mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-11-29 07:42:04 +00:00
fa71c479fc
THA was removed in Bug 1196988. After Bug 1235869 and Bug 1238079, Firefox Marketplace apps are at most supported by B2G, and B2G only code doesn't need to be in m-c anymore. MozReview-Commit-ID: DAx5lRdYQo0 --HG-- extra : rebase_source : e7fc32195def3acda2d53a6e3cb969f1e8a9a9a1
88 lines
3.9 KiB
C++
88 lines
3.9 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#ifndef AppTrustDomain_h
|
|
#define AppTrustDomain_h
|
|
|
|
#include "pkix/pkixtypes.h"
|
|
#include "mozilla/StaticMutex.h"
|
|
#include "mozilla/UniquePtr.h"
|
|
#include "nsDebug.h"
|
|
#include "nsIX509CertDB.h"
|
|
#include "ScopedNSSTypes.h"
|
|
|
|
namespace mozilla { namespace psm {
|
|
|
|
class AppTrustDomain final : public mozilla::pkix::TrustDomain
|
|
{
|
|
public:
|
|
typedef mozilla::pkix::Result Result;
|
|
|
|
AppTrustDomain(UniqueCERTCertList& certChain, void* pinArg);
|
|
|
|
nsresult SetTrustedRoot(AppTrustedRoot trustedRoot);
|
|
|
|
virtual Result GetCertTrust(mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
const mozilla::pkix::CertPolicyId& policy,
|
|
mozilla::pkix::Input candidateCertDER,
|
|
/*out*/ mozilla::pkix::TrustLevel& trustLevel)
|
|
override;
|
|
virtual Result FindIssuer(mozilla::pkix::Input encodedIssuerName,
|
|
IssuerChecker& checker,
|
|
mozilla::pkix::Time time) override;
|
|
virtual Result CheckRevocation(mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
const mozilla::pkix::CertID& certID,
|
|
mozilla::pkix::Time time,
|
|
mozilla::pkix::Duration validityDuration,
|
|
/*optional*/ const mozilla::pkix::Input* stapledOCSPresponse,
|
|
/*optional*/ const mozilla::pkix::Input* aiaExtension) override;
|
|
virtual Result IsChainValid(const mozilla::pkix::DERArray& certChain,
|
|
mozilla::pkix::Time time) override;
|
|
virtual Result CheckSignatureDigestAlgorithm(
|
|
mozilla::pkix::DigestAlgorithm digestAlg,
|
|
mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
mozilla::pkix::Time notBefore) override;
|
|
virtual Result CheckRSAPublicKeyModulusSizeInBits(
|
|
mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
unsigned int modulusSizeInBits) override;
|
|
virtual Result VerifyRSAPKCS1SignedDigest(
|
|
const mozilla::pkix::SignedDigest& signedDigest,
|
|
mozilla::pkix::Input subjectPublicKeyInfo) override;
|
|
virtual Result CheckECDSACurveIsAcceptable(
|
|
mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
mozilla::pkix::NamedCurve curve) override;
|
|
virtual Result VerifyECDSASignedDigest(
|
|
const mozilla::pkix::SignedDigest& signedDigest,
|
|
mozilla::pkix::Input subjectPublicKeyInfo) override;
|
|
virtual Result CheckValidityIsAcceptable(
|
|
mozilla::pkix::Time notBefore, mozilla::pkix::Time notAfter,
|
|
mozilla::pkix::EndEntityOrCA endEntityOrCA,
|
|
mozilla::pkix::KeyPurposeId keyPurpose) override;
|
|
virtual Result NetscapeStepUpMatchesServerAuth(
|
|
mozilla::pkix::Time notBefore,
|
|
/*out*/ bool& matches) override;
|
|
virtual void NoteAuxiliaryExtension(
|
|
mozilla::pkix::AuxiliaryExtension extension,
|
|
mozilla::pkix::Input extensionData) override;
|
|
virtual Result DigestBuf(mozilla::pkix::Input item,
|
|
mozilla::pkix::DigestAlgorithm digestAlg,
|
|
/*out*/ uint8_t* digestBuf,
|
|
size_t digestBufLen) override;
|
|
|
|
private:
|
|
/*out*/ UniqueCERTCertList& mCertChain;
|
|
void* mPinArg; // non-owning!
|
|
UniqueCERTCertificate mTrustedRoot;
|
|
|
|
static StaticMutex sMutex;
|
|
static UniquePtr<unsigned char[]> sDevImportedDERData;
|
|
static unsigned int sDevImportedDERLen;
|
|
};
|
|
|
|
} } // namespace mozilla::psm
|
|
|
|
#endif // AppTrustDomain_h
|