[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 1 | // Copyright 2013 The Chromium Authors. All rights reserved. |
| 2 | // Use of this source code is governed by a BSD-style license that can be |
| 3 | // found in the LICENSE file. |
| 4 | |
| 5 | #ifndef NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ |
| 6 | #define NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ |
| 7 | |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 8 | #include <set> |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 9 | #include <string> |
| 10 | #include <vector> |
| 11 | |
| 12 | #include "base/basictypes.h" |
| 13 | #include "base/compiler_specific.h" |
| 14 | #include "base/memory/scoped_ptr.h" |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 15 | #include "net/base/net_export.h" |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 16 | #include "net/cert/cert_verify_result.h" |
rtenneti | 052774e | 2015-11-24 21:00:12 | [diff] [blame^] | 17 | #include "net/cert/ct_verify_result.h" |
[email protected] | c817c67 | 2014-03-21 22:25:34 | [diff] [blame] | 18 | #include "net/cert/x509_certificate.h" |
eroman | 87c53d6 | 2015-04-02 06:51:07 | [diff] [blame] | 19 | #include "net/log/net_log.h" |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 20 | #include "net/quic/crypto/proof_verifier.h" |
| 21 | |
| 22 | namespace net { |
| 23 | |
rsleevi | 9541f863 | 2015-07-31 00:07:00 | [diff] [blame] | 24 | class CertPolicyEnforcer; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 25 | class CertVerifier; |
rtenneti | 052774e | 2015-11-24 21:00:12 | [diff] [blame^] | 26 | class CTVerifier; |
[email protected] | 080b7793 | 2014-08-04 01:22:46 | [diff] [blame] | 27 | class TransportSecurityState; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 28 | |
[email protected] | 72e6599 | 2013-07-30 17:16:14 | [diff] [blame] | 29 | // ProofVerifyDetailsChromium is the implementation-specific information that a |
| 30 | // ProofVerifierChromium returns about a certificate verification. |
[email protected] | 92bc621d | 2014-07-29 21:42:13 | [diff] [blame] | 31 | class NET_EXPORT_PRIVATE ProofVerifyDetailsChromium |
| 32 | : public ProofVerifyDetails { |
[email protected] | 72e6599 | 2013-07-30 17:16:14 | [diff] [blame] | 33 | public: |
[email protected] | 92bc621d | 2014-07-29 21:42:13 | [diff] [blame] | 34 | |
| 35 | // ProofVerifyDetails implementation |
dcheng | b03027d | 2014-10-21 12:00:20 | [diff] [blame] | 36 | ProofVerifyDetails* Clone() const override; |
[email protected] | 92bc621d | 2014-07-29 21:42:13 | [diff] [blame] | 37 | |
[email protected] | 72e6599 | 2013-07-30 17:16:14 | [diff] [blame] | 38 | CertVerifyResult cert_verify_result; |
rtenneti | 052774e | 2015-11-24 21:00:12 | [diff] [blame^] | 39 | ct::CTVerifyResult ct_verify_result; |
[email protected] | 080b7793 | 2014-08-04 01:22:46 | [diff] [blame] | 40 | |
| 41 | // pinning_failure_log contains a message produced by |
martijn | c0d6b62 | 2015-06-30 19:14:40 | [diff] [blame] | 42 | // TransportSecurityState::PKPState::CheckPublicKeyPins in the event of a |
[email protected] | 080b7793 | 2014-08-04 01:22:46 | [diff] [blame] | 43 | // pinning failure. It is a (somewhat) human-readable string. |
| 44 | std::string pinning_failure_log; |
[email protected] | 72e6599 | 2013-07-30 17:16:14 | [diff] [blame] | 45 | }; |
| 46 | |
[email protected] | c817c67 | 2014-03-21 22:25:34 | [diff] [blame] | 47 | // ProofVerifyContextChromium is the implementation-specific information that a |
| 48 | // ProofVerifierChromium needs in order to log correctly. |
| 49 | struct ProofVerifyContextChromium : public ProofVerifyContext { |
| 50 | public: |
