1// Copyright 2021 The Chromium Authors 2// Use of this source code is governed by a BSD-style license that can be 3// found in the LICENSE file. 4 5// Proto definitions supporting the Chrome Root Store. 6// This file should be manually kept in sync with the corresponding google3 7// file. 8 9syntax = "proto3"; 10 11package chrome_root_store; 12 13// These structures are currently very simple, but more fields may be added in 14// future to support extra metadata about each trust anchor. 15 16message TrustAnchor { 17 // The human-editable textproto version of the root store references roots in 18 // a separate file by SHA-256 hash for convenience. It is converted to the DER 19 // representation as part of the build process. 20 oneof certificate { 21 bytes der = 1; 22 string sha256_hex = 2; 23 } 24 25 // OID should be expressed as dotted-decimal text (e.g. "1.3.159.1.17.1") 26 repeated string ev_policy_oids = 3; 27} 28 29// Message storing a complete Chrome Root Store. 30message RootStore { 31 repeated TrustAnchor trust_anchors = 1; 32 33 // Major version # of the Chrome Root Store. It is assumed that if 34 // root_store_1.version_major > root_store_2.version_major, then root_store_1 35 // is newer and should be preferred over root_store_2. 36 int64 version_major = 2; 37} 38