[Cronet] Surface SSL cert error through CronetURLRequestAdapter::OnSSLCertificateError

components/cronet/android/cronet_url_request_adapter.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "cronet_url_request_adapter.h"
 
 #include <limits>
 
 #include "base/bind.h"
 #include "base/location.h"
 #include "base/logging.h"
 #include "components/cronet/android/cronet_url_request_context_adapter.h"
 #include "jni/CronetUrlRequest_jni.h"
 #include "net/base/io_buffer.h"
 #include "net/base/load_flags.h"
 #include "net/base/net_errors.h"
 #include "net/base/request_priority.h"
+#include "net/cert/cert_status_flags.h"
 #include "net/http/http_response_headers.h"
 #include "net/http/http_status_code.h"
 #include "net/http/http_util.h"
+#include "net/ssl/ssl_info.h"
 #include "net/url_request/redirect_info.h"
 #include "net/url_request/url_request_context.h"
 
 using base::android::ConvertUTF8ToJavaString;
 
 namespace cronet {
 
 // Explicitly register static JNI functions.
 bool CronetUrlRequestAdapterRegisterJni(JNIEnv* env) {
   return RegisterNativesImpl(env);
@@ skipping 57 matching lines @@
 CronetURLRequestAdapter::CronetURLRequestAdapter(
     CronetURLRequestContextAdapter* context,
     JNIEnv* env,
     jobject jurl_request,
     const GURL& url,
     net::RequestPriority priority)
     : context_(context),
       initial_url_(url),
       initial_priority_(priority),
       initial_method_("GET"),
-      load_flags_(context->default_load_flags()) {
+      load_flags_(context->default_load_flags()),
+      has_ssl_cert_error_(false) {
   DCHECK(!context_->IsOnNetworkThread());
   owner_.Reset(env, jurl_request);
 }
 
 CronetURLRequestAdapter::~CronetURLRequestAdapter() {
   DCHECK(context_->IsOnNetworkThread());
 }
 
 jboolean CronetURLRequestAdapter::SetHttpMethod(JNIEnv* env,
                                                 jobject jcaller,
@@ skipping 157 matching lines @@
   JNIEnv* env = base::android::AttachCurrentThread();
   cronet::Java_CronetUrlRequest_onReceivedRedirect(
       env, owner_.obj(),
       ConvertUTF8ToJavaString(env, redirect_info.new_url.spec()).obj(),
       redirect_info.status_code);
   *defer_redirect = true;
 }
 
 void CronetURLRequestAdapter::OnResponseStarted(net::URLRequest* request) {
   DCHECK(context_->IsOnNetworkThread());
-  if (MaybeReportError(request))
+  // If any ssl cert error is present,
+  // CronetURLRequesAdapter::OnSSLCertificateError has propagated the error
+  // to the embedder, so do not report again.
+  if (has_ssl_cert_error_ || MaybeReportError(request))

[mmenke, 2015/07/15 22:03:43]

Why is this needed?  OnSSLCertificateError calls CronetUrlRequest::onError which
calls CronetUrlRequest::failWithException, which calls
CronetUrlRequest::destroyRequestAdapter.

So then when this code calls MaybeReportError, which calls
CronetUrlRequest::onError again, it notices the request already fails, and does
nothing...Right?

That was done to solve a previous problem where we were also double-reporting
errors.

     return;
   JNIEnv* env = base::android::AttachCurrentThread();
   cronet::Java_CronetUrlRequest_onResponseStarted(env, owner_.obj(),
                                                   request->GetResponseCode());
 }
 
+void CronetURLRequestAdapter::OnSSLCertificateError(
+    net::URLRequest* request,
+    const net::SSLInfo& ssl_info,
+    bool fatal) {
+  has_ssl_cert_error_ = true;
+  request->Cancel();
+  int ssl_cert_net_error = net::MapCertStatusToNetError(ssl_info.cert_status);
+  JNIEnv* env = base::android::AttachCurrentThread();
+  cronet::Java_CronetUrlRequest_onError(
+      env, owner_.obj(), ssl_cert_net_error,
+      ConvertUTF8ToJavaString(env, net::ErrorToString(ssl_cert_net_error))
+          .obj());
+}
+
 void CronetURLRequestAdapter::OnReadCompleted(net::URLRequest* request,
                                               int bytes_read) {
   DCHECK(context_->IsOnNetworkThread());
   if (MaybeReportError(request))
     return;
   if (bytes_read != 0) {
     JNIEnv* env = base::android::AttachCurrentThread();
     cronet::Java_CronetUrlRequest_onReadCompleted(
         env, owner_.obj(), read_buffer_->byte_buffer(), bytes_read,
         read_buffer_->initial_position());
@@ skipping 70 matching lines @@
   VLOG(1) << "Error " << net::ErrorToString(net_error)
           << " on chromium request: " << initial_url_.possibly_invalid_spec();
   JNIEnv* env = base::android::AttachCurrentThread();
   cronet::Java_CronetUrlRequest_onError(
       env, owner_.obj(), net_error,
       ConvertUTF8ToJavaString(env, net::ErrorToString(net_error)).obj());
   return true;
 }
 
 }  // namespace cronet