| Index: components/cronet/android/cronet_url_request_context_adapter.cc
|
| diff --git a/components/cronet/android/cronet_url_request_context_adapter.cc b/components/cronet/android/cronet_url_request_context_adapter.cc
|
| index 686119748bee65a4ae6c4817f287947cca25f2a9..af202ee2021a8503393b1150ecd81a0ff4936fd7 100644
|
| --- a/components/cronet/android/cronet_url_request_context_adapter.cc
|
| +++ b/components/cronet/android/cronet_url_request_context_adapter.cc
|
| @@ -32,6 +32,7 @@
|
| #include "net/base/net_errors.h"
|
| #include "net/base/net_util.h"
|
| #include "net/base/network_delegate_impl.h"
|
| +#include "net/cert/cert_verifier.h"
|
| #include "net/http/http_auth_handler_factory.h"
|
| #include "net/http/http_server_properties_manager.h"
|
| #include "net/log/write_to_file_net_log_observer.h"
|
| @@ -384,23 +385,10 @@ void CronetURLRequestContextAdapter::InitializeOnNetworkThread(
|
|
|
| // Iterate through PKP configuration for every host.
|
| for (const auto& pkp : config->pkp_list) {
|
| - // Convert the vector of hash strings from the config to
|
| - // a vector of HashValue objects.
|
| - net::HashValueVector hash_value_vector;
|
| - for (const auto& hash : pkp->pin_hashes) {
|
| - net::HashValue hash_value;
|
| - bool good_hash = hash_value.FromString(*hash);
|
| - if (good_hash) {
|
| - hash_value_vector.push_back(hash_value);
|
| - } else {
|
| - LOG(WARNING) << "Unable to add hash value " << *hash;
|
| - }
|
| - }
|
| -
|
| // Add the host pinning.
|
| context_->transport_security_state()->AddHPKP(
|
| pkp->host, pkp->expiration_date, pkp->include_subdomains,
|
| - hash_value_vector, GURL::EmptyGURL());
|
| + pkp->pin_hashes, GURL::EmptyGURL());
|
| }
|
|
|
| JNIEnv* env = base::android::AttachCurrentThread();
|
| @@ -548,17 +536,105 @@ void CronetURLRequestContextAdapter::OnThroughputObservation(
|
| (timestamp - base::TimeTicks::UnixEpoch()).InMilliseconds(), source);
|
| }
|
|
|
| +// Create a URLRequestContextConfig from the given parameters.
|
| +static jlong CreateRequestContextConfig(
|
| + JNIEnv* env,
|
| + const JavaParamRef<jclass>& jcaller,
|
| + const JavaParamRef<jstring>& juser_agent,
|
| + const JavaParamRef<jstring>& jstorage_path,
|
| + jboolean jquic_enabled,
|
| + jboolean jhttp2_enabled,
|
| + jboolean jsdch_enabled,
|
| + const JavaParamRef<jstring>& jdata_reduction_proxy_key,
|
| + const JavaParamRef<jstring>& jdata_reduction_proxy_primary_proxy,
|
| + const JavaParamRef<jstring>& jdata_reduction_proxy_fallback_proxy,
|
| + const JavaParamRef<jstring>& jdata_reduction_proxy_secure_proxy_check_url,
|
| + jboolean jdisable_cache,
|
| + jint jhttp_cache_mode,
|
| + jlong jhttp_cache_max_size,
|
| + const JavaParamRef<jstring>& jexperimental_quic_connection_options,
|
| + jlong jmock_cert_verifier) {
|
| + return reinterpret_cast<jlong>(new URLRequestContextConfig(
|
| + jquic_enabled, jhttp2_enabled, jsdch_enabled,
|
| + static_cast<URLRequestContextConfig::HttpCacheType>(jhttp_cache_mode),
|
| + jhttp_cache_max_size, jdisable_cache,
|
| + base::android::ConvertJavaStringToUTF8(env, jstorage_path),
|
| + base::android::ConvertJavaStringToUTF8(env, juser_agent),
|
| + base::android::ConvertJavaStringToUTF8(
|
| + env, jexperimental_quic_connection_options),
|
| + base::android::ConvertJavaStringToUTF8(env, jdata_reduction_proxy_key),
|
| + base::android::ConvertJavaStringToUTF8(
|
| + env, jdata_reduction_proxy_primary_proxy),
|
| + base::android::ConvertJavaStringToUTF8(
|
| + env, jdata_reduction_proxy_fallback_proxy),
|
| + base::android::ConvertJavaStringToUTF8(
|
| + env, jdata_reduction_proxy_secure_proxy_check_url),
|
| + make_scoped_ptr(
|
| + reinterpret_cast<net::CertVerifier*>(jmock_cert_verifier))));
|
| +}
|
| +
|
| +// Add a QUIC hint to a URLRequestContextConfig.
