OLD | NEW |
| (Empty) |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef NET_CERT_SIGNED_CERTIFICATE_TIMESTAMP_H_ | |
6 #define NET_CERT_SIGNED_CERTIFICATE_TIMESTAMP_H_ | |
7 | |
8 #include <string> | |
9 #include <vector> | |
10 | |
11 #include "base/memory/ref_counted.h" | |
12 #include "base/time/time.h" | |
13 #include "net/base/hash_value.h" | |
14 #include "net/base/net_export.h" | |
15 | |
16 class Pickle; | |
17 class PickleIterator; | |
18 | |
19 namespace net { | |
20 | |
21 // Structures related to Certificate Transparency (RFC6962). | |
22 namespace ct { | |
23 | |
24 // LogEntry struct in RFC 6962, Section 3.1 | |
25 struct NET_EXPORT LogEntry { | |
26 // LogEntryType enum in RFC 6962, Section 3.1 | |
27 enum Type { | |
28 LOG_ENTRY_TYPE_X509 = 0, | |
29 LOG_ENTRY_TYPE_PRECERT = 1 | |
30 }; | |
31 | |
32 LogEntry(); | |
33 ~LogEntry(); | |
34 void Reset(); | |
35 | |
36 Type type; | |
37 | |
38 // Set if type == LOG_ENTRY_TYPE_X509 | |
39 std::string leaf_certificate; | |
40 | |
41 // Set if type == LOG_ENTRY_TYPE_PRECERT | |
42 SHA256HashValue issuer_key_hash; | |
43 std::string tbs_certificate; | |
44 }; | |
45 | |
46 // Helper structure to represent Digitally Signed data, as described in | |
47 // Sections 4.7 and 7.4.1.4.1 of RFC 5246. | |
48 struct NET_EXPORT_PRIVATE DigitallySigned { | |
49 enum HashAlgorithm { | |
50 HASH_ALGO_NONE = 0, | |
51 HASH_ALGO_MD5 = 1, | |
52 HASH_ALGO_SHA1 = 2, | |
53 HASH_ALGO_SHA224 = 3, | |
54 HASH_ALGO_SHA256 = 4, | |
55 HASH_ALGO_SHA384 = 5, | |
56 HASH_ALGO_SHA512 = 6, | |
57 }; | |
58 | |
59 enum SignatureAlgorithm { | |
60 SIG_ALGO_ANONYMOUS = 0, | |
61 SIG_ALGO_RSA = 1, | |
62 SIG_ALGO_DSA = 2, | |
63 SIG_ALGO_ECDSA = 3 | |
64 }; | |
65 | |
66 DigitallySigned(); | |
67 ~DigitallySigned(); | |
68 | |
69 // Returns true if |other_hash_algorithm| and |other_signature_algorithm| | |
70 // match this DigitallySigned hash and signature algorithms. | |
71 bool SignatureParametersMatch( | |
72 HashAlgorithm other_hash_algorithm, | |
73 SignatureAlgorithm other_signature_algorithm) const; | |
74 | |
75 HashAlgorithm hash_algorithm; | |
76 SignatureAlgorithm signature_algorithm; | |
77 // 'signature' field. | |
78 std::string signature_data; | |
79 }; | |
80 | |
81 // SignedCertificateTimestamp struct in RFC 6962, Section 3.2. | |
82 struct NET_EXPORT SignedCertificateTimestamp | |
83 : public base::RefCountedThreadSafe<SignedCertificateTimestamp> { | |
84 // Predicate functor used in maps when SignedCertificateTimestamp is used as | |
85 // the key. | |
86 struct NET_EXPORT LessThan { | |
87 bool operator()(const scoped_refptr<SignedCertificateTimestamp>& lhs, | |
88 const scoped_refptr<SignedCertificateTimestamp>& rhs) const; | |
89 }; | |
90 | |
91 // Version enum in RFC 6962, Section 3.2. | |
92 enum Version { | |
93 SCT_VERSION_1 = 0, | |
94 }; | |
95 | |
96 // Source of the SCT - supplementary, not defined in CT RFC. | |
97 // Note: The numeric values are used within histograms and should not change | |
98 // or be re-assigned. | |
99 enum Origin { | |
100 SCT_EMBEDDED = 0, | |
101 SCT_FROM_TLS_EXTENSION = 1, | |
102 SCT_FROM_OCSP_RESPONSE = 2, | |
103 SCT_ORIGIN_MAX, | |
104 }; | |
105 | |
106 SignedCertificateTimestamp(); | |
107 | |
108 void Persist(Pickle* pickle); | |
109 static scoped_refptr<SignedCertificateTimestamp> CreateFromPickle( | |
110 PickleIterator* iter); | |
111 | |
112 Version version; | |
113 std::string log_id; | |
114 base::Time timestamp; | |
115 std::string extensions; | |
116 DigitallySigned signature; | |
117 // The origin should not participate in equality checks | |
118 // as the same SCT can be provided from multiple sources. | |
119 Origin origin; | |
120 // The log description is not one of the SCT fields, but a user-readable | |
121 // name defined alongside the log key. It should not participate | |
122 // in equality checks as the log's description could change while | |
123 // the SCT would be the same. | |
124 std::string log_description; | |
125 | |
126 private: | |
127 friend class base::RefCountedThreadSafe<SignedCertificateTimestamp>; | |
128 | |
129 ~SignedCertificateTimestamp(); | |
130 | |
131 DISALLOW_COPY_AND_ASSIGN(SignedCertificateTimestamp); | |
132 }; | |
133 | |
134 } // namespace ct | |
135 | |
136 } // namespace net | |
137 | |
138 #endif // NET_CERT_SIGNED_CERTIFICATE_TIMESTAMP_H_ | |
OLD | NEW |