OLD | NEW |
1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 #include "chrome/browser/safe_browsing/certificate_reporting_service.h" |
4 | 5 |
5 #include "base/bind_helpers.h" | 6 #include "base/bind_helpers.h" |
| 7 #include "base/metrics/histogram_macros.h" |
| 8 #include "base/metrics/sparse_histogram.h" |
6 #include "base/time/clock.h" | 9 #include "base/time/clock.h" |
7 #include "base/time/default_clock.h" | 10 #include "chrome/browser/browser_process.h" |
8 #include "chrome/browser/safe_browsing/certificate_reporting_service.h" | 11 #include "chrome/browser/profiles/profile.h" |
| 12 #include "chrome/browser/safe_browsing/safe_browsing_service.h" |
| 13 #include "components/prefs/pref_service.h" |
| 14 #include "components/safe_browsing_db/safe_browsing_prefs.h" |
9 #include "content/public/browser/browser_thread.h" | 15 #include "content/public/browser/browser_thread.h" |
10 | 16 |
11 namespace { | 17 namespace { |
12 | 18 |
13 // URL to upload invalid certificate chain reports. An HTTP URL is used because | 19 // URL to upload invalid certificate chain reports. An HTTP URL is used because |
14 // a client seeing an invalid cert might not be able to make an HTTPS connection | 20 // a client seeing an invalid cert might not be able to make an HTTPS connection |
15 // to report it. | 21 // to report it. |
16 const char kExtendedReportingUploadUrl[] = | 22 const char kExtendedReportingUploadUrl[] = |
17 "http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/"; | 23 "http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/"; |
18 | 24 |
19 // Compare function that orders Reports in reverse chronological order (i.e. | 25 // Compare function that orders Reports in reverse chronological order (i.e. |
20 // oldest item is last). | 26 // oldest item is last). |
21 bool ReportCompareFunc(const CertificateReportingService::Report& item1, | 27 bool ReportCompareFunc(const CertificateReportingService::Report& item1, |
22 const CertificateReportingService::Report& item2) { | 28 const CertificateReportingService::Report& item2) { |
23 return item1.creation_time > item2.creation_time; | 29 return item1.creation_time > item2.creation_time; |
24 } | 30 } |
25 | 31 |
| 32 // Records an UMA histogram of the net errors when certificate reports |
| 33 // fail to send. |
| 34 void RecordUMAOnFailure(int net_error) { |
| 35 UMA_HISTOGRAM_SPARSE_SLOWLY("SSL.CertificateErrorReportFailure", -net_error); |
| 36 } |
| 37 |
26 } // namespace | 38 } // namespace |
27 | 39 |
28 CertificateReportingService::BoundedReportList::BoundedReportList( | 40 CertificateReportingService::BoundedReportList::BoundedReportList( |
29 size_t max_size) | 41 size_t max_size) |
30 : max_size_(max_size) { | 42 : max_size_(max_size) { |
31 CHECK(max_size <= 20) | 43 CHECK(max_size <= 20) |
32 << "Current implementation is not efficient for a large list."; | 44 << "Current implementation is not efficient for a large list."; |
33 DCHECK(thread_checker_.CalledOnValidThread()); | 45 DCHECK(thread_checker_.CalledOnValidThread()); |
34 } | 46 } |
35 | 47 |
(...skipping 85 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
121 base::Bind(&CertificateReportingService::Reporter::SuccessCallback, | 133 base::Bind(&CertificateReportingService::Reporter::SuccessCallback, |
122 weak_factory_.GetWeakPtr(), report.report_id), | 134 weak_factory_.GetWeakPtr(), report.report_id), |
123 base::Bind(&CertificateReportingService::Reporter::ErrorCallback, | 135 base::Bind(&CertificateReportingService::Reporter::ErrorCallback, |
124 weak_factory_.GetWeakPtr(), report.report_id)); | 136 weak_factory_.GetWeakPtr(), report.report_id)); |
