| OLD | NEW |
|---|
| (Empty) | |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "chrome/browser/ui/webui/options2/certificate_manager_handler.h" |
| 6 |
| 7 #include "base/bind.h" |
| 8 #include "base/bind_helpers.h" |
| 9 #include "base/file_util.h" // for FileAccessProvider |
| 10 #include "base/memory/scoped_vector.h" |
| 11 #include "base/safe_strerror_posix.h" |
| 12 #include "base/string_number_conversions.h" |
| 13 #include "base/values.h" |
| 14 #include "chrome/browser/browser_process.h" |
| 15 #include "chrome/browser/certificate_viewer.h" |
| 16 #include "chrome/browser/ui/certificate_dialogs.h" |
| 17 #include "chrome/browser/ui/crypto_module_password_dialog.h" |
| 18 #include "content/browser/tab_contents/tab_contents.h" |
| 19 #include "content/browser/tab_contents/tab_contents_view.h" |
| 20 #include "content/public/browser/browser_thread.h" // for FileAccessProvider |
| 21 #include "grit/generated_resources.h" |
| 22 #include "net/base/crypto_module.h" |
| 23 #include "net/base/x509_certificate.h" |
| 24 #include "ui/base/l10n/l10n_util.h" |
| 25 #include "ui/base/l10n/l10n_util_collator.h" |
| 26 |
| 27 #if defined(OS_CHROMEOS) |
| 28 #include "chrome/browser/chromeos/cros/cros_library.h" |
| 29 #include "chrome/browser/chromeos/cros/cryptohome_library.h" |
| 30 #endif |
| 31 |
| 32 using content::BrowserThread; |
| 33 |
| 34 namespace { |
| 35 |
| 36 static const char kKeyId[] = "id"; |
| 37 static const char kSubNodesId[] = "subnodes"; |
| 38 static const char kNameId[] = "name"; |
| 39 static const char kReadOnlyId[] = "readonly"; |
| 40 static const char kUntrustedId[] = "untrusted"; |
| 41 static const char kSecurityDeviceId[] = "device"; |
| 42 static const char kErrorId[] = "error"; |
| 43 |
| 44 // Enumeration of different callers of SelectFile. (Start counting at 1 so |
| 45 // if SelectFile is accidentally called with params=NULL it won't match any.) |
| 46 enum { |
| 47 EXPORT_PERSONAL_FILE_SELECTED = 1, |
| 48 IMPORT_PERSONAL_FILE_SELECTED, |
| 49 IMPORT_SERVER_FILE_SELECTED, |
| 50 IMPORT_CA_FILE_SELECTED, |
| 51 }; |
| 52 |
| 53 // TODO(mattm): These are duplicated from cookies_view_handler.cc |
| 54 // Encodes a pointer value into a hex string. |
| 55 std::string PointerToHexString(const void* pointer) { |
| 56 return base::HexEncode(&pointer, sizeof(pointer)); |
| 57 } |
| 58 |
| 59 // Decodes a pointer from a hex string. |
| 60 void* HexStringToPointer(const std::string& str) { |
| 61 std::vector<uint8> buffer; |
| 62 if (!base::HexStringToBytes(str, &buffer) || |
| 63 buffer.size() != sizeof(void*)) { |
| 64 return NULL; |
| 65 } |
| 66 |
| 67 return *reinterpret_cast<void**>(&buffer[0]); |
| 68 } |
| 69 |
| 70 std::string OrgNameToId(const std::string& org) { |
| 71 return "org-" + org; |
| 72 } |
| 73 |
| 74 std::string CertToId(const net::X509Certificate& cert) { |
| 75 return "cert-" + PointerToHexString(&cert); |
| 76 } |
| 77 |
| 78 net::X509Certificate* IdToCert(const std::string& id) { |
| 79 if (!StartsWithASCII(id, "cert-", true)) |
| 80 return NULL; |
| 81 return reinterpret_cast<net::X509Certificate*>( |
| 82 HexStringToPointer(id.substr(5))); |
| 83 } |
| 84 |
| 85 net::X509Certificate* CallbackArgsToCert(const ListValue* args) { |
| 86 std::string node_id; |
| 87 if (!args->GetString(0, &node_id)){ |
| 88 return NULL; |
| 89 } |
| 90 net::X509Certificate* cert = IdToCert(node_id); |
| 91 if (!cert) { |
| 92 NOTREACHED(); |
| 93 return NULL; |
| 94 } |
| 95 return cert; |
| 96 } |
| 97 |
| 98 bool CallbackArgsToBool(const ListValue* args, int index, bool* result) { |
| 99 std::string string_value; |
| 100 if (!args->GetString(index, &string_value)) |
| 101 return false; |
| 102 |
| 103 *result = string_value[0] == 't'; |
| 104 return true; |
| 105 } |
| 106 |
| 107 struct DictionaryIdComparator { |
| 108 explicit DictionaryIdComparator(icu::Collator* collator) |
| 109 : collator_(collator) { |
| 110 } |
| 111 |
| 112 bool operator()(const Value* a, |
| 113 const Value* b) const { |
| 114 DCHECK(a->GetType() == Value::TYPE_DICTIONARY); |
| 115 DCHECK(b->GetType() == Value::TYPE_DICTIONARY); |
| 116 const DictionaryValue* a_dict = reinterpret_cast<const DictionaryValue*>(a); |
| 117 const DictionaryValue* b_dict = reinterpret_cast<const DictionaryValue*>(b); |
| 118 string16 a_str; |
| 119 string16 b_str; |
| 120 a_dict->GetString(kNameId, &a_str); |
| 121 b_dict->GetString(kNameId, &b_str); |
| 122 if (collator_ == NULL) |
| 123 return a_str < b_str; |
| 124 return l10n_util::CompareString16WithCollator( |
| 125 collator_, a_str, b_str) == UCOL_LESS; |
| 126 } |
| 127 |
| 128 icu::Collator* collator_; |
| 129 }; |
| 130 |
| 131 std::string NetErrorToString(int net_error) { |
| 132 switch (net_error) { |
| 133 // TODO(mattm): handle more cases. |
| 134 case net::ERR_IMPORT_CA_CERT_NOT_CA: |
| 135 return l10n_util::GetStringUTF8(IDS_CERT_MANAGER_ERROR_NOT_CA); |
| 136 default: |
| 137 return l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR); |
| 138 } |
| 139 } |
| 140 |
| 141 } // namespace |
| 142 |
| 143 /////////////////////////////////////////////////////////////////////////////// |
| 144 // FileAccessProvider |
| 145 |
| 146 // TODO(mattm): Move to some shared location? |
| 147 class FileAccessProvider |
| 148 : public base::RefCountedThreadSafe<FileAccessProvider>, |
| 149 public CancelableRequestProvider { |
| 150 public: |
| 151 // Reports 0 on success or errno on failure, and the data of the file upon |
| 152 // success. |
