The Tor Browser / annotate

security/manager/boot/src/StaticHPKPins.h@b8a032363ba2 (annotated)

security/manager/boot/src/StaticHPKPins.h

Thu, 22 Jan 2015 13:21:57 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 22 Jan 2015 13:21:57 +0100
branch
TOR_BUG_9701
changeset 15
b8a032363ba2
permissions
-rw-r--r--

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

michael@0 1 /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0 2 * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0 4
michael@0 5 /*****************************************************************************/
michael@0 6 /* This is an automatically generated file. If you're not */
michael@0 7 /* PublicKeyPinningService.cpp, you shouldn't be #including it. */
michael@0 8 /*****************************************************************************/
michael@0 9 #include <stdint.h>
michael@0 10 /* AddTrust External Root */
michael@0 11 static const char kAddTrust_External_RootFingerprint[] =
michael@0 12 "lCppFqbkrlJ3EcVFAkeip0+44VaoJUymbnOaEUk7tEU=";
michael@0 13
michael@0 14 /* AddTrust Low-Value Services Root */
michael@0 15 static const char kAddTrust_Low_Value_Services_RootFingerprint[] =
michael@0 16 "BStocQfshOhzA4JFLsKidFF0XXSFpX1vRk4Np6G2ryo=";
michael@0 17
michael@0 18 /* AddTrust Public Services Root */
michael@0 19 static const char kAddTrust_Public_Services_RootFingerprint[] =
michael@0 20 "OGHXtpYfzbISBFb/b8LrdwSxp0G0vZM6g3b14ZFcppg=";
michael@0 21
michael@0 22 /* AddTrust Qualified Certificates Root */
michael@0 23 static const char kAddTrust_Qualified_Certificates_RootFingerprint[] =
michael@0 24 "xzr8Lrp3DQy8HuQfJStS6Kk9ErctzOwDHY2DnL+Bink=";
michael@0 25
michael@0 26 /* AffirmTrust Commercial */
michael@0 27 static const char kAffirmTrust_CommercialFingerprint[] =
michael@0 28 "bEZLmlsjOl6HTadlwm8EUBDS3c/0V5TwtMfkqvpQFJU=";
michael@0 29
michael@0 30 /* AffirmTrust Networking */
michael@0 31 static const char kAffirmTrust_NetworkingFingerprint[] =
michael@0 32 "lAcq0/WPcPkwmOWl9sBMlscQvYSdgxhJGa6Q64kK5AA=";
michael@0 33
michael@0 34 /* AffirmTrust Premium */
michael@0 35 static const char kAffirmTrust_PremiumFingerprint[] =
michael@0 36 "x/Q7TPW3FWgpT4IrU3YmBfbd0Vyt7Oc56eLDy6YenWc=";
michael@0 37
michael@0 38 /* AffirmTrust Premium ECC */
michael@0 39 static const char kAffirmTrust_Premium_ECCFingerprint[] =
michael@0 40 "MhmwkRT/SVo+tusAwu/qs0ACrl8KVsdnnqCHo/oDfk8=";
michael@0 41
michael@0 42 /* America Online Root Certification Authority 1 */
michael@0 43 static const char kAmerica_Online_Root_Certification_Authority_1Fingerprint[] =
michael@0 44 "I4SdCUkj1EpIgbY6sYXpvhWqyO8sMETZNLx/JuLSzWk=";
michael@0 45
michael@0 46 /* America Online Root Certification Authority 2 */
michael@0 47 static const char kAmerica_Online_Root_Certification_Authority_2Fingerprint[] =
michael@0 48 "/PfamDYD6IhiAw2WE32OEwMbrftNVsH9TKzDOfa9uyo=";
michael@0 49
michael@0 50 /* Baltimore CyberTrust Root */
michael@0 51 static const char kBaltimore_CyberTrust_RootFingerprint[] =
michael@0 52 "Y9mvm0exBk1JoQ57f9Vm28jKo5lFm/woKcVxrYxu80o=";
michael@0 53
michael@0 54 /* COMODO Certification Authority */
michael@0 55 static const char kCOMODO_Certification_AuthorityFingerprint[] =
michael@0 56 "AG1751Vd2CAmRCxPGieoDomhmJy4ezREjtIZTBgZbV4=";
michael@0 57
michael@0 58 /* COMODO ECC Certification Authority */
michael@0 59 static const char kCOMODO_ECC_Certification_AuthorityFingerprint[] =
michael@0 60 "58qRu/uxh4gFezqAcERupSkRYBlBAvfcw7mEjGPLnNU=";
michael@0 61
michael@0 62 /* Comodo AAA Services root */
michael@0 63 static const char kComodo_AAA_Services_rootFingerprint[] =
michael@0 64 "vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=";
michael@0 65
michael@0 66 /* Comodo Secure Services root */
michael@0 67 static const char kComodo_Secure_Services_rootFingerprint[] =
michael@0 68 "RpHL/ehKa2BS3b4VK7DCFq4lqG5XR4E9vA8UfzOFcL4=";
michael@0 69
michael@0 70 /* Comodo Trusted Services root */
michael@0 71 static const char kComodo_Trusted_Services_rootFingerprint[] =
michael@0 72 "4tiR77c4ZpEF1TDeXtcuKyrD9KZweLU0mz/ayklvXrg=";
michael@0 73
michael@0 74 /* Cybertrust Global Root */
michael@0 75 static const char kCybertrust_Global_RootFingerprint[] =
michael@0 76 "foeCwVDOOVL4AuY2AjpdPpW7XWjjPoWtsroXgSXOvxU=";
michael@0 77
michael@0 78 /* DigiCert Assured ID Root CA */
michael@0 79 static const char kDigiCert_Assured_ID_Root_CAFingerprint[] =
michael@0 80 "I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o=";
michael@0 81
michael@0 82 /* DigiCert ECC Secure Server CA */
michael@0 83 static const char kDigiCert_ECC_Secure_Server_CAFingerprint[] =
michael@0 84 "PZXN3lRAy+8tBKk2Ox6F7jIlnzr2Yzmwqc3JnyfXoCw=";
michael@0 85
michael@0 86 /* DigiCert Global Root CA */
michael@0 87 static const char kDigiCert_Global_Root_CAFingerprint[] =
michael@0 88 "r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E=";
michael@0 89
michael@0 90 /* DigiCert High Assurance EV Root CA */
michael@0 91 static const char kDigiCert_High_Assurance_EV_Root_CAFingerprint[] =
michael@0 92 "WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=";
michael@0 93
michael@0 94 /* End Entity Test Cert */
michael@0 95 static const char kEnd_Entity_Test_CertFingerprint[] =
michael@0 96 "pVVgLk2kFI2WWRPwDMIX6YmzFhEW4DXQV/U5gP+feGA=";
michael@0 97
michael@0 98 /* Entrust Root Certification Authority */
michael@0 99 static const char kEntrust_Root_Certification_AuthorityFingerprint[] =
michael@0 100 "bb+uANN7nNc/j7R95lkXrwDg3d9C286sIMF8AnXuIJU=";
michael@0 101
michael@0 102 /* Entrust.net Premium 2048 Secure Server CA */
michael@0 103 static const char kEntrust_net_Premium_2048_Secure_Server_CAFingerprint[] =
michael@0 104 "HqPF5D7WbC2imDpCpKebHpBnhs6fG1hiFBmgBGOofTg=";
michael@0 105
michael@0 106 /* Equifax Secure CA */
michael@0 107 static const char kEquifax_Secure_CAFingerprint[] =
michael@0 108 "/1aAzXOlcD2gSBegdf1GJQanNQbEuBoVg+9UlHjSZHY=";
michael@0 109
michael@0 110 /* Equifax Secure Global eBusiness CA */
michael@0 111 static const char kEquifax_Secure_Global_eBusiness_CAFingerprint[] =
michael@0 112 "pvH5v4oKndwID7SbHvw9GhwsMtwOE2pbAMlzFvKj3BE=";
michael@0 113
michael@0 114 /* Equifax Secure eBusiness CA 1 */
michael@0 115 static const char kEquifax_Secure_eBusiness_CA_1Fingerprint[] =
michael@0 116 "JsGNxu6m9jL2drzrodjCtINS8pwtX82oeOCdy4Mt1uU=";
michael@0 117
michael@0 118 /* GOOGLE_PIN_AlphaSSL_G2 */
michael@0 119 static const char kGOOGLE_PIN_AlphaSSL_G2Fingerprint[] =
michael@0 120 "yxgiWGK++SFB9ySwt3M3qpn5HO0ZLFY5D+h+G/vcT/c=";
michael@0 121
michael@0 122 /* GOOGLE_PIN_CryptoCat1 */
michael@0 123 static const char kGOOGLE_PIN_CryptoCat1Fingerprint[] =
michael@0 124 "vKaqtTLWmVuXPVJE+0OqN5sRc4VCcSQHI/W3XTDVR24=";
michael@0 125
michael@0 126 /* GOOGLE_PIN_EntrustRootEC1 */
michael@0 127 static const char kGOOGLE_PIN_EntrustRootEC1Fingerprint[] =
michael@0 128 "/qK31kX7pz11PB7Jp4cMQOH3sMVh6Se5hb9xGGbjbyI=";
michael@0 129
michael@0 130 /* GOOGLE_PIN_Entrust_G2 */
michael@0 131 static const char kGOOGLE_PIN_Entrust_G2Fingerprint[] =
michael@0 132 "du6FkDdMcVQ3u8prumAo6t3i3G27uMP2EOhR8R0at/U=";
michael@0 133
michael@0 134 /* GOOGLE_PIN_Entrust_SSL */
michael@0 135 static const char kGOOGLE_PIN_Entrust_SSLFingerprint[] =
michael@0 136 "nsxRNo6G40YPZsKV5JQt1TCA8nseQQr/LRqp1Oa8fnw=";
michael@0 137
michael@0 138 /* GOOGLE_PIN_GoDaddySecure */
michael@0 139 static const char kGOOGLE_PIN_GoDaddySecureFingerprint[] =
michael@0 140 "MrZLZnJ6IGPkBm87lYywqu5Xal7O/ZUzmbuIdHMdlYc=";
michael@0 141
michael@0 142 /* GOOGLE_PIN_Libertylavabitcom */
michael@0 143 static const char kGOOGLE_PIN_LibertylavabitcomFingerprint[] =
michael@0 144 "WnKzsDXgqPtS1KvtImrhQPqcxfpmfssuI2cSJt4LMks=";
michael@0 145
michael@0 146 /* GOOGLE_PIN_RapidSSL */
michael@0 147 static const char kGOOGLE_PIN_RapidSSLFingerprint[] =
michael@0 148 "lT09gPUeQfbYrlxRtpsHrjDblj9Rpz+u7ajfCrg4qDM=";
michael@0 149
michael@0 150 /* GOOGLE_PIN_Tor2web */
michael@0 151 static const char kGOOGLE_PIN_Tor2webFingerprint[] =
michael@0 152 "99ogQzjMuUTBkG1ZP7FME0K4kvBEti8Buzu4nZjRItM=";
