| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CHROMEOS_CERT_LOADER_H_ | 5 #ifndef CHROMEOS_CERT_LOADER_H_ |
| 6 #define CHROMEOS_CERT_LOADER_H_ | 6 #define CHROMEOS_CERT_LOADER_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/basictypes.h" |
| 10 #include "base/memory/ref_counted.h" | 11 #include "base/memory/ref_counted.h" |
| 11 #include "base/memory/scoped_ptr.h" | 12 #include "base/memory/scoped_ptr.h" |
| 12 #include "base/memory/weak_ptr.h" | 13 #include "base/memory/weak_ptr.h" |
| 13 #include "base/observer_list_threadsafe.h" | 14 #include "base/observer_list_threadsafe.h" |
| 14 #include "base/threading/thread_checker.h" | 15 #include "base/threading/thread_checker.h" |
| 15 #include "chromeos/chromeos_export.h" | 16 #include "chromeos/chromeos_export.h" |
| 16 #include "chromeos/dbus/dbus_method_call_status.h" | 17 #include "chromeos/dbus/dbus_method_call_status.h" |
| 17 #include "chromeos/login/login_state.h" | 18 #include "chromeos/login/login_state.h" |
| 18 #include "net/cert/cert_database.h" | 19 #include "net/cert/cert_database.h" |
| 19 #include "net/cert/x509_certificate.h" | 20 #include "net/cert/x509_certificate.h" |
| 20 | 21 |
| 21 namespace base { | 22 namespace base { |
| 22 class SequencedTaskRunner; | 23 class SequencedTaskRunner; |
| 24 class TaskRunner; |
| 23 } | 25 } |
| 24 | 26 |
| 25 namespace crypto { | 27 namespace crypto { |
| 26 class SymmetricKey; | 28 class SymmetricKey; |
| 27 } | 29 } |
| 28 | 30 |
| 29 namespace chromeos { | 31 namespace chromeos { |
| 30 | 32 |
| 31 // This class is responsible for initializing the TPM token and loading | 33 // This class is responsible for initializing the TPM token and loading |
| 32 // certificates once the TPM is initialized. It is expected to be constructed | 34 // certificates once the TPM is initialized. It is expected to be constructed |
| (...skipping 25 matching lines...) Expand all Loading... |
| 58 | 60 |
| 59 // Destroys the global instance. | 61 // Destroys the global instance. |
| 60 static void Shutdown(); | 62 static void Shutdown(); |
| 61 | 63 |
| 62 // Gets the global instance. Initialize() must be called first. | 64 // Gets the global instance. Initialize() must be called first. |
| 63 static CertLoader* Get(); | 65 static CertLoader* Get(); |
| 64 | 66 |
| 65 // Returns true if the global instance has been initialized. | 67 // Returns true if the global instance has been initialized. |
| 66 static bool IsInitialized(); | 68 static bool IsInitialized(); |
| 67 | 69 |
| 70 static std::string GetPkcs11IdForCert(const net::X509Certificate& cert); |
| 71 |
| 68 // |crypto_task_runner| is the task runner that any synchronous crypto calls | 72 // |crypto_task_runner| is the task runner that any synchronous crypto calls |
| 69 // should be made from, e.g. in Chrome this is the IO thread. Must be called | 73 // should be made from, e.g. in Chrome this is the IO thread. Must be called |
| 70 // after the thread is started. Certificate loading will not happen unless | 74 // after the thread is started. Certificate loading will not happen unless |
| 71 // this is set. | 75 // this is set. |
| 72 void SetCryptoTaskRunner( | 76 void SetCryptoTaskRunner( |
| 73 const scoped_refptr<base::SequencedTaskRunner>& crypto_task_runner); | 77 const scoped_refptr<base::SequencedTaskRunner>& crypto_task_runner); |
| 74 | 78 |
| 75 // Sets the task runner that any slow calls will be made from, e.g. calls | 79 // Sets the task runner that any slow calls will be made from, e.g. calls |
| 76 // to the NSS database. If not set, uses base::WorkerPool. | 80 // to the NSS database. If not set, uses base::WorkerPool. |
| 77 void SetSlowTaskRunnerForTest( | 81 void SetSlowTaskRunnerForTest( |
| 78 const scoped_refptr<base::SequencedTaskRunner>& task_runner); | 82 const scoped_refptr<base::TaskRunner>& task_runner); |
| 79 | 83 |
| 80 void AddObserver(CertLoader::Observer* observer); | 84 void AddObserver(CertLoader::Observer* observer); |
| 81 void RemoveObserver(CertLoader::Observer* observer); | 85 void RemoveObserver(CertLoader::Observer* observer); |
| 82 | 86 |
| 83 // Returns true when the certificate list has been requested but not loaded. | 87 // Returns true when the certificate list has been requested but not loaded. |
| 84 bool CertificatesLoading() const; | 88 bool CertificatesLoading() const; |
| 85 | 89 |
| 86 // Returns true if the TPM is available for hardware-backed certificates. | 90 // Returns true if the TPM is available for hardware-backed certificates. |
| 87 bool IsHardwareBacked() const; | 91 bool IsHardwareBacked() const; |
| 88 | 92 |
| 89 std::string GetPkcs11IdForCert(const net::X509Certificate& cert) const; | |
| 90 | |
| 91 bool certificates_loaded() const { return certificates_loaded_; } | 93 bool certificates_loaded() const { return certificates_loaded_; } |
| 92 | 94 |
| 93 // TPM info is only valid once the TPM is available (IsHardwareBacked is | 95 // TPM info is only valid once the TPM is available (IsHardwareBacked is |
| 94 // true). Otherwise empty strings will be returned. | 96 // true). Otherwise empty strings will be returned. |
| 95 const std::string& tpm_token_name() const { return tpm_token_name_; } | 97 const std::string& tpm_token_name() const { return tpm_token_name_; } |
| 96 const std::string& tpm_token_slot() const { return tpm_token_slot_; } | 98 const std::string& tpm_token_slot() const { return tpm_token_slot_; } |
| 97 const std::string& tpm_user_pin() const { return tpm_user_pin_; } | 99 const std::string& tpm_user_pin() const { return tpm_user_pin_; } |
| 98 | 100 |
| 99 // This will be empty until certificates_loaded() is true. | 101 // This will be empty until certificates_loaded() is true. |
| 100 const net::CertificateList& cert_list() const { return cert_list_; } | 102 const net::CertificateList& cert_list() const { return cert_list_; } |
| (...skipping 81 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 182 // This factory should be used only for callbacks during updating the | 184 // This factory should be used only for callbacks during updating the |
| 183 // certificate list. | 185 // certificate list. |
| 184 base::WeakPtrFactory<CertLoader> update_certificates_factory_; | 186 base::WeakPtrFactory<CertLoader> update_certificates_factory_; |
| 185 | 187 |
| 186 DISALLOW_COPY_AND_ASSIGN(CertLoader); | 188 DISALLOW_COPY_AND_ASSIGN(CertLoader); |
| 187 }; | 189 }; |
| 188 | 190 |
| 189 } // namespace chromeos | 191 } // namespace chromeos |
| 190 | 192 |
| 191 #endif // CHROMEOS_CERT_LOADER_H_ | 193 #endif // CHROMEOS_CERT_LOADER_H_ |
| OLD | NEW |