Add X509Certificate::IsIssuedByEncoded()

net/base/x509_certificate_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_certificate.h"
 
 #include <blapi.h>  // Implement CalculateChainFingerprint() with NSS.
 
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
@@ skipping 104 matching lines @@
                         &out_store, NULL, NULL) || out_store == NULL) {
     return results;
   }
 
   AddCertsFromStore(out_store, &results);
   CertCloseStore(out_store, CERT_CLOSE_STORE_CHECK_FLAG);
 
   return results;
 }
 
+// Given a CERT_NAME_BLOB, returns true if it appears in a given list,
+// formatted as a vector of strings holding DER-encoded X.509
+// DistinguishedName entries.
+bool IsCertNameBlobInIssuerList(CERT_NAME_BLOB* name_blob,
+                    const std::vector<std::string>& issuer_names) {

[Ryan Sleevi, 2012/12/13 19:49:05]

STYLE: Indenting is wrong

bool IsCertNameBlobInIsuserList(
    CERT_NAME_BLOB* name_blob,
    const std::vector<std::string>& issuer_names) {
}

[digit1, 2012/12/14 17:54:33]

Done.

+  for (std::vector<std::string>::const_iterator it = issuer_names.begin();
+       it != issuer_names.end(); ++it) {
+    CERT_NAME_BLOB issuer_blob;
+    issuer_blob.pbData = reinterpret_cast<BYTE*>(it->data());
+    issuer_blob.cbData = static_cast<DWORD>(it->length());
+
+    BOOL rb = CertCompareCertificateName(
+        X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, &issuer_blob, name_blob);
+    if (rb)
+      return true;
+  }
+  return false;
+}
+
 }  // namespace
 
 void X509Certificate::Initialize() {
   DCHECK(cert_handle_);
   subject_.ParseDistinguishedName(cert_handle_->pCertInfo->Subject.pbData,
                                   cert_handle_->pCertInfo->Subject.cbData);
   issuer_.ParseDistinguishedName(cert_handle_->pCertInfo->Issuer.pbData,
                                  cert_handle_->pCertInfo->Issuer.cbData);
 
   valid_start_ = Time::FromFileTime(cert_handle_->pCertInfo->NotBefore);
@@ skipping 320 matching lines @@
       break;
     case CALG_ECDSA:
       *type = kPublicKeyTypeECDSA;
       break;
     case CALG_ECDH:
       *type = kPublicKeyTypeECDH;
       break;
   }
 }
 
+bool X509Certificate::IsIssuedByEncoded(
+    const std::vector<std::string>& valid_issuers) {
+
+  // If the certificate's issuer in the list?
+  if (IsCertNameBlobInIssuerList(
+      &cert_handle_->pCertInfo->Issuer,
+      valid_issuers))

[Ryan Sleevi, 2012/12/13 19:49:05]

STYLE: Indenting is messy here

if (IsCertNameBlobInIssuerList(&cert_handle->pCertInfo->Issuer,
                               valid_issuers)) {
  return true;
}

Same on 496 as well

[digit1, 2012/12/14 17:54:33]

Done.

+    return true;
+
+  // Otherwise, is any of the intermediate CA subjects in the list?
+  for (OSCertHandles::iterator it = intermediate_ca_certs_.begin();
+       it != intermediate_ca_certs_.end(); ++it) {
+    if (IsCertNameBlobInIssuerList(
+        &it->pCertInfo->Subject,
+        valid_issuers))
+      return true;
+  }
+
+  return false;
+}
+
 }  // namespace net