| OLD | NEW |
| 1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/base/ssl_config_service_win.h" | 5 #include "net/base/ssl_config_service_win.h" |
| 6 | 6 |
| 7 #include "base/thread_restrictions.h" | |
| 8 #include "base/win/registry.h" | 7 #include "base/win/registry.h" |
| 9 | 8 |
| 10 using base::TimeDelta; | 9 using base::TimeDelta; |
| 11 using base::TimeTicks; | 10 using base::TimeTicks; |
| 12 using base::win::RegKey; | 11 using base::win::RegKey; |
| 13 | 12 |
| 14 namespace net { | 13 namespace net { |
| 15 | 14 |
| 16 static const int kConfigUpdateInterval = 10; // seconds | 15 static const int kConfigUpdateInterval = 10; // seconds |
| 17 | 16 |
| (...skipping 35 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 53 | 52 |
| 54 void SSLConfigServiceWin::GetSSLConfigAt(SSLConfig* config, TimeTicks now) { | 53 void SSLConfigServiceWin::GetSSLConfigAt(SSLConfig* config, TimeTicks now) { |
| 55 if (!ever_updated_ || | 54 if (!ever_updated_ || |
| 56 now - config_time_ > TimeDelta::FromSeconds(kConfigUpdateInterval)) | 55 now - config_time_ > TimeDelta::FromSeconds(kConfigUpdateInterval)) |
| 57 UpdateConfig(now); | 56 UpdateConfig(now); |
| 58 *config = config_info_; | 57 *config = config_info_; |
| 59 } | 58 } |
| 60 | 59 |
| 61 // static | 60 // static |
| 62 bool SSLConfigServiceWin::GetSSLConfigNow(SSLConfig* config) { | 61 bool SSLConfigServiceWin::GetSSLConfigNow(SSLConfig* config) { |
| 63 // This registry access goes to disk and will slow down the IO thread. | |
| 64 // http://crbug.com/61455 | |
| 65 base::ThreadRestrictions::ScopedAllowIO allow_io; | |
| 66 RegKey internet_settings; | 62 RegKey internet_settings; |
| 67 if (!internet_settings.Open(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, | 63 if (!internet_settings.Open(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, |
| 68 KEY_READ)) | 64 KEY_READ)) |
| 69 return false; | 65 return false; |
| 70 | 66 |
| 71 DWORD revocation; | 67 DWORD revocation; |
| 72 if (!internet_settings.ReadValueDW(kRevocationValueName, &revocation)) | 68 if (!internet_settings.ReadValueDW(kRevocationValueName, &revocation)) |
| 73 revocation = REVOCATION_DEFAULT; | 69 revocation = REVOCATION_DEFAULT; |
| 74 | 70 |
| 75 DWORD protocols; | 71 DWORD protocols; |
| 76 if (!internet_settings.ReadValueDW(kProtocolsValueName, &protocols)) | 72 if (!internet_settings.ReadValueDW(kProtocolsValueName, &protocols)) |
| 77 protocols = PROTOCOLS_DEFAULT; | 73 protocols = PROTOCOLS_DEFAULT; |
| 78 | 74 |
| 79 config->rev_checking_enabled = (revocation != 0); | 75 config->rev_checking_enabled = (revocation != 0); |
| 80 config->ssl2_enabled = ((protocols & SSL2) != 0); | 76 config->ssl2_enabled = ((protocols & SSL2) != 0); |
| 81 config->ssl3_enabled = ((protocols & SSL3) != 0); | 77 config->ssl3_enabled = ((protocols & SSL3) != 0); |
| 82 config->tls1_enabled = ((protocols & TLS1) != 0); | 78 config->tls1_enabled = ((protocols & TLS1) != 0); |
| 83 SSLConfigService::SetSSLConfigFlags(config); | 79 SSLConfigService::SetSSLConfigFlags(config); |
| 84 | 80 |
| 85 return true; | 81 return true; |
| 86 } | 82 } |
| 87 | 83 |
| 88 // static | 84 // static |
| 89 void SSLConfigServiceWin::SetRevCheckingEnabled(bool enabled) { | 85 void SSLConfigServiceWin::SetRevCheckingEnabled(bool enabled) { |
| 90 // This registry access goes to disk and will slow down the IO thread. | |
| 91 // http://crbug.com/61455 | |
| 92 DWORD value = enabled; | 86 DWORD value = enabled; |