125 } | 137 } |
126 | 138 |
127 void CertificateReportingService::Reporter::ErrorCallback(int report_id, | 139 void CertificateReportingService::Reporter::ErrorCallback(int report_id, |
128 const GURL& url, | 140 const GURL& url, |
129 int error) { | 141 int error) { |
130 DCHECK_CURRENTLY_ON(content::BrowserThread::IO); | 142 DCHECK_CURRENTLY_ON(content::BrowserThread::IO); |
| 143 RecordUMAOnFailure(error); |
131 if (retries_enabled_) { | 144 if (retries_enabled_) { |
132 auto it = inflight_reports_.find(report_id); | 145 auto it = inflight_reports_.find(report_id); |
133 DCHECK(it != inflight_reports_.end()); | 146 DCHECK(it != inflight_reports_.end()); |
134 retry_list_->Add(it->second); | 147 retry_list_->Add(it->second); |
135 } | 148 } |
136 CHECK_GT(inflight_reports_.erase(report_id), 0u); | 149 CHECK_GT(inflight_reports_.erase(report_id), 0u); |
137 } | 150 } |
138 | 151 |
139 void CertificateReportingService::Reporter::SuccessCallback(int report_id) { | 152 void CertificateReportingService::Reporter::SuccessCallback(int report_id) { |
140 DCHECK_CURRENTLY_ON(content::BrowserThread::IO); | 153 DCHECK_CURRENTLY_ON(content::BrowserThread::IO); |
141 CHECK_GT(inflight_reports_.erase(report_id), 0u); | 154 CHECK_GT(inflight_reports_.erase(report_id), 0u); |
142 } | 155 } |
143 | 156 |
144 CertificateReportingService::CertificateReportingService( | 157 CertificateReportingService::CertificateReportingService( |
| 158 safe_browsing::SafeBrowsingService* safe_browsing_service, |
145 scoped_refptr<net::URLRequestContextGetter> url_request_context_getter, | 159 scoped_refptr<net::URLRequestContextGetter> url_request_context_getter, |
| 160 Profile* profile, |
146 uint8_t server_public_key[/* 32 */], | 161 uint8_t server_public_key[/* 32 */], |
147 uint32_t server_public_key_version, | 162 uint32_t server_public_key_version, |
148 size_t max_queued_report_count, | 163 size_t max_queued_report_count, |
149 base::TimeDelta max_report_age, | 164 base::TimeDelta max_report_age, |
150 std::unique_ptr<base::Clock> clock) | 165 base::Clock* clock) |
151 : enabled_(true), | 166 : pref_service_(*profile->GetPrefs()), |
| 167 enabled_(true), |
152 url_request_context_(nullptr), | 168 url_request_context_(nullptr), |
153 max_queued_report_count_(max_queued_report_count), | 169 max_queued_report_count_(max_queued_report_count), |
154 max_report_age_(max_report_age), | 170 max_report_age_(max_report_age), |
155 clock_(std::move(clock)), | 171 clock_(clock), |
156 made_send_attempt_(false), | |
157 server_public_key_(server_public_key), | 172 server_public_key_(server_public_key), |
158 server_public_key_version_(server_public_key_version) { | 173 server_public_key_version_(server_public_key_version) { |
159 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); | 174 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); |
| 175 DCHECK(clock_); |
| 176 // Subscribe to SafeBrowsing shutdown notifications. |
| 177 safe_browsing_service_shutdown_subscription_ = |
| 178 safe_browsing_service->RegisterShutdownCallback(base::Bind( |
| 179 &CertificateReportingService::Shutdown, base::Unretained(this))); |
| 180 |
| 181 // Subscribe to SafeBrowsing preference change notifications. |
| 182 safe_browsing_state_subscription_ = |
| 183 safe_browsing_service->RegisterStateCallback( |
| 184 base::Bind(&CertificateReportingService::OnPreferenceChanged, |
| 185 base::Unretained(this))); |
| 186 |
160 content::BrowserThread::PostTask( | 187 content::BrowserThread::PostTask( |