michael@0 153
michael@0 154 /* GTE CyberTrust Global Root */
michael@0 155 static const char kGTE_CyberTrust_Global_RootFingerprint[] =
michael@0 156 "EGn6R6CqT4z3ERscrqNl7q7RC//zJmDe9uBhS/rnCHU=";
michael@0 157
michael@0 158 /* GeoTrust Global CA */
michael@0 159 static const char kGeoTrust_Global_CAFingerprint[] =
michael@0 160 "h6801m+z8v3zbgkRHpq6L29Esgfzhj89C1SyUCOQmqU=";
michael@0 161
michael@0 162 /* GeoTrust Global CA 2 */
michael@0 163 static const char kGeoTrust_Global_CA_2Fingerprint[] =
michael@0 164 "F3VaXClfPS1y5vAxofB/QAxYi55YKyLxfq4xoVkNEYU=";
michael@0 165
michael@0 166 /* GeoTrust Primary Certification Authority */
michael@0 167 static const char kGeoTrust_Primary_Certification_AuthorityFingerprint[] =
michael@0 168 "SQVGZiOrQXi+kqxcvWWE96HhfydlLVqFr4lQTqI5qqo=";
michael@0 169
michael@0 170 /* GeoTrust Primary Certification Authority - G2 */
michael@0 171 static const char kGeoTrust_Primary_Certification_Authority___G2Fingerprint[] =
michael@0 172 "vPtEqrmtAhAVcGtBIep2HIHJ6IlnWQ9vlK50TciLePs=";
michael@0 173
michael@0 174 /* GeoTrust Primary Certification Authority - G3 */
michael@0 175 static const char kGeoTrust_Primary_Certification_Authority___G3Fingerprint[] =
michael@0 176 "q5hJUnat8eyv8o81xTBIeB5cFxjaucjmelBPT2pRMo8=";
michael@0 177
michael@0 178 /* GeoTrust Universal CA */
michael@0 179 static const char kGeoTrust_Universal_CAFingerprint[] =
michael@0 180 "lpkiXF3lLlbN0y3y6W0c/qWqPKC7Us2JM8I7XCdEOCA=";
michael@0 181
michael@0 182 /* GeoTrust Universal CA 2 */
michael@0 183 static const char kGeoTrust_Universal_CA_2Fingerprint[] =
michael@0 184 "fKoDRlEkWQxgHlZ+UhSOlSwM/+iQAFMP4NlbbVDqrkE=";
michael@0 185
michael@0 186 /* GlobalSign Root CA */
michael@0 187 static const char kGlobalSign_Root_CAFingerprint[] =
michael@0 188 "K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=";
michael@0 189
michael@0 190 /* GlobalSign Root CA - R2 */
michael@0 191 static const char kGlobalSign_Root_CA___R2Fingerprint[] =
michael@0 192 "iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0=";
michael@0 193
michael@0 194 /* GlobalSign Root CA - R3 */
michael@0 195 static const char kGlobalSign_Root_CA___R3Fingerprint[] =
michael@0 196 "cGuxAXyFXFkWm61cF4HPWX8S0srS9j0aSqN0k4AP+4A=";
michael@0 197
michael@0 198 /* Go Daddy Class 2 CA */
michael@0 199 static const char kGo_Daddy_Class_2_CAFingerprint[] =
michael@0 200 "VjLZe/p3W/PJnd6lL8JVNBCGQBZynFLdZSTIqcO0SJ8=";
michael@0 201
michael@0 202 /* Go Daddy Root Certificate Authority - G2 */
michael@0 203 static const char kGo_Daddy_Root_Certificate_Authority___G2Fingerprint[] =
michael@0 204 "Ko8tivDrEjiY90yGasP6ZpBU4jwXvHqVvQI0GS3GNdA=";
michael@0 205
michael@0 206 /* GoogleBackup2048 */
michael@0 207 static const char kGoogleBackup2048Fingerprint[] =
michael@0 208 "vq7OyjSnqOco9nyMCDGdy77eijM=";
michael@0 209
michael@0 210 /* GoogleG2 */
michael@0 211 static const char kGoogleG2Fingerprint[] =
michael@0 212 "Q9rWMO5T+KmAym79hfRqo3mQ4Oo=";
michael@0 213
michael@0 214 /* Network Solutions Certificate Authority */
michael@0 215 static const char kNetwork_Solutions_Certificate_AuthorityFingerprint[] =
michael@0 216 "MtGA7THJNVieydu7ciEjuIO1/C3BD5/KOpXXfhv8tTQ=";
michael@0 217
michael@0 218 /* Starfield Class 2 CA */
michael@0 219 static const char kStarfield_Class_2_CAFingerprint[] =
michael@0 220 "FfFKxFycfaIz00eRZOgTf+Ne4POK6FgYPwhBDqgqxLQ=";
michael@0 221
michael@0 222 /* Starfield Root Certificate Authority - G2 */
michael@0 223 static const char kStarfield_Root_Certificate_Authority___G2Fingerprint[] =
michael@0 224 "gI1os/q0iEpflxrOfRBVDXqVoWN3Tz7Dav/7IT++THQ=";
michael@0 225
michael@0 226 /* Starfield Services Root Certificate Authority - G2 */
michael@0 227 static const char kStarfield_Services_Root_Certificate_Authority___G2Fingerprint[] =
michael@0 228 "KwccWaCgrnaw6tsrrSO61FgLacNgG2MMLq8GE6+oP5I=";
michael@0 229
michael@0 230 /* StartCom Certification Authority */
michael@0 231 static const char kStartCom_Certification_AuthorityFingerprint[] =
michael@0 232 "5C8kvU039KouVrl52D0eZSGf4Onjo4Khs8tmyTlV3nU=";
michael@0 233
michael@0 234 /* StartCom Certification Authority G2 */
michael@0 235 static const char kStartCom_Certification_Authority_G2Fingerprint[] =
michael@0 236 "FSg5faISiQqDCwuVpZlozvI0dzd531GBzxD6ZHU0u2U=";
michael@0 237
michael@0 238 /* TC TrustCenter Class 2 CA II */
michael@0 239 static const char kTC_TrustCenter_Class_2_CA_IIFingerprint[] =
michael@0 240 "rPZeHWLLWKK6/W/6tA+4hpnEc5fPXLSD1C1pytNM1Is=";
michael@0 241
michael@0 242 /* TC TrustCenter Class 3 CA II */
michael@0 243 static const char kTC_TrustCenter_Class_3_CA_IIFingerprint[] =
michael@0 244 "k5KuIUmSSt435kXbof9L3dzaKykbYJdmnSr6XHo3Jhk=";
michael@0 245
michael@0 246 /* TC TrustCenter Universal CA I */
michael@0 247 static const char kTC_TrustCenter_Universal_CA_IFingerprint[] =
michael@0 248 "st71NirT+s0EvSkEekOET3ZwNOpIkvgOVr7mkCQ+JQI=";
michael@0 249
michael@0 250 /* TC TrustCenter Universal CA III */
michael@0 251 static const char kTC_TrustCenter_Universal_CA_IIIFingerprint[] =
michael@0 252 "q1zbM1Y5c1bW5pGXPCW4YYtl12qQSG6nqKXBd2f0Zzo=";
michael@0 253
michael@0 254 /* TestSPKI */
michael@0 255 static const char kTestSPKIFingerprint[] =
michael@0 256 "AAAAAAAAAAAAAAAAAAAAAAAAAAA=";
michael@0 257
michael@0 258 /* Thawte Premium Server CA */
michael@0 259 static const char kThawte_Premium_Server_CAFingerprint[] =
michael@0 260 "9TwiBZgX3Zb0AGUWOdL4V+IQcKWavtkHlADZ9pVQaQA=";
michael@0 261
michael@0 262 /* Thawte Server CA */
michael@0 263 static const char kThawte_Server_CAFingerprint[] =
michael@0 264 "nG9qEjy6pO402+zu4kyX1ziHjLQj88InOQNCT10fbdU=";
michael@0 265
michael@0 266 /* Tor1 */
michael@0 267 static const char kTor1Fingerprint[] =
michael@0 268 "juNxSTv9UANmpC9kF5GKpmWNx3Y=";
michael@0 269
michael@0 270 /* Tor2 */
michael@0 271 static const char kTor2Fingerprint[] =
michael@0 272 "lia43lPolzSPVIq34Dw57uYcLD8=";
michael@0 273
michael@0 274 /* Tor3 */
michael@0 275 static const char kTor3Fingerprint[] =
michael@0 276 "rzEyQIKOh77j87n5bjWUNguXF8Y=";
michael@0 277
michael@0 278 /* Twitter1 */
michael@0 279 static const char kTwitter1Fingerprint[] =
michael@0 280 "Vv7zwhR9TtOIN/29MFI4cgHld40=";
michael@0 281
michael@0 282 /* UTN DATACorp SGC Root CA */
michael@0 283 static const char kUTN_DATACorp_SGC_Root_CAFingerprint[] =
michael@0 284 "QAL80xHQczFWfnG82XHkYEjI3OjRZZcRdTs9qiommvo=";
michael@0 285
michael@0 286 /* UTN USERFirst Email Root CA */
michael@0 287 static const char kUTN_USERFirst_Email_Root_CAFingerprint[] =
michael@0 288 "Laj56jRU0hFGRko/nQKNxMf7tXscUsc8KwVyovWZotM=";
michael@0 289
michael@0 290 /* UTN USERFirst Hardware Root CA */
michael@0 291 static const char kUTN_USERFirst_Hardware_Root_CAFingerprint[] =
michael@0 292 "TUDnr0MEoJ3of7+YliBMBVFB4/gJsv5zO7IxD9+YoWI=";
michael@0 293
michael@0 294 /* UTN USERFirst Object Root CA */
michael@0 295 static const char kUTN_USERFirst_Object_Root_CAFingerprint[] =
michael@0 296 "D+FMJksXu28NZT56cOs2Pb9UvhWAOe3a5cJXEd9IwQM=";
michael@0 297
michael@0 298 /* VeriSign Class 3 Public Primary Certification Authority - G4 */
michael@0 299 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint[] =
michael@0 300 "UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4=";
michael@0 301
michael@0 302 /* VeriSign Class 3 Public Primary Certification Authority - G5 */
michael@0 303 static const char kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint[] =
michael@0 304 "JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=";
michael@0 305
michael@0 306 /* VeriSign Universal Root Certification Authority */
michael@0 307 static const char kVeriSign_Universal_Root_Certification_AuthorityFingerprint[] =
michael@0 308 "lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI=";
michael@0 309
michael@0 310 /* Verisign Class 1 Public Primary Certification Authority */
michael@0 311 static const char kVerisign_Class_1_Public_Primary_Certification_AuthorityFingerprint[] =
michael@0 312 "LclHC+Y+9KzxvYKGCUArt7h72ZY4pkOTTohoLRvowwg=";
michael@0 313
michael@0 314 /* Verisign Class 1 Public Primary Certification Authority - G3 */
