Introduce networkingPrivate.getCertificateLists

extensions/common/api/networking_onc.idl

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // <p>
 //   The <code>chrome.networking.onc</code> API is used for configuring
 //   network connections (Cellular, Ethernet, VPN, WiFi or WiMAX).
 //   This API is available in Chrome OS kiosk sessions.
 // </p>
 // <p>
@@ skipping 241 matching lines @@
     // List of certificate issuer CA certificates. A certificate must be signed
     // by one of them in order to match this pattern.
     DOMString[]? IssuerCARef;
     // If set, pattern against which X.509 subject settings should be matched.
     IssuerSubjectPattern? Subject;
   };
 
   dictionary EAPProperties {
     DOMString? AnonymousIdentity;
     CertificatePattern? ClientCertPattern;
+    DOMString? ClientCertPKCS11Id;
     DOMString? ClientCertRef;
     ClientCertificateType ClientCertType;
     DOMString? Identity;
     DOMString? Inner;
     // The outer EAP type. Required by ONC, but may not be provided when
     // translating from Shill.
     DOMString? Outer;
     DOMString? Password;
     boolean? SaveCredentials;
     DOMString[]? ServerCAPEMs;
@@ skipping 574 matching lines @@
 
   dictionary GlobalPolicy {
     // If true, only policy networks may auto connect. Defaults to false.
     boolean? AllowOnlyPolicyNetworksToAutoconnect;
 
     // If true, only policy networks may be connected to and no new networks may
     // be added or configured. Defaults to false.
     boolean? AllowOnlyPolicyNetworksToConnect;
   };
 
+  dictionary Certificate {
+    // Unique hash for the certificate.
+    DOMString hash;
+
+    // Certificate issuer common name.
+    DOMString issuedBy;
+
+    // Certificate name or nickname.
+    DOMString issuedTo;
+
+    // PEM for server ca certificatess.
+    DOMString? pem;
+
+    // PKCS#11 id for user certificates.
+    DOMString? PKCS11Id;
+
+    // Whether or not the certificate is hardware backed.
+    boolean hardwareBacked;
+  };
+
+  dictionary CertificateLists {
+    // Certificates available for the ServerCA property.
+    Certificate[] server_ca_certificates;
+
+    // Certificates available for the UserCert property.
+    Certificate[] user_certificates;
+  };
+
   callback VoidCallback = void();
   callback BooleanCallback = void(boolean result);
   callback StringCallback = void(DOMString result);
   callback GetPropertiesCallback = void(NetworkProperties result);
   callback GetManagedPropertiesCallback = void(ManagedProperties result);
   callback GetStatePropertiesCallback = void(NetworkStateProperties result);
   callback GetNetworksCallback = void(NetworkStateProperties[] result);
   callback GetDeviceStatesCallback = void(DeviceStateProperties[] result);
   callback GetEnabledNetworkTypesCallback = void(NetworkType[] result);
   callback CaptivePortalStatusCallback = void(CaptivePortalStatus result);
   callback GetGlobalPolicyCallback = void(GlobalPolicy result);
+  callback GetCertificateListsCallback = void(CertificateLists result);
 
   interface Functions {
     // Gets all the properties of the network with id networkGuid. Includes all
     // properties of the network (read-only and read/write values).
     // |networkGuid|: The GUID of the network to get properties for.
     // |callback|: Called with the network properties when received.
     static void getProperties(DOMString networkGuid,
                               GetPropertiesCallback callback);
 
     // Gets the merged properties of the network with id networkGuid from the
@@ skipping 111 matching lines @@
     // Returns captive portal status for the network matching 'networkGuid'.
     // |networkGuid|: The GUID of the network to get captive portal status for.
     // |callback|: A callback function that returns the results of the query for
     //     network captive portal status.
     static void getCaptivePortalStatus(DOMString networkGuid,
                                        CaptivePortalStatusCallback callback);
 
     // Gets the global policy properties. These properties are not expected to
     // change during a session.
     static void getGlobalPolicy(GetGlobalPolicyCallback callback);
+
+    // Gets the lists of certificates available for network configuration.
+    static void getCertificateLists(GetCertificateListsCallback callback);
   };
 
   interface Events {
     // Fired when the properties change on any of the networks.  Sends a list of
     // GUIDs for networks whose properties have changed.
     static void onNetworksChanged(DOMString[] changes);
 
     // Fired when the list of networks has changed.  Sends a complete list of
     // GUIDs for all the current networks.
     static void onNetworkListChanged(DOMString[] changes);
 
     // Fired when the list of devices has changed or any device state properties
     // have changed.
     static void onDeviceStateListChanged();
 
     // Fired when a portal detection for a network completes. Sends the GUID of
     // the network and the corresponding captive portal status.
     static void onPortalDetectionCompleted(DOMString networkGuid,
                                            CaptivePortalStatus status);
+
+    // Fired when any certificate list has changed.
+    static void onCertificateListsChanged();
   };
 };