OLD | NEW |
---|---|
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #import "chrome/browser/ui/cocoa/certificate_viewer_mac.h" | 5 #import "chrome/browser/ui/cocoa/certificate_viewer_mac.h" |
6 | 6 |
7 #include <Security/Security.h> | |
8 #include <SecurityInterface/SFCertificatePanel.h> | |
9 #include <vector> | |
10 | |
11 #include "base/mac/foundation_util.h" | 7 #include "base/mac/foundation_util.h" |
12 #include "base/mac/scoped_cftyperef.h" | 8 #include "base/mac/scoped_cftyperef.h" |
13 #include "base/macros.h" | 9 #import "base/mac/scoped_nsobject.h" |
14 #include "chrome/browser/certificate_viewer.h" | 10 #include "content/public/browser/web_contents.h" |
15 #import "chrome/browser/ui/cocoa/constrained_window/constrained_window_mac.h" | |
16 #import "chrome/browser/ui/cocoa/constrained_window/constrained_window_sheet.h" | |
17 #import "chrome/browser/ui/cocoa/constrained_window/constrained_window_sheet_con troller.h" | |
18 #include "net/cert/x509_certificate.h" | 11 #include "net/cert/x509_certificate.h" |
19 #include "net/cert/x509_util_mac.h" | 12 #include "net/cert/x509_util_mac.h" |
20 #import "ui/base/cocoa/window_size_constants.h" | |
21 | 13 |
22 class SSLCertificateViewerCocoaBridge; | 14 @implementation SSLCertificateViewerMac { |
23 | 15 // The corresponding list of certificates. |
24 @interface SFCertificatePanel (SystemPrivate) | 16 base::scoped_nsobject<NSArray> certificates_; |
25 // A system-private interface that dismisses a panel whose sheet was started by | 17 base::scoped_nsobject<SFCertificatePanel> panel_; |
26 // -beginSheetForWindow: | |
27 // modalDelegate: | |
28 // didEndSelector: | |
29 // contextInfo: | |
30 // certificates: | |
31 // showGroup: | |
32 // as though the user clicked the button identified by returnCode. Verified | |
33 // present in 10.8. | |
34 - (void)_dismissWithCode:(NSInteger)code; | |
35 @end | |
36 | |
37 @interface SSLCertificateViewerCocoa () | |
38 - (void)onConstrainedWindowClosed; | |
39 @end | |
40 | |
41 class SSLCertificateViewerCocoaBridge : public ConstrainedWindowMacDelegate { | |
42 public: | |
43 explicit SSLCertificateViewerCocoaBridge(SSLCertificateViewerCocoa * | |
44 controller) | |
45 : controller_(controller) { | |
46 } | |
47 | |
48 virtual ~SSLCertificateViewerCocoaBridge() {} | |
49 | |
50 // ConstrainedWindowMacDelegate implementation: | |
51 void OnConstrainedWindowClosed(ConstrainedWindowMac* window) override { | |
52 // |onConstrainedWindowClosed| will delete the sheet which might be still | |
53 // in use higher up the call stack. Wait for the next cycle of the event | |
54 // loop to call this function. | |
55 [controller_ performSelector:@selector(onConstrainedWindowClosed) | |
56 withObject:nil | |
57 afterDelay:0]; | |
58 } | |
59 | |
60 private: | |
61 SSLCertificateViewerCocoa* controller_; // weak | |
62 | |
63 DISALLOW_COPY_AND_ASSIGN(SSLCertificateViewerCocoaBridge); | |
64 }; | |
65 | |
66 void ShowCertificateViewer(content::WebContents* web_contents, | |
67 gfx::NativeWindow parent, | |
68 net::X509Certificate* cert) { | |
69 // SSLCertificateViewerCocoa will manage its own lifetime and will release | |
70 // itself when the dialog is closed. | |
71 // See -[SSLCertificateViewerCocoa onConstrainedWindowClosed]. | |
72 SSLCertificateViewerCocoa* viewer = | |
73 [[SSLCertificateViewerCocoa alloc] initWithCertificate:cert]; | |
74 [viewer displayForWebContents:web_contents]; | |
75 } | 18 } |