michael@0 315 static const char kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint[] =
michael@0 316 "IgduWu9Eu5pBaii30cRDItcFn2D+/6XK9sW+hEeJEwM=";
michael@0 317
michael@0 318 /* Verisign Class 2 Public Primary Certification Authority - G2 */
michael@0 319 static const char kVerisign_Class_2_Public_Primary_Certification_Authority___G2Fingerprint[] =
michael@0 320 "2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8=";
michael@0 321
michael@0 322 /* Verisign Class 2 Public Primary Certification Authority - G3 */
michael@0 323 static const char kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint[] =
michael@0 324 "cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=";
michael@0 325
michael@0 326 /* Verisign Class 3 Public Primary Certification Authority */
michael@0 327 static const char kVerisign_Class_3_Public_Primary_Certification_AuthorityFingerprint[] =
michael@0 328 "sRJBQqWhpaKIGcc1NA7/jJ4vgWj+47oYfyU7waOS1+I=";
michael@0 329
michael@0 330 /* Verisign Class 3 Public Primary Certification Authority - G2 */
michael@0 331 static const char kVerisign_Class_3_Public_Primary_Certification_Authority___G2Fingerprint[] =
michael@0 332 "AjyBzOjnxk+pQtPBUEhwfTXZu1uH9PVExb8bxWQ68vo=";
michael@0 333
michael@0 334 /* Verisign Class 3 Public Primary Certification Authority - G3 */
michael@0 335 static const char kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint[] =
michael@0 336 "SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4=";
michael@0 337
michael@0 338 /* Verisign Class 4 Public Primary Certification Authority - G3 */
michael@0 339 static const char kVerisign_Class_4_Public_Primary_Certification_Authority___G3Fingerprint[] =
michael@0 340 "VnuCEf0g09KD7gzXzgZyy52ZvFtIeljJ1U7Gf3fUqPU=";
michael@0 341
michael@0 342 /* XRamp Global CA Root */
michael@0 343 static const char kXRamp_Global_CA_RootFingerprint[] =
michael@0 344 "BRz5+pXkDpuD7a7aaWH2Fox4ecRmAXJHnN1RqwPOpis=";
michael@0 345
michael@0 346 /* thawte Primary Root CA */
michael@0 347 static const char kthawte_Primary_Root_CAFingerprint[] =
michael@0 348 "HXXQgxueCIU5TTLHob/bPbwcKOKw6DkfsTWYHbxbqTY=";
michael@0 349
michael@0 350 /* thawte Primary Root CA - G2 */
michael@0 351 static const char kthawte_Primary_Root_CA___G2Fingerprint[] =
michael@0 352 "Z9xPMvoQ59AaeaBzqgyeAhLsL/w9d54Kp/nA8OHCyJM=";
michael@0 353
michael@0 354 /* thawte Primary Root CA - G3 */
michael@0 355 static const char kthawte_Primary_Root_CA___G3Fingerprint[] =
michael@0 356 "GQbGEk27Q4V40A4GbVBUxsN/D6YCjAVUXgmU7drshik=";
michael@0 357
michael@0 358 /* Pinsets are each an ordered list by the actual value of the fingerprint */
michael@0 359 struct StaticFingerprints {
michael@0 360 const size_t size;
michael@0 361 const char* const* data;
michael@0 362 };
michael@0 363
michael@0 364 struct StaticPinset {
michael@0 365 const StaticFingerprints* sha1;
michael@0 366 const StaticFingerprints* sha256;
michael@0 367 };
michael@0 368
michael@0 369 /* PreloadedHPKPins.json pinsets */
michael@0 370 static const char* kPinset_facebook_sha256_Data[] = {
michael@0 371 kDigiCert_ECC_Secure_Server_CAFingerprint,
michael@0 372 kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 373 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 374 };
michael@0 375 static const StaticFingerprints kPinset_facebook_sha256 = {
michael@0 376 sizeof(kPinset_facebook_sha256_Data) / sizeof(const char*),
michael@0 377 kPinset_facebook_sha256_Data
michael@0 378 };
michael@0 379
michael@0 380 static const StaticPinset kPinset_facebook = {
michael@0 381 nullptr,
michael@0 382 &kPinset_facebook_sha256
michael@0 383 };
michael@0 384
michael@0 385 static const char* kPinset_google_root_pems_sha256_Data[] = {
michael@0 386 kEquifax_Secure_CAFingerprint,
michael@0 387 kAmerica_Online_Root_Certification_Authority_2Fingerprint,
michael@0 388 kComodo_Trusted_Services_rootFingerprint,
michael@0 389 kCOMODO_ECC_Certification_AuthorityFingerprint,
michael@0 390 kStartCom_Certification_AuthorityFingerprint,
michael@0 391 kStartCom_Certification_AuthorityFingerprint,
michael@0 392 kThawte_Premium_Server_CAFingerprint,
michael@0 393 kCOMODO_Certification_AuthorityFingerprint,
michael@0 394 kVerisign_Class_3_Public_Primary_Certification_Authority___G2Fingerprint,
michael@0 395 kXRamp_Global_CA_RootFingerprint,
michael@0 396 kAddTrust_Low_Value_Services_RootFingerprint,
michael@0 397 kGeoTrust_Global_CA_2Fingerprint,
michael@0 398 kStartCom_Certification_Authority_G2Fingerprint,
michael@0 399 kStarfield_Class_2_CAFingerprint,
michael@0 400 kthawte_Primary_Root_CA___G3Fingerprint,
michael@0 401 kthawte_Primary_Root_CAFingerprint,
michael@0 402 kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
michael@0 403 kDigiCert_Assured_ID_Root_CAFingerprint,
michael@0 404 kAmerica_Online_Root_Certification_Authority_1Fingerprint,
michael@0 405 kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
michael@0 406 kEquifax_Secure_eBusiness_CA_1Fingerprint,
michael@0 407 kGlobalSign_Root_CAFingerprint,
michael@0 408 kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
michael@0 409 kStarfield_Services_Root_Certificate_Authority___G2Fingerprint,
michael@0 410 kAffirmTrust_Premium_ECCFingerprint,
michael@0 411 kNetwork_Solutions_Certificate_AuthorityFingerprint,
michael@0 412 kAddTrust_Public_Services_RootFingerprint,
michael@0 413 kUTN_DATACorp_SGC_Root_CAFingerprint,
michael@0 414 kComodo_Secure_Services_rootFingerprint,
michael@0 415 kGeoTrust_Primary_Certification_AuthorityFingerprint,
michael@0 416 kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 417 kUTN_USERFirst_Hardware_Root_CAFingerprint,
michael@0 418 kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
michael@0 419 kGo_Daddy_Class_2_CAFingerprint,
michael@0 420 kVerisign_Class_4_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 421 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 422 kBaltimore_CyberTrust_RootFingerprint,
michael@0 423 kthawte_Primary_Root_CA___G2Fingerprint,
michael@0 424 kAffirmTrust_CommercialFingerprint,
michael@0 425 kEntrust_Root_Certification_AuthorityFingerprint,
michael@0 426 kGlobalSign_Root_CA___R3Fingerprint,
michael@0 427 kGeoTrust_Universal_CA_2Fingerprint,
michael@0 428 kCybertrust_Global_RootFingerprint,
michael@0 429 kStarfield_Root_Certificate_Authority___G2Fingerprint,
michael@0 430 kGeoTrust_Global_CAFingerprint,
michael@0 431 kGlobalSign_Root_CA___R2Fingerprint,
michael@0 432 kTC_TrustCenter_Class_3_CA_IIFingerprint,
michael@0 433 kAffirmTrust_NetworkingFingerprint,
michael@0 434 kAddTrust_External_RootFingerprint,
michael@0 435 kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
michael@0 436 kGeoTrust_Universal_CAFingerprint,
michael@0 437 kThawte_Server_CAFingerprint,
michael@0 438 kEquifax_Secure_Global_eBusiness_CAFingerprint,
michael@0 439 kTC_TrustCenter_Universal_CA_IIIFingerprint,
michael@0 440 kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
michael@0 441 kDigiCert_Global_Root_CAFingerprint,
michael@0 442 kTC_TrustCenter_Class_2_CA_IIFingerprint,
michael@0 443 kVerisign_Class_3_Public_Primary_Certification_AuthorityFingerprint,
michael@0 444 kVerisign_Class_3_Public_Primary_Certification_AuthorityFingerprint,
michael@0 445 kTC_TrustCenter_Universal_CA_IFingerprint,
michael@0 446 kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
michael@0 447 kComodo_AAA_Services_rootFingerprint,
michael@0 448 kAffirmTrust_PremiumFingerprint,
michael@0 449 kAddTrust_Qualified_Certificates_RootFingerprint,
michael@0 450 };
michael@0 451 static const StaticFingerprints kPinset_google_root_pems_sha256 = {
michael@0 452 sizeof(kPinset_google_root_pems_sha256_Data) / sizeof(const char*),
michael@0 453 kPinset_google_root_pems_sha256_Data
michael@0 454 };
michael@0 455
michael@0 456 static const StaticPinset kPinset_google_root_pems = {
michael@0 457 nullptr,
michael@0 458 &kPinset_google_root_pems_sha256
michael@0 459 };
michael@0 460
michael@0 461 static const char* kPinset_mozilla_sha256_Data[] = {
