blob: c51a024eeb281bf515f8539df7ef71202ddfbddd [file] [log] [blame]
[email protected]2662ed562013-07-03 10:27:461// Copyright 2013 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#ifndef NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
6#define NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_
7
[email protected]5c78ce62014-03-13 19:48:018#include <set>
[email protected]2662ed562013-07-03 10:27:469#include <string>
10#include <vector>
11
12#include "base/basictypes.h"
13#include "base/compiler_specific.h"
14#include "base/memory/scoped_ptr.h"
[email protected]2662ed562013-07-03 10:27:4615#include "net/base/net_export.h"
16#include "net/base/net_log.h"
17#include "net/cert/cert_verify_result.h"
[email protected]c817c672014-03-21 22:25:3418#include "net/cert/x509_certificate.h"
[email protected]2662ed562013-07-03 10:27:4619#include "net/quic/crypto/proof_verifier.h"
20
21namespace net {
22
[email protected]2662ed562013-07-03 10:27:4623class CertVerifier;
[email protected]080b77932014-08-04 01:22:4624class TransportSecurityState;
[email protected]2662ed562013-07-03 10:27:4625
[email protected]72e65992013-07-30 17:16:1426// ProofVerifyDetailsChromium is the implementation-specific information that a
27// ProofVerifierChromium returns about a certificate verification.
[email protected]92bc621d2014-07-29 21:42:1328class NET_EXPORT_PRIVATE ProofVerifyDetailsChromium
29 : public ProofVerifyDetails {
[email protected]72e65992013-07-30 17:16:1430 public:
[email protected]92bc621d2014-07-29 21:42:1331
32 // ProofVerifyDetails implementation
dchengb03027d2014-10-21 12:00:2033 ProofVerifyDetails* Clone() const override;
[email protected]92bc621d2014-07-29 21:42:1334
[email protected]72e65992013-07-30 17:16:1435 CertVerifyResult cert_verify_result;
[email protected]080b77932014-08-04 01:22:4636
37 // pinning_failure_log contains a message produced by
38 // TransportSecurityState::DomainState::CheckPublicKeyPins in the event of a
39 // pinning failure. It is a (somewhat) human-readable string.
40 std::string pinning_failure_log;
[email protected]72e65992013-07-30 17:16:1441};
42
[email protected]c817c672014-03-21 22:25:3443// ProofVerifyContextChromium is the implementation-specific information that a
44// ProofVerifierChromium needs in order to log correctly.
45struct ProofVerifyContextChromium : public ProofVerifyContext {
46 public:
47 explicit ProofVerifyContextChromium(const BoundNetLog& net_log)
48 : net_log(net_log) {}
49
50 BoundNetLog net_log;
51};
52
[email protected]5c78ce62014-03-13 19:48:0153// ProofVerifierChromium implements the QUIC ProofVerifier interface. It is
54// capable of handling multiple simultaneous requests.
[email protected]2662ed562013-07-03 10:27:4655class NET_EXPORT_PRIVATE ProofVerifierChromium : public ProofVerifier {
56 public:
[email protected]080b77932014-08-04 01:22:4657 ProofVerifierChromium(CertVerifier* cert_verifier,
58 TransportSecurityState* transport_security_state);
dchengb03027d2014-10-21 12:00:2059 ~ProofVerifierChromium() override;
[email protected]2662ed562013-07-03 10:27:4660
61 // ProofVerifier interface
dchengb03027d2014-10-21 12:00:2062 QuicAsyncStatus VerifyProof(const std::string& hostname,
63 const std::string& server_config,
64 const std::vector<std::string>& certs,
65 const std::string& signature,
66 const ProofVerifyContext* verify_context,
67 std::string* error_details,
68 scoped_ptr<ProofVerifyDetails>* verify_details,
69 ProofVerifierCallback* callback) override;
[email protected]2662ed562013-07-03 10:27:4670
71 private:
[email protected]5c78ce62014-03-13 19:48:0172 class Job;
[email protected]0cceb922014-07-01 02:00:5673 typedef std::set<Job*> JobSet;
[email protected]2662ed562013-07-03 10:27:4674
[email protected]5c78ce62014-03-13 19:48:0175 void OnJobComplete(Job* job);
[email protected]2662ed562013-07-03 10:27:4676
[email protected]5c78ce62014-03-13 19:48:0177 // Set owning pointers to active jobs.
[email protected]5c78ce62014-03-13 19:48:0178 JobSet active_jobs_;
[email protected]2662ed562013-07-03 10:27:4679
[email protected]5c78ce62014-03-13 19:48:0180 // Underlying verifier used to verify certificates.
[email protected]2662ed562013-07-03 10:27:4681 CertVerifier* const cert_verifier_;
[email protected]2662ed562013-07-03 10:27:4682
[email protected]2bfa5cf2014-08-21 01:24:5183 TransportSecurityState* const transport_security_state_;
[email protected]080b77932014-08-04 01:22:4684
[email protected]2662ed562013-07-03 10:27:4685 DISALLOW_COPY_AND_ASSIGN(ProofVerifierChromium);
86};
87
88} // namespace net
89
90#endif // NET_QUIC_CRYPTO_PROOF_VERIFIER_CHROMIUM_H_