Add X509Certificate::IsIssuedByEncoded()

net/base/x509_certificate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_X509_CERTIFICATE_H_
 #define NET_BASE_X509_CERTIFICATE_H_
 
 #include <string.h>
 
 #include <string>
@@ skipping 286 matching lines @@
   CFArrayRef CreateClientCertificateChain() const;
 
   // Returns a new CFArrayRef containing this certificate and its intermediate
   // certificates in the form expected by Security.framework and Keychain
   // Services, or NULL on failure.
   // The first item in the array will be this certificate, followed by its
   // intermediates, if any.
   CFArrayRef CreateOSCertChainForCert() const;
 #endif
 
+  // Do any of the given issuer names appear in this cert's chain of trust?
+  // |valid_issuers| is a list of DER-encoded X.509 DistinguishedNames.
+  bool IsIssuedByEncoded(const std::vector<std::string>& valid_issuers);
+
 #if defined(OS_WIN)
   // Returns a new PCCERT_CONTEXT containing this certificate and its
   // intermediate certificates, or NULL on failure. The returned
   // PCCERT_CONTEXT *MUST NOT* be stored in an X509Certificate, as this will
   // cause os_cert_handle() to return incorrect results. This function is only
   // necessary if the CERT_CONTEXT.hCertStore member will be accessed or
   // enumerated, which is generally true for any CryptoAPI functions involving
   // certificate chains, including validation or certificate display.
   //
   // Remarks:
@@ skipping 194 matching lines @@
   // based on the type of the certificate.
   std::string default_nickname_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(X509Certificate);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_X509_CERTIFICATE_H_