summaryrefslogtreecommitdiffstats
path: root/net/base/dnssec_chain_verifier.h
diff options
context:
space:
mode:
Diffstat (limited to 'net/base/dnssec_chain_verifier.h')
-rw-r--r--net/base/dnssec_chain_verifier.h8
1 files changed, 8 insertions, 0 deletions
diff --git a/net/base/dnssec_chain_verifier.h b/net/base/dnssec_chain_verifier.h
index 2556564..096dea1 100644
--- a/net/base/dnssec_chain_verifier.h
+++ b/net/base/dnssec_chain_verifier.h
@@ -5,6 +5,7 @@
#ifndef NET_BASE_DNSSEC_CHAIN_VERIFIER_H_
#define NET_BASE_DNSSEC_CHAIN_VERIFIER_H_
+#include <map>
#include <string>
#include <vector>
@@ -54,6 +55,13 @@ class DNSSECChainVerifier {
// this after Verify has returned OK.
const std::vector<base::StringPiece>& rrdatas() const;
+ // ParseTLSTXTRecord parses a TXT record which should contain TLS fingerprint
+ // information.
+ // rrdata: the raw TXT RRDATA from DNS
+ // returns: an empty map on failure, or the result of the parse.
+ static std::map<std::string, std::string>
+ ParseTLSTXTRecord(base::StringPiece rrdata);
+
// Exposed for testing only.
static unsigned MatchingLabels(base::StringPiece a,
base::StringPiece b);