Extension API enterprise.platformKeys.

net/cert/nss_cert_database.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/nss_cert_database.h"
 
 #include <cert.h>
 #include <certdb.h>
 #include <keyhi.h>
 #include <pk11pub.h>
@@ skipping 64 matching lines @@
 NSSCertDatabase::~NSSCertDatabase() {}
 
 void NSSCertDatabase::ListCertsSync(CertificateList* certs) {
   ListCertsImpl(certs);
 }
 
 void NSSCertDatabase::ListCerts(
     const base::Callback<void(scoped_ptr<CertificateList> certs)>& callback) {
   scoped_ptr<CertificateList> certs(new CertificateList());
 
-  // base::Pased will NULL out |certs|, so cache the underlying pointer here.
+  // base::Passed will NULL out |certs|, so cache the underlying pointer here.
   CertificateList* raw_certs = certs.get();
   GetSlowTaskRunner()->PostTaskAndReply(
       FROM_HERE,
       base::Bind(&NSSCertDatabase::ListCertsImpl,
                  base::Unretained(raw_certs)),
       base::Bind(callback, base::Passed(&certs)));
 }
 
+void NSSCertDatabase::ListCertsInSlot(const ListCertsCallback& callback,
+                                      PK11SlotInfo* slot) {
+  DCHECK(slot);
+  scoped_ptr<CertificateList> certs(new CertificateList());
+
+  // base::Passed will NULL out |certs|, so cache the underlying pointer here.
+  CertificateList* raw_certs = certs.get();
+  scoped_refptr<base::TaskRunner> task_runner = GetSlowTaskRunner();
+  // PostTaskAndReply doesn't work if called from a TaskRunner without message
+  // loop, e.g. from a worker thread.
+  if (task_runner->RunsTasksOnCurrentThread()) {
+    ListCertsInSlotImpl(crypto::ScopedPK11Slot(PK11_ReferenceSlot(slot)),
+                        certs.get());
+    task_runner->PostTask(FROM_HERE,
+                          base::Bind(callback, base::Passed(&certs)));
+  } else {
+    task_runner->PostTaskAndReply(
+        FROM_HERE,
+        base::Bind(
+            &NSSCertDatabase::ListCertsInSlotImpl,
+            base::Passed(crypto::ScopedPK11Slot(PK11_ReferenceSlot(slot))),
+            base::Unretained(raw_certs)),
+        base::Bind(callback, base::Passed(&certs)));
+  }
+}
+
 crypto::ScopedPK11Slot NSSCertDatabase::GetPublicSlot() const {
   return crypto::ScopedPK11Slot(crypto::GetPublicNSSKeySlot());
 }
 
 crypto::ScopedPK11Slot NSSCertDatabase::GetPrivateSlot() const {
   return crypto::ScopedPK11Slot(crypto::GetPrivateNSSKeySlot());
 }
 
 CryptoModule* NSSCertDatabase::GetPublicModule() const {
   crypto::ScopedPK11Slot slot(GetPublicSlot());
@@ skipping 251 matching lines @@
 void NSSCertDatabase::RemoveObserver(Observer* observer) {
   observer_list_->RemoveObserver(observer);
 }
 
 void NSSCertDatabase::SetSlowTaskRunnerForTest(
     const scoped_refptr<base::TaskRunner>& task_runner) {
   slow_task_runner_for_test_ = task_runner;
 }
 
 // static
+void NSSCertDatabase::ListCertsInSlotImpl(crypto::ScopedPK11Slot slot,
+                                          CertificateList* certs) {
+  DCHECK(slot);
+  CERTCertList* cert_list = PK11_ListCertsInSlot(slot.get());
+  CERTCertListNode* node;
+  for (node = CERT_LIST_HEAD(cert_list); !CERT_LIST_END(node, cert_list);
+       node = CERT_LIST_NEXT(node)) {
+    certs->push_back(X509Certificate::CreateFromHandle(
+        node->cert, X509Certificate::OSCertHandles()));
+  }
+  CERT_DestroyCertList(cert_list);
+}
+
+// static
 void NSSCertDatabase::ListCertsImpl(CertificateList* certs) {
   certs->clear();
 
   CERTCertList* cert_list = PK11_ListCerts(PK11CertListUnique, NULL);
   CERTCertListNode* node;
   for (node = CERT_LIST_HEAD(cert_list);
        !CERT_LIST_END(node, cert_list);
        node = CERT_LIST_NEXT(node)) {
     certs->push_back(X509Certificate::CreateFromHandle(
         node->cert, X509Certificate::OSCertHandles()));
@@ skipping 16 matching lines @@
   observer_list_->Notify(&Observer::OnCertRemoved, make_scoped_refptr(cert));
 }
 
 void NSSCertDatabase::NotifyObserversOfCACertChanged(
     const X509Certificate* cert) {
   observer_list_->Notify(
       &Observer::OnCACertChanged, make_scoped_refptr(cert));
 }
 
 }  // namespace net