OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef NET_CERT_NSS_CERT_DATABASE_H_ | 5 #ifndef NET_CERT_NSS_CERT_DATABASE_H_ |
6 #define NET_CERT_NSS_CERT_DATABASE_H_ | 6 #define NET_CERT_NSS_CERT_DATABASE_H_ |
7 | 7 |
8 #include <stdint.h> | 8 #include <stdint.h> |
9 | 9 |
10 #include <memory> | 10 #include <memory> |
11 #include <string> | 11 #include <string> |
12 #include <vector> | 12 #include <vector> |
13 | 13 |
14 #include "base/callback_forward.h" | 14 #include "base/callback_forward.h" |
15 #include "base/macros.h" | 15 #include "base/macros.h" |
16 #include "base/memory/ref_counted.h" | 16 #include "base/memory/ref_counted.h" |
17 #include "base/memory/weak_ptr.h" | 17 #include "base/memory/weak_ptr.h" |
18 #include "base/strings/string16.h" | 18 #include "base/strings/string16.h" |
19 #include "crypto/scoped_nss_types.h" | 19 #include "crypto/scoped_nss_types.h" |
20 #include "net/base/net_errors.h" | 20 #include "net/base/net_errors.h" |
21 #include "net/base/net_export.h" | 21 #include "net/base/net_export.h" |
22 #include "net/cert/cert_type.h" | 22 #include "net/cert/cert_type.h" |
23 #include "net/cert/x509_certificate.h" | 23 #include "net/cert/x509_certificate.h" |
24 | 24 |
25 namespace base { | 25 namespace base { |
26 template <class ObserverType> | 26 template <class ObserverType> |
27 class ObserverListThreadSafe; | 27 class ObserverListThreadSafe; |
28 class TaskRunner; | |
29 } | 28 } |
30 | 29 |
31 namespace net { | 30 namespace net { |
32 | 31 |
33 class CryptoModule; | 32 class CryptoModule; |
34 typedef std::vector<scoped_refptr<CryptoModule> > CryptoModuleList; | 33 typedef std::vector<scoped_refptr<CryptoModule> > CryptoModuleList; |
35 | 34 |
36 // Provides functions to manipulate the NSS certificate stores. | 35 // Provides functions to manipulate the NSS certificate stores. |
37 // Forwards notifications about certificate changes to the global CertDatabase | 36 // Forwards notifications about certificate changes to the global CertDatabase |
38 // singleton. | 37 // singleton. |
(...skipping 203 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
242 // thread. Never calls |callback| synchronously. | 241 // thread. Never calls |callback| synchronously. |
243 void DeleteCertAndKeyAsync(const scoped_refptr<X509Certificate>& cert, | 242 void DeleteCertAndKeyAsync(const scoped_refptr<X509Certificate>& cert, |
244 const DeleteCertCallback& callback); | 243 const DeleteCertCallback& callback); |
245 | 244 |
246 // Check whether cert is stored in a readonly slot. | 245 // Check whether cert is stored in a readonly slot. |
247 bool IsReadOnly(const X509Certificate* cert) const; | 246 bool IsReadOnly(const X509Certificate* cert) const; |
248 | 247 |
249 // Check whether cert is stored in a hardware slot. | 248 // Check whether cert is stored in a hardware slot. |
250 bool IsHardwareBacked(const X509Certificate* cert) const; | 249 bool IsHardwareBacked(const X509Certificate* cert) const; |
251 | 250 |
252 // Overrides task runner that's used for running slow tasks. | |
253 void SetSlowTaskRunnerForTest( | |
254 const scoped_refptr<base::TaskRunner>& task_runner); | |
255 | |
256 protected: | 251 protected: |
257 // Certificate listing implementation used by |ListCerts*| and | 252 // Certificate listing implementation used by |ListCerts*| and |
258 // |ListCertsSync|. Static so it may safely be used on the worker thread. | 253 // |ListCertsSync|. Static so it may safely be used on the worker thread. |
