| OLD | NEW |
|---|
| (Empty) |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef NET_CERT_X509_CERT_TYPES_H_ | |
| 6 #define NET_CERT_X509_CERT_TYPES_H_ | |
| 7 | |
| 8 #include <string.h> | |
| 9 | |
| 10 #include <map> | |
| 11 #include <set> | |
| 12 #include <string> | |
| 13 #include <vector> | |
| 14 | |
| 15 #include "base/logging.h" | |
| 16 #include "base/strings/string_piece.h" | |
| 17 #include "build/build_config.h" | |
| 18 #include "net/base/hash_value.h" | |
| 19 #include "net/base/net_export.h" | |
| 20 #include "net/cert/cert_status_flags.h" | |
| 21 | |
| 22 #if defined(OS_MACOSX) && !defined(OS_IOS) | |
| 23 #include <Security/x509defs.h> | |
| 24 #endif | |
| 25 | |
| 26 namespace base { | |
| 27 class Time; | |
| 28 } // namespace base | |
| 29 | |
| 30 namespace net { | |
| 31 | |
| 32 class X509Certificate; | |
| 33 | |
| 34 // CertPrincipal represents the issuer or subject field of an X.509 certificate. | |
| 35 struct NET_EXPORT CertPrincipal { | |
| 36 CertPrincipal(); | |
| 37 explicit CertPrincipal(const std::string& name); | |
| 38 ~CertPrincipal(); | |
| 39 | |
| 40 #if (defined(OS_MACOSX) && !defined(OS_IOS)) || defined(OS_WIN) | |
| 41 // Parses a BER-format DistinguishedName. | |
| 42 bool ParseDistinguishedName(const void* ber_name_data, size_t length); | |
| 43 #endif | |
| 44 | |
| 45 #if defined(OS_MACOSX) && !defined(OS_IOS) | |
| 46 // Compare this CertPrincipal with |against|, returning true if they're | |
| 47 // equal enough to be a possible match. This should NOT be used for any | |
| 48 // security relevant decisions. | |
| 49 // TODO(rsleevi): Remove once Mac client auth uses NSS for name comparison. | |
| 50 bool Matches(const CertPrincipal& against) const; | |
| 51 #endif | |
| 52 | |
| 53 // Returns a name that can be used to represent the issuer. It tries in this | |
| 54 // order: CN, O and OU and returns the first non-empty one found. | |
| 55 std::string GetDisplayName() const; | |
| 56 | |
| 57 // The different attributes for a principal, stored in UTF-8. They may be "". | |
| 58 // Note that some of them can have several values. | |
| 59 | |
| 60 std::string common_name; | |
| 61 std::string locality_name; | |
| 62 std::string state_or_province_name; | |
| 63 std::string country_name; | |
| 64 | |
| 65 std::vector<std::string> street_addresses; | |
| 66 std::vector<std::string> organization_names; | |
| 67 std::vector<std::string> organization_unit_names; | |
| 68 std::vector<std::string> domain_components; | |
| 69 }; | |
| 70 | |
| 71 #if defined(OS_MACOSX) && !defined(OS_IOS) | |
| 72 // Compares two OIDs by value. | |
| 73 inline bool CSSMOIDEqual(const CSSM_OID* oid1, const CSSM_OID* oid2) { | |
| 74 return oid1->Length == oid2->Length && | |
| 75 (memcmp(oid1->Data, oid2->Data, oid1->Length) == 0); | |
| 76 } | |
| 77 #endif | |
| 78 | |
| 79 // A list of ASN.1 date/time formats that ParseCertificateDate() supports, | |
| 80 // encoded in the canonical forms specified in RFC 2459/3280/5280. | |
| 81 enum CertDateFormat { | |
| 82 // UTCTime: Format is YYMMDDHHMMSSZ | |
| 83 CERT_DATE_FORMAT_UTC_TIME, | |
| 84 | |
| 85 // GeneralizedTime: Format is YYYYMMDDHHMMSSZ | |
| 86 CERT_DATE_FORMAT_GENERALIZED_TIME, | |
| 87 }; | |
| 88 | |
| 89 // Attempts to parse |raw_date|, an ASN.1 date/time string encoded as | |
| 90 // |format|, and writes the result into |*time|. If an invalid date is | |
| 91 // specified, or if parsing fails, returns false, and |*time| will not be | |
| 92 // updated. | |
| 93 NET_EXPORT_PRIVATE bool ParseCertificateDate(const base::StringPiece& raw_date, | |
| 94 CertDateFormat format, | |
| 95 base::Time* time); | |
| 96 } // namespace net | |
| 97 | |
| 98 #endif // NET_CERT_X509_CERT_TYPES_H_ | |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 992733002:
Remove //net (except for Android test stuff) and sdch (Closed)
Base URL: git@github.com:domokit/mojo.git@master