| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CRYPTO_NSS_UTIL_INTERNAL_H_ | 5 #ifndef CRYPTO_NSS_UTIL_INTERNAL_H_ |
| 6 #define CRYPTO_NSS_UTIL_INTERNAL_H_ | 6 #define CRYPTO_NSS_UTIL_INTERNAL_H_ |
| 7 | 7 |
| 8 #include <secmodt.h> | 8 #include <secmodt.h> |
| 9 | 9 |
| 10 #include "base/callback.h" | 10 #include "base/callback.h" |
| 11 #include "base/compiler_specific.h" | 11 #include "base/compiler_specific.h" |
| 12 #include "crypto/crypto_export.h" | 12 #include "crypto/crypto_export.h" |
| 13 #include "crypto/scoped_nss_types.h" | 13 #include "crypto/scoped_nss_types.h" |
| 14 | 14 |
| 15 namespace base { | 15 namespace base { |
| 16 class FilePath; | 16 class FilePath; |
| 17 } | 17 } |
| 18 | 18 |
| 19 // These functions return a type defined in an NSS header, and so cannot be | 19 // These functions return a type defined in an NSS header, and so cannot be |
| 20 // declared in nss_util.h. Hence, they are declared here. | 20 // declared in nss_util.h. Hence, they are declared here. |
| 21 | 21 |
| 22 namespace crypto { | 22 namespace crypto { |
| 23 | 23 |
| 24 // Opens an NSS software database in folder |path|, with the (potentially) | 24 // Opens an NSS software database in folder |path|, with the (potentially) |
| 25 // user-visible description |description|. Returns the slot for the opened | 25 // user-visible description |description|. Returns the slot for the opened |
| 26 // database, or NULL if the database could not be opened. | 26 // database, or NULL if the database could not be opened. |
| 27 CRYPTO_EXPORT_PRIVATE ScopedPK11Slot | 27 CRYPTO_EXPORT ScopedPK11Slot OpenSoftwareNSSDB(const base::FilePath& path, |
| 28 OpenSoftwareNSSDB(const base::FilePath& path, | 28 const std::string& description); |
| 29 const std::string& description); | |
| 30 | 29 |
| 31 #if !defined(OS_CHROMEOS) | 30 #if !defined(OS_CHROMEOS) |
| 32 // Returns a reference to the default NSS key slot for storing persistent data. | 31 // Returns a reference to the default NSS key slot for storing persistent data. |
| 33 // Caller must release returned reference with PK11_FreeSlot. | 32 // Caller must release returned reference with PK11_FreeSlot. |
| 34 CRYPTO_EXPORT PK11SlotInfo* GetPersistentNSSKeySlot() WARN_UNUSED_RESULT; | 33 CRYPTO_EXPORT PK11SlotInfo* GetPersistentNSSKeySlot() WARN_UNUSED_RESULT; |
| 35 #endif | 34 #endif |
| 36 | 35 |
| 37 // A helper class that acquires the SECMOD list read lock while the | 36 // A helper class that acquires the SECMOD list read lock while the |
| 38 // AutoSECMODListReadLock is in scope. | 37 // AutoSECMODListReadLock is in scope. |
| 39 class CRYPTO_EXPORT AutoSECMODListReadLock { | 38 class CRYPTO_EXPORT AutoSECMODListReadLock { |
| (...skipping 12 matching lines...) Expand all Loading... |
| 52 // is loaded. | 51 // is loaded. |
| 53 CRYPTO_EXPORT ScopedPK11Slot GetSystemNSSKeySlot( | 52 CRYPTO_EXPORT ScopedPK11Slot GetSystemNSSKeySlot( |
| 54 const base::Callback<void(ScopedPK11Slot)>& callback) WARN_UNUSED_RESULT; | 53 const base::Callback<void(ScopedPK11Slot)>& callback) WARN_UNUSED_RESULT; |
| 55 | 54 |
| 56 // Sets the test system slot to |slot|, which means that |slot| will be exposed | 55 // Sets the test system slot to |slot|, which means that |slot| will be exposed |
| 57 // through |GetSystemNSSKeySlot| and |IsTPMTokenReady| will return true. | 56 // through |GetSystemNSSKeySlot| and |IsTPMTokenReady| will return true. |
