Rollback

Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=224206719

common/x509_cert.h

@@ -107,6 +107,10 @@ class X509CertChain {
   // container.
   util::Status LoadPkcs7(const std::string& pk7_cert_chain);
 
+  // Writes the |cert_chain_| to a DER-encoded PKCS#7 X.509 cryptographic
+  // message. The final message does not include signed data.
+  std::string GetPkcs7();
+
   // Returns the number of certificates in the chain.
   size_t GetNumCerts() const { return cert_chain_.size(); }
 
@@ -138,6 +142,12 @@ class X509CA {
   // used when constructing X509CA. This method is thread-safe.
   util::Status VerifyCertChain(const X509CertChain& cert_chain);
 
+  // Does X.509 PKI validation of |cert| using the |cert_chain|
+  // certificates. This method allows |cert| to be an ICA. This method is
+  // thread-safe.
+  util::Status VerifyCertWithChain(const X509Cert& cert,
+                                   const X509CertChain& cert_chain);
+
  private:
   util::Status InitializeStore();
   util::Status OpenSslX509Verify(const X509* cert, STACK_OF(X509) * stack);