OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 #include "chrome/browser/net/ssl_config_service_manager.h" | 4 #include "chrome/browser/net/ssl_config_service_manager.h" |
5 | 5 |
6 #include <algorithm> | 6 #include <algorithm> |
7 #include <string> | 7 #include <string> |
8 #include <vector> | 8 #include <vector> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
11 #include "base/bind.h" | 11 #include "base/bind.h" |
12 #include "base/metrics/field_trial.h" | 12 #include "base/metrics/field_trial.h" |
13 #include "base/prefs/pref_change_registrar.h" | 13 #include "base/prefs/pref_change_registrar.h" |
14 #include "base/prefs/pref_member.h" | 14 #include "base/prefs/pref_member.h" |
15 #include "base/prefs/pref_registry_simple.h" | 15 #include "base/prefs/pref_registry_simple.h" |
16 #include "base/prefs/pref_service.h" | 16 #include "base/prefs/pref_service.h" |
17 #include "chrome/browser/chrome_notification_types.h" | 17 #include "chrome/browser/chrome_notification_types.h" |
18 #include "chrome/common/chrome_switches.h" | 18 #include "chrome/common/chrome_switches.h" |
19 #include "chrome/common/pref_names.h" | 19 #include "chrome/common/pref_names.h" |
20 #include "components/content_settings/core/browser/content_settings_utils.h" | 20 #include "components/content_settings/core/browser/content_settings_utils.h" |
21 #include "components/content_settings/core/common/content_settings.h" | 21 #include "components/content_settings/core/common/content_settings.h" |
22 #include "components/google/core/browser/google_util.h" | |
23 #include "content/public/browser/browser_thread.h" | 22 #include "content/public/browser/browser_thread.h" |
24 #include "net/socket/ssl_client_socket.h" | 23 #include "net/socket/ssl_client_socket.h" |
25 #include "net/ssl/ssl_cipher_suite_names.h" | 24 #include "net/ssl/ssl_cipher_suite_names.h" |
26 #include "net/ssl/ssl_config_service.h" | 25 #include "net/ssl/ssl_config_service.h" |
27 #include "url/gurl.h" | |
28 | 26 |
29 using content::BrowserThread; | 27 using content::BrowserThread; |
30 | 28 |
31 namespace { | 29 namespace { |
32 | 30 |
33 // Field trial for ClientHello padding. | |
34 const char kClientHelloFieldTrialName[] = "FastRadioPadding"; | |
35 const char kClientHelloFieldTrialEnabledGroupName[] = "Enabled"; | |
36 | |
37 // Converts a ListValue of StringValues into a vector of strings. Any Values | 31 // Converts a ListValue of StringValues into a vector of strings. Any Values |
38 // which cannot be converted will be skipped. | 32 // which cannot be converted will be skipped. |
39 std::vector<std::string> ListValueToStringVector(const base::ListValue* value) { | 33 std::vector<std::string> ListValueToStringVector(const base::ListValue* value) { |
40 std::vector<std::string> results; | 34 std::vector<std::string> results; |
41 results.reserve(value->GetSize()); | 35 results.reserve(value->GetSize()); |
42 std::string s; | 36 std::string s; |
43 for (base::ListValue::const_iterator it = value->begin(); it != value->end(); | 37 for (base::ListValue::const_iterator it = value->begin(); it != value->end(); |
44 ++it) { | 38 ++it) { |
45 if (!(*it)->GetAsString(&s)) | 39 if (!(*it)->GetAsString(&s)) |
46 continue; | 40 continue; |
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
93 // An SSLConfigService which stores a cached version of the current SSLConfig | 87 // An SSLConfigService which stores a cached version of the current SSLConfig |
94 // prefs, which are updated by SSLConfigServiceManagerPref when the prefs | 88 // prefs, which are updated by SSLConfigServiceManagerPref when the prefs |
95 // change. | 89 // change. |
96 class SSLConfigServicePref : public net::SSLConfigService { | 90 class SSLConfigServicePref : public net::SSLConfigService { |
97 public: | 91 public: |
98 SSLConfigServicePref() {} | 92 SSLConfigServicePref() {} |
99 | 93 |
100 // Store SSL config settings in |config|. Must only be called from IO thread. | 94 // Store SSL config settings in |config|. Must only be called from IO thread. |
101 void GetSSLConfig(net::SSLConfig* config) override; | 95 void GetSSLConfig(net::SSLConfig* config) override; |
102 | 96 |
103 bool SupportsFastradioPadding(const GURL& url) override; | |
104 | |
105 private: | 97 private: |
106 // Allow the pref watcher to update our internal state. | 98 // Allow the pref watcher to update our internal state. |
107 friend class SSLConfigServiceManagerPref; | 99 friend class SSLConfigServiceManagerPref; |
108 | 100 |
109 ~SSLConfigServicePref() override {} | 101 ~SSLConfigServicePref() override {} |
110 | 102 |
111 // This method is posted to the IO thread from the browser thread to carry the | 103 // This method is posted to the IO thread from the browser thread to carry the |
