| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/socket/nss_ssl_util.h" | 5 #include "net/socket/nss_ssl_util.h" |
| 6 | 6 |
| 7 #include <nss.h> | 7 #include <nss.h> |
| 8 #include <secerr.h> | 8 #include <secerr.h> |
| 9 #include <ssl.h> | 9 #include <ssl.h> |
| 10 #include <sslerr.h> | 10 #include <sslerr.h> |
| (...skipping 62 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 73 // CiphersCopy copies the zero-terminated array |in| to |out|. It returns the | 73 // CiphersCopy copies the zero-terminated array |in| to |out|. It returns the |
| 74 // number of cipher suite ids copied. | 74 // number of cipher suite ids copied. |
| 75 size_t CiphersCopy(const uint16_t* in, uint16_t* out) { | 75 size_t CiphersCopy(const uint16_t* in, uint16_t* out) { |
| 76 for (size_t i = 0; ; i++) { | 76 for (size_t i = 0; ; i++) { |
| 77 if (in[i] == 0) | 77 if (in[i] == 0) |
| 78 return i; | 78 return i; |
| 79 out[i] = in[i]; | 79 out[i] = in[i]; |
| 80 } | 80 } |
| 81 } | 81 } |
| 82 | 82 |
| 83 scoped_ptr<base::Value> NetLogSSLErrorCallback( | 83 std::unique_ptr<base::Value> NetLogSSLErrorCallback( |
| 84 int net_error, | 84 int net_error, |
| 85 int ssl_lib_error, | 85 int ssl_lib_error, |
| 86 NetLogCaptureMode /* capture_mode */) { | 86 NetLogCaptureMode /* capture_mode */) { |
| 87 scoped_ptr<base::DictionaryValue> dict(new base::DictionaryValue()); | 87 std::unique_ptr<base::DictionaryValue> dict(new base::DictionaryValue()); |
| 88 dict->SetInteger("net_error", net_error); | 88 dict->SetInteger("net_error", net_error); |
| 89 if (ssl_lib_error) | 89 if (ssl_lib_error) |
| 90 dict->SetInteger("ssl_lib_error", ssl_lib_error); | 90 dict->SetInteger("ssl_lib_error", ssl_lib_error); |
| 91 return std::move(dict); | 91 return std::move(dict); |
| 92 } | 92 } |
| 93 | 93 |
| 94 class NSSSSLInitSingleton { | 94 class NSSSSLInitSingleton { |
| 95 public: | 95 public: |
| 96 NSSSSLInitSingleton() : model_fd_(NULL) { | 96 NSSSSLInitSingleton() : model_fd_(NULL) { |
| 97 crypto::EnsureNSSInit(); | 97 crypto::EnsureNSSInit(); |
| (...skipping 52 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 150 static const uint16_t chacha_ciphers[] = { | 150 static const uint16_t chacha_ciphers[] = { |
| 151 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, | 151 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, |
| 152 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, | 152 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, |
| 153 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, 0, | 153 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, 0, |
| 154 }; | 154 }; |
| 155 static const uint16_t aes_gcm_ciphers[] = { | 155 static const uint16_t aes_gcm_ciphers[] = { |
| 156 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, | 156 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, |
| 157 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, | 157 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, |
| 158 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, 0, | 158 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, 0, |
| 159 }; | 159 }; |
| 160 scoped_ptr<uint16_t[]> ciphers(new uint16_t[num_ciphers]); | 160 std::unique_ptr<uint16_t[]> ciphers(new uint16_t[num_ciphers]); |
| 161 memcpy(ciphers.get(), ssl_ciphers, sizeof(uint16_t) * num_ciphers); | 161 memcpy(ciphers.get(), ssl_ciphers, sizeof(uint16_t) * num_ciphers); |
| 162 | 162 |
| 163 if (CiphersRemove(chacha_ciphers, ciphers.get(), num_ciphers) && | 163 if (CiphersRemove(chacha_ciphers, ciphers.get(), num_ciphers) && |
