net/cert/cert_verify_proc_nss.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef NET_CERT_CERT_VERIFY_PROC_NSS_H_
   6 #define NET_CERT_CERT_VERIFY_PROC_NSS_H_
   7
   8 #include <certt.h>
   9
  10 #include "net/base/net_export.h"
  11 #include "net/cert/cert_verify_proc.h"
  12
  13 namespace net {
  14
  15 // Performs certificate path construction and validation using NSS's libpkix.
  16 class NET_EXPORT_PRIVATE CertVerifyProcNSS : public CertVerifyProc {
  17  public:
  18   CertVerifyProcNSS();
  19
  20   bool SupportsAdditionalTrustAnchors() const override;
  21
  22  protected:
  23   ~CertVerifyProcNSS() override;
  24
  25   // Like VerifyInternal, but adds a |chain_verify_callback| to override trust
  26   // decisions. See the documentation for CERTChainVerifyCallback and
  27   // CERTChainVerifyCallbackFunc in NSS's lib/certdb/certt.h.
  28   int VerifyInternalImpl(X509Certificate* cert,
  29                          const std::string& hostname,
  30                          int flags,
  31                          CRLSet* crl_set,
  32                          const CertificateList& additional_trust_anchors,
  33                          CERTChainVerifyCallback* chain_verify_callback,
  34                          CertVerifyResult* verify_result);
  35
  36  private:
  37   int VerifyInternal(X509Certificate* cert,
  38                      const std::string& hostname,
  39                      int flags,
  40                      CRLSet* crl_set,
  41                      const CertificateList& additional_trust_anchors,
  42                      CertVerifyResult* verify_result) override;
  43 };
  44
  45 }  // namespace net
  46
  47 #endif  // NET_CERT_CERT_VERIFY_PROC_NSS_H_