Enable device-wide EAP-TLS networks

chrome/browser/browser_process_platform_part_chromeos.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_BROWSER_PROCESS_PLATFORM_PART_CHROMEOS_H_
 #define CHROME_BROWSER_BROWSER_PROCESS_PLATFORM_PART_CHROMEOS_H_
 
 #include <memory>
+#include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/macros.h"
 #include "base/threading/non_thread_safe.h"
 #include "chrome/browser/browser_process_platform_part_base.h"
+#include "crypto/scoped_nss_types.h"
 
 namespace chromeos {
 class ChromeSessionManager;
 class ChromeUserManager;
 class ProfileHelper;
 class TimeZoneResolver;
 }
 
 namespace chromeos {
 namespace system {
 class AutomaticRebootManager;
 class DeviceDisablingManager;
 class DeviceDisablingManagerDefaultDelegate;
 class SystemClock;
 class TimeZoneResolverManager;
 }
 }
 
+namespace net {
+class NSSCertDatabase;
+}
+
 namespace policy {
 class BrowserPolicyConnector;
 class BrowserPolicyConnectorChromeOS;
 }
 
 class ScopedKeepAlive;
 
 class BrowserProcessPlatformPart : public BrowserProcessPlatformPartBase,
                                    public base::NonThreadSafe {
  public:
   BrowserProcessPlatformPart();
   ~BrowserProcessPlatformPart() override;
 
   void InitializeAutomaticRebootManager();
   void ShutdownAutomaticRebootManager();
 
   void InitializeChromeUserManager();
   void DestroyChromeUserManager();
 
   void InitializeDeviceDisablingManager();
   void ShutdownDeviceDisablingManager();
 
   void InitializeSessionManager();
   void ShutdownSessionManager();
 
+  // Initializes the system slot backed NSS certificate database using
+  // |system_slot|.
+  void InitializeSystemSlotCertDatabase(crypto::ScopedPK11Slot system_slot);
+  void ShutdownSystemSlotCertDatabase();
+
+  // Retrieves the system slot backed certificate database. |callback| can be
+  // called synchronously or asynchronously.
+  void GetSystemSlotCertDatabase(
+      base::Callback<void(net::NSSCertDatabase*)> callback);
+
   // Disable the offline interstitial easter egg if the device is enterprise
   // enrolled.
   void DisableDinoEasterEggIfEnrolled();
 
   // Used to register a KeepAlive when Ash is initialized, and release it
   // when until Chrome starts exiting. Ensure we stay running the whole time.
   void RegisterKeepAlive();
   void UnregisterKeepAlive();
 
   // Returns the ProfileHelper instance that is used to identify
@@ skipping 50 matching lines @@
       device_disabling_manager_;
 
   std::unique_ptr<chromeos::system::TimeZoneResolverManager>
       timezone_resolver_manager_;
   std::unique_ptr<chromeos::TimeZoneResolver> timezone_resolver_;
 
   std::unique_ptr<chromeos::system::SystemClock> system_clock_;
 
   std::unique_ptr<ScopedKeepAlive> keep_alive_;
 
+  // Global NSSCertDatabase which sees the system token.
+  std::unique_ptr<net::NSSCertDatabase> system_token_cert_database_;
+  std::vector<base::Callback<void(net::NSSCertDatabase*)>>
+      system_token_ready_callbacks_;
+
   DISALLOW_COPY_AND_ASSIGN(BrowserProcessPlatformPart);
 };
 
 #endif  // CHROME_BROWSER_BROWSER_PROCESS_PLATFORM_PART_CHROMEOS_H_