1 files changed, 74 insertions, 0 deletions
diff --git a/net/http/cert_status_cache.h b/net/http/cert_status_cache.h
new file mode 100644
index 0000000..4f5f7b9
--- /dev/null
+++ b/net/http/cert_status_cache.h
@@ -0,0 +1,74 @@
+// Copyright 2008, Google Inc.
+// All rights reserved.
+//
+// Redistribution and use in source and binary forms, with or without
+// modification, are permitted provided that the following conditions are
+// met:
+//
+//    * Redistributions of source code must retain the above copyright
+// notice, this list of conditions and the following disclaimer.
+//    * Redistributions in binary form must reproduce the above
+// copyright notice, this list of conditions and the following disclaimer
+// in the documentation and/or other materials provided with the
+// distribution.
+//    * Neither the name of Google Inc. nor the names of its
+// contributors may be used to endorse or promote products derived from
+// this software without specific prior written permission.
+//
+// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+// A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+// OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+// LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+// DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+// THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+#ifndef NET_HTTP_CERT_STATUS_CACHE_H
+#define NET_HTTP_CERT_STATUS_CACHE_H
+
+#include <vector>
+#include <map>
+
+#include "net/base/x509_certificate.h"
+
+// This class is used to remember the status of certificates, as WinHTTP
+// does not report errors once it has been told to ignore them.
+// It only exists because of the WinHTTP bug.
+// IMPORTANT: this class is not thread-safe.
+
+namespace net {
+
+class CertStatusCache {
+ public:
+  CertStatusCache();
+  ~CertStatusCache();
+
+  int GetCertStatus(const X509Certificate& cert,
+                    const std::string& host_name) const;
+  void SetCertStatus(const X509Certificate& cert,
+                     const std::string& host_name,
+                     int status);
+
+ private:
+  typedef std::map<X509Certificate::Fingerprint, int,
+                   X509Certificate::FingerprintLessThan> StatusMap;
+  typedef std::set<std::string> StringSet;
+  typedef std::map<X509Certificate::Fingerprint, StringSet*,
+                   X509Certificate::FingerprintLessThan> HostMap;
+
+  StatusMap fingerprint_to_cert_status_;
+
+  // We keep a map for each cert to the list of host names that have been marked
+  // with the CN invalid error, as that error is host name specific.
+  HostMap fingerprint_to_bad_hosts_;
+
+  DISALLOW_EVIL_CONSTRUCTORS(CertStatusCache);
+};
+
+}  // namespace net
+
+#endif  // NET_HTTP_CERT_STATUS_CACHE_H