161 content::BrowserThread::IO, FROM_HERE, | 188 content::BrowserThread::IO, FROM_HERE, |
162 base::Bind(&CertificateReportingService::InitializeOnIOThread, | 189 base::Bind(&CertificateReportingService::InitializeOnIOThread, |
163 base::Unretained(this), enabled_, url_request_context_getter, | 190 base::Unretained(this), enabled_, url_request_context_getter, |
164 max_queued_report_count_, max_report_age_, clock_.get(), | 191 max_queued_report_count_, max_report_age_, clock_, |
165 server_public_key_, server_public_key_version_)); | 192 server_public_key_, server_public_key_version_)); |
166 } | 193 } |
167 | 194 |
168 CertificateReportingService::~CertificateReportingService() { | 195 CertificateReportingService::~CertificateReportingService() { |
169 DCHECK(!reporter_); | 196 DCHECK(!reporter_); |
170 } | 197 } |
171 | 198 |
172 void CertificateReportingService::Shutdown() { | 199 void CertificateReportingService::Shutdown() { |
173 // Shutdown will be called twice: Once after SafeBrowsing shuts down, and once | 200 // Shutdown will be called twice: Once after SafeBrowsing shuts down, and once |
174 // when all KeyedServices shut down. All calls after the first one are no-op. | 201 // when all KeyedServices shut down. All calls after the first one are no-op. |
175 enabled_ = false; | 202 enabled_ = false; |
176 Reset(); | 203 Reset(); |
177 } | 204 } |
178 | 205 |
179 void CertificateReportingService::Send(const std::string& serialized_report) { | 206 void CertificateReportingService::Send(const std::string& serialized_report) { |
180 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); | 207 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); |
181 made_send_attempt_ = true; | |
182 if (!reporter_) { | 208 if (!reporter_) { |
183 return; | 209 return; |
184 } | 210 } |
185 content::BrowserThread::PostTask( | 211 content::BrowserThread::PostTask( |
186 content::BrowserThread::IO, FROM_HERE, | 212 content::BrowserThread::IO, FROM_HERE, |
187 base::Bind(&CertificateReportingService::Reporter::Send, | 213 base::Bind(&CertificateReportingService::Reporter::Send, |
188 base::Unretained(reporter_.get()), serialized_report)); | 214 base::Unretained(reporter_.get()), serialized_report)); |
189 } | 215 } |
190 | 216 |
191 void CertificateReportingService::SendPending() { | 217 void CertificateReportingService::SendPending() { |
192 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); | 218 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); |
193 made_send_attempt_ = true; | |
194 if (!reporter_) { | 219 if (!reporter_) { |
195 return; | 220 return; |
196 } | 221 } |
197 content::BrowserThread::PostTask( | 222 content::BrowserThread::PostTask( |
198 content::BrowserThread::IO, FROM_HERE, | 223 content::BrowserThread::IO, FROM_HERE, |
199 base::Bind(&CertificateReportingService::Reporter::SendPending, | 224 base::Bind(&CertificateReportingService::Reporter::SendPending, |
200 base::Unretained(reporter_.get()))); | 225 base::Unretained(reporter_.get()))); |
201 } | 226 } |
202 | 227 |
203 void CertificateReportingService::InitializeOnIOThread( | 228 void CertificateReportingService::InitializeOnIOThread( |
(...skipping 16 matching lines...) Expand all Loading... |
220 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); | 245 DCHECK_CURRENTLY_ON(content::BrowserThread::UI); |
221 enabled_ = enabled; | 246 enabled_ = enabled; |
222 Reset(); | 247 Reset(); |
223 } | 248 } |
224 | 249 |
225 CertificateReportingService::Reporter* | 250 CertificateReportingService::Reporter* |
226 CertificateReportingService::GetReporterForTesting() const { | 251 CertificateReportingService::GetReporterForTesting() const { |
