Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/net/sqlite_server_bound_cert_store.h" | 5 #include "chrome/browser/net/sqlite_channel_id_store.h" |
| 6 | 6 |
| 7 #include <list> | 7 #include <list> |
| 8 #include <set> | 8 #include <set> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| 11 #include "base/bind.h" | 11 #include "base/bind.h" |
| 12 #include "base/file_util.h" | 12 #include "base/file_util.h" |
| 13 #include "base/files/file_path.h" | 13 #include "base/files/file_path.h" |
| 14 #include "base/logging.h" | 14 #include "base/logging.h" |
| 15 #include "base/memory/scoped_ptr.h" | 15 #include "base/memory/scoped_ptr.h" |
| 16 #include "base/metrics/histogram.h" | 16 #include "base/metrics/histogram.h" |
| 17 #include "base/strings/string_util.h" | 17 #include "base/strings/string_util.h" |
| 18 #include "base/threading/thread.h" | 18 #include "base/threading/thread.h" |
| 19 #include "base/threading/thread_restrictions.h" | 19 #include "base/threading/thread_restrictions.h" |
| 20 #include "net/cert/x509_certificate.h" | 20 #include "net/cert/x509_certificate.h" |
| 21 #include "net/cookies/cookie_util.h" | 21 #include "net/cookies/cookie_util.h" |
| 22 #include "net/ssl/ssl_client_cert_type.h" | 22 #include "net/ssl/ssl_client_cert_type.h" |
| 23 #include "sql/error_delegate_util.h" | 23 #include "sql/error_delegate_util.h" |
| 24 #include "sql/meta_table.h" | 24 #include "sql/meta_table.h" |
| 25 #include "sql/statement.h" | 25 #include "sql/statement.h" |
| 26 #include "sql/transaction.h" | 26 #include "sql/transaction.h" |
| 27 #include "third_party/sqlite/sqlite3.h" | 27 #include "third_party/sqlite/sqlite3.h" |
| 28 #include "url/gurl.h" | 28 #include "url/gurl.h" |
| 29 #include "webkit/browser/quota/special_storage_policy.h" | 29 #include "webkit/browser/quota/special_storage_policy.h" |
| 30 | 30 |
| 31 // This class is designed to be shared between any calling threads and the | 31 // This class is designed to be shared between any calling threads and the |
| 32 // background task runner. It batches operations and commits them on a timer. | 32 // background task runner. It batches operations and commits them on a timer. |
| 33 class SQLiteServerBoundCertStore::Backend | 33 class SQLiteChannelIDStore::Backend |
| 34 : public base::RefCountedThreadSafe<SQLiteServerBoundCertStore::Backend> { | 34 : public base::RefCountedThreadSafe<SQLiteChannelIDStore::Backend> { |
| 35 public: | 35 public: |
| 36 Backend( | 36 Backend( |
| 37 const base::FilePath& path, | 37 const base::FilePath& path, |
| 38 const scoped_refptr<base::SequencedTaskRunner>& background_task_runner, | 38 const scoped_refptr<base::SequencedTaskRunner>& background_task_runner, |
| 39 quota::SpecialStoragePolicy* special_storage_policy) | 39 quota::SpecialStoragePolicy* special_storage_policy) |
| 40 : path_(path), | 40 : path_(path), |
| 41 num_pending_(0), | 41 num_pending_(0), |
| 42 force_keep_session_state_(false), | 42 force_keep_session_state_(false), |
| 43 background_task_runner_(background_task_runner), | 43 background_task_runner_(background_task_runner), |
| 44 special_storage_policy_(special_storage_policy), | 44 special_storage_policy_(special_storage_policy), |
| 45 corruption_detected_(false) {} | 45 corruption_detected_(false) {} |
| 46 | 46 |
| 47 // Creates or loads the SQLite database. | 47 // Creates or loads the SQLite database. |
| 48 void Load(const LoadedCallback& loaded_callback); | 48 void Load(const LoadedCallback& loaded_callback); |
| 49 | 49 |
| 50 // Batch a server bound cert addition. | 50 // Batch a server bound cert addition. |
|
wtc
2014/07/01 19:50:50
server bound cert => channel ID
Also fix line 54
Ryan Hamilton
2014/07/21 19:12:07
Done.
