| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "net/quic/crypto/channel_id_chromium.h" | 5 #include "net/quic/crypto/channel_id_chromium.h" |
| 6 | 6 |
| 7 #include <string> | 7 #include <string> |
| 8 | 8 |
| 9 #include "base/stl_util.h" | 9 #include "base/stl_util.h" |
| 10 #include "base/strings/string_util.h" | 10 #include "base/strings/string_util.h" |
| 11 #include "crypto/ec_private_key.h" | 11 #include "crypto/ec_private_key.h" |
| 12 #include "crypto/ec_signature_creator.h" | 12 #include "crypto/ec_signature_creator.h" |
| 13 #include "net/base/net_errors.h" | 13 #include "net/base/net_errors.h" |
| 14 #include "net/cert/asn1_util.h" | 14 #include "net/cert/asn1_util.h" |
| 15 #include "net/ssl/server_bound_cert_service.h" | 15 #include "net/ssl/channel_id_service.h" |
| 16 | 16 |
| 17 namespace net { | 17 namespace net { |
| 18 | 18 |
| 19 ChannelIDKeyChromium::ChannelIDKeyChromium( | 19 ChannelIDKeyChromium::ChannelIDKeyChromium( |
| 20 crypto::ECPrivateKey* ec_private_key) | 20 crypto::ECPrivateKey* ec_private_key) |
| 21 : ec_private_key_(ec_private_key) {} | 21 : ec_private_key_(ec_private_key) {} |
| 22 | 22 |
| 23 ChannelIDKeyChromium::~ChannelIDKeyChromium() {} | 23 ChannelIDKeyChromium::~ChannelIDKeyChromium() {} |
| 24 | 24 |
| 25 bool ChannelIDKeyChromium::Sign(base::StringPiece signed_data, | 25 bool ChannelIDKeyChromium::Sign(base::StringPiece signed_data, |
| (...skipping 29 matching lines...) Expand all Loading... |
| 55 } | 55 } |
| 56 return out_key; | 56 return out_key; |
| 57 } | 57 } |
| 58 | 58 |
| 59 // A Job handles the lookup of a single channel ID. It is owned by the | 59 // A Job handles the lookup of a single channel ID. It is owned by the |
| 60 // ChannelIDSource. If the operation can not complete synchronously, it will | 60 // ChannelIDSource. If the operation can not complete synchronously, it will |
| 61 // notify the ChannelIDSource upon completion. | 61 // notify the ChannelIDSource upon completion. |
| 62 class ChannelIDSourceChromium::Job { | 62 class ChannelIDSourceChromium::Job { |
| 63 public: | 63 public: |
| 64 Job(ChannelIDSourceChromium* channel_id_source, | 64 Job(ChannelIDSourceChromium* channel_id_source, |
| 65 ServerBoundCertService* server_bound_cert_service); | 65 ChannelIDService* channel_id_service); |
| 66 | 66 |
| 67 // Starts the channel ID lookup. If |QUIC_PENDING| is returned, then | 67 // Starts the channel ID lookup. If |QUIC_PENDING| is returned, then |
| 68 // |callback| will be invoked asynchronously when the operation completes. | 68 // |callback| will be invoked asynchronously when the operation completes. |
| 69 QuicAsyncStatus GetChannelIDKey(const std::string& hostname, | 69 QuicAsyncStatus GetChannelIDKey(const std::string& hostname, |
| 70 scoped_ptr<ChannelIDKey>* channel_id_key, | 70 scoped_ptr<ChannelIDKey>* channel_id_key, |
| 71 ChannelIDSourceCallback* callback); | 71 ChannelIDSourceCallback* callback); |
| 72 | 72 |
| 73 private: | 73 private: |
| 74 enum State { | 74 enum State { |
| 75 STATE_NONE, | 75 STATE_NONE, |
| 76 STATE_GET_CHANNEL_ID_KEY, | 76 STATE_GET_CHANNEL_ID_KEY, |
| 77 STATE_GET_CHANNEL_ID_KEY_COMPLETE, | 77 STATE_GET_CHANNEL_ID_KEY_COMPLETE, |
| 78 }; | 78 }; |
| 79 | 79 |
| 80 int DoLoop(int last_io_result); | 80 int DoLoop(int last_io_result); |
| 81 void OnIOComplete(int result); | 81 void OnIOComplete(int result); |
| 82 int DoGetChannelIDKey(int result); | 82 int DoGetChannelIDKey(int result); |
| 83 int DoGetChannelIDKeyComplete(int result); | 83 int DoGetChannelIDKeyComplete(int result); |
| 84 | 84 |
| 85 // Channel ID source to notify when this jobs completes. | 85 // Channel ID source to notify when this jobs completes. |
| 86 ChannelIDSourceChromium* const channel_id_source_; | 86 ChannelIDSourceChromium* const channel_id_source_; |
| 87 | 87 |
| 88 ServerBoundCertService* const server_bound_cert_service_; | 88 ChannelIDService* const channel_id_service_; |
| 89 | 89 |
