Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(473)

Side by Side Diff: net/cert/cert_policy_enforcer.h

Issue 795013003: Certificate Transparency: Remove SSLWatcher's Alpha log. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « chrome/browser/io_thread.cc ('k') | net/cert/cert_policy_enforcer.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 #ifndef NET_CERT_CERT_POLICY_ENFORCER_H 4 #ifndef NET_CERT_CERT_POLICY_ENFORCER_H
5 #define NET_CERT_CERT_POLICY_ENFORCER_H 5 #define NET_CERT_CERT_POLICY_ENFORCER_H
6 6
7 #include <stddef.h> 7 #include <stddef.h>
8 8
9 #include "net/base/net_export.h" 9 #include "net/base/net_export.h"
10 10
11 namespace net { 11 namespace net {
12 12
13 namespace ct { 13 namespace ct {
14 14
15 struct CTVerifyResult; 15 struct CTVerifyResult;
16 class EVCertsWhitelist; 16 class EVCertsWhitelist;
17 17
18 } // namespace ct 18 } // namespace ct
19 19
20 class X509Certificate; 20 class X509Certificate;
21 21
22 // Class for checking that a given certificate conforms to security-related 22 // Class for checking that a given certificate conforms to security-related
23 // policies. 23 // policies.
24 class NET_EXPORT CertPolicyEnforcer { 24 class NET_EXPORT CertPolicyEnforcer {
25 public: 25 public:
26 // Set the parameters for this policy enforcer: 26 // Set the parameters for this policy enforcer:
27 // |num_ct_logs| is the number of Certificate Transparency log currently
28 // known to Chrome.
29 // |require_ct_for_ev| indicates whether Certificate Transparency presence 27 // |require_ct_for_ev| indicates whether Certificate Transparency presence
30 // is required for EV certificates. 28 // is required for EV certificates.
31 CertPolicyEnforcer(size_t num_ct_logs, bool require_ct_for_ev); 29 explicit CertPolicyEnforcer(bool require_ct_for_ev);
32 virtual ~CertPolicyEnforcer(); 30 virtual ~CertPolicyEnforcer();
33 31
34 // Returns true if the collection of SCTs for the given certificate 32 // Returns true if the collection of SCTs for the given certificate
35 // conforms with the CT/EV policy. 33 // conforms with the CT/EV policy.
36 // |cert| is the certificate for which the SCTs apply. 34 // |cert| is the certificate for which the SCTs apply.
37 // |ct_result| must contain the result of verifying any SCTs associated with 35 // |ct_result| must contain the result of verifying any SCTs associated with
38 // |cert| prior to invoking this method. 36 // |cert| prior to invoking this method.
39 bool DoesConformToCTEVPolicy(X509Certificate* cert, 37 bool DoesConformToCTEVPolicy(X509Certificate* cert,
40 const ct::EVCertsWhitelist* ev_whitelist, 38 const ct::EVCertsWhitelist* ev_whitelist,
41 const ct::CTVerifyResult& ct_result); 39 const ct::CTVerifyResult& ct_result);
42 40
43 private: 41 private:
44 bool IsCertificateInWhitelist(X509Certificate* cert, 42 bool IsCertificateInWhitelist(X509Certificate* cert,
45 const ct::EVCertsWhitelist* ev_whitelist); 43 const ct::EVCertsWhitelist* ev_whitelist);
46 44
47 bool HasRequiredNumberOfSCTs(X509Certificate* cert, 45 bool HasRequiredNumberOfSCTs(X509Certificate* cert,
48 const ct::CTVerifyResult& ct_result); 46 const ct::CTVerifyResult& ct_result);
49 47
50 size_t num_ct_logs_;
51 bool require_ct_for_ev_; 48 bool require_ct_for_ev_;
52 }; 49 };
53 50
54 } // namespace net 51 } // namespace net
55 52
56 #endif // NET_CERT_CERT_POLICY_ENFORCER_H 53 #endif // NET_CERT_CERT_POLICY_ENFORCER_H
OLDNEW
« no previous file with comments | « chrome/browser/io_thread.cc ('k') | net/cert/cert_policy_enforcer.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698