net/cert/root_store.proto - chromium/src - Git at Google

 // Copyright 2021 The Chromium Authors
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.

 // Proto definitions supporting the Chrome Root Store.
 // This file should be manually kept in sync with the corresponding google3
 // file.

 syntax = "proto3";

 package chrome_root_store;

 // Specifies a set of constraints, all of which that have values must be
 // satisfied for the ConstraintSet to be satisfied.
 message ConstraintSet {
   // The leaf certificate must have at least one valid SCT timestamp that is
   // not after the specified value, specified in seconds since the unix epoch.
   optional int64 sct_not_after_sec = 1;

   // The leaf certificate must have at least one valid SCT timestamp and all
   // valid SCT timestamps must be after the specified value, specified in
   // seconds since the unix epoch.
   optional int64 sct_all_after_sec = 2;

   // The browser version must be equal to or greater than the specified version.
   // Specified as a dotted version string, for example, "121.0.6167.160". A
   // partial version is also allowed, for example min_version="121" will match
   // any M-121 version or later.
   optional string min_version = 3;

   // The browser version must be less than the specified version.
   // For example, max_version_exclusive="122" will match any M-121 or earlier
   // version, and will not match any M-122 version.
   optional string max_version_exclusive = 4;

   // All DNS names in the leaf certificate subjectAltNames must fall within the
   // subtrees defined by `permitted_dns_names`. The constraints are interpereted
   // as described in RFC 5280 section 4.2.1.10.
   repeated string permitted_dns_names = 5;

   // `enforce_anchor_expiry` and `enforce_anchor_constraints` were briefly
   // represented in this message, but moved to TrustAnchor.
   reserved 6, 7;

   // A leaf MTC chaining to a MtcAnchor with this constraint must not have an
   // index higher than the specified value. Ignored if specified on a classical
   // TrustAnchor.
   optional uint64 index_not_after = 8;

   // A leaf MTC chaining to a MtcAnchor with this constraint must have an index
   // higher than the specified value. Ignored if specified on a classical
   // TrustAnchor.
   optional uint64 index_after = 9;

   // The leaf certificate validity notBefore time must not be after the
   // specified value, specified in seconds since the unix epoch.
   optional int64 validity_starts_not_after_sec = 10;

   // The leaf certificate validity notBefore time must be after the specified
   // value, specified in seconds since the unix epoch.
   optional int64 validity_starts_after_sec = 11;
 }

 message TrustAnchor {
   // The human-editable textproto version of the root store references roots in
   // a separate file by SHA-256 hash for convenience. It is converted to the DER
   // representation as part of the build process.
   oneof certificate {
     bytes der = 1;
     string sha256_hex = 2;
   }

   // OID should be expressed as dotted-decimal text (e.g. "1.3.159.1.17.1")
   repeated string ev_policy_oids = 3;

   // If not empty, the anchor is only trusted if at least one of the
   // ConstraintSets is satisfied.
   repeated ConstraintSet constraints = 4;

   // Human-readable display name used to identify the certificate.
   optional string display_name = 5;

   // If true, indicates that this certificate is trusted to issue QWACs.
   optional bool eutl = 6;

   reserved 7;

   // When set to true, Chrome will enforce certificate expiry for this
   // TrustAnchor using the notBefore and notAfter from the corresponding
   // certificate.
   optional bool enforce_anchor_expiry = 8;

   // When set to true, Chrome will enforce X.509 constraints for this
   // TrustAnchor using the constraints expressed in the corresponding
   // certificate.
   optional bool enforce_anchor_constraints = 9;

   // If true, indicates that this certificate is a trust anchor for TLS
   // connections.
   optional bool tls_trust_anchor = 10;

   // A unique identifier for a trust anchor, in binary representation.
   // Specified in
   // https://www.ietf.org/archive/id/draft-ietf-tls-trust-anchor-ids-00.html,
   // Trust Anchor IDs are represented as relative OID suffixes of the Private
   // Enterprise Number (PEN) OID prefix of "1.3.6.1.4.1.".
   optional bytes trust_anchor_id = 11;

   // A stable identifier for this anchor, or if it is an intermediate, the
   // identifier of the root that issued it. IDs should not be changed, and
   // should not be reused except for the trusted intermediate case. The
   // identifiers 0, 1 and 2 are reserved and should not be used.
   optional int32 crs_root_id = 12;
 }

 // TODO(crbug.com/520071497): Remove once the Cloudflare experiment is complete.
 message MtcAnchor {
   // The log id is a trust anchor id in binary representation.
   optional bytes log_id = 1;