| 90 std::string channel_id_private_key_; | 90 std::string channel_id_private_key_; |
| 91 std::string channel_id_cert_; | 91 std::string channel_id_cert_; |
| 92 ServerBoundCertService::RequestHandle channel_id_request_handle_; | 92 ChannelIDService::RequestHandle channel_id_request_handle_; |
| 93 | 93 |
| 94 // |hostname| specifies the hostname for which we need a channel ID. | 94 // |hostname| specifies the hostname for which we need a channel ID. |
| 95 std::string hostname_; | 95 std::string hostname_; |
| 96 | 96 |
| 97 scoped_ptr<ChannelIDSourceCallback> callback_; | 97 scoped_ptr<ChannelIDSourceCallback> callback_; |
| 98 | 98 |
| 99 scoped_ptr<ChannelIDKey> channel_id_key_; | 99 scoped_ptr<ChannelIDKey> channel_id_key_; |
| 100 | 100 |
| 101 State next_state_; | 101 State next_state_; |
| 102 | 102 |
| 103 DISALLOW_COPY_AND_ASSIGN(Job); | 103 DISALLOW_COPY_AND_ASSIGN(Job); |
| 104 }; | 104 }; |
| 105 | 105 |
| 106 ChannelIDSourceChromium::Job::Job( | 106 ChannelIDSourceChromium::Job::Job( |
| 107 ChannelIDSourceChromium* channel_id_source, | 107 ChannelIDSourceChromium* channel_id_source, |
| 108 ServerBoundCertService* server_bound_cert_service) | 108 ChannelIDService* channel_id_service) |
| 109 : channel_id_source_(channel_id_source), | 109 : channel_id_source_(channel_id_source), |
| 110 server_bound_cert_service_(server_bound_cert_service), | 110 channel_id_service_(channel_id_service), |
| 111 next_state_(STATE_NONE) { | 111 next_state_(STATE_NONE) { |
| 112 } | 112 } |
| 113 | 113 |
| 114 QuicAsyncStatus ChannelIDSourceChromium::Job::GetChannelIDKey( | 114 QuicAsyncStatus ChannelIDSourceChromium::Job::GetChannelIDKey( |
| 115 const std::string& hostname, | 115 const std::string& hostname, |
| 116 scoped_ptr<ChannelIDKey>* channel_id_key, | 116 scoped_ptr<ChannelIDKey>* channel_id_key, |
| 117 ChannelIDSourceCallback* callback) { | 117 ChannelIDSourceCallback* callback) { |
| 118 DCHECK(channel_id_key); | 118 DCHECK(channel_id_key); |
| 119 DCHECK(callback); | 119 DCHECK(callback); |
| 120 | 120 |
| (...skipping 49 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 170 scoped_ptr<ChannelIDSourceCallback> callback(callback_.release()); | 170 scoped_ptr<ChannelIDSourceCallback> callback(callback_.release()); |
| 171 callback->Run(&channel_id_key_); | 171 callback->Run(&channel_id_key_); |
| 172 // Will delete |this|. | 172 // Will delete |this|. |
| 173 channel_id_source_->OnJobComplete(this); | 173 channel_id_source_->OnJobComplete(this); |
| 174 } | 174 } |
| 175 } | 175 } |
| 176 | 176 |
| 177 int ChannelIDSourceChromium::Job::DoGetChannelIDKey(int result) { | 177 int ChannelIDSourceChromium::Job::DoGetChannelIDKey(int result) { |
| 178 next_state_ = STATE_GET_CHANNEL_ID_KEY_COMPLETE; | 178 next_state_ = STATE_GET_CHANNEL_ID_KEY_COMPLETE; |
| 179 | 179 |
| 180 return server_bound_cert_service_->GetOrCreateDomainBoundCert( | 180 return channel_id_service_->GetOrCreateChannelID( |
| 181 hostname_, | 181 hostname_, |
| 182 &channel_id_private_key_, | 182 &channel_id_private_key_, |
| 183 &channel_id_cert_, | 183 &channel_id_cert_, |
| 184 base::Bind(&ChannelIDSourceChromium::Job::OnIOComplete, | 184 base::Bind(&ChannelIDSourceChromium::Job::OnIOComplete, |
| 185 base::Unretained(this)), | 185 base::Unretained(this)), |
| 186 &channel_id_request_handle_); | 186 &channel_id_request_handle_); |
| 187 } | 187 } |
| 188 | 188 |
| 189 int ChannelIDSourceChromium::Job::DoGetChannelIDKeyComplete(int result) { | 189 int ChannelIDSourceChromium::Job::DoGetChannelIDKeyComplete(int result) { |
| 190 DCHECK_EQ(STATE_NONE, next_state_); | 190 DCHECK_EQ(STATE_NONE, next_state_); |
| 191 if (result != OK) { | 191 if (result != OK) { |
| 192 DLOG(WARNING) << "Failed to look up channel ID: " << ErrorToString(result); | 192 DLOG(WARNING) << "Failed to look up channel ID: " << ErrorToString(result); |
| 193 return result; | 193 return result; |
| 194 } | 194 } |
| 195 | 195 |
| 196 std::vector<uint8> encrypted_private_key_info( | 196 std::vector<uint8> encrypted_private_key_info( |
