| /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- |
| * |
| * ***** BEGIN LICENSE BLOCK ***** |
| * Version: MPL 1.1/GPL 2.0/LGPL 2.1 |
| * |
| * The contents of this file are subject to the Mozilla Public License Version |
| * 1.1 (the "License"); you may not use this file except in compliance with |
| * the License. You may obtain a copy of the License at |
| * http://www.mozilla.org/MPL/ |
| * |
| * Software distributed under the License is distributed on an "AS IS" basis, |
| * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License |
| * for the specific language governing rights and limitations under the |
| * License. |
| * |
| * The Original Code is mozilla.org code. |
| * |
| * The Initial Developer of the Original Code is |
| * Red Hat, Inc. |
| * Portions created by the Initial Developer are Copyright (C) 2006 |
| * the Initial Developer. All Rights Reserved. |
| * |
| * Contributor(s): |
| * Kai Engert <kengert@redhat.com> |
| * |
| * Alternatively, the contents of this file may be used under the terms of |
| * either the GNU General Public License Version 2 or later (the "GPL"), or |
| * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), |
| * in which case the provisions of the GPL or the LGPL are applicable instead |
| * of those above. If you wish to allow use of your version of this file only |
| * under the terms of either the GPL or the LGPL, and not to allow others to |
| * use your version of this file under the terms of the MPL, indicate your |
| * decision by deleting the provisions above and replace them with the notice |
| * and other provisions required by the GPL or the LGPL. If you do not delete |
| * the provisions above, a recipient may use your version of this file under |
| * the terms of any one of the MPL, the GPL or the LGPL. |
| * |
| * ***** END LICENSE BLOCK ***** */ |
| |
| #include "nsISupports.idl" |
| |
| interface nsIArray; |
| interface nsIX509Cert; |
| interface nsISSLStatus; |
| |
| %{C++ |
| #define NS_RECENTBADCERTS_CONTRACTID "@mozilla.org/security/recentbadcerts;1" |
| %} |
| |
| /** |
| * This represents a global list of recently seen bad ssl status |
| * including the bad cert. |
| * The implementation will decide how many entries it will hold, |
| * the number is expected to be small. |
| */ |
| [scriptable, uuid(a5ae8b05-a76e-408f-b0ba-02a831265749)] |
| interface nsIRecentBadCertsService : nsISupports { |
| |
| /** |
| * Retrieve the recently seen bad ssl status for the given hostname:port. |
| * If no SSL cert was recently seen for the given hostname:port, return null. |
| * If a good cert was seen for the given hostname:port, return null. |
| * |
| * @param aHostNameWithPort The host:port whose entry should be tested |
| * @return null or a recently seen bad ssl status with cert |
| */ |
| nsISSLStatus getRecentBadCert(in AString aHostNameWithPort); |
| |
| /** |
| * A bad certificate that should be remembered by the service. |
| * Will be added as the most recently seen cert. |
| * The service may forget older entries to make room for the new one. |
| * |
| * @param aHostNameWithPort The host:port whose entry should be tested |
| * @param aCert The bad ssl status with certificate |
| */ |
| void addBadCert(in AString aHostNameWithPort, |
| in nsISSLStatus aStatus); |
| }; |