   // If not empty, the anchor is only trusted if at least one of the
   // ConstraintSets is satisfied.
   repeated ConstraintSet constraints = 2;

   // If true, indicates that this MTC is a trust anchor for TLS connections.
   optional bool tls_trust_anchor = 3;

   // A stable identifier for this anchor. IDs should not be changed, and should
   // not be reused. The identifiers 0, 1 and 2 are reserved and should not be
   // used.
   optional int32 crs_root_id = 4;

   // TODO(crbug.com/452983502): Add co-signer configuration.
   //
   // In the current implementation, MTC anchors can only be used through the
   // signatureless path, and the trusted subtrees are configured separately in
   // MtcAnchorData. This MtcAnchor will be ignored unless a MtcAnchorData with
   // matching log_id is also present.
 }

 // Message storing a complete Chrome Root Store.
 message RootStore {
   // Certificates in this list are expected to have |tls_trust_anchor| unset,
   // because all |trust_anchors| are TLS trust anchors. This field exists as a
   // separate, TLS-trust-anchor-only list from |additional_certs| just for
   // historical reasons.
   repeated TrustAnchor trust_anchors = 1;

   // Major version # of the Chrome Root Store. It is assumed that if
   // root_store_1.version_major > root_store_2.version_major, then root_store_1
   // is newer and should be preferred over root_store_2.
   int64 version_major = 2;

   // Additional certificates that are shipped as part of the Chrome Root Store
   // but convey different trust information than those in trust_anchors.
   repeated TrustAnchor additional_certs = 3;

   // Merkle Tree Certificate anchors. Like `additional_certs`, entries are not
   // trusted for any purpose unless explicitly specified in the MtcAnchor (for
   // example by setting `tls_trust_anchor=true`).
   repeated MtcAnchor mtc_anchors = 4;
 }

 message TrustAnchorIdRange {
   reserved 1;

   // The minimum supported landmark number.
   optional uint64 min_active_landmark_inclusive = 2;

   // The maximum supported landmark number, inclusive.
   optional uint64 last_landmark_inclusive = 3;
 }

 message MtcSubTree {
   // The start index of the range covered by this subtree.
   optional uint64 start_inclusive = 1;

   // The end index, exclusive, of the range covered by this subtree.
   optional uint64 end_exclusive = 2;

   // The merkle tree hash for this subtree.
   optional bytes hash = 3;
 }

 // Represents a range of Merkle Tree Certificate serials.
 // For the Cloudflare experiment, these are indices in the log instead of
 // serials as defined in the MTC spec.
 message MtcIndexRange {
   // The start index of the range.
   optional uint64 start_inclusive = 1;

   // The end index, exclusive, of the range.
   optional uint64 end_exclusive = 2;
 }

 message MtcLogData {
   // Log number for this MTC log. The log ID for this log is constructed by
   // concatenating the CA ID, the constant 0 and this number.
   // This is defined as 16 bits in the MTC spec, but protobuf doesn't have a 16
   // bit integer type.
   optional uint32 log_number = 1;

   // The range of landmark numbers corresponding to `trusted_subtrees`,
   // sufficient for constructing the Trust Anchor ID(s) for
   // negotiating the use of landmark-relative certificates.
   optional TrustAnchorIdRange trusted_landmark_ids_range = 2;

   // Trusted subtrees that can be used for landmark-relative Merkle Tree
   // certificate verification.
   repeated MtcSubTree trusted_subtrees = 3;
 }

 message MtcAnchorData {
   reserved 1 to 3;

   // Ranges of Merkle Tree Certificate indices which are revoked.
   // Serial numbers contain information about the log number and cert index, so
   // this is tracked at the CA level rather than the log level.
   repeated MtcIndexRange revoked_indices = 4;

   // The CA ID in binary representation. This must match
   // the `base_id` for an issuer in the signer set, or this MtcAnchorData
   // will be ignored. (It is not an error for this to occur in practice, since
   // the MtcMetadata and ChromeRootStoreData are updated separately.)
   optional bytes ca_id = 5;

   // Data for each of the MTC logs for this MTC CA.
   repeated MtcLogData mtc_log_data = 6;
 }

 message MtcMetadata {
   // The time this data was generated, in seconds since the unix epoch.
   optional int64 update_time_seconds = 1;

   // Metadata for each of the supported MTC anchors.
   repeated MtcAnchorData mtc_anchor_data = 2;
 }
	// Copyright 2021 The Chromium Authors
	// Use of this source code is governed by a BSD-style license that can be
	// found in the LICENSE file.