| 153 // TODO(mattm): don't pass std::string by value.. could use RefCountedBytes |
| 154 // but it's a vector. Maybe do the derive from CancelableRequest thing |
| 155 // described in cancelable_request.h? |
| 156 typedef Callback2<int, std::string>::Type ReadCallback; |
| 157 |
| 158 // Reports 0 on success or errno on failure, and the number of bytes written, |
| 159 // on success. |
| 160 typedef Callback2<int, int>::Type WriteCallback; |
| 161 |
| 162 Handle StartRead(const FilePath& path, |
| 163 CancelableRequestConsumerBase* consumer, |
| 164 ReadCallback* callback); |
| 165 Handle StartWrite(const FilePath& path, |
| 166 const std::string& data, |
| 167 CancelableRequestConsumerBase* consumer, |
| 168 WriteCallback* callback); |
| 169 |
| 170 private: |
| 171 void DoRead(scoped_refptr<CancelableRequest<ReadCallback> > request, |
| 172 FilePath path); |
| 173 void DoWrite(scoped_refptr<CancelableRequest<WriteCallback> > request, |
| 174 FilePath path, |
| 175 std::string data); |
| 176 }; |
| 177 |
| 178 CancelableRequestProvider::Handle FileAccessProvider::StartRead( |
| 179 const FilePath& path, |
| 180 CancelableRequestConsumerBase* consumer, |
| 181 FileAccessProvider::ReadCallback* callback) { |
| 182 scoped_refptr<CancelableRequest<ReadCallback> > request( |
| 183 new CancelableRequest<ReadCallback>(callback)); |
| 184 AddRequest(request, consumer); |
| 185 |
| 186 // Send the parameters and the request to the file thread. |
| 187 BrowserThread::PostTask( |
| 188 BrowserThread::FILE, FROM_HERE, |
| 189 base::Bind(&FileAccessProvider::DoRead, this, request, path)); |
| 190 |
| 191 // The handle will have been set by AddRequest. |
| 192 return request->handle(); |
| 193 } |
| 194 |
| 195 CancelableRequestProvider::Handle FileAccessProvider::StartWrite( |
| 196 const FilePath& path, |
| 197 const std::string& data, |
| 198 CancelableRequestConsumerBase* consumer, |
| 199 WriteCallback* callback) { |
| 200 scoped_refptr<CancelableRequest<WriteCallback> > request( |
| 201 new CancelableRequest<WriteCallback>(callback)); |
| 202 AddRequest(request, consumer); |
| 203 |
| 204 // Send the parameters and the request to the file thWrite. |
| 205 BrowserThread::PostTask( |
| 206 BrowserThread::FILE, FROM_HERE, |
| 207 base::Bind(&FileAccessProvider::DoWrite, this, request, path, data)); |
| 208 |
| 209 // The handle will have been set by AddRequest. |
| 210 return request->handle(); |
| 211 } |
| 212 |
| 213 void FileAccessProvider::DoRead( |
| 214 scoped_refptr<CancelableRequest<ReadCallback> > request, |
| 215 FilePath path) { |
| 216 if (request->canceled()) |
| 217 return; |
| 218 |
| 219 std::string data; |
| 220 VLOG(1) << "DoRead starting read"; |
| 221 bool success = file_util::ReadFileToString(path, &data); |
| 222 int saved_errno = success ? 0 : errno; |
| 223 VLOG(1) << "DoRead done read: " << success << " " << data.size(); |
| 224 request->ForwardResult(ReadCallback::TupleType(saved_errno, data)); |
| 225 } |
| 226 |
| 227 void FileAccessProvider::DoWrite( |
| 228 scoped_refptr<CancelableRequest<WriteCallback> > request, |
| 229 FilePath path, |
| 230 std::string data) { |
| 231 VLOG(1) << "DoWrite starting write"; |
| 232 int bytes_written = file_util::WriteFile(path, data.data(), data.size()); |
| 233 int saved_errno = bytes_written >= 0 ? 0 : errno; |
| 234 VLOG(1) << "DoWrite done write " << bytes_written; |
| 235 |
| 236 if (request->canceled()) |
| 237 return; |
| 238 |
| 239 request->ForwardResult(WriteCallback::TupleType(saved_errno, bytes_written)); |
| 240 } |
| 241 |
| 242 /////////////////////////////////////////////////////////////////////////////// |
| 243 // CertificateManagerHandler |
| 244 |
| 245 CertificateManagerHandler::CertificateManagerHandler() |
| 246 : file_access_provider_(new FileAccessProvider) { |
| 247 certificate_manager_model_.reset(new CertificateManagerModel(this)); |
| 248 } |
| 249 |
| 250 CertificateManagerHandler::~CertificateManagerHandler() { |
| 251 } |
| 252 |
| 253 void CertificateManagerHandler::GetLocalizedValues( |
| 254 DictionaryValue* localized_strings) { |
| 255 DCHECK(localized_strings); |
| 256 |
| 257 RegisterTitle(localized_strings, "certificateManagerPage", |
| 258 IDS_CERTIFICATE_MANAGER_TITLE); |
| 259 |
| 260 // Tabs. |
| 261 localized_strings->SetString("personalCertsTabTitle", |
| 262 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_PERSONAL_CERTS_TAB_LABEL)); |
| 263 localized_strings->SetString("serverCertsTabTitle", |
| 264 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_SERVER_CERTS_TAB_LABEL)); |
| 265 localized_strings->SetString("caCertsTabTitle", |
| 266 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_CERT_AUTHORITIES_TAB_LABEL)); |
| 267 localized_strings->SetString("unknownCertsTabTitle", |
| 268 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_UNKNOWN_TAB_LABEL)); |
| 269 |
| 270 // Tab descriptions. |
| 271 localized_strings->SetString("personalCertsTabDescription", |
| 272 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_USER_TREE_DESCRIPTION)); |
| 273 localized_strings->SetString("serverCertsTabDescription", |
| 274 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_SERVER_TREE_DESCRIPTION)); |
| 275 localized_strings->SetString("caCertsTabDescription", |
| 276 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_AUTHORITIES_TREE_DESCRIPTION)); |
| 277 localized_strings->SetString("unknownCertsTabDescription", |
| 278 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_UNKNOWN_TREE_DESCRIPTION)); |
