Show extension provided certificates in chrome://settings/certificates

chrome/browser/certificate_manager_model.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CERTIFICATE_MANAGER_MODEL_H_
 #define CHROME_BROWSER_CERTIFICATE_MANAGER_MODEL_H_
 
 #include <map>
 #include <memory>
 #include <string>
 
 #include "base/callback.h"
 #include "base/macros.h"
 #include "base/memory/ref_counted.h"
+#include "base/memory/weak_ptr.h"
 #include "base/strings/string16.h"
+#include "chrome/browser/chromeos/certificate_provider/certificate_provider.h"

[mattm, 2016/09/09 01:34:05]

can you forward declare CertificateProvider and move this include to the .cc?

[Ivan Šandrk, 2016/09/09 10:17:53]

Done.

 #include "net/cert/nss_cert_database.h"
 
 namespace content {
 class BrowserContext;
 class ResourceContext;
 }  // namespace content
 
 // CertificateManagerModel provides the data to be displayed in the certificate
 // manager dialog, and processes changes from the view.
 class CertificateManagerModel {
@@ skipping 96 matching lines @@
                     net::NSSCertDatabase::TrustBits trust_bits);
 
   // Delete the cert.  Returns true on success.  |cert| is still valid when this
   // function returns.
   bool Delete(net::X509Certificate* cert);
 
   // IsHardwareBacked returns true if |cert| is hardware backed.
   bool IsHardwareBacked(const net::X509Certificate* cert) const;
 
  private:
-  CertificateManagerModel(net::NSSCertDatabase* nss_cert_database,
-                          bool is_user_db_available,
-                          bool is_tpm_available,
-                          Observer* observer);
+  CertificateManagerModel(
+      net::NSSCertDatabase* nss_cert_database,
+      bool is_user_db_available,
+      bool is_tpm_available,
+      Observer* observer,
+      std::unique_ptr<chromeos::CertificateProvider> certificate_provider);
 
   // Methods used during initialization, see the comment at the top of the .cc
   // file for details.
   static void DidGetCertDBOnUIThread(
       net::NSSCertDatabase* cert_db,
       bool is_user_db_available,
       bool is_tpm_available,
       CertificateManagerModel::Observer* observer,
+      std::unique_ptr<chromeos::CertificateProvider> certificate_provider,
       const CreationCallback& callback);
   static void DidGetCertDBOnIOThread(
       CertificateManagerModel::Observer* observer,
+      std::unique_ptr<chromeos::CertificateProvider> certificate_provider,
       const CreationCallback& callback,
       net::NSSCertDatabase* cert_db);
-  static void GetCertDBOnIOThread(content::ResourceContext* context,
-                                  CertificateManagerModel::Observer* observer,
-                                  const CreationCallback& callback);
+  static void GetCertDBOnIOThread(
+      content::ResourceContext* context,
+      CertificateManagerModel::Observer* observer,
+      std::unique_ptr<chromeos::CertificateProvider> certificate_provider,
+      const CreationCallback& callback);
 
   // Callback used by Refresh() for when the cert slots have been unlocked.
   // This method does the actual refreshing.
   void RefreshSlotsUnlocked();
 
+  // Callback used to refresh extension provided certificates. Refreshes UI.
+  void RefreshExtensionCertificates(const net::CertificateList& new_certs);
+
   net::NSSCertDatabase* cert_db_;
   net::CertificateList cert_list_;
+  net::CertificateList extension_cert_list_;
   // Whether the certificate database has a public slot associated with the
   // profile. If not set, importing certificates is not allowed with this model.
   bool is_user_db_available_;
   bool is_tpm_available_;
 
   // The observer to notify when certificate list is refreshed.
   Observer* observer_;
 
+  // Certificate provider used to fetch extension provided certificates.
+  std::unique_ptr<chromeos::CertificateProvider> certificate_provider_;

[mattm, 2016/09/09 01:34:04]

I'd suggest %s/certificate_provider/extension_certificate_provider/

[Ivan Šandrk, 2016/09/09 10:17:53]

Good suggestion, I agree.

+
+  base::WeakPtrFactory<CertificateManagerModel> weak_ptr_factory_;
+
   DISALLOW_COPY_AND_ASSIGN(CertificateManagerModel);
 };
 
 #endif  // CHROME_BROWSER_CERTIFICATE_MANAGER_MODEL_H_