From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- .../manager/ssl/RootCertificateTelemetryUtils.h | 37 ++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 security/manager/ssl/RootCertificateTelemetryUtils.h (limited to 'security/manager/ssl/RootCertificateTelemetryUtils.h') diff --git a/security/manager/ssl/RootCertificateTelemetryUtils.h b/security/manager/ssl/RootCertificateTelemetryUtils.h new file mode 100644 index 0000000000..01d033ec59 --- /dev/null +++ b/security/manager/ssl/RootCertificateTelemetryUtils.h @@ -0,0 +1,37 @@ +/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ +/* vim: set ts=8 sts=2 et sw=2 tw=80: */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +#ifndef RootCertificateTelemetryUtils_h +#define RootCertificateTelemetryUtils_h + +#include "mozilla/Span.h" +#include "mozilla/Telemetry.h" + +namespace mozilla { +namespace psm { + +// Note: New CAs will show up as UNKNOWN_ROOT until +// RootHashes.inc is updated to include them. 0 is reserved by +// genRootCAHashes.js for the unknowns. +#define ROOT_CERTIFICATE_UNKNOWN 0 +// 1 indicates the CA is not a built-in and comes from the softoken (cert9.db) +#define ROOT_CERTIFICATE_SOFTOKEN 1 +// 2 indicates the CA is not a bilt-in and comes from an external PKCS#11 token +#define ROOT_CERTIFICATE_EXTERNAL_TOKEN 2 +// 3 indicates the CA is not a built-in and comes from the OS via the +// "Enterprise Roots" feature +#define ROOT_CERTIFICATE_ENTERPRISE_ROOT 3 +#define ROOT_CERTIFICATE_HASH_FAILURE -1 + +int32_t RootCABinNumber(Span cert); + +void AccumulateTelemetryForRootCA(mozilla::Telemetry::HistogramID probe, + const Span cert); + +} // namespace psm +} // namespace mozilla + +#endif // RootCertificateTelemetryUtils_h -- cgit v1.2.3