| OLD | NEW |
| (Empty) |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef IOS_WEB_NET_CRW_CERT_VERIFICATION_CONTROLLER_H_ | |
| 6 #define IOS_WEB_NET_CRW_CERT_VERIFICATION_CONTROLLER_H_ | |
| 7 | |
| 8 #import <Foundation/Foundation.h> | |
| 9 | |
| 10 #import "base/memory/ref_counted.h" | |
| 11 #include "net/cert/cert_status_flags.h" | |
| 12 | |
| 13 namespace net { | |
| 14 class X509Certificate; | |
| 15 } | |
| 16 | |
| 17 namespace web { | |
| 18 | |
| 19 class BrowserState; | |
| 20 | |
| 21 // Accept policy for valid or invalid SSL cert. | |
| 22 typedef NS_ENUM(NSInteger, CertAcceptPolicy) { | |
| 23 // Cert status can't be determined due to an error. Caller should not proceed | |
| 24 // with the load, but show net error page instead. | |
| 25 CERT_ACCEPT_POLICY_NON_RECOVERABLE_ERROR = 0, | |
| 26 // Cert is not valid. Caller may present SSL warning and ask used if they | |
| 27 // want to proceed with the load. | |
| 28 CERT_ACCEPT_POLICY_RECOVERABLE_ERROR, | |
| 29 // Cert is valid. Caller should proceed with the load. | |
| 30 CERT_ACCEPT_POLICY_ALLOW, | |
| 31 }; | |
| 32 | |
| 33 // Completion handler called by decidePolicyForCert:host:completionHandler:. | |
| 34 typedef void (^PolicyDecisionHandler)(web::CertAcceptPolicy, net::CertStatus); | |
| 35 | |
| 36 } // namespace web | |
| 37 | |
| 38 // Provides various cert verification API that can be used for blocking requests | |
| 39 // with bad SSL cert, presenting SSL interstitials and determining SSL status | |
| 40 // for Navigation Items. Must be used on UI thread. | |
| 41 @interface CRWCertVerificationController : NSObject | |
| 42 | |
| 43 - (instancetype)init NS_UNAVAILABLE; | |
| 44 | |
| 45 // Initializes CRWCertVerificationController with the given |browserState| which | |
| 46 // cannot be null and must outlive CRWCertVerificationController. | |
| 47 - (instancetype)initWithBrowserState:(web::BrowserState*)browserState | |
| 48 NS_DESIGNATED_INITIALIZER; | |
| 49 | |
| 50 // TODO(eugenebut): add API for: | |
| 51 // - accepting bad SSL cert using CertPolicyCache | |
| 52 // - querying SSL cert status for Navigation Item | |
| 53 | |
| 54 // Decides the policy for the given |cert| for the given |host| and calls | |
| 55 // |completionHandler| on completion. |completionHandler| cannot be null and | |
| 56 // will be called synchronously or asynchronously on UI thread. | |
| 57 - (void)decidePolicyForCert:(const scoped_refptr<net::X509Certificate>&)cert | |
| 58 host:(NSString*)host | |
| 59 completionHandler:(web::PolicyDecisionHandler)handler; | |
| 60 | |
| 61 // Cancels all pending verification requests. Completion handlers will not be | |
| 62 // called after |shutDown| call. Must always be called before object's | |
| 63 // deallocation. | |
| 64 - (void)shutDown; | |
| 65 | |
| 66 @end | |
| 67 | |
| 68 #endif // IOS_WEB_NET_CRW_CERT_VERIFICATION_CONTROLLER_H_ | |
| OLD | NEW |