Certificate Transparency: Start tracking logs' state

chrome/browser/io_thread.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/io_thread.h"
 
 #include <utility>
 #include <vector>
 
 #include "base/base64.h"
@@ skipping 24 matching lines @@
 #include "chrome/browser/data_usage/tab_id_annotator.h"
 #include "chrome/browser/net/async_dns_field_trial.h"
 #include "chrome/browser/net/chrome_network_delegate.h"
 #include "chrome/browser/net/connect_interceptor.h"
 #include "chrome/browser/net/dns_probe_service.h"
 #include "chrome/browser/net/proxy_service_factory.h"
 #include "chrome/common/channel_info.h"
 #include "chrome/common/chrome_content_client.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/pref_names.h"
+#include "components/certificate_transparency/tree_state_tracker.h"
 #include "components/data_reduction_proxy/core/browser/data_reduction_proxy_prefs.h"
 #include "components/data_reduction_proxy/core/common/data_reduction_proxy_params.h"
 #include "components/data_usage/core/data_use_aggregator.h"
 #include "components/data_usage/core/data_use_amortizer.h"
 #include "components/data_usage/core/data_use_annotator.h"
 #include "components/net_log/chrome_net_log.h"
 #include "components/policy/core/common/policy_service.h"
 #include "components/prefs/pref_registry_simple.h"
 #include "components/prefs/pref_service.h"
 #include "components/proxy_config/pref_proxy_config_tracker.h"
@@ skipping 373 matching lines @@
     policy::PolicyService* policy_service,
     net_log::ChromeNetLog* net_log,
     extensions::EventRouterForwarder* extension_event_router_forwarder)
     : net_log_(net_log),
 #if defined(ENABLE_EXTENSIONS)
       extension_event_router_forwarder_(extension_event_router_forwarder),
 #endif
       globals_(NULL),
       is_spdy_disabled_by_policy_(false),
       is_quic_allowed_by_policy_(true),
+      sth_reporter_(nullptr),
       creation_time_(base::TimeTicks::Now()),
       weak_factory_(this) {
   scoped_refptr<base::SingleThreadTaskRunner> io_thread_proxy =
       BrowserThread::GetMessageLoopProxyForThread(BrowserThread::IO);
   auth_schemes_ = local_state->GetString(prefs::kAuthSchemes);
   negotiate_disable_cname_lookup_.Init(
       prefs::kDisableAuthNegotiateCnameLookup, local_state,
       base::Bind(&IOThread::UpdateNegotiateDisableCnameLookup,
                  base::Unretained(this)));
   negotiate_disable_cname_lookup_.MoveToThread(io_thread_proxy);
@@ skipping 62 matching lines @@
 
   BrowserThread::SetDelegate(BrowserThread::IO, this);
 }
 
 IOThread::~IOThread() {
   // This isn't needed for production code, but in tests, IOThread may
   // be multiply constructed.
   BrowserThread::SetDelegate(BrowserThread::IO, NULL);
 
   pref_proxy_config_tracker_->DetachFromPrefService();
+  DCHECK(sth_observers_.empty());
   DCHECK(!globals_);
 }
 
 IOThread::Globals* IOThread::globals() {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
   return globals_;
 }
 
 void IOThread::SetGlobalsForTesting(Globals* globals) {
   DCHECK_CURRENTLY_ON(BrowserThread::IO);
@@ skipping 334 matching lines @@
   base::debug::LeakTracker<SafeBrowsingURLRequestContext>::CheckForLeaks();
 
 #if defined(USE_NSS_CERTS)
   net::ShutdownNSSHttpIO();
 #endif
 
   system_url_request_context_getter_ = NULL;
 
   // Release objects that the net::URLRequestContext could have been pointing
   // to.
+  globals()->cert_transparency_verifier->SetObserver(nullptr);
+
+  VLOG(1) << "XXX: IOThread::CleanUp";
+  if (sth_reporter_) {
+    for (auto observer : sth_observers_) {
+      sth_reporter_->UnregisterObserver(observer);
+    }
+    // Make sure no registration happens after CleanUp
+    sth_reporter_ = nullptr;
+  }
+  sth_observers_.clear();
 
   // Shutdown the HistogramWatcher on the IO thread.
   net::NetworkChangeNotifier::ShutdownHistogramWatcher();
 
