blob: bab8dfa9636035d36ca719ddd891c7f3e2376dc6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
// Copyright 2017 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "net/cert/known_roots.h"
#include <string.h>
#include <algorithm>
#include "base/check_op.h"
#include "net/base/hash_value.h"
#include "net/cert/root_cert_list_generated.h"
namespace net {
namespace {
// Comparator-predicate that serves as a < function for comparing a
// RootCertData to a HashValue
struct HashValueToRootCertDataComp {
bool operator()(const HashValue& hash, const RootCertData& root_cert) {
DCHECK_EQ(HASH_VALUE_SHA256, hash.tag());
return memcmp(hash.data(), root_cert.sha256_spki_hash, 32) < 0;
}
bool operator()(const RootCertData& root_cert, const HashValue& hash) {
DCHECK_EQ(HASH_VALUE_SHA256, hash.tag());
return memcmp(root_cert.sha256_spki_hash, hash.data(), 32) < 0;
}
};
const RootCertData* GetRootCertData(const HashValue& spki_hash) {
if (spki_hash.tag() != HASH_VALUE_SHA256)
return nullptr;
auto* it = std::lower_bound(std::begin(kRootCerts), std::end(kRootCerts),
spki_hash, HashValueToRootCertDataComp());
if (it == std::end(kRootCerts) ||
HashValueToRootCertDataComp()(spki_hash, *it)) {
return nullptr;
}
return it;
}
} // namespace
int32_t GetNetTrustAnchorHistogramIdForSPKI(const HashValue& spki_hash) {
const RootCertData* root_data = GetRootCertData(spki_hash);
if (!root_data)
return 0;
return root_data->histogram_id;
}
bool IsLegacyPubliclyTrustedCA(const HashValue& spki_hash) {
const RootCertData* root_data = GetRootCertData(spki_hash);
return root_data && root_data->legacy_ca;
}
} // namespace net
|
