pragma once | 7 #pragma once |
8 | 8 |
9 #include <set> | 9 #include <set> |
10 #include <string> | 10 #include <string> |
11 #include <utility> | 11 #include <utility> |
12 #include <vector> | 12 #include <vector> |
13 | 13 |
14 #include "base/memory/ref_counted.h" | 14 #include "base/memory/ref_counted.h" |
15 #include "base/memory/scoped_ptr.h" | 15 #include "base/memory/scoped_ptr.h" |
16 #include "base/string_piece.h" | 16 #include "base/string_piece.h" |
17 #include "base/synchronization/lock.h" | 17 #include "base/synchronization/lock.h" |
18 #include "net/base/net_api.h" | 18 #include "net/base/net_export.h" |
19 | 19 |
20 namespace net { | 20 namespace net { |
21 | 21 |
22 class GolombCompressedSet; | 22 class GolombCompressedSet; |
23 | 23 |
24 // A CRLFilter is a probabilistic data structure for eliminating certificate | 24 // A CRLFilter is a probabilistic data structure for eliminating certificate |
25 // revocation checks. A CRL filter contains information about some number of | 25 // revocation checks. A CRL filter contains information about some number of |
26 // globally well known CRLs. Those CRLs are said to be `covered' by the filter. | 26 // globally well known CRLs. Those CRLs are said to be `covered' by the filter. |
27 // | 27 // |
28 // If a certificate specifies a CRL that is covered then the CRLFilter can give | 28 // If a certificate specifies a CRL that is covered then the CRLFilter can give |
29 // a firm "not revoked" answer or a probabilistic "revoked" answer. | 29 // a firm "not revoked" answer or a probabilistic "revoked" answer. |
30 // Additionally, a CRLFilter can contain a list of blocked public keys and, in | 30 // Additionally, a CRLFilter can contain a list of blocked public keys and, in |
31 // that case, it can give a firm "revoked" answer. | 31 // that case, it can give a firm "revoked" answer. |
32 class NET_TEST CRLFilter : public base::RefCounted<CRLFilter> { | 32 class NET_EXPORT_PRIVATE CRLFilter : public base::RefCounted<CRLFilter> { |
33 public: | 33 public: |
34 enum Result { | 34 enum Result { |
35 REVOKED, // the certificate should be rejected. | 35 REVOKED, // the certificate should be rejected. |
36 PROBABLY_REVOKED, // the certificate should be checked. | 36 PROBABLY_REVOKED, // the certificate should be checked. |
37 NOT_REVOKED, // the certificate is acceptable. | 37 NOT_REVOKED, // the certificate is acceptable. |
38 UNKNOWN, // no information available. | 38 UNKNOWN, // no information available. |
39 }; | 39 }; |
40 | 40 |
41 ~CRLFilter(); | 41 ~CRLFilter(); |
42 | 42 |
(...skipping 62 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
105 std::string header_bytes_; | 105 std::string header_bytes_; |
106 | 106 |
107 std::set<std::pair<std::string, std::string> > crls_included_; | 107 std::set<std::pair<std::string, std::string> > crls_included_; |
108 std::string gcs_bytes_; | 108 std::string gcs_bytes_; |
109 scoped_ptr<GolombCompressedSet> gcs_; | 109 scoped_ptr<GolombCompressedSet> gcs_; |
110 }; | 110 }; |
111 | 111 |
112 } // namespace net | 112 } // namespace net |
113 | 113 |
114 #endif // NET_BASE_CRL_FILTER_H_ | 114 #endif // NET_BASE_CRL_FILTER_H_ |
OLD | NEW |