76 | 19 |
77 @implementation SSLCertificateViewerCocoa | |
78 | |
79 - (id)initWithCertificate:(net::X509Certificate*)certificate { | 20 - (id)initWithCertificate:(net::X509Certificate*)certificate { |
80 if ((self = [super init])) { | 21 if ((self = [super init])) { |
81 base::ScopedCFTypeRef<CFArrayRef> cert_chain( | 22 base::ScopedCFTypeRef<CFArrayRef> cert_chain( |
82 certificate->CreateOSCertChainForCert()); | 23 certificate->CreateOSCertChainForCert()); |
83 NSArray* certificates = base::mac::CFToNSCast(cert_chain.get()); | 24 NSArray* certificates = base::mac::CFToNSCast(cert_chain.get()); |
84 certificates_.reset([certificates retain]); | 25 certificates_.reset([certificates retain]); |
85 } | 26 } |
86 return self; | 27 return self; |
87 } | 28 } |
88 | 29 |
89 - (void)sheetDidEnd:(NSWindow*)parent | 30 - (void)sheetDidEnd:(NSWindow*)parent |
90 returnCode:(NSInteger)returnCode | 31 returnCode:(NSInteger)returnCode |
91 context:(void*)context { | 32 context:(void*)context { |
92 if (!closePending_) | 33 NOTREACHED(); // Subclasses must implement this. |
msw
2016/08/22 23:01:18
q: could you make this pure virtual instead?
Patti Lor
2016/08/25 08:25:12
There isn't a good way to enforce this in Objectiv
| |
93 constrainedWindow_->CloseWebContentsModalDialog(); | |
94 } | 34 } |
95 | 35 |
96 - (void)displayForWebContents:(content::WebContents*)webContents { | 36 - (void)displayForWebContents:(content::WebContents*)webContents { |
97 // Explicitly disable revocation checking, regardless of user preferences | 37 // Explicitly disable revocation checking, regardless of user preferences |
98 // or system settings. The behaviour of SFCertificatePanel is to call | 38 // or system settings. The behaviour of SFCertificatePanel is to call |
99 // SecTrustEvaluate on the certificate(s) supplied, effectively | 39 // SecTrustEvaluate on the certificate(s) supplied, effectively |
100 // duplicating the behaviour of net::X509Certificate::Verify(). However, | 40 // duplicating the behaviour of net::X509Certificate::Verify(). However, |
101 // this call stalls the UI if revocation checking is enabled in the | 41 // this call stalls the UI if revocation checking is enabled in the |
102 // Keychain preferences or if the cert may be an EV cert. By disabling | 42 // Keychain preferences or if the cert may be an EV cert. By disabling |
103 // revocation checking, the stall is limited to the time taken for path | 43 // revocation checking, the stall is limited to the time taken for path |
(...skipping 22 matching lines...) Expand all Loading... | |
126 CFRelease(basic_policy); | 66 CFRelease(basic_policy); |
127 | 67 |
128 status = net::x509_util::CreateRevocationPolicies(false, false, policies); | 68 status = net::x509_util::CreateRevocationPolicies(false, false, policies); |
129 if (status != noErr) { | 69 if (status != noErr) { |
130 NOTREACHED(); | 70 NOTREACHED(); |
131 return; | 71 return; |
132 } | 72 } |
133 | 73 |
134 panel_.reset([[SFCertificatePanel alloc] init]); | 74 panel_.reset([[SFCertificatePanel alloc] init]); |
135 [panel_ setPolicies:(id) policies.get()]; | 75 [panel_ setPolicies:(id) policies.get()]; |
136 | |
137 constrainedWindow_ = | |
138 CreateAndShowWebModalDialogMac(observer_.get(), webContents, self); | |
139 } | 76 } |
140 | 77 |
141 - (NSWindow*)overlayWindow { | 78 - (void)releaseSheetWindow { |
msw
2016/08/22 23:01:18
nit: reorder to match decl
Patti Lor
2016/08/25 08:25:11
Done.