| |
| 51 void AddServerBoundCert( | 51 void AddChannelID( |
| 52 const net::DefaultServerBoundCertStore::ServerBoundCert& cert); | 52 const net::DefaultChannelIDStore::ChannelID& cert); |
| 53 | 53 |
| 54 // Batch a server bound cert deletion. | 54 // Batch a server bound cert deletion. |
| 55 void DeleteServerBoundCert( | 55 void DeleteChannelID( |
| 56 const net::DefaultServerBoundCertStore::ServerBoundCert& cert); | 56 const net::DefaultChannelIDStore::ChannelID& cert); |
|
wtc
2014/07/01 19:50:50
cert => channel_id
in these two methods.
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 57 | 57 |
| 58 // Commit any pending operations and close the database. This must be called | 58 // Commit any pending operations and close the database. This must be called |
| 59 // before the object is destructed. | 59 // before the object is destructed. |
| 60 void Close(); | 60 void Close(); |
| 61 | 61 |
| 62 void SetForceKeepSessionState(); | 62 void SetForceKeepSessionState(); |
| 63 | 63 |
| 64 private: | 64 private: |
| 65 void LoadOnDBThread( | 65 void LoadOnDBThread( |
| 66 ScopedVector<net::DefaultServerBoundCertStore::ServerBoundCert>* certs); | 66 ScopedVector<net::DefaultChannelIDStore::ChannelID>* certs); |
|
wtc
2014/07/01 19:50:50
certs => channel_ids
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 67 | 67 |
| 68 friend class base::RefCountedThreadSafe<SQLiteServerBoundCertStore::Backend>; | 68 friend class base::RefCountedThreadSafe<SQLiteChannelIDStore::Backend>; |
| 69 | 69 |
| 70 // You should call Close() before destructing this object. | 70 // You should call Close() before destructing this object. |
| 71 ~Backend() { | 71 ~Backend() { |
| 72 DCHECK(!db_.get()) << "Close should have already been called."; | 72 DCHECK(!db_.get()) << "Close should have already been called."; |
| 73 DCHECK(num_pending_ == 0 && pending_.empty()); | 73 DCHECK(num_pending_ == 0 && pending_.empty()); |
| 74 } | 74 } |
| 75 | 75 |
| 76 // Database upgrade statements. | 76 // Database upgrade statements. |
| 77 bool EnsureDatabaseVersion(); | 77 bool EnsureDatabaseVersion(); |
| 78 | 78 |
| 79 class PendingOperation { | 79 class PendingOperation { |
| 80 public: | 80 public: |
| 81 typedef enum { | 81 typedef enum { |
| 82 CERT_ADD, | 82 CERT_ADD, |
| 83 CERT_DELETE | 83 CERT_DELETE |
|
wtc
2014/07/01 19:50:50
CERT_ADD => CHANNEL_ID_ADD
CERT_DELETE => CHANNEL_
Ryan Hamilton
2014/07/21 19:12:07
Done.