112 // new config information. | 104 // new config information. |
113 void SetNewSSLConfig(const net::SSLConfig& new_config); | 105 void SetNewSSLConfig(const net::SSLConfig& new_config); |
114 | 106 |
115 // Cached value of prefs, should only be accessed from IO thread. | 107 // Cached value of prefs, should only be accessed from IO thread. |
116 net::SSLConfig cached_config_; | 108 net::SSLConfig cached_config_; |
117 | 109 |
118 DISALLOW_COPY_AND_ASSIGN(SSLConfigServicePref); | 110 DISALLOW_COPY_AND_ASSIGN(SSLConfigServicePref); |
119 }; | 111 }; |
120 | 112 |
121 void SSLConfigServicePref::GetSSLConfig(net::SSLConfig* config) { | 113 void SSLConfigServicePref::GetSSLConfig(net::SSLConfig* config) { |
122 DCHECK_CURRENTLY_ON(BrowserThread::IO); | 114 DCHECK_CURRENTLY_ON(BrowserThread::IO); |
123 *config = cached_config_; | 115 *config = cached_config_; |
124 } | 116 } |
125 | 117 |
126 bool SSLConfigServicePref::SupportsFastradioPadding(const GURL& url) { | |
127 return google_util::IsGoogleHostname(url.host(), | |
128 google_util::ALLOW_SUBDOMAIN); | |
129 } | |
130 | |
131 void SSLConfigServicePref::SetNewSSLConfig( | 118 void SSLConfigServicePref::SetNewSSLConfig( |
132 const net::SSLConfig& new_config) { | 119 const net::SSLConfig& new_config) { |
133 net::SSLConfig orig_config = cached_config_; | 120 net::SSLConfig orig_config = cached_config_; |
134 cached_config_ = new_config; | 121 cached_config_ = new_config; |
135 ProcessConfigUpdate(orig_config, new_config); | 122 ProcessConfigUpdate(orig_config, new_config); |
136 } | 123 } |
137 | 124 |
138 //////////////////////////////////////////////////////////////////////////////// | 125 //////////////////////////////////////////////////////////////////////////////// |
139 // SSLConfigServiceManagerPref | 126 // SSLConfigServiceManagerPref |
140 | 127 |
(...skipping 145 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
286 if (version_max) { | 273 if (version_max) { |
287 uint16 supported_version_max = config->version_max; | 274 uint16 supported_version_max = config->version_max; |
288 config->version_max = std::min(supported_version_max, version_max); | 275 config->version_max = std::min(supported_version_max, version_max); |
289 } | 276 } |
290 if (version_fallback_min) { | 277 if (version_fallback_min) { |
291 config->version_fallback_min = version_fallback_min; | 278 config->version_fallback_min = version_fallback_min; |
292 } | 279 } |
293 config->disabled_cipher_suites = disabled_cipher_suites_; | 280 config->disabled_cipher_suites = disabled_cipher_suites_; |
294 // disabling False Start also happens to disable record splitting. | 281 // disabling False Start also happens to disable record splitting. |
295 config->false_start_enabled = !ssl_record_splitting_disabled_.GetValue(); | 282 config->false_start_enabled = !ssl_record_splitting_disabled_.GetValue(); |
296 | |
297 base::StringPiece group = | |
298 base::FieldTrialList::FindFullName(kClientHelloFieldTrialName); | |
299 if (group.starts_with(kClientHelloFieldTrialEnabledGroupName)) { | |
300 config->fastradio_padding_enabled = true; | |
301 } | |
302 } | 283 } |
303 | 284 |
304 void SSLConfigServiceManagerPref::OnDisabledCipherSuitesChange( | 285 void SSLConfigServiceManagerPref::OnDisabledCipherSuitesChange( |
305 PrefService* local_state) { | 286 PrefService* local_state) { |
306 const base::ListValue* value = | 287 const base::ListValue* value = |
307 local_state->GetList(prefs::kCipherSuiteBlacklist); | 288 local_state->GetList(prefs::kCipherSuiteBlacklist); |
308 disabled_cipher_suites_ = ParseCipherSuites(ListValueToStringVector(value)); | 289 disabled_cipher_suites_ = ParseCipherSuites(ListValueToStringVector(value)); |
309 } | 290 } |
310 | 291 |
311 //////////////////////////////////////////////////////////////////////////////// | 292 //////////////////////////////////////////////////////////////////////////////// |
312 // SSLConfigServiceManager | 293 // SSLConfigServiceManager |
313 | 294 |
314 // static | 295 // static |
315 SSLConfigServiceManager* SSLConfigServiceManager::CreateDefaultManager( | 296 SSLConfigServiceManager* SSLConfigServiceManager::CreateDefaultManager( |
316 PrefService* local_state) { | 297 PrefService* local_state) { |
317 return new SSLConfigServiceManagerPref(local_state); | 298 return new SSLConfigServiceManagerPref(local_state); |
318 } | 299 } |
319 | 300 |
320 // static | 301 // static |
321 void SSLConfigServiceManager::RegisterPrefs(PrefRegistrySimple* registry) { | 302 void SSLConfigServiceManager::RegisterPrefs(PrefRegistrySimple* registry) { |
322 SSLConfigServiceManagerPref::RegisterPrefs(registry); | 303 SSLConfigServiceManagerPref::RegisterPrefs(registry); |
323 } | 304 } |
OLD | NEW |