Validate Service Certificates Before Accepting Them

(This is a merge of http://go/wvgerrit/14630)

To create a better flow when an application sets a service certificate
manually, we will now validate the certificate when it is given to us,
and if it is invalid, we will not allow the property to be set.

Bug: 21307186
Change-Id: If980ad075604223fc962a859fae93e98d86a7f4f
This commit is contained in:
John "Juce" Bruce
2015-06-12 11:46:32 -07:00
parent e6ea4ff2d0
commit c400a37d19
5 changed files with 36 additions and 14 deletions

View File

@@ -59,6 +59,9 @@ class CdmLicense {
return provider_session_token_;
}
static CdmResponseType VerifySignedServiceCertificate(
const std::string& signed_service_certificate);
private:
bool PrepareServiceCertificateRequest(CdmKeyMessage* signed_request,
std::string* server_url);
@@ -74,7 +77,7 @@ class CdmLicense {
bool PrepareContentId(const CdmLicenseType license_type,
const std::string& request_id, T* content_id);
CdmResponseType VerifySignedServiceCertificate(
static CdmResponseType VerifyAndExtractSignedServiceCertificate(
const std::string& signed_service_certificate,
std::string* service_certificate);
bool GetServiceCertificate(const CdmSessionId& session_id,