OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 #include "chrome/browser/net/ssl_config_service_manager.h" | 4 #include "chrome/browser/net/ssl_config_service_manager.h" |
5 | 5 |
6 #include <algorithm> | 6 #include <algorithm> |
7 #include <string> | 7 #include <string> |
8 #include <vector> | 8 #include <vector> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
11 #include "base/bind.h" | 11 #include "base/bind.h" |
12 #include "base/prefs/public/pref_change_registrar.h" | 12 #include "base/prefs/public/pref_change_registrar.h" |
| 13 #include "base/prefs/public/pref_observer.h" |
13 #include "chrome/browser/api/prefs/pref_member.h" | 14 #include "chrome/browser/api/prefs/pref_member.h" |
14 #include "chrome/browser/content_settings/content_settings_utils.h" | 15 #include "chrome/browser/content_settings/content_settings_utils.h" |
15 #include "chrome/browser/prefs/pref_service.h" | 16 #include "chrome/browser/prefs/pref_service.h" |
16 #include "chrome/common/chrome_notification_types.h" | 17 #include "chrome/common/chrome_notification_types.h" |
17 #include "chrome/common/content_settings.h" | 18 #include "chrome/common/content_settings.h" |
18 #include "chrome/common/pref_names.h" | 19 #include "chrome/common/pref_names.h" |
19 #include "content/public/browser/browser_thread.h" | 20 #include "content/public/browser/browser_thread.h" |
20 #include "content/public/browser/notification_details.h" | |
21 #include "content/public/browser/notification_source.h" | |
22 #include "net/base/ssl_cipher_suite_names.h" | 21 #include "net/base/ssl_cipher_suite_names.h" |
23 #include "net/base/ssl_config_service.h" | 22 #include "net/base/ssl_config_service.h" |
24 | 23 |
25 using content::BrowserThread; | 24 using content::BrowserThread; |
26 | 25 |
27 namespace { | 26 namespace { |
28 | 27 |
29 // Converts a ListValue of StringValues into a vector of strings. Any Values | 28 // Converts a ListValue of StringValues into a vector of strings. Any Values |
30 // which cannot be converted will be skipped. | 29 // which cannot be converted will be skipped. |
31 std::vector<std::string> ListValueToStringVector(const ListValue* value) { | 30 std::vector<std::string> ListValueToStringVector(const ListValue* value) { |
(...skipping 106 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
138 cached_config_ = new_config; | 137 cached_config_ = new_config; |
139 ProcessConfigUpdate(orig_config, new_config); | 138 ProcessConfigUpdate(orig_config, new_config); |
140 } | 139 } |
141 | 140 |
142 //////////////////////////////////////////////////////////////////////////////// | 141 //////////////////////////////////////////////////////////////////////////////// |
143 // SSLConfigServiceManagerPref | 142 // SSLConfigServiceManagerPref |
144 | 143 |
145 // The manager for holding and updating an SSLConfigServicePref instance. | 144 // The manager for holding and updating an SSLConfigServicePref instance. |
146 class SSLConfigServiceManagerPref | 145 class SSLConfigServiceManagerPref |
147 : public SSLConfigServiceManager, | 146 : public SSLConfigServiceManager, |
148 public content::NotificationObserver { | 147 public PrefObserver { |
149 public: | 148 public: |
150 SSLConfigServiceManagerPref(PrefService* local_state, | 149 SSLConfigServiceManagerPref(PrefService* local_state, |
151 PrefService* user_prefs); | 150 PrefService* user_prefs); |
152 virtual ~SSLConfigServiceManagerPref() {} | 151 virtual ~SSLConfigServiceManagerPref() {} |
153 | 152 |
154 // Register local_state SSL preferences. | 153 // Register local_state SSL preferences. |
155 static void RegisterPrefs(PrefService* local_state); | 154 static void RegisterPrefs(PrefService* local_state); |
156 | 155 |
157 virtual net::SSLConfigService* Get(); | 156 virtual net::SSLConfigService* Get(); |
158 | 157 |
159 private: | 158 private: |
160 // Callback for preference changes. This will post the changes to the IO | 159 // Callback for preference changes. This will post the changes to the IO |
161 // thread with SetNewSSLConfig. | 160 // thread with SetNewSSLConfig. |
162 virtual void Observe(int type, | 161 virtual void OnPreferenceChanged(PrefServiceBase* service, |
163 const content::NotificationSource& source, | 162 const std::string& pref_name) OVERRIDE; |
164 const content::NotificationDetails& details); | |
165 | 163 |
166 // Store SSL config settings in |config|, directly from the preferences. Must | 164 // Store SSL config settings in |config|, directly from the preferences. Must |