	// Proto definitions supporting the Chrome Root Store.
	// This file should be manually kept in sync with the corresponding google3
	// file.

	syntax = "proto3";

	package chrome_root_store;

	// Specifies a set of constraints, all of which that have values must be
	// satisfied for the ConstraintSet to be satisfied.
	message ConstraintSet {
	// The leaf certificate must have at least one valid SCT timestamp that is
	// not after the specified value, specified in seconds since the unix epoch.
	optional int64 sct_not_after_sec = 1;

	// The leaf certificate must have at least one valid SCT timestamp and all
	// valid SCT timestamps must be after the specified value, specified in
	// seconds since the unix epoch.
	optional int64 sct_all_after_sec = 2;

	// The browser version must be equal to or greater than the specified version.
	// Specified as a dotted version string, for example, "121.0.6167.160". A
	// partial version is also allowed, for example min_version="121" will match
	// any M-121 version or later.
	optional string min_version = 3;

	// The browser version must be less than the specified version.
	// For example, max_version_exclusive="122" will match any M-121 or earlier
	// version, and will not match any M-122 version.
	optional string max_version_exclusive = 4;

	// All DNS names in the leaf certificate subjectAltNames must fall within the
	// subtrees defined by `permitted_dns_names`. The constraints are interpereted
	// as described in RFC 5280 section 4.2.1.10.
	repeated string permitted_dns_names = 5;

	// `enforce_anchor_expiry` and `enforce_anchor_constraints` were briefly
	// represented in this message, but moved to TrustAnchor.
	reserved 6, 7;

	// A leaf MTC chaining to a MtcAnchor with this constraint must not have an
	// index higher than the specified value. Ignored if specified on a classical
	// TrustAnchor.
	optional uint64 index_not_after = 8;

	// A leaf MTC chaining to a MtcAnchor with this constraint must have an index
	// higher than the specified value. Ignored if specified on a classical
	// TrustAnchor.
	optional uint64 index_after = 9;

	// The leaf certificate validity notBefore time must not be after the
	// specified value, specified in seconds since the unix epoch.
	optional int64 validity_starts_not_after_sec = 10;

	// The leaf certificate validity notBefore time must be after the specified
	// value, specified in seconds since the unix epoch.
	optional int64 validity_starts_after_sec = 11;
	}

	message TrustAnchor {
	// The human-editable textproto version of the root store references roots in
	// a separate file by SHA-256 hash for convenience. It is converted to the DER
	// representation as part of the build process.
	oneof certificate {
	bytes der = 1;
	string sha256_hex = 2;
	}

	// OID should be expressed as dotted-decimal text (e.g. "1.3.159.1.17.1")
	repeated string ev_policy_oids = 3;

	// If not empty, the anchor is only trusted if at least one of the
	// ConstraintSets is satisfied.
	repeated ConstraintSet constraints = 4;

	// Human-readable display name used to identify the certificate.
	optional string display_name = 5;

	// If true, indicates that this certificate is trusted to issue QWACs.
	optional bool eutl = 6;

	reserved 7;

	// When set to true, Chrome will enforce certificate expiry for this
	// TrustAnchor using the notBefore and notAfter from the corresponding
	// certificate.
	optional bool enforce_anchor_expiry = 8;

	// When set to true, Chrome will enforce X.509 constraints for this
	// TrustAnchor using the constraints expressed in the corresponding
	// certificate.
	optional bool enforce_anchor_constraints = 9;

	// If true, indicates that this certificate is a trust anchor for TLS
	// connections.
	optional bool tls_trust_anchor = 10;

	// A unique identifier for a trust anchor, in binary representation.
	// Specified in
	// https://www.ietf.org/archive/id/draft-ietf-tls-trust-anchor-ids-00.html,
	// Trust Anchor IDs are represented as relative OID suffixes of the Private
	// Enterprise Number (PEN) OID prefix of "1.3.6.1.4.1.".
	optional bytes trust_anchor_id = 11;

	// A stable identifier for this anchor, or if it is an intermediate, the
	// identifier of the root that issued it. IDs should not be changed, and
	// should not be reused except for the trusted intermediate case. The
	// identifiers 0, 1 and 2 are reserved and should not be used.
	optional int32 crs_root_id = 12;
	}

	// TODO(crbug.com/520071497): Remove once the Cloudflare experiment is complete.
	message MtcAnchor {
	// The log id is a trust anchor id in binary representation.
	optional bytes log_id = 1;