| |
| 84 } OperationType; | 84 } OperationType; |
| 85 | 85 |
| 86 PendingOperation( | 86 PendingOperation( |
| 87 OperationType op, | 87 OperationType op, |
| 88 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) | 88 const net::DefaultChannelIDStore::ChannelID& cert) |
|
wtc
2014/07/01 19:50:51
cert => channel_id
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 89 : op_(op), cert_(cert) {} | 89 : op_(op), cert_(cert) {} |
| 90 | 90 |
| 91 OperationType op() const { return op_; } | 91 OperationType op() const { return op_; } |
| 92 const net::DefaultServerBoundCertStore::ServerBoundCert& cert() const { | 92 const net::DefaultChannelIDStore::ChannelID& cert() const { |
|
wtc
2014/07/01 19:50:50
cert() => channel_id()
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 93 return cert_; | 93 return cert_; |
| 94 } | 94 } |
| 95 | 95 |
| 96 private: | 96 private: |
| 97 OperationType op_; | 97 OperationType op_; |
| 98 net::DefaultServerBoundCertStore::ServerBoundCert cert_; | 98 net::DefaultChannelIDStore::ChannelID cert_; |
|
wtc
2014/07/01 19:50:50
cert_ => channel_id_
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 99 }; | 99 }; |
| 100 | 100 |
| 101 private: | 101 private: |
| 102 // Batch a server bound cert operation (add or delete). | 102 // Batch a server bound cert operation (add or delete). |
| 103 void BatchOperation( | 103 void BatchOperation( |
| 104 PendingOperation::OperationType op, | 104 PendingOperation::OperationType op, |
| 105 const net::DefaultServerBoundCertStore::ServerBoundCert& cert); | 105 const net::DefaultChannelIDStore::ChannelID& cert); |
|
wtc
2014/07/01 19:50:51
cert => channel_id
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 106 // Commit our pending operations to the database. | 106 // Commit our pending operations to the database. |
| 107 void Commit(); | 107 void Commit(); |
| 108 // Close() executed on the background thread. | 108 // Close() executed on the background thread. |
| 109 void InternalBackgroundClose(); | 109 void InternalBackgroundClose(); |
| 110 | 110 |
| 111 void DeleteCertificatesOnShutdown(); | 111 void DeleteCertificatesOnShutdown(); |
| 112 | 112 |
| 113 void DatabaseErrorCallback(int error, sql::Statement* stmt); | 113 void DatabaseErrorCallback(int error, sql::Statement* stmt); |
| 114 void KillDatabase(); | 114 void KillDatabase(); |
| 115 | 115 |
| (...skipping 24 matching lines...) Expand all Loading... | |
| 140 | 140 |
| 141 // Version number of the database. | 141 // Version number of the database. |
| 142 static const int kCurrentVersionNumber = 4; | 142 static const int kCurrentVersionNumber = 4; |
| 143 static const int kCompatibleVersionNumber = 1; | 143 static const int kCompatibleVersionNumber = 1; |
| 144 | 144 |
| 145 namespace { | 145 namespace { |
| 146 | 146 |
| 147 // Initializes the certs table, returning true on success. | 147 // Initializes the certs table, returning true on success. |
| 148 bool InitTable(sql::Connection* db) { | 148 bool InitTable(sql::Connection* db) { |
| 149 // The table is named "origin_bound_certs" for backwards compatability before | 149 // The table is named "origin_bound_certs" for backwards compatability before |
| 150 // we renamed this class to SQLiteServerBoundCertStore. Likewise, the primary | 150 // we renamed this class to SQLiteChannelIDStore. Likewise, the primary |
| 151 // key is "origin", but now can be other things like a plain domain. | 151 // key is "origin", but now can be other things like a plain domain. |
| 152 if (!db->DoesTableExist("origin_bound_certs")) { | 152 if (!db->DoesTableExist("origin_bound_certs")) { |
| 153 if (!db->Execute("CREATE TABLE origin_bound_certs (" | 153 if (!db->Execute("CREATE TABLE origin_bound_certs (" |
| 154 "origin TEXT NOT NULL UNIQUE PRIMARY KEY," | 154 "origin TEXT NOT NULL UNIQUE PRIMARY KEY," |
| 155 "private_key BLOB NOT NULL," | 155 "private_key BLOB NOT NULL," |
| 156 "cert BLOB NOT NULL," | 156 "cert BLOB NOT NULL," |
| 157 "cert_type INTEGER," | 157 "cert_type INTEGER," |
| 158 "expiration_time INTEGER," | 158 "expiration_time INTEGER," |
| 159 "creation_time INTEGER)")) | 159 "creation_time INTEGER)")) |
| 160 return false; | 160 return false; |
| 161 } | 161 } |
| 162 | 162 |
| 163 return true; | 163 return true; |
| 164 } | 164 } |
| 165 | 165 |
| 166 } // namespace | 166 } // namespace |
| 167 | 167 |
| 168 void SQLiteServerBoundCertStore::Backend::Load( | 168 void SQLiteChannelIDStore::Backend::Load( |
| 169 const LoadedCallback& loaded_callback) { | 169 const LoadedCallback& loaded_callback) { |
| 170 // This function should be called only once per instance. | 170 // This function should be called only once per instance. |
| 171 DCHECK(!db_.get()); | 171 DCHECK(!db_.get()); |
| 172 scoped_ptr<ScopedVector<net::DefaultServerBoundCertStore::ServerBoundCert> > | 172 scoped_ptr<ScopedVector<net::DefaultChannelIDStore::ChannelID> > |
| 173 certs(new ScopedVector<net::DefaultServerBoundCertStore::ServerBoundCert>( | 173 certs(new ScopedVector<net::DefaultChannelIDStore::ChannelID>( |
| 174 )); | 174 )); |
| 175 ScopedVector<net::DefaultServerBoundCertStore::ServerBoundCert>* certs_ptr = | 175 ScopedVector<net::DefaultChannelIDStore::ChannelID>* certs_ptr = |
|
wtc
2014/07/01 19:50:50
certs_ptr => channel_ids_ptr
Ryan Hamilton
2014/07/21 19:12:07
Done.