167 // only be called from UI thread. | 165 // only be called from UI thread. |
168 void GetSSLConfigFromPrefs(net::SSLConfig* config); | 166 void GetSSLConfigFromPrefs(net::SSLConfig* config); |
169 | 167 |
170 // Processes changes to the disabled cipher suites preference, updating the | 168 // Processes changes to the disabled cipher suites preference, updating the |
171 // cached list of parsed SSL/TLS cipher suites that are disabled. | 169 // cached list of parsed SSL/TLS cipher suites that are disabled. |
172 void OnDisabledCipherSuitesChange(PrefService* local_state); | 170 void OnDisabledCipherSuitesChange(PrefServiceBase* local_state); |
173 | 171 |
174 // Processes changes to the default cookie settings. | 172 // Processes changes to the default cookie settings. |
175 void OnDefaultContentSettingsChange(PrefService* user_prefs); | 173 void OnDefaultContentSettingsChange(PrefServiceBase* user_prefs); |
176 | 174 |
177 PrefChangeRegistrar local_state_change_registrar_; | 175 PrefChangeRegistrar local_state_change_registrar_; |
178 PrefChangeRegistrar user_prefs_change_registrar_; | 176 PrefChangeRegistrar user_prefs_change_registrar_; |
179 | 177 |
180 // The local_state prefs (should only be accessed from UI thread) | 178 // The local_state prefs (should only be accessed from UI thread) |
181 BooleanPrefMember rev_checking_enabled_; | 179 BooleanPrefMember rev_checking_enabled_; |
182 StringPrefMember ssl_version_min_; | 180 StringPrefMember ssl_version_min_; |
183 StringPrefMember ssl_version_max_; | 181 StringPrefMember ssl_version_max_; |
184 BooleanPrefMember channel_id_enabled_; | 182 BooleanPrefMember channel_id_enabled_; |
185 BooleanPrefMember ssl_record_splitting_disabled_; | 183 BooleanPrefMember ssl_record_splitting_disabled_; |
(...skipping 62 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
248 default_config.channel_id_enabled); | 246 default_config.channel_id_enabled); |
249 local_state->RegisterBooleanPref(prefs::kDisableSSLRecordSplitting, | 247 local_state->RegisterBooleanPref(prefs::kDisableSSLRecordSplitting, |
250 !default_config.false_start_enabled); | 248 !default_config.false_start_enabled); |
251 local_state->RegisterListPref(prefs::kCipherSuiteBlacklist); | 249 local_state->RegisterListPref(prefs::kCipherSuiteBlacklist); |
252 } | 250 } |
253 | 251 |
254 net::SSLConfigService* SSLConfigServiceManagerPref::Get() { | 252 net::SSLConfigService* SSLConfigServiceManagerPref::Get() { |
255 return ssl_config_service_; | 253 return ssl_config_service_; |
256 } | 254 } |
257 | 255 |
258 void SSLConfigServiceManagerPref::Observe( | 256 void SSLConfigServiceManagerPref::OnPreferenceChanged( |
259 int type, | 257 PrefServiceBase* prefs, |
260 const content::NotificationSource& source, | 258 const std::string& pref_name_in) { |
261 const content::NotificationDetails& details) { | 259 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
262 if (type == chrome::NOTIFICATION_PREF_CHANGED) { | 260 DCHECK(prefs); |
263 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 261 if (pref_name_in == prefs::kCipherSuiteBlacklist) |
264 std::string* pref_name_in = content::Details<std::string>(details).ptr(); | 262 OnDisabledCipherSuitesChange(prefs); |
265 PrefService* prefs = content::Source<PrefService>(source).ptr(); | 263 else if (pref_name_in == prefs::kDefaultContentSettings) |
266 DCHECK(pref_name_in && prefs); | 264 OnDefaultContentSettingsChange(prefs); |
267 if (*pref_name_in == prefs::kCipherSuiteBlacklist) | |
268 OnDisabledCipherSuitesChange(prefs); | |
269 else if (*pref_name_in == prefs::kDefaultContentSettings) | |
270 OnDefaultContentSettingsChange(prefs); | |
271 | 265 |
272 net::SSLConfig new_config; | 266 net::SSLConfig new_config; |
273 GetSSLConfigFromPrefs(&new_config); | 267 GetSSLConfigFromPrefs(&new_config); |
274 | 268 |
275 // Post a task to |io_loop| with the new configuration, so it can | 269 // Post a task to |io_loop| with the new configuration, so it can |
276 // update |cached_config_|. | 270 // update |cached_config_|. |
277 BrowserThread::PostTask( | 271 BrowserThread::PostTask( |
278 BrowserThread::IO, | 272 BrowserThread::IO, |
279 FROM_HERE, | 273 FROM_HERE, |
280 base::Bind( | 274 base::Bind( |
281 &SSLConfigServicePref::SetNewSSLConfig, | 275 &SSLConfigServicePref::SetNewSSLConfig, |
282 ssl_config_service_.get(), | 276 ssl_config_service_.get(), |
283 new_config)); | 277 new_config)); |
284 } | |
285 } | 278 } |
286 | 279 |
