Remove certificates from Channel ID

net/quic/crypto/channel_id_chromium.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/quic/crypto/channel_id_chromium.h"
 
 #include <string>
 
 #include "base/stl_util.h"
 #include "base/strings/string_util.h"
 #include "crypto/ec_private_key.h"
 #include "crypto/ec_signature_creator.h"
 #include "net/base/net_errors.h"
 #include "net/cert/asn1_util.h"
 #include "net/ssl/channel_id_service.h"
 
 namespace net {
 
 ChannelIDKeyChromium::ChannelIDKeyChromium(
-    crypto::ECPrivateKey* ec_private_key)
-    : ec_private_key_(ec_private_key) {}
+    scoped_ptr<crypto::ECPrivateKey> ec_private_key)
+    : ec_private_key_(ec_private_key.Pass()) {
+}
 
 ChannelIDKeyChromium::~ChannelIDKeyChromium() {}
 
 bool ChannelIDKeyChromium::Sign(base::StringPiece signed_data,
                                 std::string* out_signature) const {
   scoped_ptr<crypto::ECSignatureCreator> sig_creator(
       crypto::ECSignatureCreator::Create(ec_private_key_.get()));
   if (!sig_creator) {
     return false;
   }
@@ skipping 48 matching lines @@
   int DoLoop(int last_io_result);
   void OnIOComplete(int result);
   int DoGetChannelIDKey(int result);
   int DoGetChannelIDKeyComplete(int result);
 
   // Channel ID source to notify when this jobs completes.
   ChannelIDSourceChromium* const channel_id_source_;
 
   ChannelIDService* const channel_id_service_;
 
-  std::string channel_id_private_key_;
-  std::string channel_id_cert_;
+  scoped_ptr<crypto::ECPrivateKey> channel_id_crypto_key_;
   ChannelIDService::RequestHandle channel_id_request_handle_;
 
   // |hostname| specifies the hostname for which we need a channel ID.
   std::string hostname_;
 
   scoped_ptr<ChannelIDSourceCallback> callback_;
 
   scoped_ptr<ChannelIDKey> channel_id_key_;
 
   State next_state_;
@@ skipping 69 matching lines @@
     callback->Run(&channel_id_key_);
     // Will delete |this|.
     channel_id_source_->OnJobComplete(this);
   }
 }
 
 int ChannelIDSourceChromium::Job::DoGetChannelIDKey(int result) {
   next_state_ = STATE_GET_CHANNEL_ID_KEY_COMPLETE;
 
   return channel_id_service_->GetOrCreateChannelID(
-      hostname_,
-      &channel_id_private_key_,
-      &channel_id_cert_,
+      hostname_, &channel_id_crypto_key_,
       base::Bind(&ChannelIDSourceChromium::Job::OnIOComplete,
                  base::Unretained(this)),
       &channel_id_request_handle_);
 }
 
 int ChannelIDSourceChromium::Job::DoGetChannelIDKeyComplete(int result) {
   DCHECK_EQ(STATE_NONE, next_state_);
   if (result != OK) {
     DLOG(WARNING) << "Failed to look up channel ID: " << ErrorToString(result);
     return result;
   }
 
-  std::vector<uint8> encrypted_private_key_info(
-      channel_id_private_key_.size());
-  memcpy(&encrypted_private_key_info[0], channel_id_private_key_.data(),
-         channel_id_private_key_.size());
-
-  base::StringPiece spki_piece;
-  if (!asn1::ExtractSPKIFromDERCert(channel_id_cert_, &spki_piece)) {
-    return ERR_UNEXPECTED;
-  }
-  std::vector<uint8> subject_public_key_info(spki_piece.size());
-  memcpy(&subject_public_key_info[0], spki_piece.data(), spki_piece.size());
-
-  crypto::ECPrivateKey* ec_private_key =
-      crypto::ECPrivateKey::CreateFromEncryptedPrivateKeyInfo(
-          ChannelIDService::kEPKIPassword, encrypted_private_key_info,
-          subject_public_key_info);
-  if (!ec_private_key) {
+  if (!channel_id_crypto_key_) {
     // TODO(wtc): use the new error code ERR_CHANNEL_ID_IMPORT_FAILED to be
     // added in https://codereview.chromium.org/338093012/.
     return ERR_UNEXPECTED;
   }
-  channel_id_key_.reset(new ChannelIDKeyChromium(ec_private_key));
+  channel_id_key_.reset(
+      new ChannelIDKeyChromium(channel_id_crypto_key_.Pass()));
 
   return result;
 }
 
 ChannelIDSourceChromium::ChannelIDSourceChromium(
     ChannelIDService* channel_id_service)
     : channel_id_service_(channel_id_service) {
 }
 
 ChannelIDSourceChromium::~ChannelIDSourceChromium() {
@@ skipping 12 matching lines @@
   }
   return status;
 }
 
 void ChannelIDSourceChromium::OnJobComplete(Job* job) {
   active_jobs_.erase(job);
   delete job;
 }
 
 }  // namespace net