Extension API enterprise.platformKeys.

net/cert/cert_database_nss.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_database.h"
 
 #include <cert.h>
 #include <pk11pub.h>
 #include <secmod.h>
 
@@ skipping 36 matching lines @@
 };
 
 CertDatabase::CertDatabase()
     : observer_list_(new ObserverListThreadSafe<Observer>),
       notifier_(new Notifier(this)) {
   crypto::EnsureNSSInit();
 }
 
 CertDatabase::~CertDatabase() {}
 
-int CertDatabase::CheckUserCert(X509Certificate* cert_obj) {
+Error CertDatabase::CheckUserCert(X509Certificate* cert_obj) {
   if (!cert_obj)
     return ERR_CERT_INVALID;
   if (cert_obj->HasExpired())
     return ERR_CERT_DATE_INVALID;
 
   // Check if the private key corresponding to the certificate exist
   // We shouldn't accept any random client certificate sent by a CA.
 
   // Note: The NSS source documentation wrongly suggests that this
   // also imports the certificate if the private key exists. This
   // doesn't seem to be the case.
 
   CERTCertificate* cert = cert_obj->os_cert_handle();
   PK11SlotInfo* slot = PK11_KeyForCertExists(cert, NULL, NULL);
   if (!slot)
     return ERR_NO_PRIVATE_KEY_FOR_CERT;
 
   PK11_FreeSlot(slot);
 
   return OK;
 }
 
-int CertDatabase::AddUserCert(X509Certificate* cert_obj) {
+Error CertDatabase::AddUserCert(X509Certificate* cert_obj) {
   CERTCertificate* cert = cert_obj->os_cert_handle();
   CK_OBJECT_HANDLE key;
   crypto::ScopedPK11Slot slot(PK11_KeyForCertExists(cert, &key, NULL));
   if (!slot.get())
     return ERR_NO_PRIVATE_KEY_FOR_CERT;
 
   std::string nickname = x509_util::GetUniqueNicknameForSlot(
       cert_obj->GetDefaultNickname(USER_CERT),
       &cert->derSubject,
       slot.get());
@@ skipping 11 matching lines @@
 
   NotifyObserversOfCertAdded(cert_obj);
   return OK;
 }
 
 void CertDatabase::ObserveNSSCertDatabase(NSSCertDatabase* source) {
   source->AddObserver(this->notifier_.get());
 }
 
 }  // namespace net