| 58 // |InitializeTPMTokenAndSystemSlot|, which triggers the TPM initialization, | 57 // |InitializeTPMTokenAndSystemSlot|, which triggers the TPM initialization, |
| 59 // does not have to be called if the test system slot is set. | 58 // does not have to be called if the test system slot is set. |
| 60 // This must must not be called consecutively with a |slot| != NULL. If |slot| | 59 // This must must not be called consecutively with a |slot| != NULL. If |slot| |
| 61 // is NULL, the test system slot is unset. | 60 // is NULL, the test system slot is unset. |
| 62 CRYPTO_EXPORT_PRIVATE void SetSystemKeySlotForTesting(ScopedPK11Slot slot); | 61 CRYPTO_EXPORT void SetSystemKeySlotForTesting(ScopedPK11Slot slot); |
| 63 | 62 |
| 64 // Prepare per-user NSS slot mapping. It is safe to call this function multiple | 63 // Prepare per-user NSS slot mapping. It is safe to call this function multiple |
| 65 // times. Returns true if the user was added, or false if it already existed. | 64 // times. Returns true if the user was added, or false if it already existed. |
| 66 CRYPTO_EXPORT bool InitializeNSSForChromeOSUser( | 65 CRYPTO_EXPORT bool InitializeNSSForChromeOSUser( |
| 67 const std::string& username_hash, | 66 const std::string& username_hash, |
| 68 const base::FilePath& path); | 67 const base::FilePath& path); |
| 69 | 68 |
| 70 // Returns whether TPM for ChromeOS user still needs initialization. If | 69 // Returns whether TPM for ChromeOS user still needs initialization. If |
| 71 // true is returned, the caller can proceed to initialize TPM slot for the | 70 // true is returned, the caller can proceed to initialize TPM slot for the |
| 72 // user, but should call |WillInitializeTPMForChromeOSUser| first. | 71 // user, but should call |WillInitializeTPMForChromeOSUser| first. |
| (...skipping 24 matching lines...) Expand all Loading... |
| 97 | 96 |
| 98 // Returns the private slot for |username_hash| if it is loaded. If it is not | 97 // Returns the private slot for |username_hash| if it is loaded. If it is not |
| 99 // loaded and |callback| is non-null, the |callback| will be run once the slot | 98 // loaded and |callback| is non-null, the |callback| will be run once the slot |
| 100 // is loaded. | 99 // is loaded. |
| 101 CRYPTO_EXPORT ScopedPK11Slot GetPrivateSlotForChromeOSUser( | 100 CRYPTO_EXPORT ScopedPK11Slot GetPrivateSlotForChromeOSUser( |
| 102 const std::string& username_hash, | 101 const std::string& username_hash, |
| 103 const base::Callback<void(ScopedPK11Slot)>& callback) WARN_UNUSED_RESULT; | 102 const base::Callback<void(ScopedPK11Slot)>& callback) WARN_UNUSED_RESULT; |
| 104 | 103 |
| 105 // Closes the NSS DB for |username_hash| that was previously opened by the | 104 // Closes the NSS DB for |username_hash| that was previously opened by the |
| 106 // *Initialize*ForChromeOSUser functions. | 105 // *Initialize*ForChromeOSUser functions. |
| 107 CRYPTO_EXPORT_PRIVATE void CloseChromeOSUserForTesting( | 106 CRYPTO_EXPORT void CloseChromeOSUserForTesting( |
| 108 const std::string& username_hash); | 107 const std::string& username_hash); |
| 109 #endif // defined(OS_CHROMEOS) | 108 #endif // defined(OS_CHROMEOS) |
| 110 | 109 |
| 111 } // namespace crypto | 110 } // namespace crypto |
| 112 | 111 |
| 113 #endif // CRYPTO_NSS_UTIL_INTERNAL_H_ | 112 #endif // CRYPTO_NSS_UTIL_INTERNAL_H_ |
| OLD | NEW |