Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(255)

Side by Side Diff: net/cert/cert_policy_enforcer.h

Issue 816543004: Update from https://crrev.com/308996 (Closed) Base URL: git@github.com:domokit/mojo.git@master
Patch Set: Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/base/sdch_manager_unittest.cc ('k') | net/cert/cert_policy_enforcer.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 #ifndef NET_CERT_CERT_POLICY_ENFORCER_H 4 #ifndef NET_CERT_CERT_POLICY_ENFORCER_H
5 #define NET_CERT_CERT_POLICY_ENFORCER_H 5 #define NET_CERT_CERT_POLICY_ENFORCER_H
6 6
7 #include <stddef.h> 7 #include <stddef.h>
8 8
9 #include "net/base/net_export.h" 9 #include "net/base/net_export.h"
10 #include "net/base/net_log.h"
10 11
11 namespace net { 12 namespace net {
12 13
13 namespace ct { 14 namespace ct {
14 15
15 struct CTVerifyResult; 16 struct CTVerifyResult;
16 class EVCertsWhitelist; 17 class EVCertsWhitelist;
17 18
18 } // namespace ct 19 } // namespace ct
19 20
20 class X509Certificate; 21 class X509Certificate;
21 22
22 // Class for checking that a given certificate conforms to security-related 23 // Class for checking that a given certificate conforms to security-related
23 // policies. 24 // policies.
24 class NET_EXPORT CertPolicyEnforcer { 25 class NET_EXPORT CertPolicyEnforcer {
25 public: 26 public:
26 // Set the parameters for this policy enforcer: 27 // Set the parameters for this policy enforcer:
27 // |num_ct_logs| is the number of Certificate Transparency log currently
28 // known to Chrome.
29 // |require_ct_for_ev| indicates whether Certificate Transparency presence 28 // |require_ct_for_ev| indicates whether Certificate Transparency presence
30 // is required for EV certificates. 29 // is required for EV certificates.
31 CertPolicyEnforcer(size_t num_ct_logs, bool require_ct_for_ev); 30 explicit CertPolicyEnforcer(bool require_ct_for_ev);
32 virtual ~CertPolicyEnforcer(); 31 virtual ~CertPolicyEnforcer();
33 32
34 // Returns true if the collection of SCTs for the given certificate 33 // Returns true if the collection of SCTs for the given certificate
35 // conforms with the CT/EV policy. 34 // conforms with the CT/EV policy. Conformance details are logged to
35 // |net_log|.
36 // |cert| is the certificate for which the SCTs apply. 36 // |cert| is the certificate for which the SCTs apply.
37 // |ct_result| must contain the result of verifying any SCTs associated with 37 // |ct_result| must contain the result of verifying any SCTs associated with
38 // |cert| prior to invoking this method. 38 // |cert| prior to invoking this method.
39 bool DoesConformToCTEVPolicy(X509Certificate* cert, 39 bool DoesConformToCTEVPolicy(X509Certificate* cert,
40 const ct::EVCertsWhitelist* ev_whitelist, 40 const ct::EVCertsWhitelist* ev_whitelist,
41 const ct::CTVerifyResult& ct_result); 41 const ct::CTVerifyResult& ct_result,
42 const BoundNetLog& net_log);
42 43
43 private: 44 private:
44 bool IsCertificateInWhitelist(X509Certificate* cert,
45 const ct::EVCertsWhitelist* ev_whitelist);
46
47 bool HasRequiredNumberOfSCTs(X509Certificate* cert,
48 const ct::CTVerifyResult& ct_result);
49
50 size_t num_ct_logs_;
51 bool require_ct_for_ev_; 45 bool require_ct_for_ev_;
52 }; 46 };
53 47
54 } // namespace net 48 } // namespace net
55 49
56 #endif // NET_CERT_CERT_POLICY_ENFORCER_H 50 #endif // NET_CERT_CERT_POLICY_ENFORCER_H
OLDNEW
« no previous file with comments | « net/base/sdch_manager_unittest.cc ('k') | net/cert/cert_policy_enforcer.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698