|
| +static void AddQuicHint(JNIEnv* env,
|
| + const JavaParamRef<jclass>& jcaller,
|
| + jlong jurl_request_context_config,
|
| + const JavaParamRef<jstring>& jhost,
|
| + jint jport,
|
| + jint jalternate_port) {
|
| + URLRequestContextConfig* config =
|
| + reinterpret_cast<URLRequestContextConfig*>(jurl_request_context_config);
|
| + config->quic_hints.push_back(
|
| + make_scoped_ptr(new URLRequestContextConfig::QuicHint(
|
| + base::android::ConvertJavaStringToUTF8(env, jhost), jport,
|
| + jalternate_port)));
|
| +}
|
| +
|
| +// Add a public key pin to URLRequestContextConfig.
|
| +// |jhost| is the host to apply the pin to.
|
| +// |jhashes| is an array of jbyte[32] representing SHA256 key hashes.
|
| +// |jinclude_subdomains| indicates if pin should be applied to subdomains.
|
| +// |jexpiration_time| is the time that the pin expires, in milliseconds since
|
| +// Jan. 1, 1970, midnight GMT.
|
| +static void AddPkp(JNIEnv* env,
|
| + const JavaParamRef<jclass>& jcaller,
|
| + jlong jurl_request_context_config,
|
| + const JavaParamRef<jstring>& jhost,
|
| + const JavaParamRef<jobjectArray>& jhashes,
|
| + jboolean jinclude_subdomains,
|
| + jlong jexpiration_time) {
|
| + URLRequestContextConfig* config =
|
| + reinterpret_cast<URLRequestContextConfig*>(jurl_request_context_config);
|
| + scoped_ptr<URLRequestContextConfig::Pkp> pkp(new URLRequestContextConfig::Pkp(
|
| + base::android::ConvertJavaStringToUTF8(env, jhost), jinclude_subdomains,
|
| + base::Time::UnixEpoch() +
|
| + base::TimeDelta::FromMilliseconds(jexpiration_time)));
|
| + size_t hash_count = env->GetArrayLength(jhashes);
|
| + for (size_t i = 0; i < hash_count; ++i) {
|
| + ScopedJavaLocalRef<jbyteArray> bytes_array(
|
| + env, static_cast<jbyteArray>(env->GetObjectArrayElement(jhashes, i)));
|
| + static_assert(std::is_pod<net::SHA256HashValue>::value,
|
| + "net::SHA256HashValue is not POD");
|
| + static_assert(sizeof(net::SHA256HashValue) * CHAR_BIT == 256,
|
| + "net::SHA256HashValue contains overhead");
|
| + if (env->GetArrayLength(bytes_array.obj()) !=
|
| + sizeof(net::SHA256HashValue)) {
|
| + LOG(ERROR) << "Unable to add public key hash value.";
|
| + continue;
|
| + }
|
| + jbyte* bytes = env->GetByteArrayElements(bytes_array.obj(), nullptr);
|
| + net::HashValue hash(*reinterpret_cast<net::SHA256HashValue*>(bytes));
|
| + pkp->pin_hashes.push_back(hash);
|
| + env->ReleaseByteArrayElements(bytes_array.obj(), bytes, JNI_ABORT);
|
| + }
|
| + config->pkp_list.push_back(std::move(pkp));
|
| +}
|
| +
|
| // Creates RequestContextAdater if config is valid URLRequestContextConfig,
|
| // returns 0 otherwise.
|
| static jlong CreateRequestContextAdapter(JNIEnv* env,
|
| const JavaParamRef<jclass>& jcaller,
|
| - const JavaParamRef<jstring>& jconfig) {
|
| - std::string config_string =
|
| - base::android::ConvertJavaStringToUTF8(env, jconfig);
|
| + jlong jconfig) {
|
| scoped_ptr<URLRequestContextConfig> context_config(
|
| - new URLRequestContextConfig());
|
| - if (!context_config->LoadFromJSON(config_string))
|
| - return 0;
|
| + reinterpret_cast<URLRequestContextConfig*>(jconfig));
|
|
|
| CronetURLRequestContextAdapter* context_adapter =
|
| new CronetURLRequestContextAdapter(context_config.Pass());
|
|
|