gecko-dev/security/certverifier/CTDiversityPolicy.h
Sergei Chernov b3b80907d0 Bug 1320566 - Certificate Transparency - implement CT Policy. r=Dolske,keeler
MozReview-Commit-ID: LcMdKcgBStG

--HG--
extra : rebase_source : 38b2531e9abb8a84d32c437d13fab881f2c49f18
2017-01-09 08:22:28 +02:00

42 lines
1.5 KiB
C++

/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef CTDiversityPolicy_h
#define CTDiversityPolicy_h
#include "CTLog.h"
#include "CTVerifyResult.h"
#include "mozilla/Vector.h"
#include "pkix/Result.h"
#include "ScopedNSSTypes.h"
namespace mozilla { namespace ct {
// Retuns the list of unique CT log operator IDs appearing in the provided
// list of verified SCTs.
pkix::Result GetCTLogOperatorsFromVerifiedSCTList(const VerifiedSCTList& list,
CTLogOperatorList& operators);
// Helper class used by CTPolicyEnforcer to check the CT log operators
// diversity requirements of the CT Policy.
// See CTPolicyEnforcer.h for more details.
class CTDiversityPolicy
{
public:
// Given a certificate chain and a set of CT log operators,
// returns the subset of log operators that are dependent on the CA
// issuing the certificate (as defined by the CT Policy).
//
// NOTE: TBD, PENDING FINALIZATION OF MOZILLA CT POLICY.
pkix::Result GetDependentOperators(const UniqueCERTCertList& builtChain,
const CTLogOperatorList& operators,
CTLogOperatorList& dependentOperators);
};
} } // namespace mozilla::ct
#endif // CTDiversityPolicy_h