| 279 |
| 280 // Tree columns. |
| 281 localized_strings->SetString("certNameColumn", |
| 282 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_NAME_COLUMN_LABEL)); |
| 283 localized_strings->SetString("certDeviceColumn", |
| 284 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DEVICE_COLUMN_LABEL)); |
| 285 localized_strings->SetString("certSerialColumn", |
| 286 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_SERIAL_NUMBER_COLUMN_LABEL)); |
| 287 localized_strings->SetString("certExpiresColumn", |
| 288 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EXPIRES_COLUMN_LABEL)); |
| 289 |
| 290 // Buttons. |
| 291 localized_strings->SetString("view_certificate", |
| 292 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_VIEW_CERT_BUTTON)); |
| 293 localized_strings->SetString("import_certificate", |
| 294 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_IMPORT_BUTTON)); |
| 295 localized_strings->SetString("export_certificate", |
| 296 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EXPORT_BUTTON)); |
| 297 localized_strings->SetString("export_all_certificates", |
| 298 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EXPORT_ALL_BUTTON)); |
| 299 localized_strings->SetString("edit_certificate", |
| 300 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EDIT_BUTTON)); |
| 301 localized_strings->SetString("delete_certificate", |
| 302 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_BUTTON)); |
| 303 |
| 304 // Certificate Delete overlay strings. |
| 305 localized_strings->SetString("personalCertsTabDeleteConfirm", |
| 306 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_USER_FORMAT)); |
| 307 localized_strings->SetString("personalCertsTabDeleteImpact", |
| 308 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_USER_DESCRIPTION)); |
| 309 localized_strings->SetString("serverCertsTabDeleteConfirm", |
| 310 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_SERVER_FORMAT)); |
| 311 localized_strings->SetString("serverCertsTabDeleteImpact", |
| 312 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_SERVER_DESCRIPTION)); |
| 313 localized_strings->SetString("caCertsTabDeleteConfirm", |
| 314 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_CA_FORMAT)); |
| 315 localized_strings->SetString("caCertsTabDeleteImpact", |
| 316 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_CA_DESCRIPTION)); |
| 317 localized_strings->SetString("unknownCertsTabDeleteConfirm", |
| 318 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_DELETE_UNKNOWN_FORMAT)); |
| 319 localized_strings->SetString("unknownCertsTabDeleteImpact", ""); |
| 320 |
| 321 // Certificate Restore overlay strings. |
| 322 localized_strings->SetString("certificateRestorePasswordDescription", |
| 323 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_RESTORE_PASSWORD_DESC)); |
| 324 localized_strings->SetString("certificatePasswordLabel", |
| 325 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_PASSWORD_LABEL)); |
| 326 |
| 327 // Personal Certificate Export overlay strings. |
| 328 localized_strings->SetString("certificateExportPasswordDescription", |
| 329 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EXPORT_PASSWORD_DESC)); |
| 330 localized_strings->SetString("certificateExportPasswordHelp", |
| 331 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EXPORT_PASSWORD_HELP)); |
| 332 localized_strings->SetString("certificateConfirmPasswordLabel", |
| 333 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_CONFIRM_PASSWORD_LABEL)); |
| 334 |
| 335 // Edit CA Trust & Import CA overlay strings. |
| 336 localized_strings->SetString("certificateEditTrustLabel", |
| 337 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EDIT_TRUST_LABEL)); |
| 338 localized_strings->SetString("certificateEditCaTrustDescriptionFormat", |
| 339 l10n_util::GetStringUTF16( |
| 340 IDS_CERT_MANAGER_EDIT_CA_TRUST_DESCRIPTION_FORMAT)); |
| 341 localized_strings->SetString("certificateImportCaDescriptionFormat", |
| 342 l10n_util::GetStringUTF16( |
| 343 IDS_CERT_MANAGER_IMPORT_CA_DESCRIPTION_FORMAT)); |
| 344 localized_strings->SetString("certificateCaTrustSSLLabel", |
| 345 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EDIT_CA_TRUST_SSL_LABEL)); |
| 346 localized_strings->SetString("certificateCaTrustEmailLabel", |
| 347 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EDIT_CA_TRUST_EMAIL_LABEL)); |
| 348 localized_strings->SetString("certificateCaTrustObjSignLabel", |
| 349 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_EDIT_CA_TRUST_OBJSIGN_LABEL)); |
| 350 localized_strings->SetString("certificateImportErrorFormat", |
| 351 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_IMPORT_ERROR_FORMAT)); |
| 352 |
| 353 // Badges next to certificates |
| 354 localized_strings->SetString("badgeCertUntrusted", |
| 355 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_UNTRUSTED)); |
| 356 |
| 357 #if defined(OS_CHROMEOS) |
| 358 localized_strings->SetString("importAndBindCertificate", |
| 359 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_IMPORT_AND_BIND_BUTTON)); |
| 360 localized_strings->SetString("hardwareBackedKeyFormat", |
| 361 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_HARDWARE_BACKED_KEY_FORMAT)); |
| 362 localized_strings->SetString("chromeOSDeviceName", |
| 363 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_HARDWARE_BACKED)); |
| 364 #endif // defined(OS_CHROMEOS) |
| 365 } |
| 366 |
| 367 void CertificateManagerHandler::RegisterMessages() { |
