Resolve certificate references in ONC by PEM.

chromeos/network/onc/onc_signature.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/network/onc/onc_signature.h"
 
 #include "chromeos/network/onc/onc_constants.h"
 #include "third_party/cros_system_api/dbus/service_constants.h"
 
 using base::Value;
@@ skipping 27 matching lines @@
   { certificate::kOrganization, &kStringSignature },
   { certificate::kOrganizationalUnit, &kStringSignature },
   { NULL }
 };
 
 const OncFieldSignature certificate_pattern_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { certificate::kEnrollmentURI, &kStringListSignature },
   { certificate::kIssuer, &kIssuerSubjectPatternSignature },
   { certificate::kIssuerCARef, &kStringListSignature },
+  { certificate::kIssuerCAPEMs, &kStringListSignature },
   { certificate::kSubject, &kIssuerSubjectPatternSignature },
   { NULL }
 };
 
 const OncFieldSignature eap_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { eap::kAnonymousIdentity, &kStringSignature },
   { eap::kClientCertPattern, &kCertificatePatternSignature },
   { eap::kClientCertRef, &kStringSignature },
   { eap::kClientCertType, &kStringSignature },
   { eap::kIdentity, &kStringSignature },
   { eap::kInner, &kStringSignature },
   { eap::kOuter, &kStringSignature },
   { eap::kPassword, &kStringSignature },
   { eap::kSaveCredentials, &kBoolSignature },
+  { eap::kServerCAPEMs, &kStringListSignature },
   { eap::kServerCARef, &kStringSignature },
   { eap::kUseSystemCAs, &kBoolSignature },
   { NULL }
 };
 
 const OncFieldSignature ipsec_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { ipsec::kAuthenticationType, &kStringSignature },
   { vpn::kClientCertPattern, &kCertificatePatternSignature },
   { vpn::kClientCertRef, &kStringSignature },
   { vpn::kClientCertType, &kStringSignature },
   { ipsec::kGroup, &kStringSignature },
   { ipsec::kIKEVersion, &kIntegerSignature },
   { ipsec::kPSK, &kStringSignature },
   { vpn::kSaveCredentials, &kBoolSignature },
+  { ipsec::kServerCAPEMs, &kStringSignature },
   { ipsec::kServerCARef, &kStringSignature },
   // Not yet supported.
   //  { ipsec::kEAP, &kEAPSignature },
   //  { ipsec::kXAUTH, &kXAUTHSignature },
   { NULL }
 };
 
 const OncFieldSignature l2tp_fields[] = {
   { kRecommended, &kRecommendedSignature },
   { vpn::kPassword, &kStringSignature },
@@ skipping 17 matching lines @@
   { openvpn::kNsCertType, &kStringSignature },
   { vpn::kPassword, &kStringSignature },
   { openvpn::kPort, &kIntegerSignature },
   { openvpn::kProto, &kStringSignature },
   { openvpn::kPushPeerInfo, &kBoolSignature },
   { openvpn::kRemoteCertEKU, &kStringSignature },
   { openvpn::kRemoteCertKU, &kStringListSignature },
   { openvpn::kRemoteCertTLS, &kStringSignature },
   { openvpn::kRenegSec, &kIntegerSignature },
   { vpn::kSaveCredentials, &kBoolSignature },
+  { openvpn::kServerCAPEMs, &kStringListSignature },
   { openvpn::kServerCARef, &kStringSignature },
   // Not supported, yet.
+  { openvpn::kServerCertPEM, &kStringSignature },
   { openvpn::kServerCertRef, &kStringSignature },
   { openvpn::kServerPollTimeout, &kIntegerSignature },
   { openvpn::kShaper, &kIntegerSignature },
   { openvpn::kStaticChallenge, &kStringSignature },
   { openvpn::kTLSAuthContents, &kStringSignature },
   { openvpn::kTLSRemote, &kStringSignature },
   { vpn::kUsername, &kStringSignature },
   // Not supported, yet.
   { openvpn::kVerb, &kStringSignature },
   { NULL }
@@ skipping 271 matching lines @@
     if (&signature == entry->value_signature &&
         onc_field_name == entry->field_name) {
       return true;
     }
   }
   return false;
 }
 
 }  // namespace onc
 }  // namespace chromeos