| 93 RegKey internet_settings(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, | 87 RegKey internet_settings(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, |
| 94 KEY_WRITE); | 88 KEY_WRITE); |
| 95 internet_settings.WriteValue(kRevocationValueName, value); | 89 internet_settings.WriteValue(kRevocationValueName, value); |
| 96 // TODO(mattm): We should call UpdateConfig after updating settings, but these | 90 // TODO(mattm): We should call UpdateConfig after updating settings, but these |
| 97 // methods are static. | 91 // methods are static. |
| 98 } | 92 } |
| 99 | 93 |
| 100 // static | 94 // static |
| 101 void SSLConfigServiceWin::SetSSL2Enabled(bool enabled) { | 95 void SSLConfigServiceWin::SetSSL2Enabled(bool enabled) { |
| 102 SetSSLVersionEnabled(SSL2, enabled); | 96 SetSSLVersionEnabled(SSL2, enabled); |
| 103 } | 97 } |
| 104 | 98 |
| 105 // static | 99 // static |
| 106 void SSLConfigServiceWin::SetSSL3Enabled(bool enabled) { | 100 void SSLConfigServiceWin::SetSSL3Enabled(bool enabled) { |
| 107 SetSSLVersionEnabled(SSL3, enabled); | 101 SetSSLVersionEnabled(SSL3, enabled); |
| 108 } | 102 } |
| 109 | 103 |
| 110 // static | 104 // static |
| 111 void SSLConfigServiceWin::SetTLS1Enabled(bool enabled) { | 105 void SSLConfigServiceWin::SetTLS1Enabled(bool enabled) { |
| 112 SetSSLVersionEnabled(TLS1, enabled); | 106 SetSSLVersionEnabled(TLS1, enabled); |
| 113 } | 107 } |
| 114 | 108 |
| 115 // static | 109 // static |
| 116 void SSLConfigServiceWin::SetSSLVersionEnabled(int version, bool enabled) { | 110 void SSLConfigServiceWin::SetSSLVersionEnabled(int version, bool enabled) { |
| 117 // This registry access goes to disk and will slow down the IO thread. | |
| 118 // http://crbug.com/61455 | |
| 119 RegKey internet_settings(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, | 111 RegKey internet_settings(HKEY_CURRENT_USER, kInternetSettingsSubKeyName, |
| 120 KEY_READ | KEY_WRITE); | 112 KEY_READ | KEY_WRITE); |
| 121 DWORD value; | 113 DWORD value; |
| 122 if (!internet_settings.ReadValueDW(kProtocolsValueName, &value)) | 114 if (!internet_settings.ReadValueDW(kProtocolsValueName, &value)) |
| 123 value = PROTOCOLS_DEFAULT; | 115 value = PROTOCOLS_DEFAULT; |
| 124 if (enabled) | 116 if (enabled) |
| 125 value |= version; | 117 value |= version; |
| 126 else | 118 else |
| 127 value &= ~version; | 119 value &= ~version; |
| 128 internet_settings.WriteValue(kProtocolsValueName, value); | 120 internet_settings.WriteValue(kProtocolsValueName, value); |
| 129 // TODO(mattm): We should call UpdateConfig after updating settings, but these | 121 // TODO(mattm): We should call UpdateConfig after updating settings, but these |
| 130 // methods are static. | 122 // methods are static. |
| 131 } | 123 } |
| 132 | 124 |
| 133 void SSLConfigServiceWin::UpdateConfig(TimeTicks now) { | 125 void SSLConfigServiceWin::UpdateConfig(TimeTicks now) { |
| 134 SSLConfig orig_config = config_info_; | 126 SSLConfig orig_config = config_info_; |
| 135 GetSSLConfigNow(&config_info_); | 127 GetSSLConfigNow(&config_info_); |
| 136 if (ever_updated_) | 128 if (ever_updated_) |
| 137 ProcessConfigUpdate(orig_config, config_info_); | 129 ProcessConfigUpdate(orig_config, config_info_); |
| 138 config_time_ = now; | 130 config_time_ = now; |
| 139 ever_updated_ = true; | 131 ever_updated_ = true; |
| 140 } | 132 } |
| 141 | 133 |
| 142 } // namespace net | 134 } // namespace net |
| OLD | NEW |