OLD | NEW |
---|---|
(Empty) | |
1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef BASE_NSS_UTIL_H_ | |
6 #define BASE_NSS_UTIL_H_ | |
7 #pragma once | |
8 | |
9 #include "base/basictypes.h" | |
10 | |
11 #if defined(USE_NSS) | |
12 class FilePath; | |
13 #endif // defined(USE_NSS) | |
14 | |
15 // This file specifically doesn't depend on any NSS or NSPR headers because it | |
16 // is included by various (non-crypto) parts of chrome to call the | |
17 // initialization functions. | |
18 namespace base { | |
19 | |
20 class Lock; | |
21 class Time; | |
22 | |
23 #if defined(USE_NSS) | |
24 // EarlySetupForNSSInit performs lightweight setup which must occur before the | |
25 // process goes multithreaded. This does not initialise NSS. For test, see | |
26 // EnsureNSSInit. | |
27 void EarlySetupForNSSInit(); | |
28 #endif | |
29 | |
30 // Initialize NRPR if it isn't already initialized. This function is | |
31 // thread-safe, and NSPR will only ever be initialized once. NSPR will be | |
32 // properly shut down on program exit. | |
33 void EnsureNSPRInit(); | |
34 | |
35 // Initialize NSS if it isn't already initialized. This must be called before | |
36 // any other NSS functions. This function is thread-safe, and NSS will only | |
37 // ever be initialized once. NSS will be properly shut down on program exit. | |
38 void EnsureNSSInit(); | |
39 | |
40 // Call this before calling EnsureNSSInit() will force NSS to initialize | |
41 // without a persistent DB. This is used for the special case where access of | |
42 // persistent DB is prohibited. | |
43 // | |
44 // TODO(hclam): Isolate loading default root certs. | |
45 // | |
46 // NSS will be initialized without loading any user security modules, including | |
47 // the built-in root certificates module. User security modules need to be | |
48 // loaded manually after NSS initialization. | |
49 // | |
50 // If EnsureNSSInit() is called before then this function has no effect. | |
51 // | |
52 // Calling this method only has effect on Linux. | |
53 // | |
54 // WARNING: Use this with caution. | |
55 void ForceNSSNoDBInit(); | |
56 | |
57 // This methods is used to disable checks in NSS when used in a forked process. | |
58 // NSS checks whether it is running a forked process to avoid problems when | |
59 // using user security modules in a forked process. However if we are sure | |
60 // there are no modules loaded before the process is forked then there is no | |
61 // harm disabling the check. | |
62 // | |
63 // This method must be called before EnsureNSSInit() to take effect. | |
64 // | |
65 // WARNING: Use this with caution. | |
66 void DisableNSSForkCheck(); | |
67 | |
68 // Load NSS library files. This function has no effect on Mac and Windows. | |
69 // This loads the necessary NSS library files so that NSS can be initialized | |
70 // after loading additional library files is disallowed, for example when the | |
71 // sandbox is active. | |
72 // | |
73 // Note that this does not load libnssckbi.so which contains the root | |
74 // certificates. | |
75 void LoadNSSLibraries(); | |
76 | |
77 // Check if the current NSS version is greater than or equals to |version|. | |
78 // A sample version string is "3.12.3". | |
79 bool CheckNSSVersion(const char* version); | |
80 | |
81 #if defined(OS_CHROMEOS) | |
82 // Open the r/w nssdb that's stored inside the user's encrypted home directory. | |
83 void OpenPersistentNSSDB(); | |
84 #endif | |
85 | |
86 // Convert a NSS PRTime value into a base::Time object. | |
87 // We use a int64 instead of PRTime here to avoid depending on NSPR headers. | |
88 Time PRTimeToBaseTime(int64 prtime); | |
wtc
2011/04/07 05:35:53
Can you find out if any code in 'base' calls PRTim
rvargas (doing something else)
2011/04/08 21:04:07
Nobody.
wtc
2011/04/08 21:14:18
Thank you for checking. The reason I asked is tha
| |
89 | |
90 #if defined(USE_NSS) | |
91 // Exposed for unittests only. |path| should be an existing directory under | |
92 // which the DB files will be placed. |description| is a user-visible name for | |
93 // the DB, as a utf8 string, which will be truncated at 32 bytes. | |
94 bool OpenTestNSSDB(const FilePath& path, const char* description); | |
95 void CloseTestNSSDB(); | |
96 | |
97 // NSS has a bug which can cause a deadlock or stall in some cases when writing | |
98 // to the certDB and keyDB. It also has a bug which causes concurrent key pair | |
99 // generations to scribble over each other. To work around this, we synchronize | |
100 // writes to the NSS databases with a global lock. The lock is hidden beneath a | |
101 // function for easy disabling when the bug is fixed. Callers should allow for | |
102 // it to return NULL in the future. | |
103 // | |
104 // See https://bugzilla.mozilla.org/show_bug.cgi?id=564011 | |
105 Lock* GetNSSWriteLock(); | |
106 | |
107 // A helper class that acquires the NSS write Lock while the AutoNSSWriteLock | |
108 // is in scope. | |
109 class AutoNSSWriteLock { | |
110 public: | |
111 AutoNSSWriteLock(); | |
112 ~AutoNSSWriteLock(); | |
113 private: | |
114 Lock *lock_; | |
115 DISALLOW_COPY_AND_ASSIGN(AutoNSSWriteLock); | |
116 }; | |
117 | |
118 #endif // defined(USE_NSS) | |
119 | |
120 } // namespace base | |
121 | |
122 #endif // BASE_NSS_UTIL_H_ | |
OLD | NEW |