Mirror of BoringSSL (grpc依赖)
https://boringssl.googlesource.com/boringssl
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
47 lines
1.9 KiB
47 lines
1.9 KiB
// Copyright 2014 The Chromium Authors |
|
// Use of this source code is governed by a BSD-style license that can be |
|
// found in the LICENSE file. |
|
|
|
// This file intentionally does not have header guards, it's included |
|
// inside a macro to generate enum values. The following line silences a |
|
// presubmit warning that would otherwise be triggered by this: |
|
// no-include-guard-because-multiply-included |
|
// NOLINT(build/header_guard) |
|
|
|
// This is the list of CertStatus flags and their values. |
|
// |
|
// Defines the values using a macro CERT_STATUS_FLAG, |
|
// so it can be expanded differently in some places |
|
|
|
// The possible status bits for CertStatus. |
|
// Bits 0 to 15 are for errors. |
|
CERT_STATUS_FLAG(COMMON_NAME_INVALID, 1 << 0) |
|
CERT_STATUS_FLAG(DATE_INVALID, 1 << 1) |
|
CERT_STATUS_FLAG(AUTHORITY_INVALID, 1 << 2) |
|
// 1 << 3 is reserved for ERR_CERT_CONTAINS_ERRORS (not useful with WinHTTP). |
|
CERT_STATUS_FLAG(NO_REVOCATION_MECHANISM, 1 << 4) |
|
CERT_STATUS_FLAG(UNABLE_TO_CHECK_REVOCATION, 1 << 5) |
|
CERT_STATUS_FLAG(REVOKED, 1 << 6) |
|
CERT_STATUS_FLAG(INVALID, 1 << 7) |
|
CERT_STATUS_FLAG(WEAK_SIGNATURE_ALGORITHM, 1 << 8) |
|
// 1 << 9 was used for CERT_STATUS_NOT_IN_DNS |
|
CERT_STATUS_FLAG(NON_UNIQUE_NAME, 1 << 10) |
|
CERT_STATUS_FLAG(WEAK_KEY, 1 << 11) |
|
// 1 << 12 was used for CERT_STATUS_WEAK_DH_KEY |
|
CERT_STATUS_FLAG(PINNED_KEY_MISSING, 1 << 13) |
|
CERT_STATUS_FLAG(NAME_CONSTRAINT_VIOLATION, 1 << 14) |
|
CERT_STATUS_FLAG(VALIDITY_TOO_LONG, 1 << 15) |
|
|
|
// Bits 16 to 23 are for non-error statuses. |
|
CERT_STATUS_FLAG(IS_EV, 1 << 16) |
|
CERT_STATUS_FLAG(REV_CHECKING_ENABLED, 1 << 17) |
|
// Bit 18 was CERT_STATUS_IS_DNSSEC |
|
CERT_STATUS_FLAG(SHA1_SIGNATURE_PRESENT, 1 << 19) |
|
CERT_STATUS_FLAG(CT_COMPLIANCE_FAILED, 1 << 20) |
|
CERT_STATUS_FLAG(KNOWN_INTERCEPTION_DETECTED, 1 << 21) |
|
|
|
// Bits 24 - 31 are for errors. |
|
CERT_STATUS_FLAG(CERTIFICATE_TRANSPARENCY_REQUIRED, 1 << 24) |
|
CERT_STATUS_FLAG(SYMANTEC_LEGACY, 1 << 25) |
|
CERT_STATUS_FLAG(KNOWN_INTERCEPTION_BLOCKED, 1 << 26) |
|
// Bit 27 was CERT_STATUS_LEGACY_TLS.
|
|
|