rtenneti | a75df62 | 2015-06-21 23:59:50 | [diff] [blame] | 51 | ProofVerifyContextChromium(int cert_verify_flags, const BoundNetLog& net_log) |
| 52 | : cert_verify_flags(cert_verify_flags), net_log(net_log) {} |
[email protected] | c817c67 | 2014-03-21 22:25:34 | [diff] [blame] | 53 | |
rtenneti | a75df62 | 2015-06-21 23:59:50 | [diff] [blame] | 54 | int cert_verify_flags; |
[email protected] | c817c67 | 2014-03-21 22:25:34 | [diff] [blame] | 55 | BoundNetLog net_log; |
| 56 | }; |
| 57 | |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 58 | // ProofVerifierChromium implements the QUIC ProofVerifier interface. It is |
| 59 | // capable of handling multiple simultaneous requests. |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 60 | class NET_EXPORT_PRIVATE ProofVerifierChromium : public ProofVerifier { |
| 61 | public: |
[email protected] | 080b7793 | 2014-08-04 01:22:46 | [diff] [blame] | 62 | ProofVerifierChromium(CertVerifier* cert_verifier, |
rsleevi | 9541f863 | 2015-07-31 00:07:00 | [diff] [blame] | 63 | CertPolicyEnforcer* cert_policy_enforcer, |
rtenneti | 052774e | 2015-11-24 21:00:12 | [diff] [blame^] | 64 | TransportSecurityState* transport_security_state, |
| 65 | CTVerifier* cert_transparency_verifier); |
dcheng | b03027d | 2014-10-21 12:00:20 | [diff] [blame] | 66 | ~ProofVerifierChromium() override; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 67 | |
| 68 | // ProofVerifier interface |
dcheng | b03027d | 2014-10-21 12:00:20 | [diff] [blame] | 69 | QuicAsyncStatus VerifyProof(const std::string& hostname, |
| 70 | const std::string& server_config, |
| 71 | const std::vector<std::string>& certs, |
rjshade | c86dbfa | 2015-11-12 20:16:25 | [diff] [blame] | 72 | const std::string& cert_sct, |
dcheng | b03027d | 2014-10-21 12:00:20 | [diff] [blame] | 73 | const std::string& signature, |
| 74 | const ProofVerifyContext* verify_context, |
| 75 | std::string* error_details, |
| 76 | scoped_ptr<ProofVerifyDetails>* verify_details, |
| 77 | ProofVerifierCallback* callback) override; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 78 | |
| 79 | private: |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 80 | class Job; |
[email protected] | 0cceb92 | 2014-07-01 02:00:56 | [diff] [blame] | 81 | typedef std::set<Job*> JobSet; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 82 | |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 83 | void OnJobComplete(Job* job); |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 84 | |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 85 | // Set owning pointers to active jobs. |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 86 | JobSet active_jobs_; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 87 | |
[email protected] | 5c78ce6 | 2014-03-13 19:48:01 | [diff] [blame] | 88 | // Underlying verifier used to verify certificates. |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 89 | CertVerifier* const cert_verifier_; |
rsleevi | 9541f863 | 2015-07-31 00:07:00 | [diff] [blame] | 90 | CertPolicyEnforcer* const cert_policy_enforcer_; |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 91 | |
[email protected] | 2bfa5cf | 2014-08-21 01:24:51 | [diff] [blame] | 92 | TransportSecurityState* const transport_security_state_; |
rtenneti | 052774e | 2015-11-24 21:00:12 | [diff] [blame^] | 93 | CTVerifier* const cert_transparency_verifier_; |
[email protected] | 080b7793 | 2014-08-04 01:22:46 | [diff] [blame] | 94 | |
[email protected] | 2662ed56 | 2013-07-03 10:27:46 | [diff] [blame] | 95 | DISALLOW_COPY_AND_ASSIGN(ProofVerifierChromium); |
| 96 | }; |
| 97 | |
| 98 | } // namespace net |
| 99 | |
| 100 | #endif // NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_ |