| |
142 return overlayWindow_; | 79 panel_.reset(); |
143 } | 80 } |
144 | 81 |
145 - (void)showSheetForWindow:(NSWindow*)window { | 82 - (NSWindow*)certificatePanel { |
msw
2016/08/22 23:01:18
nit: reorder to match decl
Patti Lor
2016/08/25 08:25:12
Done.
| |
146 overlayWindow_.reset([window retain]); | 83 return panel_; |
84 } | |
85 | |
86 - (void)showCertificateSheet:(NSWindow*)window { | |
147 [panel_ beginSheetForWindow:window | 87 [panel_ beginSheetForWindow:window |
148 modalDelegate:self | 88 modalDelegate:self |
149 didEndSelector:@selector(sheetDidEnd: | 89 didEndSelector:@selector(sheetDidEnd: |
150 returnCode: | 90 returnCode: |
151 context:) | 91 context:) |
152 contextInfo:NULL | 92 contextInfo:NULL |
153 certificates:certificates_ | 93 certificates:certificates_ |
154 showGroup:YES]; | 94 showGroup:YES]; |
155 } | 95 } |
156 | 96 |
157 - (void)closeSheetWithAnimation:(BOOL)withAnimation { | 97 - (void)closeCertificateSheet { |
158 closePending_ = YES; | |
159 overlayWindow_.reset(); | |
160 // Closing the sheet using -[NSApp endSheet:] doesn't work so use the private | 98 // Closing the sheet using -[NSApp endSheet:] doesn't work so use the private |
161 // method. | 99 // method. |
162 [panel_ _dismissWithCode:NSFileHandlingPanelCancelButton]; | 100 [panel_ _dismissWithCode:NSFileHandlingPanelCancelButton]; |
163 } | 101 certificates_.reset(); |
164 | |
165 - (void)hideSheet { | |
166 NSWindow* sheetWindow = [overlayWindow_ attachedSheet]; | |
167 [sheetWindow setAlphaValue:0.0]; | |
168 [sheetWindow setIgnoresMouseEvents:YES]; | |
169 | |
170 oldResizesSubviews_ = [[sheetWindow contentView] autoresizesSubviews]; | |
171 [[sheetWindow contentView] setAutoresizesSubviews:NO]; | |
172 } | |
173 | |
174 - (void)unhideSheet { | |
175 NSWindow* sheetWindow = [overlayWindow_ attachedSheet]; | |
176 [sheetWindow setIgnoresMouseEvents:NO]; | |
177 | |
178 [[sheetWindow contentView] setAutoresizesSubviews:oldResizesSubviews_]; | |
179 [[overlayWindow_ attachedSheet] setAlphaValue:1.0]; | |
180 } | |
181 | |
182 - (void)pulseSheet { | |
183 // NOOP | |
184 } | |
185 | |
186 - (void)makeSheetKeyAndOrderFront { | |
187 [[overlayWindow_ attachedSheet] makeKeyAndOrderFront:nil]; | |
188 } | |
189 | |
190 - (void)updateSheetPosition { | |
191 // NOOP | |
192 } | |
193 | |
194 - (void)resizeWithNewSize:(NSSize)preferredSize { | |
195 // NOOP | |
196 } | |
197 | |
198 - (NSWindow*)sheetWindow { | |
199 return panel_; | |
200 } | |
201 | |
202 - (void)onConstrainedWindowClosed { | |
203 panel_.reset(); | |
204 constrainedWindow_.reset(); | |
205 [self release]; | |
206 } | 102 } |
207 | 103 |
208 @end | 104 @end |
OLD | NEW |