mirror of
https://github.com/rn10950/RetroZilla.git
synced 2024-09-19 19:50:18 +02:00
156 lines
6.7 KiB
Plaintext
156 lines
6.7 KiB
Plaintext
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*-
|
|
*
|
|
* ***** BEGIN LICENSE BLOCK *****
|
|
* Version: MPL 1.1/GPL 2.0/LGPL 2.1
|
|
*
|
|
* The contents of this file are subject to the Mozilla Public License Version
|
|
* 1.1 (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
* http://www.mozilla.org/MPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS IS" basis,
|
|
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
* for the specific language governing rights and limitations under the
|
|
* License.
|
|
*
|
|
* The Original Code is mozilla.org code.
|
|
*
|
|
* The Initial Developer of the Original Code is
|
|
* Netscape Communications Corporation.
|
|
* Portions created by the Initial Developer are Copyright (C) 1998
|
|
* the Initial Developer. All Rights Reserved.
|
|
*
|
|
* Contributor(s):
|
|
* Javier Delgadillo <javi@netscape.com>
|
|
*
|
|
* Alternatively, the contents of this file may be used under the terms of
|
|
* either the GNU General Public License Version 2 or later (the "GPL"), or
|
|
* the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
|
|
* in which case the provisions of the GPL or the LGPL are applicable instead
|
|
* of those above. If you wish to allow use of your version of this file only
|
|
* under the terms of either the GPL or the LGPL, and not to allow others to
|
|
* use your version of this file under the terms of the MPL, indicate your
|
|
* decision by deleting the provisions above and replace them with the notice
|
|
* and other provisions required by the GPL or the LGPL. If you do not delete
|
|
* the provisions above, a recipient may use your version of this file under
|
|
* the terms of any one of the MPL, the GPL or the LGPL.
|
|
*
|
|
* ***** END LICENSE BLOCK ***** */
|
|
|
|
#include "nsISupports.idl"
|
|
|
|
interface nsIX509Cert;
|
|
interface nsIInterfaceRequestor;
|
|
|
|
/**
|
|
* Functions that display warnings for problems with web site trust.
|
|
*
|
|
* @status FROZEN
|
|
*/
|
|
[scriptable, uuid(86960956-edb0-11d4-998b-00b0d02354a0)]
|
|
interface nsIBadCertListener : nsISupports {
|
|
|
|
/**
|
|
* No decision was made by the user, whether to trust a cert.
|
|
*/
|
|
const short UNINIT_ADD_FLAG = -1;
|
|
|
|
/**
|
|
* The user decided to add trust to a certificate temporarily
|
|
* for the current application session only.
|
|
*/
|
|
const short ADD_TRUSTED_FOR_SESSION = 1;
|
|
|
|
/**
|
|
* The user decided to add trust to a certificate permanently.
|
|
*/
|
|
const short ADD_TRUSTED_PERMANENTLY = 2;
|
|
|
|
/**
|
|
* Inform the user there are problems with the trust of a certificate,
|
|
* and request a decision from the user.
|
|
* The UI should offer the user a way to look at the certificate in detail.
|
|
* The following is a sample UI message to be shown to the user:
|
|
*
|
|
* Unable to verify the identity of %S as a trusted site.
|
|
* Possible reasons for this error:
|
|
* - Your browser does not recognize the Certificate Authority
|
|
* that issued the site's certificate.
|
|
* - The site's certificate is incomplete due to a
|
|
* server misconfiguration.
|
|
* - You are connected to a site pretending to be %S,
|
|
* possibly to obtain your confidential information.
|
|
* Please notify the site's webmaster about this problem.
|
|
* Before accepting this certificate, you should examine this site's
|
|
* certificate carefully. Are you willing to to accept this certificate
|
|
* for the purpose of identifying the Web site %S?
|
|
* o Accept this certificate permanently
|
|
* x Accept this certificate temporarily for this session
|
|
* o Do not accept this certificate and do not connect to this Web site
|
|
*
|
|
* @param socketInfo A network communication context that can be used to obtain more information
|
|
* about the active connection.
|
|
* @param cert The certificate that is not trusted and that is having the problem.
|
|
* @param certAddType The user's trust decision. See constants defined above.
|
|
*
|
|
* @return true if the user decided to connect anyway, false if the user decided to not connect
|
|
*/
|
|
boolean confirmUnknownIssuer(in nsIInterfaceRequestor socketInfo,
|
|
in nsIX509Cert cert,
|
|
out short certAddType);
|
|
|
|
/**
|
|
* Inform the user there are problems with the trust of a certificate,
|
|
* and request a decision from the user.
|
|
* The hostname mentioned in the server's certificate is not the hostname
|
|
* that was used as a destination address for the current connection.
|
|
*
|
|
* @param socketInfo A network communication context that can be used to obtain more information
|
|
* about the active connection.
|
|
* @param targetURL The URL that was used to open the current connection.
|
|
* @param cert The certificate that was presented by the server.
|
|
*
|
|
* @return true if the user decided to connect anyway, false if the user decided to not connect
|
|
*/
|
|
boolean confirmMismatchDomain(in nsIInterfaceRequestor socketInfo,
|
|
in AUTF8String targetURL,
|
|
in nsIX509Cert cert);
|
|
|
|
/**
|
|
* Inform the user there are problems with the trust of a certificate,
|
|
* and request a decision from the user.
|
|
* The certificate presented by the server is no longer valid because
|
|
* the validity period has expired.
|
|
*
|
|
* @param socketInfo A network communication context that can be used to obtain more information
|
|
* about the active connection.
|
|
* @param cert The certificate that was presented by the server.
|
|
*
|
|
* @return true if the user decided to connect anyway, false if the user decided to not connect
|
|
*/
|
|
boolean confirmCertExpired(in nsIInterfaceRequestor socketInfo,
|
|
in nsIX509Cert cert);
|
|
|
|
/**
|
|
* Inform the user there are problems with the trust of a certificate,
|
|
* and request a decision from the user.
|
|
* The Certificate Authority (CA) that issued the server's certificate has issued a
|
|
* Certificate Revocation List (CRL).
|
|
* However, the application does not have a current version of the CA's CRL.
|
|
* Due to the application configuration, the application disallows the connection
|
|
* to the remote site.
|
|
*
|
|
* @param socketInfo A network communication context that can be used to obtain more information
|
|
* about the active connection.
|
|
* @param targetURL The URL that was used to open the current connection.
|
|
* @param cert The certificate that was presented by the server.
|
|
*/
|
|
void notifyCrlNextupdate(in nsIInterfaceRequestor socketInfo,
|
|
in AUTF8String targetURL, in nsIX509Cert cert);
|
|
|
|
};
|
|
|
|
%{C++
|
|
#define NS_BADCERTLISTENER_CONTRACTID "@mozilla.org/nsBadCertListener;1"
|
|
%}
|