| 368 web_ui_->RegisterMessageCallback( |
| 369 "viewCertificate", |
| 370 base::Bind(&CertificateManagerHandler::View, base::Unretained(this))); |
| 371 |
| 372 web_ui_->RegisterMessageCallback( |
| 373 "getCaCertificateTrust", |
| 374 base::Bind(&CertificateManagerHandler::GetCATrust, |
| 375 base::Unretained(this))); |
| 376 web_ui_->RegisterMessageCallback( |
| 377 "editCaCertificateTrust", |
| 378 base::Bind(&CertificateManagerHandler::EditCATrust, |
| 379 base::Unretained(this))); |
| 380 |
| 381 web_ui_->RegisterMessageCallback( |
| 382 "editServerCertificate", |
| 383 base::Bind(&CertificateManagerHandler::EditServer, |
| 384 base::Unretained(this))); |
| 385 |
| 386 web_ui_->RegisterMessageCallback( |
| 387 "cancelImportExportCertificate", |
| 388 base::Bind(&CertificateManagerHandler::CancelImportExportProcess, |
| 389 base::Unretained(this))); |
| 390 |
| 391 web_ui_->RegisterMessageCallback( |
| 392 "exportPersonalCertificate", |
| 393 base::Bind(&CertificateManagerHandler::ExportPersonal, |
| 394 base::Unretained(this))); |
| 395 web_ui_->RegisterMessageCallback( |
| 396 "exportAllPersonalCertificates", |
| 397 base::Bind(&CertificateManagerHandler::ExportAllPersonal, |
| 398 base::Unretained(this))); |
| 399 web_ui_->RegisterMessageCallback( |
| 400 "exportPersonalCertificatePasswordSelected", |
| 401 base::Bind(&CertificateManagerHandler::ExportPersonalPasswordSelected, |
| 402 base::Unretained(this))); |
| 403 |
| 404 web_ui_->RegisterMessageCallback( |
| 405 "importPersonalCertificate", |
| 406 base::Bind(&CertificateManagerHandler::StartImportPersonal, |
| 407 base::Unretained(this))); |
| 408 web_ui_->RegisterMessageCallback( |
| 409 "importPersonalCertificatePasswordSelected", |
| 410 base::Bind(&CertificateManagerHandler::ImportPersonalPasswordSelected, |
| 411 base::Unretained(this))); |
| 412 |
| 413 web_ui_->RegisterMessageCallback( |
| 414 "importCaCertificate", |
| 415 base::Bind(&CertificateManagerHandler::ImportCA, |
| 416 base::Unretained(this))); |
| 417 web_ui_->RegisterMessageCallback( |
| 418 "importCaCertificateTrustSelected", |
| 419 base::Bind(&CertificateManagerHandler::ImportCATrustSelected, |
| 420 base::Unretained(this))); |
| 421 |
| 422 web_ui_->RegisterMessageCallback( |
| 423 "importServerCertificate", |
| 424 base::Bind(&CertificateManagerHandler::ImportServer, |
| 425 base::Unretained(this))); |
| 426 |
| 427 web_ui_->RegisterMessageCallback( |
| 428 "exportCertificate", |
| 429 base::Bind(&CertificateManagerHandler::Export, |
| 430 base::Unretained(this))); |
| 431 |
| 432 web_ui_->RegisterMessageCallback( |
| 433 "deleteCertificate", |
| 434 base::Bind(&CertificateManagerHandler::Delete, |
| 435 base::Unretained(this))); |
| 436 |
| 437 web_ui_->RegisterMessageCallback( |
| 438 "populateCertificateManager", |
| 439 base::Bind(&CertificateManagerHandler::Populate, |
| 440 base::Unretained(this))); |
| 441 |
| 442 #if defined(OS_CHROMEOS) |
| 443 web_ui_->RegisterMessageCallback( |
| 444 "checkTpmTokenReady", |
| 445 base::Bind(&CertificateManagerHandler::CheckTpmTokenReady, |
| 446 base::Unretained(this))); |
| 447 #endif |
| 448 } |
| 449 |
| 450 void CertificateManagerHandler::CertificatesRefreshed() { |
| 451 PopulateTree("personalCertsTab", net::USER_CERT); |
| 452 PopulateTree("serverCertsTab", net::SERVER_CERT); |
| 453 PopulateTree("caCertsTab", net::CA_CERT); |
| 454 PopulateTree("otherCertsTab", net::UNKNOWN_CERT); |
| 455 VLOG(1) << "populating finished"; |
| 456 } |
| 457 |
| 458 void CertificateManagerHandler::FileSelected(const FilePath& path, int index, |
| 459 void* params) { |
| 460 switch (reinterpret_cast<intptr_t>(params)) { |
| 461 case EXPORT_PERSONAL_FILE_SELECTED: |
| 462 ExportPersonalFileSelected(path); |
| 463 break; |
| 464 case IMPORT_PERSONAL_FILE_SELECTED: |
| 465 ImportPersonalFileSelected(path); |
| 466 break; |
| 467 case IMPORT_SERVER_FILE_SELECTED: |
| 468 ImportServerFileSelected(path); |
| 469 break; |
| 470 case IMPORT_CA_FILE_SELECTED: |
| 471 ImportCAFileSelected(path); |
| 472 break; |
| 473 default: |
| 474 NOTREACHED(); |
| 475 } |
| 476 } |
| 477 |
| 478 void CertificateManagerHandler::FileSelectionCanceled(void* params) { |
| 479 switch (reinterpret_cast<intptr_t>(params)) { |
| 480 case EXPORT_PERSONAL_FILE_SELECTED: |
| 481 case IMPORT_PERSONAL_FILE_SELECTED: |
| 482 case IMPORT_SERVER_FILE_SELECTED: |
| 483 case IMPORT_CA_FILE_SELECTED: |
| 484 ImportExportCleanup(); |
| 485 break; |
| 486 default: |
| 487 NOTREACHED(); |
| 488 } |
| 489 } |
| 490 |
| 491 void CertificateManagerHandler::View(const ListValue* args) { |
| 492 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 493 if (!cert) |
| 494 return; |
| 495 ShowCertificateViewer(GetParentWindow(), cert); |
| 496 } |
| 497 |
| 498 void CertificateManagerHandler::GetCATrust(const ListValue* args) { |
| 499 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 500 if (!cert) { |
| 501 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.dismiss"); |
| 502 return; |
| 503 } |
| 504 |
| 505 net::CertDatabase::TrustBits trust_bits = |
| 506 certificate_manager_model_->cert_db().GetCertTrust(cert, net::CA_CERT); |
| 507 base::FundamentalValue ssl_value( |
| 508 static_cast<bool>(trust_bits & net::CertDatabase::TRUSTED_SSL)); |
| 509 base::FundamentalValue email_value( |
| 510 static_cast<bool>(trust_bits & net::CertDatabase::TRUSTED_EMAIL)); |
| 511 base::FundamentalValue obj_sign_value( |
| 512 static_cast<bool>(trust_bits & net::CertDatabase::TRUSTED_OBJ_SIGN)); |
