Extract Certificate Transparency SCTs from stapled OCSP responses

net/cert/multi_log_ct_verifier_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/multi_log_ct_verifier.h"
 
 #include <string>
 
 #include "base/file_util.h"
 #include "base/files/file_path.h"
@@ skipping 65 matching lines @@
     //a string, add more checks here.
 
     return true;
   }
 
   bool CheckPrecertificateVerification(scoped_refptr<X509Certificate> chain) {
     ct::CTVerifyResult result;
     CapturingNetLog net_log;
     BoundNetLog bound_net_log =
       BoundNetLog::Make(&net_log, NetLog::SOURCE_CONNECT_JOB);
-    return (verifier_->Verify(chain, "", "", &result, bound_net_log) == OK) &&
+    return (verifier_->Verify(chain, std::string(), std::string(), &result,
+                              bound_net_log) == OK) &&
         CheckForSingleVerifiedSCTInResult(result) &&
         CheckForSCTOrigin(
             result, ct::SignedCertificateTimestamp::SCT_EMBEDDED) &&
         CheckForEmbeddedSCTInNetLog(net_log);
   }
 
  protected:
   scoped_ptr<MultiLogCTVerifier> verifier_;
   scoped_refptr<X509Certificate> chain_;
 };
@@ skipping 37 matching lines @@
 
 TEST_F(MultiLogCTVerifierTest,
        VerifiesSCTOverX509Cert) {
   std::string sct(ct::GetTestSignedCertificateTimestamp());
 
   std::string sct_list;
   ASSERT_TRUE(ct::EncodeSCTListForTesting(sct, &sct_list));
 
   ct::CTVerifyResult result;
   EXPECT_EQ(OK,
-      verifier_->Verify(chain_, "", sct_list, &result, BoundNetLog()));
+            verifier_->Verify(chain_, std::string(), sct_list, &result,
+                              BoundNetLog()));
   ASSERT_TRUE(CheckForSingleVerifiedSCTInResult(result));
   ASSERT_TRUE(CheckForSCTOrigin(
       result, ct::SignedCertificateTimestamp::SCT_FROM_TLS_EXTENSION));
 }
 
 TEST_F(MultiLogCTVerifierTest,
        IdentifiesSCTFromUnknownLog) {
   std::string sct(ct::GetTestSignedCertificateTimestamp());
 
   // Change a byte inside the Log ID part of the SCT so it does
   // not match the log used in the tests
   sct[15] = 't';
 
   std::string sct_list;
   ASSERT_TRUE(ct::EncodeSCTListForTesting(sct, &sct_list));
 
   ct::CTVerifyResult result;
   EXPECT_NE(OK,
-      verifier_->Verify(chain_, sct_list, "", &result, BoundNetLog()));
+            verifier_->Verify(chain_, std::string(), sct_list, &result,
+                              BoundNetLog()));
   EXPECT_EQ(1U, result.unknown_logs_scts.size());
   EXPECT_EQ("", result.unknown_logs_scts[0]->log_description);
 }
 
 }  // namespace
 
 }  // namespace net