OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/policy/user_network_configuration_updater.h" | 5 #include "chrome/browser/chromeos/policy/user_network_configuration_updater.h" |
6 | 6 |
7 #include "base/bind.h" | 7 #include "base/bind.h" |
8 #include "base/bind_helpers.h" | 8 #include "base/bind_helpers.h" |
9 #include "base/logging.h" | 9 #include "base/logging.h" |
10 #include "chrome/browser/chromeos/login/user.h" | 10 #include "chrome/browser/chromeos/login/user.h" |
11 #include "chrome/browser/chromeos/net/onc_utils.h" | 11 #include "chrome/browser/chromeos/net/onc_utils.h" |
12 #include "chrome/browser/chromeos/policy/policy_cert_verifier.h" | |
13 #include "chromeos/network/managed_network_configuration_handler.h" | 12 #include "chromeos/network/managed_network_configuration_handler.h" |
14 #include "chromeos/network/onc/onc_certificate_importer.h" | 13 #include "chromeos/network/onc/onc_certificate_importer.h" |
15 #include "content/public/browser/browser_thread.h" | 14 #include "content/public/browser/browser_thread.h" |
16 #include "net/cert/x509_certificate.h" | 15 #include "net/cert/x509_certificate.h" |
17 #include "policy/policy_constants.h" | 16 #include "policy/policy_constants.h" |
18 | 17 |
19 namespace policy { | 18 namespace policy { |
20 | 19 |
21 UserNetworkConfigurationUpdater::~UserNetworkConfigurationUpdater() {} | 20 UserNetworkConfigurationUpdater::~UserNetworkConfigurationUpdater() {} |
22 | 21 |
23 // static | 22 // static |
24 scoped_ptr<UserNetworkConfigurationUpdater> | 23 scoped_ptr<UserNetworkConfigurationUpdater> |
25 UserNetworkConfigurationUpdater::CreateForUserPolicy( | 24 UserNetworkConfigurationUpdater::CreateForUserPolicy( |
26 bool allow_trusted_certs_from_policy, | 25 bool allow_trusted_certs_from_policy, |
27 const chromeos::User& user, | 26 const chromeos::User& user, |
28 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, | 27 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, |
29 PolicyService* policy_service, | 28 PolicyService* policy_service, |
30 chromeos::ManagedNetworkConfigurationHandler* network_config_handler) { | 29 chromeos::ManagedNetworkConfigurationHandler* network_config_handler) { |
31 scoped_ptr<UserNetworkConfigurationUpdater> updater( | 30 scoped_ptr<UserNetworkConfigurationUpdater> updater( |
32 new UserNetworkConfigurationUpdater(allow_trusted_certs_from_policy, | 31 new UserNetworkConfigurationUpdater(allow_trusted_certs_from_policy, |
33 user, | 32 user, |
34 certificate_importer.Pass(), | 33 certificate_importer.Pass(), |
35 policy_service, | 34 policy_service, |
36 network_config_handler)); | 35 network_config_handler)); |
37 updater->Init(); | 36 updater->Init(); |
38 return updater.Pass(); | 37 return updater.Pass(); |
39 } | 38 } |
40 | 39 |
| 40 void UserNetworkConfigurationUpdater::AddTrustedCertsObserver( |
| 41 WebTrustedCertsObserver* observer) { |
| 42 observer_list_.AddObserver(observer); |
| 43 } |
| 44 |
| 45 void UserNetworkConfigurationUpdater::RemoveTrustedCertsObserver( |
| 46 WebTrustedCertsObserver* observer) { |
| 47 observer_list_.RemoveObserver(observer); |
| 48 } |
| 49 |
41 UserNetworkConfigurationUpdater::UserNetworkConfigurationUpdater( | 50 UserNetworkConfigurationUpdater::UserNetworkConfigurationUpdater( |
42 bool allow_trusted_certs_from_policy, | 51 bool allow_trusted_certs_from_policy, |
43 const chromeos::User& user, | 52 const chromeos::User& user, |
44 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, | 53 scoped_ptr<chromeos::onc::CertificateImporter> certificate_importer, |
