Device enterprise registration with a certificate.

chromeos/attestation/attestation_flow.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROMEOS_ATTESTATION_ATTESTATION_FLOW_H_
 #define CHROMEOS_ATTESTATION_ATTESTATION_FLOW_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 39 matching lines @@
 //                         DBusThreadManager::Get().GetCryptohomeClient(),
 //                         std::move(my_server_proxy));
 //    AttestationFlow::CertificateCallback callback = base::Bind(&MyCallback);
 //    flow.GetCertificate(ENTERPRISE_USER_CERTIFICATE, false, callback);
 class CHROMEOS_EXPORT AttestationFlow {
  public:
   typedef base::Callback<void(bool success,
                               const std::string& pem_certificate_chain)>
       CertificateCallback;
 
+  // Returns the attestation key type for a given |certificate_profile|.
+  //
+  // Parameters
+  //   certificate_profile - Specifies what kind of certificate the key is for.

[pastarmovj, 2016/08/23 08:46:02]

nit: s/certificate_profile/profile/...or rename the argument.

[The one and only Dr. Crash, 2016/08/23 15:05:10]

Done.

+  static AttestationKeyType GetKeyTypeForProfile(
+      AttestationCertificateProfile profile);
+  // Returns the name of the key for a given certificate profile. The

[pastarmovj, 2016/08/23 08:46:02]

Add a new line before this one.

[The one and only Dr. Crash, 2016/08/23 15:05:10]

Done.

+  // |request_origin| parameter is for PROFILE_CONTENT_PROTECTION_CERTIFICATE
+  // profiles and is ignored for other profiles.
+  //
+  // Parameters
+  //   certificate_profile - Specifies what kind of certificate the key is for.
+  //   request_origin - For content protection profiles, certificate requests
+  //                    are origin-specific.  This string must uniquely identify
+  //                    the origin of the request.
+  static std::string GetKeyNameForProfile(
+      AttestationCertificateProfile certificate_profile,
+      const std::string& request_origin);
+
   AttestationFlow(cryptohome::AsyncMethodCaller* async_caller,
                   CryptohomeClient* cryptohome_client,
                   std::unique_ptr<ServerProxy> server_proxy);
   virtual ~AttestationFlow();
 
   // Gets an attestation certificate for a hardware-protected key.  If a key for
   // the given profile does not exist, it will be generated and a certificate
   // request will be made to the Chrome OS Privacy CA to issue a certificate for
   // the key.  If the key already exists and |force_new_key| is false, the
   // existing certificate is returned.
@@ skipping 139 matching lines @@
 
   base::WeakPtrFactory<AttestationFlow> weak_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(AttestationFlow);
 };
 
 }  // namespace attestation
 }  // namespace chromeos
 
 #endif  // CHROMEOS_ATTESTATION_ATTESTATION_FLOW_H_