michael@0 462 kGeoTrust_Global_CA_2Fingerprint,
michael@0 463 kthawte_Primary_Root_CA___G3Fingerprint,
michael@0 464 kthawte_Primary_Root_CAFingerprint,
michael@0 465 kDigiCert_Assured_ID_Root_CAFingerprint,
michael@0 466 kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 467 kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
michael@0 468 kGeoTrust_Primary_Certification_AuthorityFingerprint,
michael@0 469 kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 470 kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
michael@0 471 kVerisign_Class_4_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 472 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 473 kBaltimore_CyberTrust_RootFingerprint,
michael@0 474 kthawte_Primary_Root_CA___G2Fingerprint,
michael@0 475 kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 476 kGeoTrust_Universal_CA_2Fingerprint,
michael@0 477 kGeoTrust_Global_CAFingerprint,
michael@0 478 kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
michael@0 479 kGeoTrust_Universal_CAFingerprint,
michael@0 480 kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
michael@0 481 kDigiCert_Global_Root_CAFingerprint,
michael@0 482 kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
michael@0 483 };
michael@0 484 static const StaticFingerprints kPinset_mozilla_sha256 = {
michael@0 485 sizeof(kPinset_mozilla_sha256_Data) / sizeof(const char*),
michael@0 486 kPinset_mozilla_sha256_Data
michael@0 487 };
michael@0 488
michael@0 489 static const StaticPinset kPinset_mozilla = {
michael@0 490 nullptr,
michael@0 491 &kPinset_mozilla_sha256
michael@0 492 };
michael@0 493
michael@0 494 static const char* kPinset_mozilla_services_sha256_Data[] = {
michael@0 495 kDigiCert_Global_Root_CAFingerprint,
michael@0 496 };
michael@0 497 static const StaticFingerprints kPinset_mozilla_services_sha256 = {
michael@0 498 sizeof(kPinset_mozilla_services_sha256_Data) / sizeof(const char*),
michael@0 499 kPinset_mozilla_services_sha256_Data
michael@0 500 };
michael@0 501
michael@0 502 static const StaticPinset kPinset_mozilla_services = {
michael@0 503 nullptr,
michael@0 504 &kPinset_mozilla_services_sha256
michael@0 505 };
michael@0 506
michael@0 507 static const char* kPinset_mozilla_test_sha256_Data[] = {
michael@0 508 kEnd_Entity_Test_CertFingerprint,
michael@0 509 };
michael@0 510 static const StaticFingerprints kPinset_mozilla_test_sha256 = {
michael@0 511 sizeof(kPinset_mozilla_test_sha256_Data) / sizeof(const char*),
michael@0 512 kPinset_mozilla_test_sha256_Data
michael@0 513 };
michael@0 514
michael@0 515 static const StaticPinset kPinset_mozilla_test = {
michael@0 516 nullptr,
michael@0 517 &kPinset_mozilla_test_sha256
michael@0 518 };
michael@0 519
michael@0 520 /* Chrome static pinsets */
michael@0 521 static const char* kPinset_test_sha1_Data[] = {
michael@0 522 kTestSPKIFingerprint,
michael@0 523 };
michael@0 524 static const StaticFingerprints kPinset_test_sha1 = {
michael@0 525 sizeof(kPinset_test_sha1_Data) / sizeof(const char*),
michael@0 526 kPinset_test_sha1_Data
michael@0 527 };
michael@0 528
michael@0 529 static const StaticPinset kPinset_test = {
michael@0 530 &kPinset_test_sha1,
michael@0 531 nullptr
michael@0 532 };
michael@0 533
michael@0 534 static const char* kPinset_google_sha1_Data[] = {
michael@0 535 kGoogleG2Fingerprint,
michael@0 536 kGoogleBackup2048Fingerprint,
michael@0 537 };
michael@0 538 static const StaticFingerprints kPinset_google_sha1 = {
michael@0 539 sizeof(kPinset_google_sha1_Data) / sizeof(const char*),
michael@0 540 kPinset_google_sha1_Data
michael@0 541 };
michael@0 542
michael@0 543 static const StaticPinset kPinset_google = {
michael@0 544 &kPinset_google_sha1,
michael@0 545 nullptr
michael@0 546 };
michael@0 547
michael@0 548 static const char* kPinset_tor_sha1_Data[] = {
michael@0 549 kTor1Fingerprint,
michael@0 550 kTor2Fingerprint,
michael@0 551 kTor3Fingerprint,
michael@0 552 };
michael@0 553 static const StaticFingerprints kPinset_tor_sha1 = {
michael@0 554 sizeof(kPinset_tor_sha1_Data) / sizeof(const char*),
michael@0 555 kPinset_tor_sha1_Data
michael@0 556 };
michael@0 557
michael@0 558 static const char* kPinset_tor_sha256_Data[] = {
michael@0 559 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 560 kGOOGLE_PIN_RapidSSLFingerprint,
michael@0 561 };
michael@0 562 static const StaticFingerprints kPinset_tor_sha256 = {
michael@0 563 sizeof(kPinset_tor_sha256_Data) / sizeof(const char*),
michael@0 564 kPinset_tor_sha256_Data
michael@0 565 };
michael@0 566
michael@0 567 static const StaticPinset kPinset_tor = {
michael@0 568 &kPinset_tor_sha1,
michael@0 569 &kPinset_tor_sha256
michael@0 570 };
michael@0 571
michael@0 572 static const char* kPinset_twitterCom_sha1_Data[] = {
michael@0 573 kTwitter1Fingerprint,
michael@0 574 };
michael@0 575 static const StaticFingerprints kPinset_twitterCom_sha1 = {
michael@0 576 sizeof(kPinset_twitterCom_sha1_Data) / sizeof(const char*),
michael@0 577 kPinset_twitterCom_sha1_Data
michael@0 578 };
michael@0 579
michael@0 580 static const char* kPinset_twitterCom_sha256_Data[] = {
michael@0 581 kVerisign_Class_2_Public_Primary_Certification_Authority___G2Fingerprint,
michael@0 582 kVerisign_Class_3_Public_Primary_Certification_Authority___G2Fingerprint,
michael@0 583 kGeoTrust_Global_CA_2Fingerprint,
michael@0 584 kDigiCert_Assured_ID_Root_CAFingerprint,
michael@0 585 kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 586 kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
michael@0 587 kVerisign_Class_1_Public_Primary_Certification_AuthorityFingerprint,
michael@0 588 kGeoTrust_Primary_Certification_AuthorityFingerprint,
michael@0 589 kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 590 kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
michael@0 591 kVerisign_Class_4_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 592 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 593 kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 594 kGeoTrust_Universal_CA_2Fingerprint,
michael@0 595 kGeoTrust_Global_CAFingerprint,
michael@0 596 kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
michael@0 597 kGeoTrust_Universal_CAFingerprint,
michael@0 598 kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
michael@0 599 kDigiCert_Global_Root_CAFingerprint,
michael@0 600 kVerisign_Class_3_Public_Primary_Certification_AuthorityFingerprint,
michael@0 601 kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
michael@0 602 };
michael@0 603 static const StaticFingerprints kPinset_twitterCom_sha256 = {
michael@0 604 sizeof(kPinset_twitterCom_sha256_Data) / sizeof(const char*),
michael@0 605 kPinset_twitterCom_sha256_Data
michael@0 606 };
michael@0 607
michael@0 608 static const StaticPinset kPinset_twitterCom = {
michael@0 609 &kPinset_twitterCom_sha1,
michael@0 610 &kPinset_twitterCom_sha256
michael@0 611 };
michael@0 612
michael@0 613 static const char* kPinset_twitterCDN_sha1_Data[] = {
michael@0 614 kTwitter1Fingerprint,
michael@0 615 };
michael@0 616 static const StaticFingerprints kPinset_twitterCDN_sha1 = {
michael@0 617 sizeof(kPinset_twitterCDN_sha1_Data) / sizeof(const char*),
michael@0 618 kPinset_twitterCDN_sha1_Data
michael@0 619 };
michael@0 620
michael@0 621 static const char* kPinset_twitterCDN_sha256_Data[] = {
michael@0 622 kVerisign_Class_2_Public_Primary_Certification_Authority___G2Fingerprint,
michael@0 623 kComodo_Trusted_Services_rootFingerprint,
michael@0 624 kCOMODO_Certification_AuthorityFingerprint,
michael@0 625 kVerisign_Class_3_Public_Primary_Certification_Authority___G2Fingerprint,
michael@0 626 kAddTrust_Low_Value_Services_RootFingerprint,
michael@0 627 kUTN_USERFirst_Object_Root_CAFingerprint,
michael@0 628 kGTE_CyberTrust_Global_RootFingerprint,
michael@0 629 kGeoTrust_Global_CA_2Fingerprint,
michael@0 630 kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
michael@0 631 kDigiCert_Assured_ID_Root_CAFingerprint,
michael@0 632 kVerisign_Class_1_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 633 kVeriSign_Class_3_Public_Primary_Certification_Authority___G5Fingerprint,
