Add X509Certificate::IsIssuedByEncoded()

net/base/x509_util_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_util.h"
 #include "net/base/x509_util_nss.h"
 
 #include <cert.h>
 #include <cryptohi.h>
 #include <nss.h>
@@ skipping 509 matching lines @@
       break;
     case ecKey:
       *type = X509Certificate::kPublicKeyTypeECDSA;
       break;
     default:
       *type = X509Certificate::kPublicKeyTypeUnknown;
       *size_bits = 0;
       break;
   }
 }
+
+bool IsCertNameItemInIssuerList(
+    SECItem* name,
+    const std::vector<std::string>& valid_issuers) {
+  for (std::vector<std::string>::const_iterator it = valid_issuers.begin();
+       it != valid_issuers.end(); ++it) {
+    SECItem issuer;
+    issuer.type = siDERNameBuffer;
+    issuer.data = reinterpret_cast<unsigned char*>(
+        const_cast<char*>(it->data()));
+    issuer.len = static_cast<unsigned int>(it->length());
+    if (SECITEM_ItemsAreEqual(&issuer, name))

[Ryan Sleevi, 2012/12/13 19:49:05]

use the CERTName comparison

[digit1, 2012/12/14 17:54:33]

That's not do-able for the reason explained previously (no NSS API to create a
CERTName from a DER-encoded byte array).
I've added a comment explaining this.

[Ryan Sleevi, 2012/12/14 18:16:42]

See comments about the NSS API to use to do this :)

+      return true;
+  }
+  return false;
+}
+
 #endif  // defined(USE_NSS) || defined(OS_IOS)
 
 } // namespace x509_util
 
 } // namespace net