chrome.platformKeys: Add filtering by certificate types

chrome/common/extensions/api/platform_keys.idl

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Use the <code>chrome.platformKeys</code> API to access client certificates
 // managed by the platform. If the user or policy grants the permission, an
 // extension can use such a certficate in its custom authentication protocol.
 // E.g. this allows usage of platform managed certificates in third party VPNs
 // (see $(ref:vpnProvider chrome.vpnProvider)).
 namespace platformKeys {
   [noinline_doc] dictionary Match {
      // The DER encoding of a X.509 certificate.
      ArrayBuffer certificate;
 
      // The
      // <a href="http://www.w3.org/TR/WebCryptoAPI/#key-algorithm-dictionary">
      // KeyAlgorithm</a> of the certified key. This contains algorithm
      // parameters that are inherent to the key of the certificate (e.g. the key
      // length). Other parameters like the hash function used by the sign
      // function are not included.
      object keyAlgorithm;
   };
 
   enum ClientCertificateType {
     rsaSign,
-    dssSign,
     ecdsaSign
   };
 
   // Analogous to TLS1.1's CertificateRequest.
   // See http://tools.ietf.org/html/rfc4346#section-7.4.4 .
   dictionary ClientCertificateRequest {
     // This field is a list of the types of certificates requested, sorted in
-    // order of the server's preference.
+    // order of the server's preference. Only certificates of a type contained
+    // in this list will be retrieved. If <code>certificateTypes</code> is the
+    // empty list, however, all available certificates will be returned.

[pneubeck (no reviews), 2015/05/19 10:09:00]

s/all available certificate/certificates of any type/

[cschuet (SLOW), 2015/05/19 11:36:23]

Done.

     ClientCertificateType[] certificateTypes;
 
     // List of distinguished names of certificate authorities allowed by the
     // server. Each entry must be a DER-encoded X.509 DistinguishedName.
     ArrayBuffer[] certificateAuthorities;
   };
 
   dictionary SelectDetails {
     // Only certificates that match this request will be returned.
     ClientCertificateRequest request;
@@ skipping 58 matching lines @@
 
     // An implementation of WebCrypto's
     // <a href="http://www.w3.org/TR/WebCryptoAPI/#subtlecrypto-interface">
     // SubtleCrypto</a>
     // that allows crypto operations on keys of client certificates that are
     // available to this extension.
     [nocompile] static object subtleCrypto();
   };
 };