| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chromeos/cert_loader.h" | 5 #include "chromeos/cert_loader.h" |
| 6 | 6 |
| 7 #include <algorithm> | 7 #include <algorithm> |
| 8 | 8 |
| 9 #include "base/bind.h" | 9 #include "base/bind.h" |
| 10 #include "base/location.h" | 10 #include "base/location.h" |
| 11 #include "base/sequenced_task_runner.h" | 11 #include "base/sequenced_task_runner.h" |
| 12 #include "base/strings/string_number_conversions.h" | 12 #include "base/strings/string_number_conversions.h" |
| 13 #include "base/task_runner_util.h" | 13 #include "base/task_runner_util.h" |
| 14 #include "base/threading/worker_pool.h" | 14 #include "base/threading/worker_pool.h" |
| 15 #include "crypto/nss_util.h" | 15 #include "crypto/nss_util.h" |
| 16 #include "net/cert/nss_cert_database.h" | 16 #include "net/cert/nss_cert_database.h" |
| 17 #include "net/cert/nss_cert_database_chromeos.h" | 17 #include "net/cert/nss_cert_database_chromeos.h" |
| 18 #include "net/cert/x509_certificate.h" | 18 #include "net/cert/x509_certificate.h" |
| 19 | 19 |
| 20 namespace chromeos { | 20 namespace chromeos { |
| 21 | 21 |
| 22 namespace { | |
| 23 | |
| 24 // Loads certificates from |cert_database| into |cert_list|. | |
| 25 void LoadNSSCertificates(net::NSSCertDatabase* cert_database, | |
| 26 net::CertificateList* cert_list) { | |
| 27 cert_database->ListCerts(cert_list); | |
| 28 } | |
| 29 | |
| 30 } // namespace | |
| 31 | |
| 32 static CertLoader* g_cert_loader = NULL; | 22 static CertLoader* g_cert_loader = NULL; |
| 33 | 23 |
| 34 // static | 24 // static |
| 35 void CertLoader::Initialize() { | 25 void CertLoader::Initialize() { |
| 36 CHECK(!g_cert_loader); | 26 CHECK(!g_cert_loader); |
| 37 g_cert_loader = new CertLoader(); | 27 g_cert_loader = new CertLoader(); |
| 38 } | 28 } |
| 39 | 29 |
| 40 // static | 30 // static |
| 41 void CertLoader::Shutdown() { | 31 void CertLoader::Shutdown() { |
| (...skipping 51 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 93 std::string pkcs11_id; | 83 std::string pkcs11_id; |
| 94 if (sec_item) { | 84 if (sec_item) { |
| 95 pkcs11_id = base::HexEncode(sec_item->data, sec_item->len); | 85 pkcs11_id = base::HexEncode(sec_item->data, sec_item->len); |
| 96 SECITEM_FreeItem(sec_item, PR_TRUE); | 86 SECITEM_FreeItem(sec_item, PR_TRUE); |
| 97 } | 87 } |
| 98 SECKEY_DestroyPrivateKey(priv_key); | 88 SECKEY_DestroyPrivateKey(priv_key); |
| 99 | 89 |
| 100 return pkcs11_id; | 90 return pkcs11_id; |
| 101 } | 91 } |
| 102 | 92 |
| 103 void CertLoader::SetSlowTaskRunnerForTest( | |
| 104 const scoped_refptr<base::TaskRunner>& task_runner) { | |
| 105 slow_task_runner_for_test_ = task_runner; | |
| 106 } | |
| 107 | |
| 108 void CertLoader::AddObserver(CertLoader::Observer* observer) { | 93 void CertLoader::AddObserver(CertLoader::Observer* observer) { |
| 109 observers_.AddObserver(observer); | 94 observers_.AddObserver(observer); |
| 110 } | 95 } |
| 111 | 96 |
| 112 void CertLoader::RemoveObserver(CertLoader::Observer* observer) { | 97 void CertLoader::RemoveObserver(CertLoader::Observer* observer) { |
| 113 observers_.RemoveObserver(observer); | 98 observers_.RemoveObserver(observer); |
| 114 } | 99 } |
| 115 | 100 |
| 116 bool CertLoader::IsCertificateHardwareBacked( | 101 bool CertLoader::IsCertificateHardwareBacked( |