   // This must be reset before the ChromeNetLog is destroyed.
   network_change_observer_.reset();
 
   system_proxy_config_service_.reset();
   delete globals_;
   globals_ = NULL;
@@ skipping 322 matching lines @@
   const base::CommandLine& command_line =
       *base::CommandLine::ForCurrentProcess();
   globals_->system_proxy_service = ProxyServiceFactory::CreateProxyService(
       net_log_, globals_->proxy_script_fetcher_context.get(),
       globals_->system_network_delegate.get(),
       std::move(system_proxy_config_service_), command_line,
       quick_check_enabled_.GetValue());
 
   globals_->system_request_context.reset(
       ConstructSystemRequestContext(globals_, net_log_));
+
+  VLOG(1) << "Creating TreeStateTracker observer on IOThread.";
+  // TODO(eranm): Clean up the order of pointer creation and
+  // moving around. This should be a scoped_ptr until ownership
+  // is transferred to globals_->cert_transparency_observer
+  certificate_transparency::TreeStateTracker* scts_observer(
+      new certificate_transparency::TreeStateTracker(globals_->ct_logs));
+  globals_->cert_transparency_observer.reset(scts_observer);
+  RegisterSTHObserver(scts_observer);
+  VLOG(1)
+      << "XXX IOThread::InitSystemRequestContextOnIOThread, created observer.";
+  // The |cert_transparency_verifier| is the same one held by
+  // the |proxy_script_fetcher_context| and |system_request_context|,
+  // so no need to set the observer in their cert_transparency_verifiers.
+  globals_->cert_transparency_verifier->SetObserver(scts_observer);
+  VLOG(1) << "TreeStateTracker observer on IOThread created.";
 }
 
 void IOThread::UpdateDnsClientEnabled() {
   globals()->host_resolver->SetDnsClientEnabled(*dns_client_enabled_);
 }
 
 void IOThread::ConfigurePriorityDependencies() {
   std::string group =
       base::FieldTrialList::FindFullName(kSpdyDependenciesFieldTrial);
   if (group == kSpdyDependenciesFieldTrialEnable) {
@@ skipping 173 matching lines @@
     const base::CommandLine& command_line) {
   if (command_line.HasSwitch(switches::kDisableQuicPortSelection))
     return false;
 
   if (command_line.HasSwitch(switches::kEnableQuicPortSelection))
     return true;
 
   return false;  // Default to disabling port selection on all channels.
 }
 
+void IOThread::RegisterSTHReporter(net::ct::STHReporter* reporter) {
+  DCHECK(globals());
+  // Just a sanity check to make sure it was created by now.
+  DCHECK(globals()->cert_transparency_observer.get());
+
+  VLOG(1) << "XXX IOThread::RegisterWithSTHObserver";
+
+  // globals()->sth_observers_registrar.AssignReporter(reporter);
+  sth_reporter_ = reporter;
+  for (auto observer : sth_observers_) {
+    sth_reporter_->RegisterObserver(observer);
+  }
+}
+
+void IOThread::RegisterSTHObserver(net::ct::STHObserver* observer) {
+  sth_observers_.insert(observer);
+  if (sth_reporter_) {
+    sth_reporter_->RegisterObserver(observer);
+  }
+}
+
+void IOThread::UnregisterSTHObserver(net::ct::STHObserver* observer) {
+  DCHECK_NE(sth_observers_.count(observer), 0u);
+  sth_observers_.erase(observer);
+  if (sth_reporter_) {
+    sth_reporter_->UnregisterObserver(observer);
+  }
+}
+
 net::QuicTagVector IOThread::GetQuicConnectionOptions(
     const base::CommandLine& command_line,
     const VariationParameters& quic_trial_params) {
   if (command_line.HasSwitch(switches::kQuicConnectionOptions)) {
     return net::QuicUtils::ParseQuicConnectionOptions(
         command_line.GetSwitchValueASCII(switches::kQuicConnectionOptions));
   }
 
   VariationParameters::const_iterator it =
       quic_trial_params.find("connection_options");
@@ skipping 339 matching lines @@
       std::move(job_factory);
 
   context->set_job_factory(
       globals->proxy_script_fetcher_url_request_job_factory.get());
 
   // TODO(rtenneti): We should probably use HttpServerPropertiesManager for the
   // system URLRequestContext too. There's no reason this should be tied to a
   // profile.
   return context;
 }