diff options
| author | snej@chromium.org <snej@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-24 19:01:54 +0000 |
|---|---|---|
| committer | snej@chromium.org <snej@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-02-24 19:01:54 +0000 |
| commit | 699cab9ba3a0fcb9dd7f41a86cf008d34b96de1b (patch) | |
| tree | 870ff656500a6cfc2a24faf6895b3fac67d21660 /net/base/x509_certificate.h | |
| parent | 39b3349ed1694810b454f9af793c8c9bb0a3bd5d (diff) | |
| download | chromium_src-699cab9ba3a0fcb9dd7f41a86cf008d34b96de1b.zip chromium_src-699cab9ba3a0fcb9dd7f41a86cf008d34b96de1b.tar.gz chromium_src-699cab9ba3a0fcb9dd7f41a86cf008d34b96de1b.tar.bz2 | |
Mac client-side SSL cert improvements.
Allow Netscape-style client certs.
Remember which identity the user chooses for a domain, and put it at the top of the list next time.
BUG=36316,36446
TEST=none
Review URL: http://codereview.chromium.org/651090
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@39904 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/base/x509_certificate.h')
| -rw-r--r-- | net/base/x509_certificate.h | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/net/base/x509_certificate.h b/net/base/x509_certificate.h index b9a3995..f3f3fea 100644 --- a/net/base/x509_certificate.h +++ b/net/base/x509_certificate.h @@ -225,15 +225,22 @@ class X509Certificate : public base::RefCountedThreadSafe<X509Certificate> { #endif #if defined(OS_MACOSX) + // Does this certificate's usage allow SSL client authentication? + bool SupportsSSLClientAuth() const; + // Creates a security policy for SSL client certificates. static OSStatus CreateSSLClientPolicy(SecPolicyRef* outPolicy); // Adds all available SSL client identity certs to the given vector. + // |server_domain| is a hint for which domain the cert is to be sent to + // (a cert previously specified as the default for that domain will be given + // precedence and returned first in the output vector.) static bool GetSSLClientCertificates( + const std::string& server_domain, std::vector<scoped_refptr<X509Certificate> >* certs); // Creates the chain of certs to use for this client identity cert. - CFArrayRef CreateClientCertificateChain(); + CFArrayRef CreateClientCertificateChain() const; #endif // Verifies the certificate against the given hostname. Returns OK if |