15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 5c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#ifndef NET_CERT_X509_CERT_TYPES_H_ 6c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#define NET_CERT_X509_CERT_TYPES_H_ 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <string.h> 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 10a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)#include <map> 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <set> 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <string> 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <vector> 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/logging.h" 16c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "base/strings/string_piece.h" 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "build/build_config.h" 182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "net/base/hash_value.h" 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "net/base/net_export.h" 20a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles)#include "net/cert/cert_status_flags.h" 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(OS_MACOSX) && !defined(OS_IOS) 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <Security/x509defs.h> 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace base { 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)class Time; 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace base 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace net { 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)class X509Certificate; 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// CertPrincipal represents the issuer or subject field of an X.509 certificate. 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)struct NET_EXPORT CertPrincipal { 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) CertPrincipal(); 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) explicit CertPrincipal(const std::string& name); 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ~CertPrincipal(); 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if (defined(OS_MACOSX) && !defined(OS_IOS)) || defined(OS_WIN) 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Parses a BER-format DistinguishedName. 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bool ParseDistinguishedName(const void* ber_name_data, size_t length); 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 455821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(OS_MACOSX) 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Compare this CertPrincipal with |against|, returning true if they're 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // equal enough to be a possible match. This should NOT be used for any 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // security relevant decisions. 495821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // TODO(rsleevi): Remove once Mac client auth uses NSS for name comparison. 505821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bool Matches(const CertPrincipal& against) const; 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Returns a name that can be used to represent the issuer. It tries in this 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // order: CN, O and OU and returns the first non-empty one found. 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string GetDisplayName() const; 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The different attributes for a principal, stored in UTF-8. They may be "". 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Note that some of them can have several values. 595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 605821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string common_name; 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string locality_name; 625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string state_or_province_name; 635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string country_name; 645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::vector<std::string> street_addresses; 665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::vector<std::string> organization_names; 675821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::vector<std::string> organization_unit_names; 685821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::vector<std::string> domain_components; 695821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}; 705821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 715821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// This class is useful for maintaining policies about which certificates are 725821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// permitted or forbidden for a particular purpose. 735821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)class NET_EXPORT CertPolicy { 745821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) public: 755821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The judgments this policy can reach. 765821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) enum Judgment { 775821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // We don't have policy information for this certificate. 785821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) UNKNOWN, 795821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 805821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // This certificate is allowed. 815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ALLOWED, 825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // This certificate is denied. 845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) DENIED, 855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) }; 865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) CertPolicy(); 885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ~CertPolicy(); 895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Returns the judgment this policy makes about this certificate. 91a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // For a certificate to be allowed, it must not have any *additional* errors 92a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // from when it was allowed. For a certificate to be denied, it need only 93a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // match *any* of the errors that caused it to be denied. We check denial 94a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // first, before checking whether it's been allowed. 95a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) Judgment Check(X509Certificate* cert, CertStatus error) const; 965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 97a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // Causes the policy to allow this certificate for a given |error|. 98a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) void Allow(X509Certificate* cert, CertStatus error); 995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 100a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) // Causes the policy to deny this certificate for a given |error|. 101a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) void Deny(X509Certificate* cert, CertStatus error); 1025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Returns true if this policy has allowed at least one certificate. 1045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bool HasAllowedCert() const; 1055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Returns true if this policy has denied at least one certificate. 1075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bool HasDeniedCert() const; 1085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) private: 1105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The set of fingerprints of allowed certificates. 111a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) std::map<SHA1HashValue, CertStatus, SHA1HashValueLessThan> allowed_; 1125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The set of fingerprints of denied certificates. 114a36e5920737c6adbddd3e43b760e5de8431db6e0Torne (Richard Coles) std::map<SHA1HashValue, CertStatus, SHA1HashValueLessThan> denied_; 1155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}; 1165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(OS_MACOSX) && !defined(OS_IOS) 1185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Compares two OIDs by value. 1195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)inline bool CSSMOIDEqual(const CSSM_OID* oid1, const CSSM_OID* oid2) { 1205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return oid1->Length == oid2->Length && 1215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) (memcmp(oid1->Data, oid2->Data, oid1->Length) == 0); 1225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif 1245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// A list of ASN.1 date/time formats that ParseCertificateDate() supports, 1265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// encoded in the canonical forms specified in RFC 2459/3280/5280. 1275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)enum CertDateFormat { 1285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // UTCTime: Format is YYMMDDHHMMSSZ 1295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) CERT_DATE_FORMAT_UTC_TIME, 1305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // GeneralizedTime: Format is YYYYMMDDHHMMSSZ 1325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) CERT_DATE_FORMAT_GENERALIZED_TIME, 1335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}; 1345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Attempts to parse |raw_date|, an ASN.1 date/time string encoded as 1365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// |format|, and writes the result into |*time|. If an invalid date is 1375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// specified, or if parsing fails, returns false, and |*time| will not be 1385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// updated. 1395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool ParseCertificateDate(const base::StringPiece& raw_date, 1405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) CertDateFormat format, 1415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) base::Time* time); 1425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace net 1435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 144c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif // NET_CERT_X509_CERT_TYPES_H_ 145