Index: base/nss_util.h |
=================================================================== |
--- base/nss_util.h (revision 81350) |
+++ base/nss_util.h (working copy) |
@@ -1,137 +0,0 @@ |
-// Copyright (c) 2011 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#ifndef BASE_NSS_UTIL_H_ |
-#define BASE_NSS_UTIL_H_ |
-#pragma once |
- |
-#include <string> |
-#include "base/basictypes.h" |
- |
-#if defined(USE_NSS) |
-class FilePath; |
-#endif // defined(USE_NSS) |
- |
-// This file specifically doesn't depend on any NSS or NSPR headers because it |
-// is included by various (non-crypto) parts of chrome to call the |
-// initialization functions. |
-namespace base { |
- |
-class Lock; |
-class Time; |
- |
-#if defined(USE_NSS) |
-// EarlySetupForNSSInit performs lightweight setup which must occur before the |
-// process goes multithreaded. This does not initialise NSS. For test, see |
-// EnsureNSSInit. |
-void EarlySetupForNSSInit(); |
-#endif |
- |
-// Initialize NRPR if it isn't already initialized. This function is |
-// thread-safe, and NSPR will only ever be initialized once. NSPR will be |
-// properly shut down on program exit. |
-void EnsureNSPRInit(); |
- |
-// Initialize NSS if it isn't already initialized. This must be called before |
-// any other NSS functions. This function is thread-safe, and NSS will only |
-// ever be initialized once. NSS will be properly shut down on program exit. |
-void EnsureNSSInit(); |
- |
-// Call this before calling EnsureNSSInit() will force NSS to initialize |
-// without a persistent DB. This is used for the special case where access of |
-// persistent DB is prohibited. |
-// |
-// TODO(hclam): Isolate loading default root certs. |
-// |
-// NSS will be initialized without loading any user security modules, including |
-// the built-in root certificates module. User security modules need to be |
-// loaded manually after NSS initialization. |
-// |
-// If EnsureNSSInit() is called before then this function has no effect. |
-// |
-// Calling this method only has effect on Linux. |
-// |
-// WARNING: Use this with caution. |
-void ForceNSSNoDBInit(); |
- |
-// This methods is used to disable checks in NSS when used in a forked process. |
-// NSS checks whether it is running a forked process to avoid problems when |
-// using user security modules in a forked process. However if we are sure |
-// there are no modules loaded before the process is forked then there is no |
-// harm disabling the check. |
-// |
-// This method must be called before EnsureNSSInit() to take effect. |
-// |
-// WARNING: Use this with caution. |
-void DisableNSSForkCheck(); |
- |
-// Load NSS library files. This function has no effect on Mac and Windows. |
-// This loads the necessary NSS library files so that NSS can be initialized |
-// after loading additional library files is disallowed, for example when the |
-// sandbox is active. |
-// |
-// Note that this does not load libnssckbi.so which contains the root |
-// certificates. |
-void LoadNSSLibraries(); |
- |
-// Check if the current NSS version is greater than or equals to |version|. |
-// A sample version string is "3.12.3". |
-bool CheckNSSVersion(const char* version); |
- |
-#if defined(OS_CHROMEOS) |
-// Open the r/w nssdb that's stored inside the user's encrypted home |
-// directory. This is the default slot returned by |
-// GetPublicNSSKeySlot(). |
-void OpenPersistentNSSDB(); |
- |
-// Load the opencryptoki library into NSS so that we can access the |
-// TPM through NSS. Once this is called, GetPrivateNSSKeySlot() will |
-// return the TPM slot if one was found. Returns false if it was |
-// unable to load opencryptoki or open the TPM slot. |
-bool EnableTPMForNSS(); |
- |
-// Get name for the built-in TPM token on ChromeOS. |
-std::string GetTPMTokenName(); |
- |
-// Get the user PIN for the built-in TPM token on ChromeOS. |
-std::string GetTPMUserPIN(); |
-#endif |
- |
-// Convert a NSS PRTime value into a base::Time object. |
-// We use a int64 instead of PRTime here to avoid depending on NSPR headers. |
-Time PRTimeToBaseTime(int64 prtime); |
- |
-#if defined(USE_NSS) |
-// Exposed for unittests only. |path| should be an existing directory under |
-// which the DB files will be placed. |description| is a user-visible name for |
-// the DB, as a utf8 string, which will be truncated at 32 bytes. |
-bool OpenTestNSSDB(const FilePath& path, const char* description); |
-void CloseTestNSSDB(); |
- |
-// NSS has a bug which can cause a deadlock or stall in some cases when writing |
-// to the certDB and keyDB. It also has a bug which causes concurrent key pair |
-// generations to scribble over each other. To work around this, we synchronize |
-// writes to the NSS databases with a global lock. The lock is hidden beneath a |
-// function for easy disabling when the bug is fixed. Callers should allow for |
-// it to return NULL in the future. |
-// |
-// See https://bugzilla.mozilla.org/show_bug.cgi?id=564011 |
-Lock* GetNSSWriteLock(); |
- |
-// A helper class that acquires the NSS write Lock while the AutoNSSWriteLock |
-// is in scope. |
-class AutoNSSWriteLock { |
- public: |
- AutoNSSWriteLock(); |
- ~AutoNSSWriteLock(); |
- private: |
- Lock *lock_; |
- DISALLOW_COPY_AND_ASSIGN(AutoNSSWriteLock); |
-}; |
- |
-#endif // defined(USE_NSS) |
- |
-} // namespace base |
- |
-#endif // BASE_NSS_UTIL_H_ |