287 void SSLConfigServiceManagerPref::GetSSLConfigFromPrefs( | 280 void SSLConfigServiceManagerPref::GetSSLConfigFromPrefs( |
288 net::SSLConfig* config) { | 281 net::SSLConfig* config) { |
289 config->rev_checking_enabled = rev_checking_enabled_.GetValue(); | 282 config->rev_checking_enabled = rev_checking_enabled_.GetValue(); |
290 std::string version_min_str = ssl_version_min_.GetValue(); | 283 std::string version_min_str = ssl_version_min_.GetValue(); |
291 std::string version_max_str = ssl_version_max_.GetValue(); | 284 std::string version_max_str = ssl_version_max_.GetValue(); |
292 config->version_min = net::SSLConfigService::default_version_min(); | 285 config->version_min = net::SSLConfigService::default_version_min(); |
293 config->version_max = net::SSLConfigService::default_version_max(); | 286 config->version_max = net::SSLConfigService::default_version_max(); |
294 uint16 version_min = SSLProtocolVersionFromString(version_min_str); | 287 uint16 version_min = SSLProtocolVersionFromString(version_min_str); |
(...skipping 16 matching lines...) Expand all Loading... |
311 config->channel_id_enabled = channel_id_enabled_.GetValue(); | 304 config->channel_id_enabled = channel_id_enabled_.GetValue(); |
312 if (have_user_prefs_ && | 305 if (have_user_prefs_ && |
313 (cookies_disabled_ || block_third_party_cookies_.GetValue())) | 306 (cookies_disabled_ || block_third_party_cookies_.GetValue())) |
314 config->channel_id_enabled = false; | 307 config->channel_id_enabled = false; |
315 // disabling False Start also happens to disable record splitting. | 308 // disabling False Start also happens to disable record splitting. |
316 config->false_start_enabled = !ssl_record_splitting_disabled_.GetValue(); | 309 config->false_start_enabled = !ssl_record_splitting_disabled_.GetValue(); |
317 SSLConfigServicePref::SetSSLConfigFlags(config); | 310 SSLConfigServicePref::SetSSLConfigFlags(config); |
318 } | 311 } |
319 | 312 |
320 void SSLConfigServiceManagerPref::OnDisabledCipherSuitesChange( | 313 void SSLConfigServiceManagerPref::OnDisabledCipherSuitesChange( |
321 PrefService* local_state) { | 314 PrefServiceBase* local_state) { |
322 const ListValue* value = local_state->GetList(prefs::kCipherSuiteBlacklist); | 315 const ListValue* value = local_state->GetList(prefs::kCipherSuiteBlacklist); |
323 disabled_cipher_suites_ = ParseCipherSuites(ListValueToStringVector(value)); | 316 disabled_cipher_suites_ = ParseCipherSuites(ListValueToStringVector(value)); |
324 } | 317 } |
325 | 318 |
326 void SSLConfigServiceManagerPref::OnDefaultContentSettingsChange( | 319 void SSLConfigServiceManagerPref::OnDefaultContentSettingsChange( |
327 PrefService* user_prefs) { | 320 PrefServiceBase* user_prefs) { |
328 const DictionaryValue* value = user_prefs->GetDictionary( | 321 const DictionaryValue* value = user_prefs->GetDictionary( |
329 prefs::kDefaultContentSettings); | 322 prefs::kDefaultContentSettings); |
330 int default_cookie_settings = -1; | 323 int default_cookie_settings = -1; |
331 cookies_disabled_ = ( | 324 cookies_disabled_ = ( |
332 value && | 325 value && |
333 value->GetInteger( | 326 value->GetInteger( |
334 content_settings::GetTypeName(CONTENT_SETTINGS_TYPE_COOKIES), | 327 content_settings::GetTypeName(CONTENT_SETTINGS_TYPE_COOKIES), |
335 &default_cookie_settings) && | 328 &default_cookie_settings) && |
336 default_cookie_settings == CONTENT_SETTING_BLOCK); | 329 default_cookie_settings == CONTENT_SETTING_BLOCK); |
337 } | 330 } |
338 | 331 |
339 //////////////////////////////////////////////////////////////////////////////// | 332 //////////////////////////////////////////////////////////////////////////////// |
340 // SSLConfigServiceManager | 333 // SSLConfigServiceManager |
341 | 334 |
342 // static | 335 // static |
343 SSLConfigServiceManager* SSLConfigServiceManager::CreateDefaultManager( | 336 SSLConfigServiceManager* SSLConfigServiceManager::CreateDefaultManager( |
344 PrefService* local_state, PrefService* user_prefs) { | 337 PrefService* local_state, PrefService* user_prefs) { |
345 return new SSLConfigServiceManagerPref(local_state, user_prefs); | 338 return new SSLConfigServiceManagerPref(local_state, user_prefs); |
346 } | 339 } |
347 | 340 |
348 // static | 341 // static |
349 void SSLConfigServiceManager::RegisterPrefs(PrefService* prefs) { | 342 void SSLConfigServiceManager::RegisterPrefs(PrefService* prefs) { |
350 SSLConfigServiceManagerPref::RegisterPrefs(prefs); | 343 SSLConfigServiceManagerPref::RegisterPrefs(prefs); |
351 } | 344 } |
OLD | NEW |