45 PolicyService* policy_service, | 54 PolicyService* policy_service, |
46 chromeos::ManagedNetworkConfigurationHandler* network_config_handler) | 55 chromeos::ManagedNetworkConfigurationHandler* network_config_handler) |
47 : NetworkConfigurationUpdater(onc::ONC_SOURCE_USER_POLICY, | 56 : NetworkConfigurationUpdater(onc::ONC_SOURCE_USER_POLICY, |
48 key::kOpenNetworkConfiguration, | 57 key::kOpenNetworkConfiguration, |
49 certificate_importer.Pass(), | 58 certificate_importer.Pass(), |
50 policy_service, | 59 policy_service, |
51 network_config_handler), | 60 network_config_handler), |
52 allow_trusted_certificates_from_policy_(allow_trusted_certs_from_policy), | 61 allow_trusted_certificates_from_policy_(allow_trusted_certs_from_policy), |
53 user_(&user), | 62 user_(&user) {} |
54 cert_verifier_(NULL) {} | |
55 | |
56 void UserNetworkConfigurationUpdater::SetPolicyCertVerifier( | |
57 PolicyCertVerifier* cert_verifier) { | |
58 cert_verifier_ = cert_verifier; | |
59 SetTrustAnchors(); | |
60 } | |
61 | 63 |
62 void UserNetworkConfigurationUpdater::GetWebTrustedCertificates( | 64 void UserNetworkConfigurationUpdater::GetWebTrustedCertificates( |
63 net::CertificateList* certs) const { | 65 net::CertificateList* certs) const { |
64 *certs = web_trust_certs_; | 66 *certs = web_trust_certs_; |
65 } | 67 } |
66 | 68 |
67 void UserNetworkConfigurationUpdater::ImportCertificates( | 69 void UserNetworkConfigurationUpdater::ImportCertificates( |
68 const base::ListValue& certificates_onc) { | 70 const base::ListValue& certificates_onc) { |
69 web_trust_certs_.clear(); | 71 web_trust_certs_.clear(); |
70 certificate_importer_->ImportCertificates( | 72 certificate_importer_->ImportCertificates( |
71 certificates_onc, | 73 certificates_onc, |
72 onc_source_, | 74 onc_source_, |
73 allow_trusted_certificates_from_policy_ ? &web_trust_certs_ : NULL); | 75 allow_trusted_certificates_from_policy_ ? &web_trust_certs_ : NULL); |
74 | 76 |
75 SetTrustAnchors(); | 77 NotifyTrustAnchorsChanged(); |
76 } | 78 } |
77 | 79 |
78 void UserNetworkConfigurationUpdater::ApplyNetworkPolicy( | 80 void UserNetworkConfigurationUpdater::ApplyNetworkPolicy( |
79 base::ListValue* network_configs_onc, | 81 base::ListValue* network_configs_onc, |
80 base::DictionaryValue* global_network_config) { | 82 base::DictionaryValue* global_network_config) { |
81 DCHECK(user_); | 83 DCHECK(user_); |
82 chromeos::onc::ExpandStringPlaceholdersInNetworksForUser(user_, | 84 chromeos::onc::ExpandStringPlaceholdersInNetworksForUser(user_, |
83 network_configs_onc); | 85 network_configs_onc); |
84 network_config_handler_->SetPolicy(onc_source_, | 86 network_config_handler_->SetPolicy(onc_source_, |
85 user_->username_hash(), | 87 user_->username_hash(), |
86 *network_configs_onc, | 88 *network_configs_onc, |
87 *global_network_config); | 89 *global_network_config); |
88 } | 90 } |
89 | 91 |
90 void UserNetworkConfigurationUpdater::SetTrustAnchors() { | 92 void UserNetworkConfigurationUpdater::NotifyTrustAnchorsChanged() { |
91 if (!cert_verifier_) | 93 FOR_EACH_OBSERVER(WebTrustedCertsObserver, |
92 return; | 94 observer_list_, |
93 content::BrowserThread::PostTask( | 95 OnTrustAnchorsChanged(web_trust_certs_)); |
94 content::BrowserThread::IO, | |
95 FROM_HERE, | |
96 base::Bind(&PolicyCertVerifier::SetTrustAnchors, | |
97 base::Unretained(cert_verifier_), | |
98 web_trust_certs_)); | |
99 } | 96 } |
100 | 97 |
101 } // namespace policy | 98 } // namespace policy |
OLD | NEW |