michael@0 634 kGlobalSign_Root_CAFingerprint,
michael@0 635 kUTN_USERFirst_Email_Root_CAFingerprint,
michael@0 636 kVerisign_Class_1_Public_Primary_Certification_AuthorityFingerprint,
michael@0 637 kAddTrust_Public_Services_RootFingerprint,
michael@0 638 kUTN_DATACorp_SGC_Root_CAFingerprint,
michael@0 639 kComodo_Secure_Services_rootFingerprint,
michael@0 640 kGeoTrust_Primary_Certification_AuthorityFingerprint,
michael@0 641 kVerisign_Class_3_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 642 kUTN_USERFirst_Hardware_Root_CAFingerprint,
michael@0 643 kVeriSign_Class_3_Public_Primary_Certification_Authority___G4Fingerprint,
michael@0 644 kVerisign_Class_4_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 645 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 646 kBaltimore_CyberTrust_RootFingerprint,
michael@0 647 kEntrust_Root_Certification_AuthorityFingerprint,
michael@0 648 kVerisign_Class_2_Public_Primary_Certification_Authority___G3Fingerprint,
michael@0 649 kGlobalSign_Root_CA___R3Fingerprint,
michael@0 650 kGOOGLE_PIN_Entrust_G2Fingerprint,
michael@0 651 kGeoTrust_Universal_CA_2Fingerprint,
michael@0 652 kGeoTrust_Global_CAFingerprint,
michael@0 653 kGlobalSign_Root_CA___R2Fingerprint,
michael@0 654 kAddTrust_External_RootFingerprint,
michael@0 655 kVeriSign_Universal_Root_Certification_AuthorityFingerprint,
michael@0 656 kGeoTrust_Universal_CAFingerprint,
michael@0 657 kGOOGLE_PIN_Entrust_SSLFingerprint,
michael@0 658 kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
michael@0 659 kDigiCert_Global_Root_CAFingerprint,
michael@0 660 kVerisign_Class_3_Public_Primary_Certification_AuthorityFingerprint,
michael@0 661 kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
michael@0 662 kComodo_AAA_Services_rootFingerprint,
michael@0 663 kAddTrust_Qualified_Certificates_RootFingerprint,
michael@0 664 };
michael@0 665 static const StaticFingerprints kPinset_twitterCDN_sha256 = {
michael@0 666 sizeof(kPinset_twitterCDN_sha256_Data) / sizeof(const char*),
michael@0 667 kPinset_twitterCDN_sha256_Data
michael@0 668 };
michael@0 669
michael@0 670 static const StaticPinset kPinset_twitterCDN = {
michael@0 671 &kPinset_twitterCDN_sha1,
michael@0 672 &kPinset_twitterCDN_sha256
michael@0 673 };
michael@0 674
michael@0 675 static const char* kPinset_tor2web_sha256_Data[] = {
michael@0 676 kGOOGLE_PIN_Tor2webFingerprint,
michael@0 677 kGOOGLE_PIN_AlphaSSL_G2Fingerprint,
michael@0 678 };
michael@0 679 static const StaticFingerprints kPinset_tor2web_sha256 = {
michael@0 680 sizeof(kPinset_tor2web_sha256_Data) / sizeof(const char*),
michael@0 681 kPinset_tor2web_sha256_Data
michael@0 682 };
michael@0 683
michael@0 684 static const StaticPinset kPinset_tor2web = {
michael@0 685 nullptr,
michael@0 686 &kPinset_tor2web_sha256
michael@0 687 };
michael@0 688
michael@0 689 static const char* kPinset_cryptoCat_sha256_Data[] = {
michael@0 690 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 691 kGOOGLE_PIN_CryptoCat1Fingerprint,
michael@0 692 };
michael@0 693 static const StaticFingerprints kPinset_cryptoCat_sha256 = {
michael@0 694 sizeof(kPinset_cryptoCat_sha256_Data) / sizeof(const char*),
michael@0 695 kPinset_cryptoCat_sha256_Data
michael@0 696 };
michael@0 697
michael@0 698 static const StaticPinset kPinset_cryptoCat = {
michael@0 699 nullptr,
michael@0 700 &kPinset_cryptoCat_sha256
michael@0 701 };
michael@0 702
michael@0 703 static const char* kPinset_lavabit_sha256_Data[] = {
michael@0 704 kGOOGLE_PIN_LibertylavabitcomFingerprint,
michael@0 705 };
michael@0 706 static const StaticFingerprints kPinset_lavabit_sha256 = {
michael@0 707 sizeof(kPinset_lavabit_sha256_Data) / sizeof(const char*),
michael@0 708 kPinset_lavabit_sha256_Data
michael@0 709 };
michael@0 710
michael@0 711 static const StaticPinset kPinset_lavabit = {
michael@0 712 nullptr,
michael@0 713 &kPinset_lavabit_sha256
michael@0 714 };
michael@0 715
michael@0 716 static const char* kPinset_dropbox_sha256_Data[] = {
michael@0 717 kGOOGLE_PIN_EntrustRootEC1Fingerprint,
michael@0 718 kThawte_Premium_Server_CAFingerprint,
michael@0 719 kthawte_Primary_Root_CA___G3Fingerprint,
michael@0 720 kthawte_Primary_Root_CAFingerprint,
michael@0 721 kEntrust_net_Premium_2048_Secure_Server_CAFingerprint,
michael@0 722 kDigiCert_Assured_ID_Root_CAFingerprint,
michael@0 723 kGo_Daddy_Root_Certificate_Authority___G2Fingerprint,
michael@0 724 kGOOGLE_PIN_GoDaddySecureFingerprint,
michael@0 725 kGeoTrust_Primary_Certification_AuthorityFingerprint,
michael@0 726 kGo_Daddy_Class_2_CAFingerprint,
michael@0 727 kDigiCert_High_Assurance_EV_Root_CAFingerprint,
michael@0 728 kthawte_Primary_Root_CA___G2Fingerprint,
michael@0 729 kEntrust_Root_Certification_AuthorityFingerprint,
michael@0 730 kGOOGLE_PIN_Entrust_G2Fingerprint,
michael@0 731 kGeoTrust_Global_CAFingerprint,
michael@0 732 kGeoTrust_Primary_Certification_Authority___G3Fingerprint,
michael@0 733 kDigiCert_Global_Root_CAFingerprint,
michael@0 734 kGeoTrust_Primary_Certification_Authority___G2Fingerprint,
michael@0 735 };
michael@0 736 static const StaticFingerprints kPinset_dropbox_sha256 = {
michael@0 737 sizeof(kPinset_dropbox_sha256_Data) / sizeof(const char*),
michael@0 738 kPinset_dropbox_sha256_Data
michael@0 739 };
michael@0 740
michael@0 741 static const StaticPinset kPinset_dropbox = {
michael@0 742 nullptr,
michael@0 743 &kPinset_dropbox_sha256
michael@0 744 };
michael@0 745
michael@0 746 /* Domainlist */
michael@0 747 struct TransportSecurityPreload {
michael@0 748 const char* mHost;
michael@0 749 const bool mIncludeSubdomains;
michael@0 750 const bool mTestMode;
michael@0 751 const bool mIsMoz;
michael@0 752 const int32_t mId;
michael@0 753 const StaticPinset *pinset;
michael@0 754 };
michael@0 755
michael@0 756 /* Sort hostnames for binary search. */
michael@0 757 static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
michael@0 758 { "2mdn.net", true, false, false, -1, &kPinset_google_root_pems },
michael@0 759 { "accounts.firefox.com", true, false, false, 4, &kPinset_mozilla_services },
michael@0 760 { "accounts.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 761 { "addons.mozilla.net", true, false, true, 2, &kPinset_mozilla },
michael@0 762 { "addons.mozilla.org", true, false, true, 1, &kPinset_mozilla },
michael@0 763 { "admin.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 764 { "android.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 765 { "api.accounts.firefox.com", true, false, false, 5, &kPinset_mozilla_services },
michael@0 766 { "api.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
michael@0 767 { "apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 768 { "appengine.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 769 { "appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 770 { "aus4.mozilla.org", true, true, true, 3, &kPinset_mozilla },
michael@0 771 { "blog.torproject.org", true, false, false, -1, &kPinset_tor },
michael@0 772 { "business.twitter.com", true, false, false, -1, &kPinset_twitterCom },
michael@0 773 { "cdn.mozilla.net", true, false, true, -1, &kPinset_mozilla },
michael@0 774 { "cdn.mozilla.org", true, false, true, -1, &kPinset_mozilla },
michael@0 775 { "chart.apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 776 { "check.torproject.org", true, false, false, -1, &kPinset_tor },
michael@0 777 { "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 778 { "chrome-devtools-frontend.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 779 { "chrome.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 780 { "chromiumcodereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 781 { "cloud.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 782 { "code.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 783 { "codereview.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 784 { "codereview.chromium.org", true, false, false, -1, &kPinset_google_root_pems },
michael@0 785 { "crypto.cat", false, true, false, -1, &kPinset_cryptoCat },
