mirror of
https://github.com/klzgrad/naiveproxy.git
synced 2024-12-01 09:46:09 +03:00
59 lines
2.4 KiB
C
59 lines
2.4 KiB
C
|
// Copyright 2015 The Chromium Authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
#ifndef NET_CERT_INTERNAL_VERIFY_NAME_MATCH_H_
|
||
|
|
#define NET_CERT_INTERNAL_VERIFY_NAME_MATCH_H_
|
||
|
|
|
||
|
|
#include <string>
|
||
|
|
|
||
|
|
#include "base/compiler_specific.h"
|
||
|
|
#include "base/strings/string_piece.h"
|
||
|
|
#include "net/base/net_export.h"
|
||
|
|
|
||
|
|
namespace net {
|
||
|
|
|
||
|
|
class CertErrors;
|
||
|
|
|
||
|
|
namespace der {
|
||
|
|
class Input;
|
||
|
|
} // namespace der
|
||
|
|
|
||
|
|
// Normalizes DER-encoded X.501 Name |name_rdn_sequence| (which should not
|
||
|
|
// include the Sequence tag). If successful, returns true and stores the
|
||
|
|
// normalized DER-encoded Name into |normalized_rdn_sequence| (not including an
|
||
|
|
// outer Sequence tag). Returns false if there was an error parsing or
|
||
|
|
// normalizing the input, and adds error information to |errors|. |errors| must
|
||
|
|
// be non-null.
|
||
|
|
NET_EXPORT bool NormalizeName(const der::Input& name_rdn_sequence,
|
||
|
|
std::string* normalized_rdn_sequence,
|
||
|
|
CertErrors* errors);
|
||
|
|
|
||
|
|
// Compares DER-encoded X.501 Name values according to RFC 5280 rules.
|
||
|
|
// |a_rdn_sequence| and |b_rdn_sequence| should be the DER-encoded RDNSequence
|
||
|
|
// values (not including the Sequence tag).
|
||
|
|
// Returns true if |a_rdn_sequence| and |b_rdn_sequence| match.
|
||
|
|
NET_EXPORT bool VerifyNameMatch(const der::Input& a_rdn_sequence,
|
||
|
|
const der::Input& b_rdn_sequence);
|
||
|
|
|
||
|
|
// Compares |name_rdn_sequence| and |parent_rdn_sequence| and return true if
|
||
|
|
// |name_rdn_sequence| is within the subtree defined by |parent_rdn_sequence| as
|
||
|
|
// defined by RFC 5280 section 7.1. |name_rdn_sequence| and
|
||
|
|
// |parent_rdn_sequence| should be the DER-encoded sequence values (not
|
||
|
|
// including the Sequence tag).
|
||
|
|
NET_EXPORT bool VerifyNameInSubtree(const der::Input& name_rdn_sequence,
|
||
|
|
const der::Input& parent_rdn_sequence);
|
||
|
|
|
||
|
|
// Helper functions:
|
||
|
|
|
||
|
|
// Checks if |name_rdn_sequence| contains an emailAddress attribute type.
|
||
|
|
// If the return value is true, |*contained_email_address| will be set to
|
||
|
|
// indicate whether an emailAddress attribute was present.
|
||
|
|
// Returns false if there was a parsing error.
|
||
|
|
bool NameContainsEmailAddress(const der::Input& name_rdn_sequence,
|
||
|
|
bool* contained_email_address) WARN_UNUSED_RESULT;
|
||
|
|
|
||
|
|
} // namespace net
|
||
|
|
|
||
|
|
#endif // NET_CERT_INTERNAL_VERIFY_NAME_MATCH_H_
|