Add X509Certificate::IsIssuedByEncoded()

net/base/x509_certificate_ios.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/x509_certificate.h"
 
 #include <CommonCrypto/CommonDigest.h>
 #include <Security/Security.h>
 #include <vector>
 
@@ skipping 51 matching lines @@
     x509_util::ParsePrincipal(&cert_handle->subject, &subject_);
     x509_util::ParsePrincipal(&cert_handle->issuer, &issuer_);
     x509_util::ParseDate(&cert_handle->validity.notBefore, &valid_start_);
     x509_util::ParseDate(&cert_handle->validity.notAfter, &valid_expiry_);
     serial_number_ = x509_util::ParseSerialNumber(cert_handle);
   }
   fingerprint_ = CalculateFingerprint(cert_handle_);
   ca_fingerprint_ = CalculateCAFingerprint(intermediate_ca_certs_);
 }
 
+bool X509Certificate::IsIssuedByEncoded(
+    const std::vector<std::string>& valid_issuers) {
+  x509_util_ios::NSSCertChain nss_chain(this);
+  // Convert to scoped CERTName* list.
+  std::vector<CERTName*> issuers;
+  crypto::ScopedPLArenaPool arena(PORT_NewArena(DER_DEFAULT_CHUNKSIZE));
+  if (!x509_util::GetIssuersFromEncodedList(valid_issuers,
+                                            arena.get(),
+                                            &issuers)) {
+    return false;
+  }
+  return x509_util::IsCertificateIssuedBy(
+      nss_chain.cert_chain(), issuers);
+}
+
 // static
 X509Certificate* X509Certificate::CreateSelfSigned(
     crypto::RSAPrivateKey* key,
     const std::string& subject,
     uint32 serial_number,
     base::TimeDelta valid_duration) {
   DCHECK(key);
   DCHECK(!subject.empty());
   NOTIMPLEMENTED();
   return NULL;
@@ skipping 139 matching lines @@
 
 // static
 void X509Certificate::GetPublicKeyInfo(OSCertHandle cert_handle,
                                        size_t* size_bits,
                                        PublicKeyType* type) {
   x509_util_ios::NSSCertificate nss_cert(cert_handle);
   x509_util::GetPublicKeyInfo(nss_cert.cert_handle(), size_bits, type);
 }
 
 }  // namespace net