Resolve certificate references in ONC by PEM.

chromeos/network/managed_network_configuration_handler.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chromeos/network/managed_network_configuration_handler.h"
 
 #include <string>
 #include <vector>
 
 #include "base/bind.h"
@@ skipping 27 matching lines @@
 #include "chromeos/network/onc/onc_validator.h"
 #include "dbus/object_path.h"
 #include "third_party/cros_system_api/dbus/service_constants.h"
 
 namespace chromeos {
 
 namespace {
 
 // These are error strings used for error callbacks. None of these error
 // messages are user-facing: they should only appear in logs.
+const char kCertificatesNotLoadedMessage[] = "Certificates not loaded.";
+const char kCertificatesNotLoaded[] = "Error.CertificatesNotLoaded";
 const char kInvalidUserSettingsMessage[] = "User settings are invalid.";
 const char kInvalidUserSettings[] = "Error.InvalidUserSettings";
 const char kNetworkAlreadyConfiguredMessage[] =
     "Network is already configured.";
 const char kNetworkAlreadyConfigured[] = "Error.NetworkAlreadyConfigured";
 const char kPoliciesNotInitializedMessage[] = "Policies not initialized.";
 const char kPoliciesNotInitialized[] = "Error.PoliciesNotInitialized";
 const char kProfileNotInitializedMessage[] = "Profile not initialized.";
 const char kProfileNotInitialized[] = "Error.ProflieNotInitialized";
 const char kSetOnUnconfiguredNetworkMessage[] =
@@ skipping 132 matching lines @@
   } else {
     NOTREACHED();
     onc_source = onc::ONC_SOURCE_NONE;
   }
 
   RemoveFakeCredentials(onc::kNetworkConfigurationSignature,
                         effective.get());
 
   effective->SetStringWithoutPathExpansion(onc::network_config::kGUID, guid);
 
+  net::CertificateList server_and_ca_certs;
+  // TODO(pneubeck): Obtain list of server/ca certificates here.
+
   scoped_ptr<base::DictionaryValue> shill_dictionary(
-      onc::TranslateONCObjectToShill(&onc::kNetworkConfigurationSignature,
-                                     *effective));
+      onc::TranslateONCObjectToShill(
+          &onc::kNetworkConfigurationSignature,
+          *effective,
+          base::Bind(&onc::GetPEMEncodedCertFromFingerprint,
+                     server_and_ca_certs)));
 
   shill_dictionary->SetStringWithoutPathExpansion(flimflam::kProfileProperty,
                                                   profile.path);
 
   scoped_ptr<NetworkUIData> ui_data;
   if (policy)
     ui_data = NetworkUIData::CreateFromONC(onc_source, *policy);
   else
     ui_data.reset(new NetworkUIData());
 
@@ skipping 695 matching lines @@
     NetworkStateHandler* network_state_handler,
     NetworkProfileHandler* network_profile_handler,
     NetworkConfigurationHandler* network_configuration_handler) {
   network_state_handler_ = network_state_handler;
   network_profile_handler_ = network_profile_handler;
   network_configuration_handler_ = network_configuration_handler;
   network_profile_handler_->AddObserver(this);
 }
 
 }  // namespace chromeos