SignedCertificateTimestamp storing & serialization code.

net/cert/multi_log_ct_verifier.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/multi_log_ct_verifier.h"
 
 #include "net/base/net_errors.h"
 #include "net/cert/ct_log_verifier.h"
 #include "net/cert/ct_objects_extractor.h"
 #include "net/cert/ct_serialization.h"
@@ skipping 17 matching lines @@
 
 int MultiLogCTVerifier::Verify(
     X509Certificate* cert,
     const std::string& sct_list_from_ocsp,
     const std::string& sct_list_from_tls_extension,
     ct::CTVerifyResult* result)  {
   DCHECK(cert);
   DCHECK(result);
 
   result->verified_scts.clear();
-  result->unverified_scts.clear();
+  result->invalid_scts.clear();
   result->unknown_logs_scts.clear();
 
   bool has_verified_scts = false;
 
   std::string embedded_scts;
   if (!cert->GetIntermediateCertificates().empty() &&
       ct::ExtractEmbeddedSCTList(
           cert->os_cert_handle(),
           &embedded_scts)) {
     ct::LogEntry precert_entry;
@@ skipping 72 matching lines @@
   // Assume this SCT is untrusted until proven otherwise.
   IDToLogMap::iterator it = logs_.find(sct->log_id);
   if (it == logs_.end()) {
     DVLOG(1) << "SCT does not match any known log.";
     result->unknown_logs_scts.push_back(sct);
     return false;
   }
 
   if (!it->second->Verify(expected_entry, *sct)) {
     DVLOG(1) << "Unable to verify SCT signature.";
-    result->unverified_scts.push_back(sct);
+    result->invalid_scts.push_back(sct);
     return false;
   }
 
   // SCT verified ok, just make sure the timestamp is legitimate.
   if (sct->timestamp > base::Time::Now()) {
     DVLOG(1) << "SCT is from the future!";
-    result->unverified_scts.push_back(sct);
+    result->invalid_scts.push_back(sct);
     return false;
   }
 
   result->verified_scts.push_back(sct);
   return true;
 }
 
 } // namespace net