mirror of
https://github.com/klzgrad/naiveproxy.git
synced 2024-11-24 14:26:09 +03:00
77 lines
3.0 KiB
C
77 lines
3.0 KiB
C
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
#ifndef NET_CERT_ASN1_UTIL_H_
|
||
|
|
#define NET_CERT_ASN1_UTIL_H_
|
||
|
|
|
||
|
|
#include <vector>
|
||
|
|
|
||
|
|
#include "base/strings/string_piece.h"
|
||
|
|
#include "net/base/net_export.h"
|
||
|
|
|
||
|
|
namespace net {
|
||
|
|
|
||
|
|
namespace asn1 {
|
||
|
|
|
||
|
|
// ExtractSPKIFromDERCert parses the DER encoded certificate in |cert| and
|
||
|
|
// extracts the bytes of the SubjectPublicKeyInfo. On successful return,
|
||
|
|
// |spki_out| is set to contain the SPKI, pointing into |cert|.
|
||
|
|
NET_EXPORT_PRIVATE bool ExtractSPKIFromDERCert(base::StringPiece cert,
|
||
|
|
base::StringPiece* spki_out);
|
||
|
|
|
||
|
|
// ExtractSubjectPublicKeyFromSPKI parses the DER encoded SubjectPublicKeyInfo
|
||
|
|
// in |spki| and extracts the bytes of the SubjectPublicKey. On successful
|
||
|
|
// return, |spk_out| is set to contain the public key, pointing into |spki|.
|
||
|
|
NET_EXPORT_PRIVATE bool ExtractSubjectPublicKeyFromSPKI(
|
||
|
|
base::StringPiece spki,
|
||
|
|
base::StringPiece* spk_out);
|
||
|
|
|
||
|
|
// ExtractCRLURLsFromDERCert parses the DER encoded certificate in |cert| and
|
||
|
|
// extracts the URL of each CRL. On successful return, the elements of
|
||
|
|
// |urls_out| point into |cert|.
|
||
|
|
//
|
||
|
|
// CRLs that only cover a subset of the reasons are omitted as the spec
|
||
|
|
// requires that at least one CRL be included that covers all reasons.
|
||
|
|
//
|
||
|
|
// CRLs that use an alternative issuer are also omitted.
|
||
|
|
//
|
||
|
|
// The nested set of GeneralNames is flattened into a single list because
|
||
|
|
// having several CRLs with one location is equivalent to having one CRL with
|
||
|
|
// several locations as far as a CRL filter is concerned.
|
||
|
|
//
|
||
|
|
// TODO(eroman): This appears to be unused, can it be deleted?
|
||
|
|
NET_EXPORT_PRIVATE bool ExtractCRLURLsFromDERCert(
|
||
|
|
base::StringPiece cert,
|
||
|
|
std::vector<base::StringPiece>* urls_out);
|
||
|
|
|
||
|
|
// HasTLSFeatureExtension parses the DER encoded certificate in |cert|
|
||
|
|
// and extracts the TLS feature extension
|
||
|
|
// (https://tools.ietf.org/html/rfc7633) if present. Returns true if the
|
||
|
|
// TLS feature extension was present, and false if the extension was not
|
||
|
|
// present or if there was a parsing failure.
|
||
|
|
NET_EXPORT_PRIVATE bool HasTLSFeatureExtension(base::StringPiece cert);
|
||
|
|
|
||
|
|
// Extracts the two (SEQUENCE) tag-length-values for the signature
|
||
|
|
// AlgorithmIdentifiers in a DER encoded certificate. Does not use strict
|
||
|
|
// parsing or validate the resulting AlgorithmIdentifiers.
|
||
|
|
//
|
||
|
|
// On success returns true, and assigns |cert_signature_algorithm_sequence| and
|
||
|
|
// |tbs_signature_algorithm_sequence| to point into |cert|:
|
||
|
|
//
|
||
|
|
// * |cert_signature_algorithm_sequence| points at the TLV for
|
||
|
|
// Certificate.signatureAlgorithm.
|
||
|
|
//
|
||
|
|
// * |tbs_signature_algorithm_sequence| points at the TLV for
|
||
|
|
// TBSCertificate.algorithm.
|
||
|
|
NET_EXPORT_PRIVATE bool ExtractSignatureAlgorithmsFromDERCert(
|
||
|
|
base::StringPiece cert,
|
||
|
|
base::StringPiece* cert_signature_algorithm_sequence,
|
||
|
|
base::StringPiece* tbs_signature_algorithm_sequence);
|
||
|
|
|
||
|
|
} // namespace asn1
|
||
|
|
|
||
|
|
} // namespace net
|
||
|
|
|
||
|
|
#endif // NET_CERT_ASN1_UTIL_H_
|