259 // If |slot| is NULL, obtains the certs of all slots, otherwise only of | 254 // If |slot| is NULL, obtains the certs of all slots, otherwise only of |
260 // |slot|. | 255 // |slot|. |
261 static void ListCertsImpl(crypto::ScopedPK11Slot slot, | 256 static void ListCertsImpl(crypto::ScopedPK11Slot slot, |
262 CertificateList* certs); | 257 CertificateList* certs); |
263 | 258 |
264 // Gets task runner that should be used for slow tasks like certificate | |
265 // listing. Defaults to a base::WorkerPool runner, but may be overriden | |
266 // in tests (see SetSlowTaskRunnerForTest). | |
267 scoped_refptr<base::TaskRunner> GetSlowTaskRunner() const; | |
268 | |
269 protected: | 259 protected: |
270 // Broadcasts notifications to all registered observers. | 260 // Broadcasts notifications to all registered observers. |
271 void NotifyObserversCertDBChanged(const X509Certificate* cert); | 261 void NotifyObserversCertDBChanged(const X509Certificate* cert); |
272 | 262 |
273 private: | 263 private: |
274 // Registers |observer| to receive notifications of certificate changes. The | 264 // Registers |observer| to receive notifications of certificate changes. The |
275 // thread on which this is called is the thread on which |observer| will be | 265 // thread on which this is called is the thread on which |observer| will be |
276 // called back with notifications. | 266 // called back with notifications. |
277 // NOTE: Observers registered here will only receive notifications generated | 267 // NOTE: Observers registered here will only receive notifications generated |
278 // directly through the NSSCertDatabase, but not those from the CertDatabase. | 268 // directly through the NSSCertDatabase, but not those from the CertDatabase. |
(...skipping 13 matching lines...) Expand all Loading... |
292 // Certificate removal implementation used by |DeleteCertAndKey*|. Static so | 282 // Certificate removal implementation used by |DeleteCertAndKey*|. Static so |
293 // it may safely be used on the worker thread. | 283 // it may safely be used on the worker thread. |
294 static bool DeleteCertAndKeyImpl(scoped_refptr<X509Certificate> cert); | 284 static bool DeleteCertAndKeyImpl(scoped_refptr<X509Certificate> cert); |
295 | 285 |
296 crypto::ScopedPK11Slot public_slot_; | 286 crypto::ScopedPK11Slot public_slot_; |
297 crypto::ScopedPK11Slot private_slot_; | 287 crypto::ScopedPK11Slot private_slot_; |
298 | 288 |
299 // A helper observer that forwards events from this database to CertDatabase. | 289 // A helper observer that forwards events from this database to CertDatabase. |
300 std::unique_ptr<Observer> cert_notification_forwarder_; | 290 std::unique_ptr<Observer> cert_notification_forwarder_; |
301 | 291 |
302 // Task runner that should be used in tests if set. | |
303 scoped_refptr<base::TaskRunner> slow_task_runner_for_test_; | |
304 | |
305 const scoped_refptr<base::ObserverListThreadSafe<Observer>> observer_list_; | 292 const scoped_refptr<base::ObserverListThreadSafe<Observer>> observer_list_; |
306 | 293 |
307 base::WeakPtrFactory<NSSCertDatabase> weak_factory_; | 294 base::WeakPtrFactory<NSSCertDatabase> weak_factory_; |
308 | 295 |
309 DISALLOW_COPY_AND_ASSIGN(NSSCertDatabase); | 296 DISALLOW_COPY_AND_ASSIGN(NSSCertDatabase); |
310 }; | 297 }; |
311 | 298 |
312 } // namespace net | 299 } // namespace net |
313 | 300 |
314 #endif // NET_CERT_NSS_CERT_DATABASE_H_ | 301 #endif // NET_CERT_NSS_CERT_DATABASE_H_ |
OLD | NEW |