OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 5 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
6 #define NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 6 #define NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
7 | 7 |
8 #include <certt.h> | 8 #include <certt.h> |
9 #include <keyt.h> | 9 #include <keyt.h> |
10 #include <nspr.h> | 10 #include <nspr.h> |
11 #include <nss.h> | 11 #include <nss.h> |
12 | 12 |
13 #include <string> | 13 #include <string> |
14 #include <vector> | 14 #include <vector> |
15 | 15 |
16 #include "base/memory/scoped_ptr.h" | 16 #include "base/memory/scoped_ptr.h" |
17 #include "base/synchronization/lock.h" | 17 #include "base/synchronization/lock.h" |
18 #include "base/threading/platform_thread.h" | 18 #include "base/threading/platform_thread.h" |
19 #include "base/time/time.h" | 19 #include "base/time/time.h" |
20 #include "net/base/completion_callback.h" | 20 #include "net/base/completion_callback.h" |
21 #include "net/base/host_port_pair.h" | 21 #include "net/base/host_port_pair.h" |
22 #include "net/base/net_export.h" | 22 #include "net/base/net_export.h" |
23 #include "net/base/nss_memio.h" | 23 #include "net/base/nss_memio.h" |
| 24 #include "net/cert/cert_verifier.h" |
24 #include "net/cert/cert_verify_result.h" | 25 #include "net/cert/cert_verify_result.h" |
25 #include "net/cert/ct_verify_result.h" | 26 #include "net/cert/ct_verify_result.h" |
26 #include "net/cert/x509_certificate.h" | 27 #include "net/cert/x509_certificate.h" |
27 #include "net/log/net_log.h" | 28 #include "net/log/net_log.h" |
28 #include "net/socket/ssl_client_socket.h" | 29 #include "net/socket/ssl_client_socket.h" |
29 #include "net/ssl/channel_id_service.h" | 30 #include "net/ssl/channel_id_service.h" |
30 #include "net/ssl/ssl_config_service.h" | 31 #include "net/ssl/ssl_config_service.h" |
31 | 32 |
32 namespace base { | 33 namespace base { |
33 class SequencedTaskRunner; | 34 class SequencedTaskRunner; |
34 } | 35 } |
35 | 36 |
36 namespace net { | 37 namespace net { |
37 | 38 |
38 class BoundNetLog; | 39 class BoundNetLog; |
39 class CertPolicyEnforcer; | 40 class CertPolicyEnforcer; |
40 class CertVerifier; | 41 class CertVerifier; |
41 class ChannelIDService; | 42 class ChannelIDService; |
42 class CTVerifier; | 43 class CTVerifier; |
43 class ClientSocketHandle; | 44 class ClientSocketHandle; |
44 class SingleRequestCertVerifier; | |
45 class TransportSecurityState; | 45 class TransportSecurityState; |
46 class X509Certificate; | 46 class X509Certificate; |
47 | 47 |
48 // An SSL client socket implemented with Mozilla NSS. | 48 // An SSL client socket implemented with Mozilla NSS. |
49 class SSLClientSocketNSS : public SSLClientSocket { | 49 class SSLClientSocketNSS : public SSLClientSocket { |
50 public: | 50 public: |
51 // Takes ownership of the |transport_socket|, which must already be connected. | 51 // Takes ownership of the |transport_socket|, which must already be connected. |
52 // The hostname specified in |host_and_port| will be compared with the name(s) | 52 // The hostname specified in |host_and_port| will be compared with the name(s) |
53 // in the server's certificate during the SSL handshake. If SSL client | 53 // in the server's certificate during the SSL handshake. If SSL client |
54 // authentication is requested, the host_and_port field of SSLCertRequestInfo | 54 // authentication is requested, the host_and_port field of SSLCertRequestInfo |
(...skipping 105 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
160 HostPortPair host_and_port_; | 160 HostPortPair host_and_port_; |
161 SSLConfig ssl_config_; | 161 SSLConfig ssl_config_; |
162 | 162 |
163 scoped_refptr<Core> core_; | 163 scoped_refptr<Core> core_; |
164 | 164 |
165 CompletionCallback user_connect_callback_; | 165 CompletionCallback user_connect_callback_; |
166 | 166 |
167 CertVerifyResult server_cert_verify_result_; | 167 CertVerifyResult server_cert_verify_result_; |
168 | 168 |
169 CertVerifier* const cert_verifier_; | 169 CertVerifier* const cert_verifier_; |
170 scoped_ptr<SingleRequestCertVerifier> verifier_; | 170 scoped_ptr<CertVerifier::Request> cert_verifier_request_; |
171 | 171 |
172 // Certificate Transparency: Verifier and result holder. | 172 // Certificate Transparency: Verifier and result holder. |
173 ct::CTVerifyResult ct_verify_result_; | 173 ct::CTVerifyResult ct_verify_result_; |
174 CTVerifier* cert_transparency_verifier_; | 174 CTVerifier* cert_transparency_verifier_; |
175 | 175 |
176 // The service for retrieving Channel ID keys. May be NULL. | 176 // The service for retrieving Channel ID keys. May be NULL. |
177 ChannelIDService* channel_id_service_; | 177 ChannelIDService* channel_id_service_; |
178 | 178 |
179 // ssl_session_cache_shard_ is an opaque string that partitions the SSL | 179 // ssl_session_cache_shard_ is an opaque string that partitions the SSL |
180 // session cache. i.e. sessions created with one value will not attempt to | 180 // session cache. i.e. sessions created with one value will not attempt to |
(...skipping 28 matching lines...) Expand all Loading... |
209 // Added the following code Debugging in release mode. | 209 // Added the following code Debugging in release mode. |
210 mutable base::Lock lock_; | 210 mutable base::Lock lock_; |
211 // This is mutable so that CalledOnValidThread can set it. | 211 // This is mutable so that CalledOnValidThread can set it. |
212 // It's guarded by |lock_|. | 212 // It's guarded by |lock_|. |
213 mutable base::PlatformThreadId valid_thread_id_; | 213 mutable base::PlatformThreadId valid_thread_id_; |
214 }; | 214 }; |
215 | 215 |
216 } // namespace net | 216 } // namespace net |
217 | 217 |
218 #endif // NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ | 218 #endif // NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_ |
OLD | NEW |