| 197 channel_id_private_key_.size()); | 197 channel_id_private_key_.size()); |
| 198 memcpy(&encrypted_private_key_info[0], channel_id_private_key_.data(), | 198 memcpy(&encrypted_private_key_info[0], channel_id_private_key_.data(), |
| 199 channel_id_private_key_.size()); | 199 channel_id_private_key_.size()); |
| 200 | 200 |
| 201 base::StringPiece spki_piece; | 201 base::StringPiece spki_piece; |
| 202 if (!asn1::ExtractSPKIFromDERCert(channel_id_cert_, &spki_piece)) { | 202 if (!asn1::ExtractSPKIFromDERCert(channel_id_cert_, &spki_piece)) { |
| 203 return ERR_UNEXPECTED; | 203 return ERR_UNEXPECTED; |
| 204 } | 204 } |
| 205 std::vector<uint8> subject_public_key_info(spki_piece.size()); | 205 std::vector<uint8> subject_public_key_info(spki_piece.size()); |
| 206 memcpy(&subject_public_key_info[0], spki_piece.data(), spki_piece.size()); | 206 memcpy(&subject_public_key_info[0], spki_piece.data(), spki_piece.size()); |
| 207 | 207 |
| 208 crypto::ECPrivateKey* ec_private_key = | 208 crypto::ECPrivateKey* ec_private_key = |
| 209 crypto::ECPrivateKey::CreateFromEncryptedPrivateKeyInfo( | 209 crypto::ECPrivateKey::CreateFromEncryptedPrivateKeyInfo( |
| 210 ServerBoundCertService::kEPKIPassword, encrypted_private_key_info, | 210 ChannelIDService::kEPKIPassword, encrypted_private_key_info, |
| 211 subject_public_key_info); | 211 subject_public_key_info); |
| 212 if (!ec_private_key) { | 212 if (!ec_private_key) { |
| 213 // TODO(wtc): use the new error code ERR_CHANNEL_ID_IMPORT_FAILED to be | 213 // TODO(wtc): use the new error code ERR_CHANNEL_ID_IMPORT_FAILED to be |
| 214 // added in https://codereview.chromium.org/338093012/. | 214 // added in https://codereview.chromium.org/338093012/. |
| 215 return ERR_UNEXPECTED; | 215 return ERR_UNEXPECTED; |
| 216 } | 216 } |
| 217 channel_id_key_.reset(new ChannelIDKeyChromium(ec_private_key)); | 217 channel_id_key_.reset(new ChannelIDKeyChromium(ec_private_key)); |
| 218 | 218 |
| 219 return result; | 219 return result; |
| 220 } | 220 } |
| 221 | 221 |
| 222 ChannelIDSourceChromium::ChannelIDSourceChromium( | 222 ChannelIDSourceChromium::ChannelIDSourceChromium( |
| 223 ServerBoundCertService* server_bound_cert_service) | 223 ChannelIDService* channel_id_service) |
| 224 : server_bound_cert_service_(server_bound_cert_service) { | 224 : channel_id_service_(channel_id_service) { |
| 225 } | 225 } |
| 226 | 226 |
| 227 ChannelIDSourceChromium::~ChannelIDSourceChromium() { | 227 ChannelIDSourceChromium::~ChannelIDSourceChromium() { |
| 228 STLDeleteElements(&active_jobs_); | 228 STLDeleteElements(&active_jobs_); |
| 229 } | 229 } |
| 230 | 230 |
| 231 QuicAsyncStatus ChannelIDSourceChromium::GetChannelIDKey( | 231 QuicAsyncStatus ChannelIDSourceChromium::GetChannelIDKey( |
| 232 const std::string& hostname, | 232 const std::string& hostname, |
| 233 scoped_ptr<ChannelIDKey>* channel_id_key, | 233 scoped_ptr<ChannelIDKey>* channel_id_key, |
| 234 ChannelIDSourceCallback* callback) { | 234 ChannelIDSourceCallback* callback) { |
| 235 scoped_ptr<Job> job(new Job(this, server_bound_cert_service_)); | 235 scoped_ptr<Job> job(new Job(this, channel_id_service_)); |
| 236 QuicAsyncStatus status = job->GetChannelIDKey(hostname, channel_id_key, | 236 QuicAsyncStatus status = job->GetChannelIDKey(hostname, channel_id_key, |
| 237 callback); | 237 callback); |
| 238 if (status == QUIC_PENDING) { | 238 if (status == QUIC_PENDING) { |
| 239 active_jobs_.insert(job.release()); | 239 active_jobs_.insert(job.release()); |
| 240 } | 240 } |
| 241 return status; | 241 return status; |
| 242 } | 242 } |
| 243 | 243 |
| 244 void ChannelIDSourceChromium::OnJobComplete(Job* job) { | 244 void ChannelIDSourceChromium::OnJobComplete(Job* job) { |
| 245 active_jobs_.erase(job); | 245 active_jobs_.erase(job); |
| 246 delete job; | 246 delete job; |
| 247 } | 247 } |
| 248 | 248 |
| 249 } // namespace net | 249 } // namespace net |
| OLD | NEW |