| |
| 176 certs.get(); | 176 certs.get(); |
| 177 | 177 |
| 178 background_task_runner_->PostTaskAndReply( | 178 background_task_runner_->PostTaskAndReply( |
| 179 FROM_HERE, | 179 FROM_HERE, |
| 180 base::Bind(&Backend::LoadOnDBThread, this, certs_ptr), | 180 base::Bind(&Backend::LoadOnDBThread, this, certs_ptr), |
| 181 base::Bind(loaded_callback, base::Passed(&certs))); | 181 base::Bind(loaded_callback, base::Passed(&certs))); |
| 182 } | 182 } |
| 183 | 183 |
| 184 void SQLiteServerBoundCertStore::Backend::LoadOnDBThread( | 184 void SQLiteChannelIDStore::Backend::LoadOnDBThread( |
| 185 ScopedVector<net::DefaultServerBoundCertStore::ServerBoundCert>* certs) { | 185 ScopedVector<net::DefaultChannelIDStore::ChannelID>* certs) { |
|
wtc
2014/07/01 19:50:50
certs => channel_ids
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 186 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 186 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 187 | 187 |
| 188 // This method should be called only once per instance. | 188 // This method should be called only once per instance. |
| 189 DCHECK(!db_.get()); | 189 DCHECK(!db_.get()); |
| 190 | 190 |
| 191 base::TimeTicks start = base::TimeTicks::Now(); | 191 base::TimeTicks start = base::TimeTicks::Now(); |
| 192 | 192 |
| 193 // Ensure the parent directory for storing certs is created before reading | 193 // Ensure the parent directory for storing certs is created before reading |
| 194 // from it. | 194 // from it. |
| 195 const base::FilePath dir = path_.DirName(); | 195 const base::FilePath dir = path_.DirName(); |
| 196 if (!base::PathExists(dir) && !base::CreateDirectory(dir)) | 196 if (!base::PathExists(dir) && !base::CreateDirectory(dir)) |
| 197 return; | 197 return; |
| 198 | 198 |
| 199 int64 db_size = 0; | 199 int64 db_size = 0; |
| 200 if (base::GetFileSize(path_, &db_size)) | 200 if (base::GetFileSize(path_, &db_size)) |
| 201 UMA_HISTOGRAM_COUNTS("DomainBoundCerts.DBSizeInKB", db_size / 1024 ); | 201 UMA_HISTOGRAM_COUNTS("DomainBoundCerts.DBSizeInKB", db_size / 1024 ); |
| 202 | 202 |
| 203 db_.reset(new sql::Connection); | 203 db_.reset(new sql::Connection); |
| 204 db_->set_histogram_tag("DomainBoundCerts"); | 204 db_->set_histogram_tag("DomainBoundCerts"); |
| 205 | 205 |
| 206 // Unretained to avoid a ref loop with db_. | 206 // Unretained to avoid a ref loop with db_. |
| 207 db_->set_error_callback( | 207 db_->set_error_callback( |
| 208 base::Bind(&SQLiteServerBoundCertStore::Backend::DatabaseErrorCallback, | 208 base::Bind(&SQLiteChannelIDStore::Backend::DatabaseErrorCallback, |
| 209 base::Unretained(this))); | 209 base::Unretained(this))); |
| 210 | 210 |
| 211 if (!db_->Open(path_)) { | 211 if (!db_->Open(path_)) { |
| 212 NOTREACHED() << "Unable to open cert DB."; | 212 NOTREACHED() << "Unable to open cert DB."; |
| 213 if (corruption_detected_) | 213 if (corruption_detected_) |
