OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CHROME_BROWSER_CHROMEOS_NETWORK_SETTINGS_ONC_CERTIFICATE_IMPORTER_H_ | 5 #ifndef CHROMEOS_NETWORK_ONC_ONC_CERTIFICATE_IMPORTER_H_ |
6 #define CHROME_BROWSER_CHROMEOS_NETWORK_SETTINGS_ONC_CERTIFICATE_IMPORTER_H_ | 6 #define CHROMEOS_NETWORK_ONC_ONC_CERTIFICATE_IMPORTER_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 #include <vector> | 9 #include <vector> |
10 | 10 |
11 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
12 #include "base/memory/ref_counted.h" | 12 #include "base/memory/ref_counted.h" |
13 #include "base/memory/scoped_ptr.h" | 13 #include "base/memory/scoped_ptr.h" |
14 #include "chrome/browser/chromeos/cros/network_ui_data.h" | 14 #include "chromeos/chromeos_export.h" |
| 15 #include "chromeos/network/onc/onc_constants.h" |
15 | 16 |
16 namespace base { | 17 namespace base { |
17 class DictionaryValue; | 18 class DictionaryValue; |
18 class ListValue; | 19 class ListValue; |
19 } | 20 } |
20 | 21 |
21 namespace net { | 22 namespace net { |
22 class X509Certificate; | 23 class X509Certificate; |
23 typedef std::vector<scoped_refptr<X509Certificate> > CertificateList; | 24 typedef std::vector<scoped_refptr<X509Certificate> > CertificateList; |
24 } | 25 } |
25 | 26 |
26 namespace chromeos { | 27 namespace chromeos { |
27 namespace onc { | 28 namespace onc { |
28 | 29 |
29 // This class handles certificate imports from ONC (both policy and user | 30 // This class handles certificate imports from ONC (both policy and user |
30 // imports) into the certificate store. In particular, the GUID of certificates | 31 // imports) into the certificate store. In particular, the GUID of certificates |
31 // is stored together with the certificate as Nickname. | 32 // is stored together with the certificate as Nickname. |
32 class CertificateImporter { | 33 class CHROMEOS_EXPORT CertificateImporter { |
33 public: | 34 public: |
| 35 enum ParseResult { |
| 36 IMPORT_OK, |
| 37 IMPORT_INCOMPLETE, |
| 38 IMPORT_FAILED, |
| 39 }; |
| 40 |
34 // Certificates pushed from a policy source with Web trust are only imported | 41 // Certificates pushed from a policy source with Web trust are only imported |
35 // with ParseCertificate() if the |allow_web_trust_from_policy| permission is | 42 // with ParseCertificate() if the |allow_web_trust_from_policy| permission is |
36 // granted. | 43 // granted. |
37 CertificateImporter(NetworkUIData::ONCSource onc_source, | 44 CertificateImporter(ONCSource onc_source, |
38 bool allow_web_trust_from_policy); | 45 bool allow_web_trust_from_policy); |
39 | 46 |
40 // Parses and stores the certificates in |onc_certificates| into the | 47 // Parses and stores the certificates in |onc_certificates| into the |
41 // certificate store. If the "Remove" field of a certificate is enabled, then | 48 // certificate store. If the "Remove" field of a certificate is enabled, then |
42 // removes the certificate from the store instead of importing. Returns false | 49 // removes the certificate from the store instead of importing. Returns the |
43 // and sets |error| to a user readable message if an error occured. In that | 50 // result of the parse operation. In case of IMPORT_INCOMPLETE, some of the |
44 // case, some of the certificates may already be stored/removed. Otherwise, if | 51 // certificates may be stored/removed successfully while others had errors. |
45 // no error occured, returns true and doesn't modify |error|. | 52 // If no error occurred, returns IMPORT_OK. |
46 bool ParseAndStoreCertificates(const base::ListValue& onc_certificates, | 53 ParseResult ParseAndStoreCertificates( |
47 std::string* error); | 54 const base::ListValue& onc_certificates); |
48 | 55 |
49 // Parses and stores/removes |certificate| in/from the certificate | 56 // Parses and stores/removes |certificate| in/from the certificate |
50 // store. Returns false if an error occured. Returns true otherwise. | 57 // store. Returns true if the operation succeeded. |
51 bool ParseAndStoreCertificate(const base::DictionaryValue& certificate); | 58 bool ParseAndStoreCertificate(const base::DictionaryValue& certificate); |
52 | 59 |
53 // Lists the certificates that have the string |label| as their certificate | 60 // Lists the certificates that have the string |label| as their certificate |
54 // nickname (exact match). | 61 // nickname (exact match). |
55 static void ListCertsWithNickname(const std::string& label, | 62 static void ListCertsWithNickname(const std::string& label, |
56 net::CertificateList* result); | 63 net::CertificateList* result); |
57 | 64 |
58 protected: | 65 protected: |
59 // Deletes any certificate that has the string |label| as its nickname (exact | 66 // Deletes any certificate that has the string |label| as its nickname (exact |
60 // match). | 67 // match). |
61 static bool DeleteCertAndKeyByNickname(const std::string& label); | 68 static bool DeleteCertAndKeyByNickname(const std::string& label); |
62 | 69 |
63 private: | 70 private: |
64 bool ParseServerOrCaCertificate( | 71 bool ParseServerOrCaCertificate(const std::string& cert_type, |
65 const std::string& cert_type, | 72 const std::string& guid, |
66 const std::string& guid, | 73 const base::DictionaryValue& certificate); |
67 const base::DictionaryValue& certificate); | 74 |
68 bool ParseClientCertificate( | 75 bool ParseClientCertificate(const std::string& guid, |
69 const std::string& guid, | 76 const base::DictionaryValue& certificate); |
70 const base::DictionaryValue& certificate); | |
71 | 77 |
72 // Where the ONC blob comes from. | 78 // Where the ONC blob comes from. |
73 NetworkUIData::ONCSource onc_source_; | 79 ONCSource onc_source_; |
74 | 80 |
75 // Whether certificates with Web trust should be stored when pushed from a | 81 // Whether certificates with Web trust should be stored when pushed from a |
76 // policy source. | 82 // policy source. |
77 bool allow_web_trust_from_policy_; | 83 bool allow_web_trust_from_policy_; |
78 | 84 |
79 std::string error_; | |
80 | |
81 DISALLOW_COPY_AND_ASSIGN(CertificateImporter); | 85 DISALLOW_COPY_AND_ASSIGN(CertificateImporter); |
82 }; | 86 }; |
83 | 87 |
84 } // chromeos | 88 } // chromeos |
85 } // onc | 89 } // onc |
86 | 90 |
87 #endif // CHROME_BROWSER_CHROMEOS_NETWORK_SETTINGS_ONC_CERTIFICATE_IMPORTER_H_ | 91 #endif // CHROMEOS_NETWORK_ONC_ONC_CERTIFICATE_IMPORTER_H_ |
OLD | NEW |