1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/certificate_transparency/tree_state_tracker.h"
#include "components/certificate_transparency/single_tree_tracker.h"
#include "net/cert/ct_log_verifier.h"
#include "net/cert/signed_certificate_timestamp.h"
#include "net/cert/signed_tree_head.h"
#include "net/cert/x509_certificate.h"
using net::X509Certificate;
using net::CTLogVerifier;
using net::ct::SignedCertificateTimestamp;
using net::ct::SignedTreeHead;
namespace certificate_transparency {
TreeStateTracker::TreeStateTracker(
std::vector<scoped_refptr<const CTLogVerifier>> ct_logs) {
for (const auto& log : ct_logs)
tree_trackers_[log->key_id()].reset(new SingleTreeTracker(log));
}
TreeStateTracker::~TreeStateTracker() {}
void TreeStateTracker::OnSCTVerified(X509Certificate* cert,
const SignedCertificateTimestamp* sct) {
auto it = tree_trackers_.find(sct->log_id);
// Ignore if the SCT is from an unknown log.
if (it == tree_trackers_.end())
return;
it->second->OnSCTVerified(cert, sct);
}
void TreeStateTracker::NewSTHObserved(const SignedTreeHead& sth) {
auto it = tree_trackers_.find(sth.log_id);
// Is the STH from a known log? Since STHs can be provided from external
// sources for logs not yet recognized by this client, return, rather than
// DCHECK.
if (it == tree_trackers_.end())
return;
it->second->NewSTHObserved(sth);
}
} // namespace certificate_transparency
|
