SignedCertificateTimestamp storing & serialization code.

net/ssl/ssl_info.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_INFO_H_
 #define NET_SSL_SSL_INFO_H_
 
 #include <vector>
 
 #include "base/memory/ref_counted.h"
 #include "net/base/net_export.h"
 #include "net/cert/cert_status_flags.h"
+#include "net/cert/sct_status_flags.h"
 #include "net/cert/x509_cert_types.h"
 
+class Pickle;
+class PickleIterator;
+
 namespace net {
 
+namespace ct {
+class SignedCertificateTimestamp;
+}
+
 class X509Certificate;
 
+struct SignedCertificateTimestampAndStatus {

[wtc, 2013/11/27 16:32:41]

Nit: this struct probably should be declared in a separate file.

[alcutter, 2013/11/27 18:05:55]

Done.

+  SignedCertificateTimestampAndStatus(
+      const scoped_refptr<ct::SignedCertificateTimestamp>& sct,
+      SignedCertificateTimestampVerificationStatus status);
+
+  scoped_refptr<ct::SignedCertificateTimestamp> sct_;
+  SignedCertificateTimestampVerificationStatus status_;
+};
+
+typedef std::vector<SignedCertificateTimestampAndStatus>
+    SignedCertificateTimestampAndStatusList;
+
 // SSL connection info.
 // This is really a struct.  All members are public.
 class NET_EXPORT SSLInfo {
  public:
   // HandshakeType enumerates the possible resumption cases after an SSL
   // handshake.
   enum HandshakeType {
     HANDSHAKE_UNKNOWN = 0,
     HANDSHAKE_RESUME,  // we resumed a previous session.
     HANDSHAKE_FULL,  // we negotiated a new session.
   };
 
   SSLInfo();
   SSLInfo(const SSLInfo& info);
   ~SSLInfo();
   SSLInfo& operator=(const SSLInfo& info);
 
   void Reset();
 
   bool is_valid() const { return cert.get() != NULL; }
 
   // Adds the specified |error| to the cert status.
   void SetCertError(int error);
 
   // The SSL certificate.
   scoped_refptr<X509Certificate> cert;
 
+  // List of SignedCertificateTimestamps and their corresponding validation
+  // status.
+  SignedCertificateTimestampAndStatusList signed_certificate_timestamps;

[wtc, 2013/11/27 16:32:41]

I suggest moving this member after |cert_status|, so that |cert| and
|cert_status| are not separated.

Maybe we can move this member to the end of the SSLInfo struct?

[alcutter, 2013/11/27 18:05:55]

Done.

+
   // Bitmask of status info of |cert|, representing, for example, known errors
   // and extended validation (EV) status.
   // See cert_status_flags.h for values.
   CertStatus cert_status;
 
   // The security strength, in bits, of the SSL cipher suite.
   // 0 means the connection is not encrypted.
   // -1 means the security strength is unknown.
   int security_bits;
 
@@ skipping 16 matching lines @@
   HandshakeType handshake_type;
 
   // The hashes, in several algorithms, of the SubjectPublicKeyInfos from
   // each certificate in the chain.
   HashValueVector public_key_hashes;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_INFO_H_