| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef NET_CERT_CERT_VERIFY_PROC_NSS_H_ | |
| 6 #define NET_CERT_CERT_VERIFY_PROC_NSS_H_ | |
| 7 | |
| 8 #include <certt.h> | |
| 9 | |
| 10 #include "net/base/net_export.h" | |
| 11 #include "net/cert/cert_verify_proc.h" | |
| 12 | |
| 13 namespace net { | |
| 14 | |
| 15 // Performs certificate path construction and validation using NSS's libpkix. | |
| 16 class NET_EXPORT_PRIVATE CertVerifyProcNSS : public CertVerifyProc { | |
| 17 public: | |
| 18 CertVerifyProcNSS(); | |
| 19 | |
| 20 bool SupportsAdditionalTrustAnchors() const override; | |
| 21 | |
| 22 protected: | |
| 23 ~CertVerifyProcNSS() override; | |
| 24 | |
| 25 // Like VerifyInternal, but adds a |chain_verify_callback| to override trust | |
| 26 // decisions. See the documentation for CERTChainVerifyCallback and | |
| 27 // CERTChainVerifyCallbackFunc in NSS's lib/certdb/certt.h. | |
| 28 int VerifyInternalImpl(X509Certificate* cert, | |
| 29 const std::string& hostname, | |
| 30 int flags, | |
| 31 CRLSet* crl_set, | |
| 32 const CertificateList& additional_trust_anchors, | |
| 33 CERTChainVerifyCallback* chain_verify_callback, | |
| 34 CertVerifyResult* verify_result); | |
| 35 | |
| 36 private: | |
| 37 int VerifyInternal(X509Certificate* cert, | |
| 38 const std::string& hostname, | |
| 39 int flags, | |
| 40 CRLSet* crl_set, | |
| 41 const CertificateList& additional_trust_anchors, | |
| 42 CertVerifyResult* verify_result) override; | |
| 43 }; | |
| 44 | |
| 45 } // namespace net | |
| 46 | |
| 47 #endif // NET_CERT_CERT_VERIFY_PROC_NSS_H_ | |
| OLD | NEW |