michael@0 786 { "dev.twitter.com", true, false, false, -1, &kPinset_twitterCom },
michael@0 787 { "dist.torproject.org", true, false, false, -1, &kPinset_tor },
michael@0 788 { "dl.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 789 { "docs.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 790 { "domains.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 791 { "doubleclick.net", true, false, false, -1, &kPinset_google_root_pems },
michael@0 792 { "drive.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 793 { "dropbox.com", false, false, false, -1, &kPinset_dropbox },
michael@0 794 { "encrypted.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 795 { "exclude-subdomains.pinning.example.com", false, false, false, 0, &kPinset_mozilla_test },
michael@0 796 { "facebook.com", true, true, false, -1, &kPinset_facebook },
michael@0 797 { "g.co", true, false, false, -1, &kPinset_google_root_pems },
michael@0 798 { "glass.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 799 { "gmail.com", false, false, false, -1, &kPinset_google_root_pems },
michael@0 800 { "goo.gl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 801 { "google-analytics.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 802 { "google.ac", true, false, false, -1, &kPinset_google_root_pems },
michael@0 803 { "google.ad", true, false, false, -1, &kPinset_google_root_pems },
michael@0 804 { "google.ae", true, false, false, -1, &kPinset_google_root_pems },
michael@0 805 { "google.af", true, false, false, -1, &kPinset_google_root_pems },
michael@0 806 { "google.ag", true, false, false, -1, &kPinset_google_root_pems },
michael@0 807 { "google.am", true, false, false, -1, &kPinset_google_root_pems },
michael@0 808 { "google.as", true, false, false, -1, &kPinset_google_root_pems },
michael@0 809 { "google.at", true, false, false, -1, &kPinset_google_root_pems },
michael@0 810 { "google.az", true, false, false, -1, &kPinset_google_root_pems },
michael@0 811 { "google.ba", true, false, false, -1, &kPinset_google_root_pems },
michael@0 812 { "google.be", true, false, false, -1, &kPinset_google_root_pems },
michael@0 813 { "google.bf", true, false, false, -1, &kPinset_google_root_pems },
michael@0 814 { "google.bg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 815 { "google.bi", true, false, false, -1, &kPinset_google_root_pems },
michael@0 816 { "google.bj", true, false, false, -1, &kPinset_google_root_pems },
michael@0 817 { "google.bs", true, false, false, -1, &kPinset_google_root_pems },
michael@0 818 { "google.by", true, false, false, -1, &kPinset_google_root_pems },
michael@0 819 { "google.ca", true, false, false, -1, &kPinset_google_root_pems },
michael@0 820 { "google.cat", true, false, false, -1, &kPinset_google_root_pems },
michael@0 821 { "google.cc", true, false, false, -1, &kPinset_google_root_pems },
michael@0 822 { "google.cd", true, false, false, -1, &kPinset_google_root_pems },
michael@0 823 { "google.cf", true, false, false, -1, &kPinset_google_root_pems },
michael@0 824 { "google.cg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 825 { "google.ch", true, false, false, -1, &kPinset_google_root_pems },
michael@0 826 { "google.ci", true, false, false, -1, &kPinset_google_root_pems },
michael@0 827 { "google.cl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 828 { "google.cm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 829 { "google.cn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 830 { "google.co.ao", true, false, false, -1, &kPinset_google_root_pems },
michael@0 831 { "google.co.bw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 832 { "google.co.ck", true, false, false, -1, &kPinset_google_root_pems },
michael@0 833 { "google.co.cr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 834 { "google.co.hu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 835 { "google.co.id", true, false, false, -1, &kPinset_google_root_pems },
michael@0 836 { "google.co.il", true, false, false, -1, &kPinset_google_root_pems },
michael@0 837 { "google.co.im", true, false, false, -1, &kPinset_google_root_pems },
michael@0 838 { "google.co.in", true, false, false, -1, &kPinset_google_root_pems },
michael@0 839 { "google.co.je", true, false, false, -1, &kPinset_google_root_pems },
michael@0 840 { "google.co.jp", true, false, false, -1, &kPinset_google_root_pems },
michael@0 841 { "google.co.ke", true, false, false, -1, &kPinset_google_root_pems },
michael@0 842 { "google.co.kr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 843 { "google.co.ls", true, false, false, -1, &kPinset_google_root_pems },
michael@0 844 { "google.co.ma", true, false, false, -1, &kPinset_google_root_pems },
michael@0 845 { "google.co.mz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 846 { "google.co.nz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 847 { "google.co.th", true, false, false, -1, &kPinset_google_root_pems },
michael@0 848 { "google.co.tz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 849 { "google.co.ug", true, false, false, -1, &kPinset_google_root_pems },
michael@0 850 { "google.co.uk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 851 { "google.co.uz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 852 { "google.co.ve", true, false, false, -1, &kPinset_google_root_pems },
michael@0 853 { "google.co.vi", true, false, false, -1, &kPinset_google_root_pems },
michael@0 854 { "google.co.za", true, false, false, -1, &kPinset_google_root_pems },
michael@0 855 { "google.co.zm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 856 { "google.co.zw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 857 { "google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 858 { "google.com.af", true, false, false, -1, &kPinset_google_root_pems },
michael@0 859 { "google.com.ag", true, false, false, -1, &kPinset_google_root_pems },
michael@0 860 { "google.com.ai", true, false, false, -1, &kPinset_google_root_pems },
michael@0 861 { "google.com.ar", true, false, false, -1, &kPinset_google_root_pems },
michael@0 862 { "google.com.au", true, false, false, -1, &kPinset_google_root_pems },
michael@0 863 { "google.com.bd", true, false, false, -1, &kPinset_google_root_pems },
michael@0 864 { "google.com.bh", true, false, false, -1, &kPinset_google_root_pems },
michael@0 865 { "google.com.bn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 866 { "google.com.bo", true, false, false, -1, &kPinset_google_root_pems },
michael@0 867 { "google.com.br", true, false, false, -1, &kPinset_google_root_pems },
michael@0 868 { "google.com.by", true, false, false, -1, &kPinset_google_root_pems },
michael@0 869 { "google.com.bz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 870 { "google.com.cn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 871 { "google.com.co", true, false, false, -1, &kPinset_google_root_pems },
michael@0 872 { "google.com.cu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 873 { "google.com.cy", true, false, false, -1, &kPinset_google_root_pems },
michael@0 874 { "google.com.do", true, false, false, -1, &kPinset_google_root_pems },
michael@0 875 { "google.com.ec", true, false, false, -1, &kPinset_google_root_pems },
michael@0 876 { "google.com.eg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 877 { "google.com.et", true, false, false, -1, &kPinset_google_root_pems },
michael@0 878 { "google.com.fj", true, false, false, -1, &kPinset_google_root_pems },
michael@0 879 { "google.com.ge", true, false, false, -1, &kPinset_google_root_pems },
michael@0 880 { "google.com.gh", true, false, false, -1, &kPinset_google_root_pems },
michael@0 881 { "google.com.gi", true, false, false, -1, &kPinset_google_root_pems },
michael@0 882 { "google.com.gr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 883 { "google.com.gt", true, false, false, -1, &kPinset_google_root_pems },
michael@0 884 { "google.com.hk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 885 { "google.com.iq", true, false, false, -1, &kPinset_google_root_pems },