227 return reporter_.get(); | 252 return reporter_.get(); |
228 } | 253 } |
229 | 254 |
230 void CertificateReportingService::SetMaxQueuedReportCountForTesting( | |
231 size_t count) { | |
232 DCHECK(!made_send_attempt_); | |
233 max_queued_report_count_ = count; | |
234 Reset(); | |
235 } | |
236 | |
237 void CertificateReportingService::SetClockForTesting( | |
238 std::unique_ptr<base::Clock> clock) { | |
239 DCHECK(!made_send_attempt_); | |
240 clock_ = std::move(clock); | |
241 Reset(); | |
242 } | |
243 | |
244 void CertificateReportingService::SetMaxReportAgeForTesting( | |
245 base::TimeDelta max_report_age) { | |
246 DCHECK(!made_send_attempt_); | |
247 max_report_age_ = max_report_age; | |
248 Reset(); | |
249 } | |
250 | |
251 // static | 255 // static |
252 GURL CertificateReportingService::GetReportingURLForTesting() { | 256 GURL CertificateReportingService::GetReportingURLForTesting() { |
253 return GURL(kExtendedReportingUploadUrl); | 257 return GURL(kExtendedReportingUploadUrl); |
254 } | 258 } |
255 | 259 |
256 void CertificateReportingService::Reset() { | 260 void CertificateReportingService::Reset() { |
257 content::BrowserThread::PostTask( | 261 content::BrowserThread::PostTask( |
258 content::BrowserThread::IO, FROM_HERE, | 262 content::BrowserThread::IO, FROM_HERE, |
259 base::Bind(&CertificateReportingService::ResetOnIOThread, | 263 base::Bind(&CertificateReportingService::ResetOnIOThread, |
260 base::Unretained(this), enabled_, url_request_context_, | 264 base::Unretained(this), enabled_, url_request_context_, |
261 max_queued_report_count_, max_report_age_, clock_.get(), | 265 max_queued_report_count_, max_report_age_, clock_, |
262 server_public_key_, server_public_key_version_)); | 266 server_public_key_, server_public_key_version_)); |
263 } | 267 } |
264 | 268 |
265 void CertificateReportingService::ResetOnIOThread( | 269 void CertificateReportingService::ResetOnIOThread( |
266 bool enabled, | 270 bool enabled, |
267 net::URLRequestContext* url_request_context, | 271 net::URLRequestContext* url_request_context, |
268 size_t max_queued_report_count, | 272 size_t max_queued_report_count, |
269 base::TimeDelta max_report_age, | 273 base::TimeDelta max_report_age, |
270 base::Clock* clock, | 274 base::Clock* clock, |
271 uint8_t* const server_public_key, | 275 uint8_t* const server_public_key, |
(...skipping 17 matching lines...) Expand all Loading... |
289 url_request_context, GURL(kExtendedReportingUploadUrl), | 293 url_request_context, GURL(kExtendedReportingUploadUrl), |
290 net::ReportSender::DO_NOT_SEND_COOKIES)); | 294 net::ReportSender::DO_NOT_SEND_COOKIES)); |
291 } | 295 } |
292 | 296 |
293 reporter_.reset( | 297 reporter_.reset( |
294 new Reporter(std::move(error_reporter), | 298 new Reporter(std::move(error_reporter), |
295 std::unique_ptr<BoundedReportList>( | 299 std::unique_ptr<BoundedReportList>( |
296 new BoundedReportList(max_queued_report_count)), | 300 new BoundedReportList(max_queued_report_count)), |
297 clock, max_report_age, true /* retries_enabled */)); | 301 clock, max_report_age, true /* retries_enabled */)); |
298 } | 302 } |
| 303 |
| 304 void CertificateReportingService::OnPreferenceChanged() { |
| 305 safe_browsing::SafeBrowsingService* safe_browsing_service_ = |
| 306 g_browser_process->safe_browsing_service(); |
| 307 const bool enabled = safe_browsing_service_ && |
| 308 safe_browsing_service_->enabled_by_prefs() && |
| 309 safe_browsing::IsExtendedReportingEnabled(pref_service_); |
| 310 SetEnabled(enabled); |
| 311 } |
OLD | NEW |