| 513 web_ui_->CallJavascriptFunction( |
| 514 "CertificateEditCaTrustOverlay.populateTrust", |
| 515 ssl_value, email_value, obj_sign_value); |
| 516 } |
| 517 |
| 518 void CertificateManagerHandler::EditCATrust(const ListValue* args) { |
| 519 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 520 bool fail = !cert; |
| 521 bool trust_ssl = false; |
| 522 bool trust_email = false; |
| 523 bool trust_obj_sign = false; |
| 524 fail |= !CallbackArgsToBool(args, 1, &trust_ssl); |
| 525 fail |= !CallbackArgsToBool(args, 2, &trust_email); |
| 526 fail |= !CallbackArgsToBool(args, 3, &trust_obj_sign); |
| 527 if (fail) { |
| 528 LOG(ERROR) << "EditCATrust args fail"; |
| 529 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.dismiss"); |
| 530 return; |
| 531 } |
| 532 |
| 533 bool result = certificate_manager_model_->SetCertTrust( |
| 534 cert, |
| 535 net::CA_CERT, |
| 536 trust_ssl * net::CertDatabase::TRUSTED_SSL + |
| 537 trust_email * net::CertDatabase::TRUSTED_EMAIL + |
| 538 trust_obj_sign * net::CertDatabase::TRUSTED_OBJ_SIGN); |
| 539 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.dismiss"); |
| 540 if (!result) { |
| 541 // TODO(mattm): better error messages? |
| 542 ShowError( |
| 543 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_SET_TRUST_ERROR_TITLE), |
| 544 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR)); |
| 545 } |
| 546 } |
| 547 |
| 548 void CertificateManagerHandler::EditServer(const ListValue* args) { |
| 549 NOTIMPLEMENTED(); |
| 550 } |
| 551 |
| 552 void CertificateManagerHandler::ExportPersonal(const ListValue* args) { |
| 553 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 554 if (!cert) |
| 555 return; |
| 556 |
| 557 selected_cert_list_.push_back(cert); |
| 558 |
| 559 SelectFileDialog::FileTypeInfo file_type_info; |
| 560 file_type_info.extensions.resize(1); |
| 561 file_type_info.extensions[0].push_back(FILE_PATH_LITERAL("p12")); |
| 562 file_type_info.extension_description_overrides.push_back( |
| 563 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_PKCS12_FILES)); |
| 564 file_type_info.include_all_files = true; |
| 565 select_file_dialog_ = SelectFileDialog::Create(this); |
| 566 select_file_dialog_->SelectFile( |
| 567 SelectFileDialog::SELECT_SAVEAS_FILE, string16(), |
| 568 FilePath(), &file_type_info, 1, FILE_PATH_LITERAL("p12"), |
| 569 web_ui_->tab_contents(), GetParentWindow(), |
| 570 reinterpret_cast<void*>(EXPORT_PERSONAL_FILE_SELECTED)); |
| 571 } |
| 572 |
| 573 void CertificateManagerHandler::ExportAllPersonal(const ListValue* args) { |
| 574 NOTIMPLEMENTED(); |
| 575 } |
| 576 |
| 577 void CertificateManagerHandler::ExportPersonalFileSelected( |
| 578 const FilePath& path) { |
| 579 file_path_ = path; |
| 580 web_ui_->CallJavascriptFunction( |
| 581 "CertificateManager.exportPersonalAskPassword"); |
| 582 } |
| 583 |
| 584 void CertificateManagerHandler::ExportPersonalPasswordSelected( |
| 585 const ListValue* args) { |
| 586 if (!args->GetString(0, &password_)){ |
| 587 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 588 ImportExportCleanup(); |
| 589 return; |
| 590 } |
| 591 |
| 592 // Currently, we don't support exporting more than one at a time. If we do, |
| 593 // this would need to either change this to use UnlockSlotsIfNecessary or |
| 594 // change UnlockCertSlotIfNecessary to take a CertificateList. |
| 595 DCHECK_EQ(selected_cert_list_.size(), 1U); |
| 596 |
| 597 // TODO(mattm): do something smarter about non-extractable keys |
| 598 browser::UnlockCertSlotIfNecessary( |
| 599 selected_cert_list_[0].get(), |
| 600 browser::kCryptoModulePasswordCertExport, |
| 601 "", // unused. |
| 602 base::Bind(&CertificateManagerHandler::ExportPersonalSlotsUnlocked, |
| 603 base::Unretained(this))); |
| 604 } |
| 605 |
| 606 void CertificateManagerHandler::ExportPersonalSlotsUnlocked() { |
| 607 std::string output; |
| 608 int num_exported = certificate_manager_model_->cert_db().ExportToPKCS12( |
| 609 selected_cert_list_, |
| 610 password_, |
| 611 &output); |
| 612 if (!num_exported) { |
| 613 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 614 ShowError( |
| 615 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_PKCS12_EXPORT_ERROR_TITLE), |
| 616 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR)); |
| 617 ImportExportCleanup(); |
| 618 return; |
| 619 } |
| 620 file_access_provider_->StartWrite( |
| 621 file_path_, |
| 622 output, |
| 623 &consumer_, |
| 624 NewCallback(this, &CertificateManagerHandler::ExportPersonalFileWritten)); |
| 625 } |
| 626 |
| 627 void CertificateManagerHandler::ExportPersonalFileWritten(int write_errno, |
| 628 int bytes_written) { |
| 629 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 630 ImportExportCleanup(); |
| 631 if (write_errno) { |
| 632 ShowError( |
| 633 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_PKCS12_EXPORT_ERROR_TITLE), |
| 634 l10n_util::GetStringFUTF8(IDS_CERT_MANAGER_WRITE_ERROR_FORMAT, |
| 635 UTF8ToUTF16(safe_strerror(write_errno)))); |
| 636 } |
| 637 } |
| 638 |
| 639 void CertificateManagerHandler::StartImportPersonal(const ListValue* args) { |
| 640 SelectFileDialog::FileTypeInfo file_type_info; |
| 641 if (!args->GetBoolean(0, &use_hardware_backed_)){ |
| 642 // Unable to retrieve the hardware backed attribute from the args, |
| 643 // so bail. |
| 644 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 645 ImportExportCleanup(); |
| 646 return; |
| 647 } |
| 648 file_type_info.extensions.resize(1); |
