net: add certificate pins for tor2web.org

net/base/transport_security_state_static_generate.go

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This program converts the information in
 // transport_security_state_static.json and
 // transport_security_state_static.certs into
 // transport_security_state_static.h. The input files contain information about
 // public key pinning and HTTPS-only sites that is compiled into Chromium.
 
@@ skipping 265 matching lines @@
 // given CN.
 func matchNames(name, v string) error {
         words := strings.Split(name, " ")
         if len(words) == 0 {
                 return errors.New("no words in certificate name")
         }
         firstWord := words[0]
         if strings.HasSuffix(firstWord, ",") {
                 firstWord = firstWord[:len(firstWord)-1]
         }
+        if strings.HasPrefix(firstWord, "*.") {
+                firstWord = firstWord[2:]
+        }
         if pos := strings.Index(firstWord, "."); pos != -1 {
                 firstWord = firstWord[:pos]
         }
         if pos := strings.Index(firstWord, "-"); pos != -1 {
                 firstWord = firstWord[:pos]
         }
-        if !strings.HasPrefix(v, firstWord) {
+        if len(firstWord) == 0 {

[palmer, 2012/05/22 19:24:46]

Looks like inconsistent whitespace here.

[agl, 2012/05/23 19:29:25]

That's just how codereview is showing it. I've run it through gofmt just to be
sure.

+                return errors.New("first word of certificate name is empty")
+        }
+        firstWord = strings.ToLower(firstWord)
+        lowerV := strings.ToLower(v)
+        if !strings.HasPrefix(lowerV, firstWord) {
                 return errors.New("the first word of the certificate name isn't a prefix of the variable name")
         }
 
         for i, word := range words {
                 if word == "Class" && i+1 < len(words) {
                         if strings.Index(v, word+words[i+1]) == -1 {
                                 return errors.New("class specification doesn't appear in the variable name")
                         }
                 } else if len(word) == 1 && word[0] >= '0' && word[0] <= '9' {
                         if strings.Index(v, word) == -1 {
@@ skipping 235 matching lines @@
                 writeHSTSEntry(out, entry)
         }
 
         out.WriteString(`};
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 `)
 
         return nil
 }