From b2471359cfbd4f7b9621ba2542b947841bfadb27 Mon Sep 17 00:00:00 2001 From: "agl@chromium.org" Date: Wed, 11 Aug 2010 19:50:02 +0000 Subject: net: add embedded DNSSEC chain support. Now that the DNS root is signed we have a good trust path in several TLDs (including .org). This patch enables self-signed certificates to include a DNSSEC chain as an extension which proves a CERT record, containing the fingerprint of the public key. The format of the chain is still undecided, so this is only enabled with --enable-dnssec-certs. BUG=none TEST=net_unittests http://codereview.chromium.org/2806076 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@55771 0039d316-1c4b-4281-b951-d872f2087c98 --- net/net.gyp | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) (limited to 'net/net.gyp') diff --git a/net/net.gyp b/net/net.gyp index fe7545c..d69240f 100644 --- a/net/net.gyp +++ b/net/net.gyp @@ -53,6 +53,11 @@ 'base/directory_lister.h', 'base/dns_reload_timer.cc', 'base/dns_reload_timer.h', + 'base/dnssec_chain_verifier.cc', + 'base/dnssec_chain_verifier.h', + 'base/dnssec_keyset.cc', + 'base/dnssec_keyset.h', + 'base/dnssec_proto.h', 'base/dns_util.cc', 'base/dns_util.h', 'base/dnsrr_resolver.cc', @@ -205,8 +210,7 @@ ], [ 'OS == "win"', { 'dependencies': [ - # For nss_memio.{c,h}, which require only NSPR. - '../third_party/nss/nss.gyp:nspr', + '../third_party/nss/nss.gyp:nss', 'tld_cleanup', ], }, @@ -221,8 +225,7 @@ ], [ 'OS == "mac"', { 'dependencies': [ - # For nss_memio.{c,h}, which require only NSPR. - '../third_party/nss/nss.gyp:nspr', + '../third_party/nss/nss.gyp:nss', ], 'link_settings': { 'libraries': [ @@ -665,6 +668,7 @@ 'base/cookie_monster_unittest.cc', 'base/data_url_unittest.cc', 'base/directory_lister_unittest.cc', + 'base/dnssec_unittest.cc', 'base/dns_util_unittest.cc', 'base/dnsrr_resolver_unittest.cc', 'base/escape_unittest.cc', -- cgit v1.1