/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- * * The contents of this file are subject to the Mozilla Public * License Version 1.1 (the "License"); you may not use this file * except in compliance with the License. You may obtain a copy of * the License at http://www.mozilla.org/MPL/ * * Software distributed under the License is distributed on an "AS * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or * implied. See the License for the specific language governing * rights and limitations under the License. * * The Original Code is mozilla.org code. * * The Initial Developer of the Original Code is Netscape * Communications Corporation. Portions created by Netscape are * Copyright (C) 1998 Netscape Communications Corporation. All * Rights Reserved. * * Contributor(s): * Javier Delgadillo * * Alternatively, the contents of this file may be used under the * terms of the GNU General Public License Version 2 or later (the * "GPL"), in which case the provisions of the GPL are applicable * instead of those above. If you wish to allow use of your * version of this file only under the terms of the GPL and not to * allow others to use your version of this file under the MPL, * indicate your decision by deleting the provisions above and * replace them with the notice and other provisions required by * the GPL. If you do not delete the provisions above, a recipient * may use your version of this file under either the MPL or the * GPL. */ #include "nsISupports.idl" interface nsIX509Cert; interface nsIInterfaceRequestor; /** * Functions that display warnings for problems with web site trust. * * @status FROZEN */ [scriptable, uuid(86960956-edb0-11d4-998b-00b0d02354a0)] interface nsIBadCertListener : nsISupports { /** * No decision was made by the user, whether to trust a cert. */ const short UNINIT_ADD_FLAG = -1; /** * The user decided to add trust to a certificate temporarily * for the current application session only. */ const short ADD_TRUSTED_FOR_SESSION = 1; /** * The user decided to add trust to a certificate permanently. */ const short ADD_TRUSTED_PERMANENTLY = 2; /** * Inform the user there are problems with the trust of a certificate, * and request a decision from the user. * The UI should offer the user a way to look at the certificate in detail. * The following is a sample UI message to be shown to the user: * * Unable to verify the identity of %S as a trusted site. * Possible reasons for this error: * - Your browser does not recognize the Certificate Authority * that issued the site's certificate. * - The site's certificate is incomplete due to a * server misconfiguration. * - You are connected to a site pretending to be %S, * possibly to obtain your confidential information. * Please notify the site's webmaster about this problem. * Before accepting this certificate, you should examine this site's * certificate carefully. Are you willing to to accept this certificate * for the purpose of identifying the Web site %S? * o Accept this certificate permanently * x Accept this certificate temporarily for this session * o Do not accept this certificate and do not connect to this Web site * * @param socketInfo A network communication context that can be used to obtain more information * about the active connection. * @param cert The certificate that is not trusted and that is having the problem. * @param certAddType The user's trust decision. See constants defined above. * * @return true if the user decided to connect anyway, false if the user decided to not connect */ boolean confirmUnknownIssuer(in nsIInterfaceRequestor socketInfo, in nsIX509Cert cert, out short certAddType); /** * Inform the user there are problems with the trust of a certificate, * and request a decision from the user. * The hostname mentioned in the server's certificate is not the hostname * that was used as a destination address for the current connection. * * @param socketInfo A network communication context that can be used to obtain more information * about the active connection. * @param targetURL The URL that was used to open the current connection. * @param cert The certificate that was presented by the server. * * @return true if the user decided to connect anyway, false if the user decided to not connect */ boolean confirmMismatchDomain(in nsIInterfaceRequestor socketInfo, in AUTF8String targetURL, in nsIX509Cert cert); /** * Inform the user there are problems with the trust of a certificate, * and request a decision from the user. * The certificate presented by the server is no longer valid because * the validity period has expired. * * @param socketInfo A network communication context that can be used to obtain more information * about the active connection. * @param cert The certificate that was presented by the server. * * @return true if the user decided to connect anyway, false if the user decided to not connect */ boolean confirmCertExpired(in nsIInterfaceRequestor socketInfo, in nsIX509Cert cert); /** * Inform the user there are problems with the trust of a certificate, * and request a decision from the user. * The Certificate Authority (CA) that issued the server's certificate has issued a * Certificate Revocation List (CRL). * However, the application does not have a current version of the CA's CRL. * Due to the application configuration, the application disallows the connection * to the remote site. * * @param socketInfo A network communication context that can be used to obtain more information * about the active connection. * @param targetURL The URL that was used to open the current connection. * @param cert The certificate that was presented by the server. */ void notifyCrlNextupdate(in nsIInterfaceRequestor socketInfo, in AUTF8String targetURL, in nsIX509Cert cert); }; %{C++ #define NS_BADCERTLISTENER_CONTRACTID "@mozilla.org/nsBadCertListener;1" %}