| 649 file_type_info.extensions[0].push_back(FILE_PATH_LITERAL("p12")); |
| 650 file_type_info.extension_description_overrides.push_back( |
| 651 l10n_util::GetStringUTF16(IDS_CERT_MANAGER_PKCS12_FILES)); |
| 652 file_type_info.include_all_files = true; |
| 653 select_file_dialog_ = SelectFileDialog::Create(this); |
| 654 select_file_dialog_->SelectFile( |
| 655 SelectFileDialog::SELECT_OPEN_FILE, string16(), |
| 656 FilePath(), &file_type_info, 1, FILE_PATH_LITERAL("p12"), |
| 657 web_ui_->tab_contents(), GetParentWindow(), |
| 658 reinterpret_cast<void*>(IMPORT_PERSONAL_FILE_SELECTED)); |
| 659 } |
| 660 |
| 661 void CertificateManagerHandler::ImportPersonalFileSelected( |
| 662 const FilePath& path) { |
| 663 file_path_ = path; |
| 664 web_ui_->CallJavascriptFunction( |
| 665 "CertificateManager.importPersonalAskPassword"); |
| 666 } |
| 667 |
| 668 void CertificateManagerHandler::ImportPersonalPasswordSelected( |
| 669 const ListValue* args) { |
| 670 if (!args->GetString(0, &password_)){ |
| 671 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 672 ImportExportCleanup(); |
| 673 return; |
| 674 } |
| 675 file_access_provider_->StartRead( |
| 676 file_path_, |
| 677 &consumer_, |
| 678 NewCallback(this, &CertificateManagerHandler::ImportPersonalFileRead)); |
| 679 } |
| 680 |
| 681 void CertificateManagerHandler::ImportPersonalFileRead( |
| 682 int read_errno, std::string data) { |
| 683 if (read_errno) { |
| 684 ImportExportCleanup(); |
| 685 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 686 ShowError( |
| 687 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_PKCS12_IMPORT_ERROR_TITLE), |
| 688 l10n_util::GetStringFUTF8(IDS_CERT_MANAGER_READ_ERROR_FORMAT, |
| 689 UTF8ToUTF16(safe_strerror(read_errno)))); |
| 690 return; |
| 691 } |
| 692 |
| 693 file_data_ = data; |
| 694 |
| 695 if (use_hardware_backed_) { |
| 696 module_ = certificate_manager_model_->cert_db().GetPrivateModule(); |
| 697 } else { |
| 698 module_ = certificate_manager_model_->cert_db().GetPublicModule(); |
| 699 } |
| 700 |
| 701 net::CryptoModuleList modules; |
| 702 modules.push_back(module_); |
| 703 browser::UnlockSlotsIfNecessary( |
| 704 modules, |
| 705 browser::kCryptoModulePasswordCertImport, |
| 706 "", // unused. |
| 707 base::Bind(&CertificateManagerHandler::ImportPersonalSlotUnlocked, |
| 708 base::Unretained(this))); |
| 709 } |
| 710 |
| 711 void CertificateManagerHandler::ImportPersonalSlotUnlocked() { |
| 712 // Determine if the private key should be unextractable after the import. |
| 713 // We do this by checking the value of |use_hardware_backed_| which is set |
| 714 // to true if importing into a hardware module. Currently, this only happens |
| 715 // for Chrome OS when the "Import and Bind" option is chosen. |
| 716 bool is_extractable = !use_hardware_backed_; |
| 717 int result = certificate_manager_model_->ImportFromPKCS12( |
| 718 module_, file_data_, password_, is_extractable); |
| 719 ImportExportCleanup(); |
| 720 web_ui_->CallJavascriptFunction("CertificateRestoreOverlay.dismiss"); |
| 721 int string_id; |
| 722 switch (result) { |
| 723 case net::OK: |
| 724 return; |
| 725 case net::ERR_PKCS12_IMPORT_BAD_PASSWORD: |
| 726 // TODO(mattm): if the error was a bad password, we should reshow the |
| 727 // password dialog after the user dismisses the error dialog. |
| 728 string_id = IDS_CERT_MANAGER_BAD_PASSWORD; |
| 729 break; |
| 730 case net::ERR_PKCS12_IMPORT_INVALID_MAC: |
| 731 string_id = IDS_CERT_MANAGER_PKCS12_IMPORT_INVALID_MAC; |
| 732 break; |
| 733 case net::ERR_PKCS12_IMPORT_INVALID_FILE: |
| 734 string_id = IDS_CERT_MANAGER_PKCS12_IMPORT_INVALID_FILE; |
| 735 break; |
| 736 case net::ERR_PKCS12_IMPORT_UNSUPPORTED: |
| 737 string_id = IDS_CERT_MANAGER_PKCS12_IMPORT_UNSUPPORTED; |
| 738 break; |
| 739 default: |
| 740 string_id = IDS_CERT_MANAGER_UNKNOWN_ERROR; |
| 741 break; |
| 742 } |
| 743 ShowError( |
| 744 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_PKCS12_IMPORT_ERROR_TITLE), |
| 745 l10n_util::GetStringUTF8(string_id)); |
| 746 } |
| 747 |
| 748 void CertificateManagerHandler::CancelImportExportProcess( |
| 749 const ListValue* args) { |
| 750 ImportExportCleanup(); |
| 751 } |
| 752 |
| 753 void CertificateManagerHandler::ImportExportCleanup() { |
| 754 file_path_.clear(); |
| 755 password_.clear(); |
| 756 file_data_.clear(); |
| 757 use_hardware_backed_ = false; |
| 758 selected_cert_list_.clear(); |
| 759 module_ = NULL; |
| 760 |
| 761 // There may be pending file dialogs, we need to tell them that we've gone |
| 762 // away so they don't try and call back to us. |
| 763 if (select_file_dialog_.get()) |
| 764 select_file_dialog_->ListenerDestroyed(); |
| 765 select_file_dialog_ = NULL; |
| 766 } |
| 767 |
| 768 void CertificateManagerHandler::ImportServer(const ListValue* args) { |
| 769 select_file_dialog_ = SelectFileDialog::Create(this); |
| 770 ShowCertSelectFileDialog( |
| 771 select_file_dialog_.get(), |
| 772 SelectFileDialog::SELECT_OPEN_FILE, |
| 773 FilePath(), |
| 774 web_ui_->tab_contents(), |
| 775 GetParentWindow(), |
| 776 reinterpret_cast<void*>(IMPORT_SERVER_FILE_SELECTED)); |
| 777 } |
| 778 |
| 779 void CertificateManagerHandler::ImportServerFileSelected(const FilePath& path) { |
| 780 file_path_ = path; |
| 781 file_access_provider_->StartRead( |
| 782 file_path_, |
| 783 &consumer_, |
| 784 NewCallback(this, &CertificateManagerHandler::ImportServerFileRead)); |
| 785 } |
| 786 |
