Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(66)

Side by Side Diff: net/ssl/ssl_config.cc

Issue 992733002: Remove //net (except for Android test stuff) and sdch (Closed) Base URL: git@github.com:domokit/mojo.git@master
Patch Set: Created 5 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/ssl/ssl_config.h ('k') | net/ssl/ssl_config_service.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "net/ssl/ssl_config.h"
6
7 #include "net/socket/ssl_client_socket.h"
8
9 namespace net {
10
11 const uint16 kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_TLS1;
12
13 const uint16 kDefaultSSLVersionFallbackMin = SSL_PROTOCOL_VERSION_TLS1;
14
15 SSLConfig::CertAndStatus::CertAndStatus() : cert_status(0) {}
16
17 SSLConfig::CertAndStatus::~CertAndStatus() {}
18
19 SSLConfig::SSLConfig()
20 : rev_checking_enabled(false),
21 rev_checking_required_local_anchors(false),
22 version_min(kDefaultSSLVersionMin),
23 version_max(SSLClientSocket::GetMaxSupportedSSLVersion()),
24 version_fallback_min(kDefaultSSLVersionFallbackMin),
25 channel_id_enabled(true),
26 false_start_enabled(true),
27 signed_cert_timestamps_enabled(true),
28 require_forward_secrecy(false),
29 send_client_cert(false),
30 verify_ev_cert(false),
31 version_fallback(false),
32 cert_io_enabled(true),
33 fastradio_padding_enabled(false),
34 fastradio_padding_eligible(false) {
35 }
36
37 SSLConfig::~SSLConfig() {}
38
39 bool SSLConfig::IsAllowedBadCert(X509Certificate* cert,
40 CertStatus* cert_status) const {
41 std::string der_cert;
42 if (!X509Certificate::GetDEREncoded(cert->os_cert_handle(), &der_cert))
43 return false;
44 return IsAllowedBadCert(der_cert, cert_status);
45 }
46
47 bool SSLConfig::IsAllowedBadCert(const base::StringPiece& der_cert,
48 CertStatus* cert_status) const {
49 for (size_t i = 0; i < allowed_bad_certs.size(); ++i) {
50 if (der_cert == allowed_bad_certs[i].der_cert) {
51 if (cert_status)
52 *cert_status = allowed_bad_certs[i].cert_status;
53 return true;
54 }
55 }
56 return false;
57 }
58
59 } // namespace net
OLDNEW
« no previous file with comments | « net/ssl/ssl_config.h ('k') | net/ssl/ssl_config_service.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698