Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef NET_CERT_NSS_CERT_DATABASE_H_ | 5 #ifndef NET_CERT_NSS_CERT_DATABASE_H_ |
| 6 #define NET_CERT_NSS_CERT_DATABASE_H_ | 6 #define NET_CERT_NSS_CERT_DATABASE_H_ |
| 7 | 7 |
| 8 #include <stdint.h> | 8 #include <stdint.h> |
| 9 | 9 |
| 10 #include <memory> | 10 #include <memory> |
| (...skipping 23 matching lines...) Expand all Loading... | |
| 34 | 34 |
| 35 // Provides functions to manipulate the NSS certificate stores. | 35 // Provides functions to manipulate the NSS certificate stores. |
| 36 // Forwards notifications about certificate changes to the global CertDatabase | 36 // Forwards notifications about certificate changes to the global CertDatabase |
| 37 // singleton. | 37 // singleton. |
| 38 class NET_EXPORT NSSCertDatabase { | 38 class NET_EXPORT NSSCertDatabase { |
| 39 public: | 39 public: |
| 40 class NET_EXPORT Observer { | 40 class NET_EXPORT Observer { |
| 41 public: | 41 public: |
| 42 virtual ~Observer() {} | 42 virtual ~Observer() {} |
| 43 | 43 |
| 44 // Will be called when a CA certificate is changed. | 44 // Will be called when a certificate is added, removed, or changed trust |
|
svaldez
2017/02/13 15:59:40
Wording seems a bit odd.
"or trust settings are c
mattm
2017/02/13 20:30:09
Done.
| |
| 45 // Called with |cert| == NULL after importing a list of certificates | 45 // settings. |
| 46 // in ImportCACerts(). | 46 virtual void OnCertDBChanged() {} |
| 47 virtual void OnCertDBChanged(const X509Certificate* cert) {} | |
| 48 | 47 |
| 49 protected: | 48 protected: |
| 50 Observer() {} | 49 Observer() {} |
| 51 | 50 |
| 52 private: | 51 private: |
| 53 DISALLOW_COPY_AND_ASSIGN(Observer); | 52 DISALLOW_COPY_AND_ASSIGN(Observer); |
| 54 }; | 53 }; |
| 55 | 54 |
| 56 // Stores per-certificate error codes for import failures. | 55 // Stores per-certificate error codes for import failures. |
| 57 struct NET_EXPORT ImportCertFailure { | 56 struct NET_EXPORT ImportCertFailure { |
| (...skipping 181 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 239 protected: | 238 protected: |
| 240 // Certificate listing implementation used by |ListCerts*| and | 239 // Certificate listing implementation used by |ListCerts*| and |
| 241 // |ListCertsSync|. Static so it may safely be used on the worker thread. | 240 // |ListCertsSync|. Static so it may safely be used on the worker thread. |
| 242 // If |slot| is NULL, obtains the certs of all slots, otherwise only of | 241 // If |slot| is NULL, obtains the certs of all slots, otherwise only of |
| 243 // |slot|. | 242 // |slot|. |
| 244 static void ListCertsImpl(crypto::ScopedPK11Slot slot, | 243 static void ListCertsImpl(crypto::ScopedPK11Slot slot, |
| 245 CertificateList* certs); | 244 CertificateList* certs); |
| 246 | 245 |
| 247 protected: | 246 protected: |
| 248 // Broadcasts notifications to all registered observers. | 247 // Broadcasts notifications to all registered observers. |
| 249 void NotifyObserversCertDBChanged(const X509Certificate* cert); | 248 void NotifyObserversCertDBChanged(); |
| 250 | 249 |
| 251 private: | 250 private: |
| 252 // Registers |observer| to receive notifications of certificate changes. The | 251 // Registers |observer| to receive notifications of certificate changes. The |
| 253 // thread on which this is called is the thread on which |observer| will be | 252 // thread on which this is called is the thread on which |observer| will be |
| 254 // called back with notifications. | 253 // called back with notifications. |
| 255 // NOTE: Observers registered here will only receive notifications generated | 254 // NOTE: Observers registered here will only receive notifications generated |
| 256 // directly through the NSSCertDatabase, but not those from the CertDatabase. | 255 // directly through the NSSCertDatabase, but not those from the CertDatabase. |
| 257 // CertDatabase observers will receive all certificate notifications. | 256 // CertDatabase observers will receive all certificate notifications. |
| 258 void AddObserver(Observer* observer); | 257 void AddObserver(Observer* observer); |
| 259 | 258 |
| 260 // Unregisters |observer| from receiving notifications. This must be called | 259 // Unregisters |observer| from receiving notifications. This must be called |
| 261 // on the same thread on which AddObserver() was called. | 260 // on the same thread on which AddObserver() was called. |
| 262 void RemoveObserver(Observer* observer); | 261 void RemoveObserver(Observer* observer); |
| 263 | 262 |
| 264 // Notifies observers of the removal of |cert| and calls |callback| with | 263 // Notifies observers of the removal of a cert and calls |callback| with |
| 265 // |success| as argument. | 264 // |success| as argument. |
| 266 void NotifyCertRemovalAndCallBack(scoped_refptr<X509Certificate> cert, | 265 void NotifyCertRemovalAndCallBack(const DeleteCertCallback& callback, |
| 267 const DeleteCertCallback& callback, | |
| 268 bool success); | 266 bool success); |
| 269 | 267 |
| 270 // Certificate removal implementation used by |DeleteCertAndKey*|. Static so | 268 // Certificate removal implementation used by |DeleteCertAndKey*|. Static so |
| 271 // it may safely be used on the worker thread. | 269 // it may safely be used on the worker thread. |
| 272 static bool DeleteCertAndKeyImpl(scoped_refptr<X509Certificate> cert); | 270 static bool DeleteCertAndKeyImpl(scoped_refptr<X509Certificate> cert); |
| 273 | 271 |
| 274 crypto::ScopedPK11Slot public_slot_; | 272 crypto::ScopedPK11Slot public_slot_; |
| 275 crypto::ScopedPK11Slot private_slot_; | 273 crypto::ScopedPK11Slot private_slot_; |
| 276 | 274 |
| 277 // A helper observer that forwards events from this database to CertDatabase. | 275 // A helper observer that forwards events from this database to CertDatabase. |
| 278 std::unique_ptr<Observer> cert_notification_forwarder_; | 276 std::unique_ptr<Observer> cert_notification_forwarder_; |
| 279 | 277 |
| 280 const scoped_refptr<base::ObserverListThreadSafe<Observer>> observer_list_; | 278 const scoped_refptr<base::ObserverListThreadSafe<Observer>> observer_list_; |
| 281 | 279 |
| 282 base::WeakPtrFactory<NSSCertDatabase> weak_factory_; | 280 base::WeakPtrFactory<NSSCertDatabase> weak_factory_; |
| 283 | 281 |
| 284 DISALLOW_COPY_AND_ASSIGN(NSSCertDatabase); | 282 DISALLOW_COPY_AND_ASSIGN(NSSCertDatabase); |
| 285 }; | 283 }; |
| 286 | 284 |
| 287 } // namespace net | 285 } // namespace net |
| 288 | 286 |
| 289 #endif // NET_CERT_NSS_CERT_DATABASE_H_ | 287 #endif // NET_CERT_NSS_CERT_DATABASE_H_ |
| OLD | NEW |