| // Copyright (c) 2008-2009 The Chromium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef NET_BASE_CERT_VERIFIER_H_ |
| #define NET_BASE_CERT_VERIFIER_H_ |
| #pragma once |
| |
| #include <string> |
| |
| #include "base/basictypes.h" |
| #include "base/ref_counted.h" |
| #include "net/base/completion_callback.h" |
| |
| namespace net { |
| |
| class CertVerifyResult; |
| class X509Certificate; |
| |
| // This class represents the task of verifying a certificate. It can only |
| // verify a single certificate at a time, so if you need to verify multiple |
| // certificates at the same time, you will need to allocate a CertVerifier |
| // object for each certificate. |
| // |
| class CertVerifier { |
| public: |
| CertVerifier(); |
| |
| // If a completion callback is pending when the verifier is destroyed, the |
| // certificate verification is cancelled, and the completion callback will |
| // not be called. |
| ~CertVerifier(); |
| |
| // Verifies the given certificate against the given hostname. Returns OK if |
| // successful or an error code upon failure. |
| // |
| // The |*verify_result| structure, including the |verify_result->cert_status| |
| // bitmask, is always filled out regardless of the return value. If the |
| // certificate has multiple errors, the corresponding status flags are set in |
| // |verify_result->cert_status|, and the error code for the most serious |
| // error is returned. |
| // |
| // |flags| is bitwise OR'd of X509Certificate::VerifyFlags. |
| // If VERIFY_REV_CHECKING_ENABLED is set in |flags|, certificate revocation |
| // checking is performed. |
| // |
| // If VERIFY_EV_CERT is set in |flags| too, EV certificate verification is |
| // performed. If |flags| is VERIFY_EV_CERT (that is, |
| // VERIFY_REV_CHECKING_ENABLED is not set), EV certificate verification will |
| // not be performed. |
| // |
| // When callback is null, the operation completes synchronously. |
| // |
| // When callback is non-null, ERR_IO_PENDING is returned if the operation |
| // could not be completed synchronously, in which case the result code will |
| // be passed to the callback when available. |
| // |
| int Verify(X509Certificate* cert, const std::string& hostname, |
| int flags, CertVerifyResult* verify_result, |
| CompletionCallback* callback); |
| |
| private: |
| class Request; |
| friend class Request; |
| scoped_refptr<Request> request_; |
| DISALLOW_COPY_AND_ASSIGN(CertVerifier); |
| }; |
| |
| } // namespace net |
| |
| #endif // NET_BASE_CERT_VERIFIER_H_ |