Add initial code for verifying a certificate chain.

The code handles many of RFC 5280's requirements: BasicConstraints, KeyUsage, Signature, Validity. But is lacking Revocation checks, subjectAltName, ExtendedKeyUsage and name constraints. The unit-tests depend on data that was reviewed separately in https://codereview.chromium.org/1414393008/ BUG=410574 Review URL: https://codereview.chromium.org/1414923007 Cr-Commit-Position: refs/heads/master@{#365987}
Denger-Network · Dec 18, 2015 · c1aac5a · c1aac5a
1 parent 9e17d40
commit c1aac5a
Show file tree

Hide file tree

Showing 6 changed files with 869 additions and 2 deletions.
diff --git a/net/BUILD.gn b/net/BUILD.gn
@@ -1582,11 +1582,12 @@ test("net_unittests") {
     #        'test_data_files': [
     #          'data/certificate_policies_unittest/',
     #          'data/name_constraints_unittest/',
+    #          'data/parse_certificate_unittest/',
     #          'data/ssl/certificates/',
     #          'data/test.html',
     #          'data/url_request_unittest/',
+    #          'data/verify_certificate_chain_unittest/',
     #          'data/verify_name_match_unittest/names/',
-    #          'data/parse_certificate_unittest/',
     #        ],
     #        'test_data_prefix': 'net',
     #      },