| 164 CiphersRemove(aes_gcm_ciphers, ciphers.get(), num_ciphers)) { | 164 CiphersRemove(aes_gcm_ciphers, ciphers.get(), num_ciphers)) { |
| 165 CiphersCompact(ciphers.get(), num_ciphers); | 165 CiphersCompact(ciphers.get(), num_ciphers); |
| 166 | 166 |
| 167 const uint16_t* preference_ciphers = chacha_ciphers; | 167 const uint16_t* preference_ciphers = chacha_ciphers; |
| 168 const uint16_t* other_ciphers = aes_gcm_ciphers; | 168 const uint16_t* other_ciphers = aes_gcm_ciphers; |
| 169 base::CPU cpu; | 169 base::CPU cpu; |
| 170 | 170 |
| (...skipping 202 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 373 LOG(WARNING) << "Unknown error " << err << " (" << err_name << ")" | 373 LOG(WARNING) << "Unknown error " << err << " (" << err_name << ")" |
| 374 << " mapped to net::ERR_FAILED"; | 374 << " mapped to net::ERR_FAILED"; |
| 375 return ERR_FAILED; | 375 return ERR_FAILED; |
| 376 } | 376 } |
| 377 } | 377 } |
| 378 } | 378 } |
| 379 | 379 |
| 380 // Returns parameters to attach to the NetLog when we receive an error in | 380 // Returns parameters to attach to the NetLog when we receive an error in |
| 381 // response to a call to an NSS function. Used instead of | 381 // response to a call to an NSS function. Used instead of |
| 382 // NetLogSSLErrorCallback with events of type TYPE_SSL_NSS_ERROR. | 382 // NetLogSSLErrorCallback with events of type TYPE_SSL_NSS_ERROR. |
| 383 scoped_ptr<base::Value> NetLogSSLFailedNSSFunctionCallback( | 383 std::unique_ptr<base::Value> NetLogSSLFailedNSSFunctionCallback( |
| 384 const char* function, | 384 const char* function, |
| 385 const char* param, | 385 const char* param, |
| 386 int ssl_lib_error, | 386 int ssl_lib_error, |
| 387 NetLogCaptureMode /* capture_mode */) { | 387 NetLogCaptureMode /* capture_mode */) { |
| 388 scoped_ptr<base::DictionaryValue> dict(new base::DictionaryValue()); | 388 std::unique_ptr<base::DictionaryValue> dict(new base::DictionaryValue()); |
| 389 dict->SetString("function", function); | 389 dict->SetString("function", function); |
| 390 if (param[0] != '\0') | 390 if (param[0] != '\0') |
| 391 dict->SetString("param", param); | 391 dict->SetString("param", param); |
| 392 dict->SetInteger("ssl_lib_error", ssl_lib_error); | 392 dict->SetInteger("ssl_lib_error", ssl_lib_error); |
| 393 return std::move(dict); | 393 return std::move(dict); |
| 394 } | 394 } |
| 395 | 395 |
| 396 void LogFailedNSSFunction(const BoundNetLog& net_log, | 396 void LogFailedNSSFunction(const BoundNetLog& net_log, |
| 397 const char* function, | 397 const char* function, |
| 398 const char* param) { | 398 const char* param) { |
| 399 DCHECK(function); | 399 DCHECK(function); |
| 400 DCHECK(param); | 400 DCHECK(param); |
| 401 net_log.AddEvent( | 401 net_log.AddEvent( |
| 402 NetLog::TYPE_SSL_NSS_ERROR, | 402 NetLog::TYPE_SSL_NSS_ERROR, |
| 403 base::Bind(&NetLogSSLFailedNSSFunctionCallback, | 403 base::Bind(&NetLogSSLFailedNSSFunctionCallback, |
| 404 function, param, PR_GetError())); | 404 function, param, PR_GetError())); |
| 405 } | 405 } |
| 406 | 406 |
| 407 NetLog::ParametersCallback CreateNetLogSSLErrorCallback(int net_error, | 407 NetLog::ParametersCallback CreateNetLogSSLErrorCallback(int net_error, |
| 408 int ssl_lib_error) { | 408 int ssl_lib_error) { |
| 409 return base::Bind(&NetLogSSLErrorCallback, net_error, ssl_lib_error); | 409 return base::Bind(&NetLogSSLErrorCallback, net_error, ssl_lib_error); |
| 410 } | 410 } |
| 411 | 411 |
| 412 } // namespace net | 412 } // namespace net |
| OLD | NEW |