Blame security/certverifier/BRNameMatchingPolicy.cpp

Packit f0b94e
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
Packit f0b94e
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
Packit f0b94e
/* This Source Code Form is subject to the terms of the Mozilla Public
Packit f0b94e
 * License, v. 2.0. If a copy of the MPL was not distributed with this
Packit f0b94e
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
Packit f0b94e
Packit f0b94e
#include "BRNameMatchingPolicy.h"
Packit f0b94e
Packit f0b94e
#include "mozilla/Assertions.h"
Packit f0b94e
Packit f0b94e
using namespace mozilla::psm;
Packit f0b94e
using namespace mozilla::pkix;
Packit f0b94e
Packit f0b94e
Result BRNameMatchingPolicy::FallBackToCommonName(
Packit f0b94e
    Time notBefore,
Packit f0b94e
    /*out*/ FallBackToSearchWithinSubject& fallBackToCommonName) {
Packit f0b94e
  // (new Date("2015-08-23T00:00:00Z")).getTime() / 1000
Packit f0b94e
  static const Time AUGUST_23_2015 = TimeFromEpochInSeconds(1440288000);
Packit f0b94e
  // (new Date("2016-08-23T00:00:00Z")).getTime() / 1000
Packit f0b94e
  static const Time AUGUST_23_2016 = TimeFromEpochInSeconds(1471910400);
Packit f0b94e
  switch (mMode) {
Packit f0b94e
    case Mode::Enforce:
Packit f0b94e
      fallBackToCommonName = FallBackToSearchWithinSubject::No;
Packit f0b94e
      break;
Packit f0b94e
    case Mode::EnforceAfter23August2015:
Packit f0b94e
      fallBackToCommonName = notBefore > AUGUST_23_2015
Packit f0b94e
                                 ? FallBackToSearchWithinSubject::No
Packit f0b94e
                                 : FallBackToSearchWithinSubject::Yes;
Packit f0b94e
      break;
Packit f0b94e
    case Mode::EnforceAfter23August2016:
Packit f0b94e
      fallBackToCommonName = notBefore > AUGUST_23_2016
Packit f0b94e
                                 ? FallBackToSearchWithinSubject::No
Packit f0b94e
                                 : FallBackToSearchWithinSubject::Yes;
Packit f0b94e
      break;
Packit f0b94e
    case Mode::DoNotEnforce:
Packit f0b94e
      fallBackToCommonName = FallBackToSearchWithinSubject::Yes;
Packit f0b94e
      break;
Packit f0b94e
    default:
Packit f0b94e
      MOZ_CRASH("Unexpected Mode");
Packit f0b94e
  }
Packit f0b94e
  return Success;
Packit f0b94e
}