	// If not empty, the anchor is only trusted if at least one of the
	// ConstraintSets is satisfied.
	repeated ConstraintSet constraints = 2;

	// If true, indicates that this MTC is a trust anchor for TLS connections.
	optional bool tls_trust_anchor = 3;

	// A stable identifier for this anchor. IDs should not be changed, and should
	// not be reused. The identifiers 0, 1 and 2 are reserved and should not be
	// used.
	optional int32 crs_root_id = 4;

	// TODO(crbug.com/452983502): Add co-signer configuration.
	//
	// In the current implementation, MTC anchors can only be used through the
	// signatureless path, and the trusted subtrees are configured separately in
	// MtcAnchorData. This MtcAnchor will be ignored unless a MtcAnchorData with
	// matching log_id is also present.
	}

	// Message storing a complete Chrome Root Store.
	message RootStore {
	// Certificates in this list are expected to have \|tls_trust_anchor\| unset,
	// because all \|trust_anchors\| are TLS trust anchors. This field exists as a
	// separate, TLS-trust-anchor-only list from \|additional_certs\| just for
	// historical reasons.
	repeated TrustAnchor trust_anchors = 1;

	// Major version # of the Chrome Root Store. It is assumed that if
	// root_store_1.version_major > root_store_2.version_major, then root_store_1
	// is newer and should be preferred over root_store_2.
	int64 version_major = 2;

	// Additional certificates that are shipped as part of the Chrome Root Store
	// but convey different trust information than those in trust_anchors.
	repeated TrustAnchor additional_certs = 3;

	// Merkle Tree Certificate anchors. Like `additional_certs`, entries are not
	// trusted for any purpose unless explicitly specified in the MtcAnchor (for
	// example by setting `tls_trust_anchor=true`).
	repeated MtcAnchor mtc_anchors = 4;
	}

	message TrustAnchorIdRange {
	reserved 1;

	// The minimum supported landmark number.
	optional uint64 min_active_landmark_inclusive = 2;

	// The maximum supported landmark number, inclusive.
	optional uint64 last_landmark_inclusive = 3;
	}

	message MtcSubTree {
	// The start index of the range covered by this subtree.
	optional uint64 start_inclusive = 1;

	// The end index, exclusive, of the range covered by this subtree.
	optional uint64 end_exclusive = 2;

	// The merkle tree hash for this subtree.
	optional bytes hash = 3;
	}

	// Represents a range of Merkle Tree Certificate serials.
	// For the Cloudflare experiment, these are indices in the log instead of
	// serials as defined in the MTC spec.
	message MtcIndexRange {
	// The start index of the range.
	optional uint64 start_inclusive = 1;

	// The end index, exclusive, of the range.
	optional uint64 end_exclusive = 2;
	}

	message MtcLogData {
	// Log number for this MTC log. The log ID for this log is constructed by
	// concatenating the CA ID, the constant 0 and this number.
	// This is defined as 16 bits in the MTC spec, but protobuf doesn't have a 16
	// bit integer type.
	optional uint32 log_number = 1;

	// The range of landmark numbers corresponding to `trusted_subtrees`,
	// sufficient for constructing the Trust Anchor ID(s) for
	// negotiating the use of landmark-relative certificates.
	optional TrustAnchorIdRange trusted_landmark_ids_range = 2;

	// Trusted subtrees that can be used for landmark-relative Merkle Tree
	// certificate verification.
	repeated MtcSubTree trusted_subtrees = 3;
	}

	message MtcAnchorData {
	reserved 1 to 3;

	// Ranges of Merkle Tree Certificate indices which are revoked.
	// Serial numbers contain information about the log number and cert index, so
	// this is tracked at the CA level rather than the log level.
	repeated MtcIndexRange revoked_indices = 4;

	// The CA ID in binary representation. This must match
	// the `base_id` for an issuer in the signer set, or this MtcAnchorData
	// will be ignored. (It is not an error for this to occur in practice, since
	// the MtcMetadata and ChromeRootStoreData are updated separately.)
	optional bytes ca_id = 5;

	// Data for each of the MTC logs for this MTC CA.
	repeated MtcLogData mtc_log_data = 6;
	}

	message MtcMetadata {
	// The time this data was generated, in seconds since the unix epoch.
	optional int64 update_time_seconds = 1;

	// Metadata for each of the supported MTC anchors.
	repeated MtcAnchorData mtc_anchor_data = 2;
	}