michael@0 886 { "google.com.jm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 887 { "google.com.jo", true, false, false, -1, &kPinset_google_root_pems },
michael@0 888 { "google.com.kh", true, false, false, -1, &kPinset_google_root_pems },
michael@0 889 { "google.com.kw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 890 { "google.com.lb", true, false, false, -1, &kPinset_google_root_pems },
michael@0 891 { "google.com.ly", true, false, false, -1, &kPinset_google_root_pems },
michael@0 892 { "google.com.mt", true, false, false, -1, &kPinset_google_root_pems },
michael@0 893 { "google.com.mx", true, false, false, -1, &kPinset_google_root_pems },
michael@0 894 { "google.com.my", true, false, false, -1, &kPinset_google_root_pems },
michael@0 895 { "google.com.na", true, false, false, -1, &kPinset_google_root_pems },
michael@0 896 { "google.com.nf", true, false, false, -1, &kPinset_google_root_pems },
michael@0 897 { "google.com.ng", true, false, false, -1, &kPinset_google_root_pems },
michael@0 898 { "google.com.ni", true, false, false, -1, &kPinset_google_root_pems },
michael@0 899 { "google.com.np", true, false, false, -1, &kPinset_google_root_pems },
michael@0 900 { "google.com.nr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 901 { "google.com.om", true, false, false, -1, &kPinset_google_root_pems },
michael@0 902 { "google.com.pa", true, false, false, -1, &kPinset_google_root_pems },
michael@0 903 { "google.com.pe", true, false, false, -1, &kPinset_google_root_pems },
michael@0 904 { "google.com.ph", true, false, false, -1, &kPinset_google_root_pems },
michael@0 905 { "google.com.pk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 906 { "google.com.pl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 907 { "google.com.pr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 908 { "google.com.py", true, false, false, -1, &kPinset_google_root_pems },
michael@0 909 { "google.com.qa", true, false, false, -1, &kPinset_google_root_pems },
michael@0 910 { "google.com.ru", true, false, false, -1, &kPinset_google_root_pems },
michael@0 911 { "google.com.sa", true, false, false, -1, &kPinset_google_root_pems },
michael@0 912 { "google.com.sb", true, false, false, -1, &kPinset_google_root_pems },
michael@0 913 { "google.com.sg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 914 { "google.com.sl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 915 { "google.com.sv", true, false, false, -1, &kPinset_google_root_pems },
michael@0 916 { "google.com.tj", true, false, false, -1, &kPinset_google_root_pems },
michael@0 917 { "google.com.tn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 918 { "google.com.tr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 919 { "google.com.tw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 920 { "google.com.ua", true, false, false, -1, &kPinset_google_root_pems },
michael@0 921 { "google.com.uy", true, false, false, -1, &kPinset_google_root_pems },
michael@0 922 { "google.com.vc", true, false, false, -1, &kPinset_google_root_pems },
michael@0 923 { "google.com.ve", true, false, false, -1, &kPinset_google_root_pems },
michael@0 924 { "google.com.vn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 925 { "google.cv", true, false, false, -1, &kPinset_google_root_pems },
michael@0 926 { "google.cz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 927 { "google.de", true, false, false, -1, &kPinset_google_root_pems },
michael@0 928 { "google.dj", true, false, false, -1, &kPinset_google_root_pems },
michael@0 929 { "google.dk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 930 { "google.dm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 931 { "google.dz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 932 { "google.ee", true, false, false, -1, &kPinset_google_root_pems },
michael@0 933 { "google.es", true, false, false, -1, &kPinset_google_root_pems },
michael@0 934 { "google.fi", true, false, false, -1, &kPinset_google_root_pems },
michael@0 935 { "google.fm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 936 { "google.fr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 937 { "google.ga", true, false, false, -1, &kPinset_google_root_pems },
michael@0 938 { "google.ge", true, false, false, -1, &kPinset_google_root_pems },
michael@0 939 { "google.gg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 940 { "google.gl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 941 { "google.gm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 942 { "google.gp", true, false, false, -1, &kPinset_google_root_pems },
michael@0 943 { "google.gr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 944 { "google.gy", true, false, false, -1, &kPinset_google_root_pems },
michael@0 945 { "google.hk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 946 { "google.hn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 947 { "google.hr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 948 { "google.ht", true, false, false, -1, &kPinset_google_root_pems },
michael@0 949 { "google.hu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 950 { "google.ie", true, false, false, -1, &kPinset_google_root_pems },
michael@0 951 { "google.im", true, false, false, -1, &kPinset_google_root_pems },
michael@0 952 { "google.info", true, false, false, -1, &kPinset_google_root_pems },
michael@0 953 { "google.iq", true, false, false, -1, &kPinset_google_root_pems },
michael@0 954 { "google.is", true, false, false, -1, &kPinset_google_root_pems },
michael@0 955 { "google.it", true, false, false, -1, &kPinset_google_root_pems },
michael@0 956 { "google.it.ao", true, false, false, -1, &kPinset_google_root_pems },
michael@0 957 { "google.je", true, false, false, -1, &kPinset_google_root_pems },
michael@0 958 { "google.jo", true, false, false, -1, &kPinset_google_root_pems },
michael@0 959 { "google.jobs", true, false, false, -1, &kPinset_google_root_pems },
michael@0 960 { "google.jp", true, false, false, -1, &kPinset_google_root_pems },
michael@0 961 { "google.kg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 962 { "google.ki", true, false, false, -1, &kPinset_google_root_pems },
michael@0 963 { "google.kz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 964 { "google.la", true, false, false, -1, &kPinset_google_root_pems },
michael@0 965 { "google.li", true, false, false, -1, &kPinset_google_root_pems },
michael@0 966 { "google.lk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 967 { "google.lt", true, false, false, -1, &kPinset_google_root_pems },
michael@0 968 { "google.lu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 969 { "google.lv", true, false, false, -1, &kPinset_google_root_pems },
michael@0 970 { "google.md", true, false, false, -1, &kPinset_google_root_pems },
michael@0 971 { "google.me", true, false, false, -1, &kPinset_google_root_pems },
michael@0 972 { "google.mg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 973 { "google.mk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 974 { "google.ml", true, false, false, -1, &kPinset_google_root_pems },
michael@0 975 { "google.mn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 976 { "google.ms", true, false, false, -1, &kPinset_google_root_pems },
michael@0 977 { "google.mu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 978 { "google.mv", true, false, false, -1, &kPinset_google_root_pems },
michael@0 979 { "google.mw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 980 { "google.ne", true, false, false, -1, &kPinset_google_root_pems },
michael@0 981 { "google.ne.jp", true, false, false, -1, &kPinset_google_root_pems },
michael@0 982 { "google.net", true, false, false, -1, &kPinset_google_root_pems },
michael@0 983 { "google.nl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 984 { "google.no", true, false, false, -1, &kPinset_google_root_pems },
michael@0 985 { "google.nr", true, false, false, -1, &kPinset_google_root_pems },
michael@0 986 { "google.nu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 987 { "google.off.ai", true, false, false, -1, &kPinset_google_root_pems },