| 787 void CertificateManagerHandler::ImportServerFileRead(int read_errno, |
| 788 std::string data) { |
| 789 if (read_errno) { |
| 790 ImportExportCleanup(); |
| 791 ShowError( |
| 792 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_SERVER_IMPORT_ERROR_TITLE), |
| 793 l10n_util::GetStringFUTF8(IDS_CERT_MANAGER_READ_ERROR_FORMAT, |
| 794 UTF8ToUTF16(safe_strerror(read_errno)))); |
| 795 return; |
| 796 } |
| 797 |
| 798 selected_cert_list_ = net::X509Certificate::CreateCertificateListFromBytes( |
| 799 data.data(), data.size(), net::X509Certificate::FORMAT_AUTO); |
| 800 if (selected_cert_list_.empty()) { |
| 801 ImportExportCleanup(); |
| 802 ShowError( |
| 803 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_SERVER_IMPORT_ERROR_TITLE), |
| 804 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CERT_PARSE_ERROR)); |
| 805 return; |
| 806 } |
| 807 |
| 808 net::CertDatabase::ImportCertFailureList not_imported; |
| 809 bool result = certificate_manager_model_->ImportServerCert( |
| 810 selected_cert_list_, |
| 811 ¬_imported); |
| 812 if (!result) { |
| 813 ShowError( |
| 814 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_SERVER_IMPORT_ERROR_TITLE), |
| 815 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR)); |
| 816 } else if (!not_imported.empty()) { |
| 817 ShowImportErrors( |
| 818 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_SERVER_IMPORT_ERROR_TITLE), |
| 819 not_imported); |
| 820 } |
| 821 ImportExportCleanup(); |
| 822 } |
| 823 |
| 824 void CertificateManagerHandler::ImportCA(const ListValue* args) { |
| 825 select_file_dialog_ = SelectFileDialog::Create(this); |
| 826 ShowCertSelectFileDialog(select_file_dialog_.get(), |
| 827 SelectFileDialog::SELECT_OPEN_FILE, |
| 828 FilePath(), |
| 829 web_ui_->tab_contents(), |
| 830 GetParentWindow(), |
| 831 reinterpret_cast<void*>(IMPORT_CA_FILE_SELECTED)); |
| 832 } |
| 833 |
| 834 void CertificateManagerHandler::ImportCAFileSelected(const FilePath& path) { |
| 835 file_path_ = path; |
| 836 file_access_provider_->StartRead( |
| 837 file_path_, |
| 838 &consumer_, |
| 839 NewCallback(this, &CertificateManagerHandler::ImportCAFileRead)); |
| 840 } |
| 841 |
| 842 void CertificateManagerHandler::ImportCAFileRead(int read_errno, |
| 843 std::string data) { |
| 844 if (read_errno) { |
| 845 ImportExportCleanup(); |
| 846 ShowError( |
| 847 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CA_IMPORT_ERROR_TITLE), |
| 848 l10n_util::GetStringFUTF8(IDS_CERT_MANAGER_READ_ERROR_FORMAT, |
| 849 UTF8ToUTF16(safe_strerror(read_errno)))); |
| 850 return; |
| 851 } |
| 852 |
| 853 selected_cert_list_ = net::X509Certificate::CreateCertificateListFromBytes( |
| 854 data.data(), data.size(), net::X509Certificate::FORMAT_AUTO); |
| 855 if (selected_cert_list_.empty()) { |
| 856 ImportExportCleanup(); |
| 857 ShowError( |
| 858 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CA_IMPORT_ERROR_TITLE), |
| 859 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CERT_PARSE_ERROR)); |
| 860 return; |
| 861 } |
| 862 |
| 863 scoped_refptr<net::X509Certificate> root_cert = |
| 864 certificate_manager_model_->cert_db().FindRootInList(selected_cert_list_); |
| 865 |
| 866 // TODO(mattm): check here if root_cert is not a CA cert and show error. |
| 867 |
| 868 StringValue cert_name(root_cert->subject().GetDisplayName()); |
| 869 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.showImport", |
| 870 cert_name); |
| 871 } |
| 872 |
| 873 void CertificateManagerHandler::ImportCATrustSelected(const ListValue* args) { |
| 874 bool fail = false; |
| 875 bool trust_ssl = false; |
| 876 bool trust_email = false; |
| 877 bool trust_obj_sign = false; |
| 878 fail |= !CallbackArgsToBool(args, 0, &trust_ssl); |
| 879 fail |= !CallbackArgsToBool(args, 1, &trust_email); |
| 880 fail |= !CallbackArgsToBool(args, 2, &trust_obj_sign); |
| 881 if (fail) { |
| 882 LOG(ERROR) << "ImportCATrustSelected args fail"; |
| 883 ImportExportCleanup(); |
| 884 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.dismiss"); |
| 885 return; |
| 886 } |
| 887 |
| 888 net::CertDatabase::ImportCertFailureList not_imported; |
| 889 bool result = certificate_manager_model_->ImportCACerts( |
| 890 selected_cert_list_, |
| 891 trust_ssl * net::CertDatabase::TRUSTED_SSL + |
| 892 trust_email * net::CertDatabase::TRUSTED_EMAIL + |
| 893 trust_obj_sign * net::CertDatabase::TRUSTED_OBJ_SIGN, |
| 894 ¬_imported); |
| 895 web_ui_->CallJavascriptFunction("CertificateEditCaTrustOverlay.dismiss"); |
| 896 if (!result) { |
| 897 ShowError( |
| 898 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CA_IMPORT_ERROR_TITLE), |
| 899 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR)); |
| 900 } else if (!not_imported.empty()) { |
| 901 ShowImportErrors( |
| 902 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_CA_IMPORT_ERROR_TITLE), |
| 903 not_imported); |
| 904 } |
| 905 ImportExportCleanup(); |
| 906 } |
| 907 |
| 908 void CertificateManagerHandler::Export(const ListValue* args) { |
| 909 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 910 if (!cert) |
| 911 return; |
| 912 ShowCertExportDialog(web_ui_->tab_contents(), GetParentWindow(), |
| 913 cert->os_cert_handle()); |
| 914 } |
| 915 |
| 916 void CertificateManagerHandler::Delete(const ListValue* args) { |
| 917 net::X509Certificate* cert = CallbackArgsToCert(args); |
| 918 if (!cert) |
| 919 return; |
| 920 bool result = certificate_manager_model_->Delete(cert); |
| 921 if (!result) { |
| 922 // TODO(mattm): better error messages? |
