ssl_config.cc 1.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849
  1. // Copyright 2014 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include "net/ssl/ssl_config.h"
  5. #include "net/cert/cert_verifier.h"
  6. namespace net {
  7. // Note these lines must be kept in sync with
  8. // services/network/public/mojom/ssl_config.mojom.
  9. const uint16_t kDefaultSSLVersionMin = SSL_PROTOCOL_VERSION_TLS1_2;
  10. const uint16_t kDefaultSSLVersionMax = SSL_PROTOCOL_VERSION_TLS1_3;
  11. SSLConfig::CertAndStatus::CertAndStatus() = default;
  12. SSLConfig::CertAndStatus::CertAndStatus(scoped_refptr<X509Certificate> cert_arg,
  13. CertStatus status)
  14. : cert(std::move(cert_arg)), cert_status(status) {}
  15. SSLConfig::CertAndStatus::CertAndStatus(const CertAndStatus& other) = default;
  16. SSLConfig::CertAndStatus::~CertAndStatus() = default;
  17. SSLConfig::SSLConfig() = default;
  18. SSLConfig::SSLConfig(const SSLConfig& other) = default;
  19. SSLConfig::~SSLConfig() = default;
  20. bool SSLConfig::IsAllowedBadCert(X509Certificate* cert,
  21. CertStatus* cert_status) const {
  22. for (const auto& allowed_bad_cert : allowed_bad_certs) {
  23. if (cert->EqualsExcludingChain(allowed_bad_cert.cert.get())) {
  24. if (cert_status)
  25. *cert_status = allowed_bad_cert.cert_status;
  26. return true;
  27. }
  28. }
  29. return false;
  30. }
  31. int SSLConfig::GetCertVerifyFlags() const {
  32. int flags = 0;
  33. if (disable_cert_verification_network_fetches)
  34. flags |= CertVerifier::VERIFY_DISABLE_NETWORK_FETCHES;
  35. return flags;
  36. }
  37. } // namespace net