NSS: Unlock crypto devices when populating cert manager.

net/base/cert_database_nss.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/cert_database.h"
 
 #include <cert.h>
 #include <certdb.h>
 #include <keyhi.h>
 #include <pk11pub.h>
@@ skipping 100 matching lines @@
 CryptoModule* CertDatabase::GetDefaultModule() const {
   CryptoModule* module =
       CryptoModule::CreateFromHandle(base::GetDefaultNSSKeySlot());
   // The module is already referenced when returned from GetDefaultNSSKeymodule,
   // so we need to deref it once.
   PK11_FreeSlot(module->os_module_handle());
 
   return module;
 }
 
+void CertDatabase::ListModules(CryptoModuleList* modules, bool need_rw) const {
+  modules->clear();
+
+  PK11SlotList* slot_list = NULL;
+  slot_list = PK11_GetAllTokens(CKM_INVALID_MECHANISM,
+                                need_rw ? PR_TRUE : PR_FALSE,  // needRW
+                                PR_TRUE,  // loadCerts (unused)
+                                NULL);  // wincx

[wtc, 2011/03/02 03:33:28]

Please make sure it's OK to pass NULL as the wincx argument.  If not, we
should add a TODO comment.

[mattm, 2011/03/05 02:16:32]

Just double-checked.  It's only used if PK11_SetIsLoggedInFunc is used.  Added
comment.

+  if (!slot_list) {
+    LOG(ERROR) << "PK11_GetAllTokens failed: " << PORT_GetError();
+    return;
+  }
+
+  PK11SlotListElement* slot_element = PK11_GetFirstSafe(slot_list);
+  while (slot_element) {
+    modules->push_back(CryptoModule::CreateFromHandle(slot_element->slot));
+    slot_element = PK11_GetNextSafe(slot_list, slot_element,
+                                    PR_FALSE);  // restart
+  }
+
+  PK11_FreeSlotList(slot_list);
+}
+
 int CertDatabase::ImportFromPKCS12(
     net::CryptoModule* module,
     const std::string& data,
     const string16& password) {
   return psm::nsPKCS12Blob_Import(module->os_module_handle(),
                                   data.data(), data.size(),
                                   password);
 }
 
 int CertDatabase::ExportToPKCS12(
@@ skipping 88 matching lines @@
   }
   return true;
 }
 
 bool CertDatabase::IsReadOnly(const X509Certificate* cert) const {
   PK11SlotInfo* slot = cert->os_cert_handle()->slot;
   return slot && PK11_IsReadOnly(slot);
 }
 
 }  // namespace net