| 923 ShowError( |
| 924 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_DELETE_CERT_ERROR_TITLE), |
| 925 l10n_util::GetStringUTF8(IDS_CERT_MANAGER_UNKNOWN_ERROR)); |
| 926 } |
| 927 } |
| 928 |
| 929 void CertificateManagerHandler::Populate(const ListValue* args) { |
| 930 certificate_manager_model_->Refresh(); |
| 931 } |
| 932 |
| 933 void CertificateManagerHandler::PopulateTree(const std::string& tab_name, |
| 934 net::CertType type) { |
| 935 const std::string tree_name = tab_name + "-tree"; |
| 936 |
| 937 scoped_ptr<icu::Collator> collator; |
| 938 UErrorCode error = U_ZERO_ERROR; |
| 939 collator.reset( |
| 940 icu::Collator::createInstance( |
| 941 icu::Locale(g_browser_process->GetApplicationLocale().c_str()), |
| 942 error)); |
| 943 if (U_FAILURE(error)) |
| 944 collator.reset(NULL); |
| 945 DictionaryIdComparator comparator(collator.get()); |
| 946 CertificateManagerModel::OrgGroupingMap map; |
| 947 |
| 948 certificate_manager_model_->FilterAndBuildOrgGroupingMap(type, &map); |
| 949 |
| 950 { |
| 951 ListValue* nodes = new ListValue; |
| 952 for (CertificateManagerModel::OrgGroupingMap::iterator i = map.begin(); |
| 953 i != map.end(); ++i) { |
| 954 // Populate first level (org name). |
| 955 DictionaryValue* dict = new DictionaryValue; |
| 956 dict->SetString(kKeyId, OrgNameToId(i->first)); |
| 957 dict->SetString(kNameId, i->first); |
| 958 |
| 959 // Populate second level (certs). |
| 960 ListValue* subnodes = new ListValue; |
| 961 for (net::CertificateList::const_iterator org_cert_it = i->second.begin(); |
| 962 org_cert_it != i->second.end(); ++org_cert_it) { |
| 963 DictionaryValue* cert_dict = new DictionaryValue; |
| 964 net::X509Certificate* cert = org_cert_it->get(); |
| 965 cert_dict->SetString(kKeyId, CertToId(*cert)); |
| 966 cert_dict->SetString(kNameId, certificate_manager_model_->GetColumnText( |
| 967 *cert, CertificateManagerModel::COL_SUBJECT_NAME)); |
| 968 cert_dict->SetBoolean( |
| 969 kReadOnlyId, |
| 970 certificate_manager_model_->cert_db().IsReadOnly(cert)); |
| 971 cert_dict->SetBoolean( |
| 972 kUntrustedId, |
| 973 certificate_manager_model_->cert_db().IsUntrusted(cert)); |
| 974 // TODO(mattm): Other columns. |
| 975 subnodes->Append(cert_dict); |
| 976 } |
| 977 std::sort(subnodes->begin(), subnodes->end(), comparator); |
| 978 |
| 979 dict->Set(kSubNodesId, subnodes); |
| 980 nodes->Append(dict); |
| 981 } |
| 982 std::sort(nodes->begin(), nodes->end(), comparator); |
| 983 |
| 984 ListValue args; |
| 985 args.Append(Value::CreateStringValue(tree_name)); |
| 986 args.Append(nodes); |
| 987 web_ui_->CallJavascriptFunction("CertificateManager.onPopulateTree", args); |
| 988 } |
| 989 } |
| 990 |
| 991 void CertificateManagerHandler::ShowError(const std::string& title, |
| 992 const std::string& error) const { |
| 993 ScopedVector<const Value> args; |
| 994 args.push_back(Value::CreateStringValue(title)); |
| 995 args.push_back(Value::CreateStringValue(error)); |
| 996 args.push_back(Value::CreateStringValue(l10n_util::GetStringUTF8(IDS_OK))); |
| 997 args.push_back(Value::CreateNullValue()); // cancelTitle |
| 998 args.push_back(Value::CreateNullValue()); // okCallback |
| 999 args.push_back(Value::CreateNullValue()); // cancelCallback |
| 1000 web_ui_->CallJavascriptFunction("AlertOverlay.show", args.get()); |
| 1001 } |
| 1002 |
| 1003 void CertificateManagerHandler::ShowImportErrors( |
| 1004 const std::string& title, |
| 1005 const net::CertDatabase::ImportCertFailureList& not_imported) const { |
| 1006 std::string error; |
| 1007 if (selected_cert_list_.size() == 1) |
| 1008 error = l10n_util::GetStringUTF8( |
| 1009 IDS_CERT_MANAGER_IMPORT_SINGLE_NOT_IMPORTED); |
| 1010 else if (not_imported.size() == selected_cert_list_.size()) |
| 1011 error = l10n_util::GetStringUTF8(IDS_CERT_MANAGER_IMPORT_ALL_NOT_IMPORTED); |
| 1012 else |
| 1013 error = l10n_util::GetStringUTF8(IDS_CERT_MANAGER_IMPORT_SOME_NOT_IMPORTED); |
| 1014 |
| 1015 ListValue cert_error_list; |
| 1016 for (size_t i = 0; i < not_imported.size(); ++i) { |
| 1017 const net::CertDatabase::ImportCertFailure& failure = not_imported[i]; |
| 1018 DictionaryValue* dict = new DictionaryValue; |
| 1019 dict->SetString(kNameId, failure.certificate->subject().GetDisplayName()); |
| 1020 dict->SetString(kErrorId, NetErrorToString(failure.net_error)); |
| 1021 cert_error_list.Append(dict); |
| 1022 } |
| 1023 |
| 1024 StringValue title_value(title); |
| 1025 StringValue error_value(error); |
| 1026 web_ui_->CallJavascriptFunction("CertificateImportErrorOverlay.show", |
| 1027 title_value, |
| 1028 error_value, |
| 1029 cert_error_list); |
| 1030 } |
| 1031 |
| 1032 #if defined(OS_CHROMEOS) |
| 1033 void CertificateManagerHandler::CheckTpmTokenReady(const ListValue* args) { |
| 1034 chromeos::CryptohomeLibrary* cryptohome = |
| 1035 chromeos::CrosLibrary::Get()->GetCryptohomeLibrary(); |
| 1036 |
| 1037 // TODO(xiyuan): Use async way when underlying supports it. |
| 1038 base::FundamentalValue ready(cryptohome->Pkcs11IsTpmTokenReady()); |
| 1039 web_ui_->CallJavascriptFunction("CertificateManager.onCheckTpmTokenReady", |
| 1040 ready); |
| 1041 } |
| 1042 #endif |
| 1043 |
| 1044 gfx::NativeWindow CertificateManagerHandler::GetParentWindow() const { |
| 1045 return web_ui_->tab_contents()->view()->GetTopLevelNativeWindow(); |
| 1046 } |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 8895023:
Options2: Pull the trigger. (Closed)
Base URL: svn://svn.chromium.org/chrome/trunk/src