| 117 const net::X509Certificate* cert) const { | 102 const net::X509Certificate* cert) const { |
| (...skipping 29 matching lines...) Expand all Loading... |
| 147 | 132 |
| 148 void CertLoader::LoadCertificates() { | 133 void CertLoader::LoadCertificates() { |
| 149 CHECK(thread_checker_.CalledOnValidThread()); | 134 CHECK(thread_checker_.CalledOnValidThread()); |
| 150 VLOG(1) << "LoadCertificates: " << certificates_update_running_; | 135 VLOG(1) << "LoadCertificates: " << certificates_update_running_; |
| 151 | 136 |
| 152 if (certificates_update_running_) { | 137 if (certificates_update_running_) { |
| 153 certificates_update_required_ = true; | 138 certificates_update_required_ = true; |
| 154 return; | 139 return; |
| 155 } | 140 } |
| 156 | 141 |
| 157 net::CertificateList* cert_list = new net::CertificateList; | |
| 158 certificates_update_running_ = true; | 142 certificates_update_running_ = true; |
| 159 certificates_update_required_ = false; | 143 certificates_update_required_ = false; |
| 160 | 144 |
| 161 base::TaskRunner* task_runner = slow_task_runner_for_test_.get(); | 145 database_->ListCerts(base::Bind(&CertLoader::UpdateCertificates, |
| 162 if (!task_runner) | 146 weak_factory_.GetWeakPtr())); |
| 163 task_runner = base::WorkerPool::GetTaskRunner(true /* task is slow */); | |
| 164 task_runner->PostTaskAndReply( | |
| 165 FROM_HERE, | |
| 166 base::Bind(LoadNSSCertificates, | |
| 167 // Create a copy of the database so it can be used on the | |
| 168 // worker pool. | |
| 169 base::Owned(new net::NSSCertDatabaseChromeOS( | |
| 170 database_->GetPublicSlot(), | |
| 171 database_->GetPrivateSlot())), | |
| 172 cert_list), | |
| 173 base::Bind(&CertLoader::UpdateCertificates, | |
| 174 weak_factory_.GetWeakPtr(), | |
| 175 base::Owned(cert_list))); | |
| 176 } | 147 } |
| 177 | 148 |
| 178 void CertLoader::UpdateCertificates(net::CertificateList* cert_list) { | 149 void CertLoader::UpdateCertificates( |
| 150 scoped_ptr<net::CertificateList> cert_list) { |
| 179 CHECK(thread_checker_.CalledOnValidThread()); | 151 CHECK(thread_checker_.CalledOnValidThread()); |
| 180 DCHECK(certificates_update_running_); | 152 DCHECK(certificates_update_running_); |
| 181 VLOG(1) << "UpdateCertificates: " << cert_list->size(); | 153 VLOG(1) << "UpdateCertificates: " << cert_list->size(); |
| 182 | 154 |
| 183 // Ignore any existing certificates. | 155 // Ignore any existing certificates. |
| 184 cert_list_.swap(*cert_list); | 156 cert_list_.swap(*cert_list); |
| 185 | 157 |
| 186 bool initial_load = !certificates_loaded_; | 158 bool initial_load = !certificates_loaded_; |
| 187 certificates_loaded_ = true; | 159 certificates_loaded_ = true; |
| 188 NotifyCertificatesLoaded(initial_load); | 160 NotifyCertificatesLoaded(initial_load); |
| (...skipping 19 matching lines...) Expand all Loading... |
| 208 VLOG(1) << "OnCertAdded"; | 180 VLOG(1) << "OnCertAdded"; |
| 209 LoadCertificates(); | 181 LoadCertificates(); |
| 210 } | 182 } |
| 211 | 183 |
| 212 void CertLoader::OnCertRemoved(const net::X509Certificate* cert) { | 184 void CertLoader::OnCertRemoved(const net::X509Certificate* cert) { |
| 213 VLOG(1) << "OnCertRemoved"; | 185 VLOG(1) << "OnCertRemoved"; |
| 214 LoadCertificates(); | 186 LoadCertificates(); |
| 215 } | 187 } |
| 216 | 188 |
| 217 } // namespace chromeos | 189 } // namespace chromeos |
| OLD | NEW |