blob: c86e68100edbdcabd38fba381637d73cf4e98045 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
// Copyright 2016 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef NET_CERT_CT_POLICY_STATUS_H_
#define NET_CERT_CT_POLICY_STATUS_H_
namespace net {
namespace ct {
// Information about the connection's compliance with the CT
// certificate policy.
enum class CertPolicyCompliance {
// The connection complied with the certificate policy by
// including SCTs that satisfy the policy.
CERT_POLICY_COMPLIES_VIA_SCTS = 0,
// The connection did not have enough SCTs to comply.
CERT_POLICY_NOT_ENOUGH_SCTS,
// The connection did not have diverse enough SCTs to comply.
CERT_POLICY_NOT_DIVERSE_SCTS,
// The connection cannot be considered compliant because the build
// isn't timely and therefore log information might be out of date
// (for example a log might no longer be considered trustworthy).
CERT_POLICY_BUILD_NOT_TIMELY,
};
// Information about a connection's compliance with the CT EV
// certificate policy.
// This enum is histogrammed, so do not remove or reorder values.
enum class EVPolicyCompliance {
// The certificate was not EV, so the EV policy doesn't apply.
EV_POLICY_DOES_NOT_APPLY = 0,
// The connection complied with the EV certificate policy by being
// included on the EV whitelist.
EV_POLICY_COMPLIES_VIA_WHITELIST,
// The connection complied with the EV certificate policy by
// including SCTs that satisfy the policy.
EV_POLICY_COMPLIES_VIA_SCTS,
// The connection did not have enough SCTs to retain its EV
// status.
EV_POLICY_NOT_ENOUGH_SCTS,
// The connection did not have diverse enough SCTs to retain its
// EV status.
EV_POLICY_NOT_DIVERSE_SCTS,
// The connection cannot be considered compliant because the build
// isn't timely and therefore log information might be out of date
// (for example a log might no longer be considered trustworthy).
EV_POLICY_BUILD_NOT_TIMELY,
EV_POLICY_MAX,
};
} // namespace ct
} // namespace net
#endif // NET_CERT_CT_POLICY_STATUS_H_
|