michael@0 988 { "google.pk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 989 { "google.pl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 990 { "google.pn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 991 { "google.ps", true, false, false, -1, &kPinset_google_root_pems },
michael@0 992 { "google.pt", true, false, false, -1, &kPinset_google_root_pems },
michael@0 993 { "google.ro", true, false, false, -1, &kPinset_google_root_pems },
michael@0 994 { "google.rs", true, false, false, -1, &kPinset_google_root_pems },
michael@0 995 { "google.ru", true, false, false, -1, &kPinset_google_root_pems },
michael@0 996 { "google.rw", true, false, false, -1, &kPinset_google_root_pems },
michael@0 997 { "google.sc", true, false, false, -1, &kPinset_google_root_pems },
michael@0 998 { "google.se", true, false, false, -1, &kPinset_google_root_pems },
michael@0 999 { "google.sh", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1000 { "google.si", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1001 { "google.sk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1002 { "google.sm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1003 { "google.sn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1004 { "google.so", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1005 { "google.st", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1006 { "google.td", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1007 { "google.tg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1008 { "google.tk", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1009 { "google.tl", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1010 { "google.tm", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1011 { "google.tn", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1012 { "google.to", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1013 { "google.tt", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1014 { "google.us", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1015 { "google.uz", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1016 { "google.vg", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1017 { "google.vu", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1018 { "google.ws", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1019 { "googleadservices.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1020 { "googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1021 { "googlecode.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1022 { "googlecommerce.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1023 { "googlegroups.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1024 { "googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
michael@0 1025 { "googleplex.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1026 { "googlesyndication.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1027 { "googletagmanager.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1028 { "googletagservices.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1029 { "googleusercontent.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1030 { "goto.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1031 { "groups.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1032 { "gstatic.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1033 { "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1034 { "hostedtalkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1035 { "include-subdomains.pinning.example.com", true, false, false, -1, &kPinset_mozilla_test },
michael@0 1036 { "liberty.lavabit.com", true, true, false, -1, &kPinset_lavabit },
michael@0 1037 { "login.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1038 { "mail.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1039 { "market.android.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1040 { "media.mozilla.com", true, false, true, -1, &kPinset_mozilla },
michael@0 1041 { "mobile.twitter.com", true, false, false, -1, &kPinset_twitterCom },
michael@0 1042 { "oauth.twitter.com", true, false, false, -1, &kPinset_twitterCom },
michael@0 1043 { "pinningtest.appspot.com", true, false, false, -1, &kPinset_test },
michael@0 1044 { "platform.twitter.com", true, false, false, -1, &kPinset_twitterCDN },
michael@0 1045 { "play.google.com", false, false, false, -1, &kPinset_google_root_pems },
michael@0 1046 { "plus.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1047 { "plus.sandbox.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1048 { "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1049 { "script.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1050 { "security.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1051 { "services.mozilla.com", true, true, false, -1, &kPinset_mozilla_services },
michael@0 1052 { "sites.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1053 { "spreadsheets.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1054 { "ssl.google-analytics.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1055 { "talk.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1056 { "talkgadget.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1057 { "test-mode.pinning.example.com", true, true, false, -1, &kPinset_mozilla_test },
michael@0 1058 { "tor2web.org", true, true, false, -1, &kPinset_tor2web },
michael@0 1059 { "torproject.org", false, false, false, -1, &kPinset_tor },
michael@0 1060 { "translate.googleapis.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1061 { "twimg.com", true, false, false, -1, &kPinset_twitterCDN },
michael@0 1062 { "twitter.com", true, false, false, -1, &kPinset_twitterCDN },
michael@0 1063 { "urchin.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1064 { "w-spotlight.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1065 { "wallet.google.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1066 { "webfilings-eu-mirror.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1067 { "webfilings-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1068 { "webfilings-mirror-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1069 { "webfilings.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1070 { "wf-bigsky-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1071 { "wf-demo-eu.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1072 { "wf-demo-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1073 { "wf-dogfood-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1074 { "wf-pentest.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1075 { "wf-staging-hr.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1076 { "wf-training-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1077 { "wf-training-master.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1078 { "wf-trial-hrd.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1079 { "www.dropbox.com", true, false, false, -1, &kPinset_dropbox },
michael@0 1080 { "www.gmail.com", false, false, false, -1, &kPinset_google_root_pems },
michael@0 1081 { "www.googlemail.com", false, false, false, -1, &kPinset_google_root_pems },
michael@0 1082 { "www.torproject.org", true, false, false, -1, &kPinset_tor },
michael@0 1083 { "www.twitter.com", true, false, false, -1, &kPinset_twitterCom },
michael@0 1084 { "xbrlsuccess.appspot.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1085 { "youtu.be", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1086 { "youtube-nocookie.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1087 { "youtube.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1088 { "ytimg.com", true, false, false, -1, &kPinset_google_root_pems },
michael@0 1089 };
michael@0 1090
michael@0 1091 // Pinning Preload List Length = 331;
michael@0 1092
michael@0 1093 static const int32_t kUnknownId = -1;
michael@0 1094
michael@0 1095 static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1419674828470000);

Mercurial Repository: The Tor Browser

Europalab SCM Repository Server

mercurial