diff options
| author | ukai@chromium.org <ukai@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-06-23 06:35:05 +0000 |
|---|---|---|
| committer | ukai@chromium.org <ukai@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2009-06-23 06:35:05 +0000 |
| commit | f6555adcd5160d011ea1dc613fa0387dcddd0b6b (patch) | |
| tree | 4020b1afb10822b10da786a4ef8f8522c7e9b0d2 /net/base/cert_verifier.h | |
| parent | 36a784c511d467509d9a70a76b0865f60380ec37 (diff) | |
| download | chromium_src-f6555adcd5160d011ea1dc613fa0387dcddd0b6b.zip chromium_src-f6555adcd5160d011ea1dc613fa0387dcddd0b6b.tar.gz chromium_src-f6555adcd5160d011ea1dc613fa0387dcddd0b6b.tar.bz2 | |
Use LOAD_VERIFY_EV_CERT to verify EV-ness in Verify().
If LOAD_VERIFY_EV_CERT is requested on load_flags
and revokation checking is performed, Verify() peforms
EV certificate verification as well, and sets
CERT_STATUS_IS_EV in verify_result.
Eliminate X509Certificate::IsEV()
BUG=3592
TEST=net_unittests with ALLOW_EXTERNAL_ACCESS=1, \
visit https://www.thawte.com/ and shows EV info.
Review URL: http://codereview.chromium.org/125120
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@19011 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base/cert_verifier.h')
| -rw-r--r-- | net/base/cert_verifier.h | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/net/base/cert_verifier.h b/net/base/cert_verifier.h index 051bc25..6a946d2 100644 --- a/net/base/cert_verifier.h +++ b/net/base/cert_verifier.h @@ -42,8 +42,14 @@ class CertVerifier { // |verify_result->cert_status|, and the error code for the most serious // error is returned. // - // If |rev_checking_enabled| is true, certificate revocation checking is - // performed. + // |flags| is bitwise OR'd of X509Certificate::VerifyFlags. + // If VERIFY_REV_CHECKING_ENABLED is set in |flags|, certificate revocation + // checking is performed. + // + // If VERIFY_EV_CERT is set in |flags| too, EV certificate verification is + // performed. If |flags| is VERIFY_EV_CERT (that is, + // VERIFY_REV_CHECKING_ENABLED is not set), EV certificate verification will + // not be performed. // // When callback is null, the operation completes synchronously. // @@ -52,7 +58,7 @@ class CertVerifier { // be passed to the callback when available. // int Verify(X509Certificate* cert, const std::string& hostname, - bool rev_checking_enabled, CertVerifyResult* verify_result, + int flags, CertVerifyResult* verify_result, CompletionCallback* callback); private: |