OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ | 5 #ifndef CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ |
6 #define CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ | 6 #define CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ |
7 | 7 |
| 8 #include <set> |
8 #include <vector> | 9 #include <vector> |
9 | 10 |
10 #include "base/basictypes.h" | 11 #include "base/basictypes.h" |
11 #include "base/compiler_specific.h" | 12 #include "base/compiler_specific.h" |
12 #include "base/memory/ref_counted.h" | 13 #include "base/memory/ref_counted.h" |
13 #include "base/memory/scoped_ptr.h" | 14 #include "base/memory/scoped_ptr.h" |
14 #include "chrome/browser/chromeos/policy/network_configuration_updater.h" | 15 #include "chrome/browser/chromeos/policy/network_configuration_updater.h" |
15 | 16 |
16 namespace chromeos { | 17 namespace chromeos { |
17 class User; | 18 class User; |
(...skipping 22 matching lines...) Expand all Loading... |
40 // each policy change. Imported certificates, that request it, are only | 41 // each policy change. Imported certificates, that request it, are only |
41 // granted Web trust if |allow_trusted_certs_from_policy| is true. A reference | 42 // granted Web trust if |allow_trusted_certs_from_policy| is true. A reference |
42 // to |user| is stored. It must outlive the returned updater. | 43 // to |user| is stored. It must outlive the returned updater. |
43 static scoped_ptr<UserNetworkConfigurationUpdater> CreateForUserPolicy( | 44 static scoped_ptr<UserNetworkConfigurationUpdater> CreateForUserPolicy( |
44 bool allow_trusted_certs_from_policy, | 45 bool allow_trusted_certs_from_policy, |
45 const chromeos::User& user, | 46 const chromeos::User& user, |
46 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, | 47 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, |
47 PolicyService* policy_service, | 48 PolicyService* policy_service, |
48 chromeos::ManagedNetworkConfigurationHandler* network_config_handler); | 49 chromeos::ManagedNetworkConfigurationHandler* network_config_handler); |
49 | 50 |
50 // Sets the CertVerifier on which the current list of Web trusted server and | 51 // Adds a CertVerifier on which the current list of Web trusted server and |
51 // CA certificates will be set. Policy updates will trigger further calls to | 52 // CA certificates will be set. Policy updates will trigger further calls to |
52 // |cert_verifier| later. |cert_verifier| must be valid until | 53 // |cert_verifier| later. |cert_verifier| must be valid until it's removed |
53 // SetPolicyCertVerifier is called again (with another CertVerifier or NULL) | 54 // with RemovePolicyCertVerifier. Calls to |cert_verifier| will happen on the |
54 // or until this Updater is destructed. |cert_verifier|'s methods are only | 55 // IO thread. This function must be called on the UI thread. |
55 // called on the IO thread. This function must be called on the UI thread. | 56 void AddPolicyCertVerifier(PolicyCertVerifier* cert_verifier); |
56 void SetPolicyCertVerifier(PolicyCertVerifier* cert_verifier); | 57 |
| 58 // Removes |cert_verifier| from further notifications. |
| 59 void RemovePolicyCertVerifier(PolicyCertVerifier* cert_verifier); |
57 | 60 |
58 // Sets |certs| to the list of Web trusted server and CA certificates from the | 61 // Sets |certs| to the list of Web trusted server and CA certificates from the |
59 // last received policy. | 62 // last received policy. |
60 void GetWebTrustedCertificates(net::CertificateList* certs) const; | 63 void GetWebTrustedCertificates(net::CertificateList* certs) const; |
61 | 64 |
62 private: | 65 private: |
63 class CrosTrustAnchorProvider; | 66 class CrosTrustAnchorProvider; |
64 | 67 |
65 UserNetworkConfigurationUpdater( | 68 UserNetworkConfigurationUpdater( |
66 bool allow_trusted_certs_from_policy, | 69 bool allow_trusted_certs_from_policy, |
67 const chromeos::User& user, | 70 const chromeos::User& user, |
68 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, | 71 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, |
69 PolicyService* policy_service, | 72 PolicyService* policy_service, |
70 chromeos::ManagedNetworkConfigurationHandler* network_config_handler); | 73 chromeos::ManagedNetworkConfigurationHandler* network_config_handler); |
71 | 74 |
72 virtual void ImportCertificates( | 75 virtual void ImportCertificates( |
73 const base::ListValue& certificates_onc) OVERRIDE; | 76 const base::ListValue& certificates_onc) OVERRIDE; |
74 | 77 |
75 virtual void ApplyNetworkPolicy( | 78 virtual void ApplyNetworkPolicy( |
76 base::ListValue* network_configs_onc, | 79 base::ListValue* network_configs_onc, |
77 base::DictionaryValue* global_network_config) OVERRIDE; | 80 base::DictionaryValue* global_network_config) OVERRIDE; |
78 | 81 |
79 // Push |web_trust_certs_| to |cert_verifier_| if necessary. | 82 // Push |web_trust_certs_| to |cert_verifiers_| if necessary. |
80 void SetTrustAnchors(); | 83 void SetTrustAnchors(); |
81 | 84 |
82 // Whether Web trust is allowed or not. Only relevant for user policies. | 85 // Whether Web trust is allowed or not. Only relevant for user policies. |
83 bool allow_trusted_certificates_from_policy_; | 86 bool allow_trusted_certificates_from_policy_; |
84 | 87 |
85 // The user for whom the user policy will be applied. Is NULL if this Updater | 88 // The user for whom the user policy will be applied. Is NULL if this Updater |
86 // is used for device policy. | 89 // is used for device policy. |
87 const chromeos::User* user_; | 90 const chromeos::User* user_; |
88 | 91 |
89 // Calls to this object are only allowed on the IO Thread. | 92 // Calls to these objects are only allowed on the IO Thread. |
90 PolicyCertVerifier* cert_verifier_; | 93 std::set<PolicyCertVerifier*> cert_verifiers_; |
91 | 94 |
92 // Contains the certificates of the last import that requested web trust. Must | 95 // Contains the certificates of the last import that requested web trust. Must |
93 // be empty if Web trust from policy is not allowed. | 96 // be empty if Web trust from policy is not allowed. |
94 net::CertificateList web_trust_certs_; | 97 net::CertificateList web_trust_certs_; |
95 | 98 |
96 DISALLOW_COPY_AND_ASSIGN(UserNetworkConfigurationUpdater); | 99 DISALLOW_COPY_AND_ASSIGN(UserNetworkConfigurationUpdater); |
97 }; | 100 }; |
98 | 101 |
99 } // namespace policy | 102 } // namespace policy |
100 | 103 |
101 #endif // CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ | 104 #endif // CHROME_BROWSER_CHROMEOS_POLICY_USER_NETWORK_CONFIGURATION_UPDATER_H_ |
OLD | NEW |