| 214 KillDatabase(); | 214 KillDatabase(); |
| 215 db_.reset(); | 215 db_.reset(); |
| 216 return; | 216 return; |
| 217 } | 217 } |
| 218 | 218 |
| (...skipping 21 matching lines...) Expand all Loading... | |
| 240 } | 240 } |
| 241 | 241 |
| 242 while (smt.Step()) { | 242 while (smt.Step()) { |
| 243 net::SSLClientCertType type = | 243 net::SSLClientCertType type = |
| 244 static_cast<net::SSLClientCertType>(smt.ColumnInt(3)); | 244 static_cast<net::SSLClientCertType>(smt.ColumnInt(3)); |
| 245 if (type != net::CLIENT_CERT_ECDSA_SIGN) | 245 if (type != net::CLIENT_CERT_ECDSA_SIGN) |
| 246 continue; | 246 continue; |
| 247 std::string private_key_from_db, cert_from_db; | 247 std::string private_key_from_db, cert_from_db; |
| 248 smt.ColumnBlobAsString(1, &private_key_from_db); | 248 smt.ColumnBlobAsString(1, &private_key_from_db); |
| 249 smt.ColumnBlobAsString(2, &cert_from_db); | 249 smt.ColumnBlobAsString(2, &cert_from_db); |
| 250 scoped_ptr<net::DefaultServerBoundCertStore::ServerBoundCert> cert( | 250 scoped_ptr<net::DefaultChannelIDStore::ChannelID> cert( |
|
wtc
2014/07/01 19:50:50
cert => channel_id
Ryan Hamilton
2014/07/21 19:12:07
Done.
| |
| 251 new net::DefaultServerBoundCertStore::ServerBoundCert( | 251 new net::DefaultChannelIDStore::ChannelID( |
| 252 smt.ColumnString(0), // origin | 252 smt.ColumnString(0), // origin |
| 253 base::Time::FromInternalValue(smt.ColumnInt64(5)), | 253 base::Time::FromInternalValue(smt.ColumnInt64(5)), |
| 254 base::Time::FromInternalValue(smt.ColumnInt64(4)), | 254 base::Time::FromInternalValue(smt.ColumnInt64(4)), |
| 255 private_key_from_db, | 255 private_key_from_db, |
| 256 cert_from_db)); | 256 cert_from_db)); |
| 257 cert_origins_.insert(cert->server_identifier()); | 257 cert_origins_.insert(cert->server_identifier()); |
|
wtc
2014/07/01 19:50:50
cert_origins_ => channel_id_origins_
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 258 certs->push_back(cert.release()); | 258 certs->push_back(cert.release()); |
| 259 } | 259 } |
| 260 | 260 |
| 261 UMA_HISTOGRAM_COUNTS_10000("DomainBoundCerts.DBLoadedCount", certs->size()); | 261 UMA_HISTOGRAM_COUNTS_10000("DomainBoundCerts.DBLoadedCount", certs->size()); |
| 262 base::TimeDelta load_time = base::TimeTicks::Now() - start; | 262 base::TimeDelta load_time = base::TimeTicks::Now() - start; |
| 263 UMA_HISTOGRAM_CUSTOM_TIMES("DomainBoundCerts.DBLoadTime", | 263 UMA_HISTOGRAM_CUSTOM_TIMES("DomainBoundCerts.DBLoadTime", |
| 264 load_time, | 264 load_time, |
| 265 base::TimeDelta::FromMilliseconds(1), | 265 base::TimeDelta::FromMilliseconds(1), |
| 266 base::TimeDelta::FromMinutes(1), | 266 base::TimeDelta::FromMinutes(1), |
| 267 50); | 267 50); |
| 268 DVLOG(1) << "loaded " << certs->size() << " in " << load_time.InMilliseconds() | 268 DVLOG(1) << "loaded " << certs->size() << " in " << load_time.InMilliseconds() |
| 269 << " ms"; | 269 << " ms"; |
| 270 } | 270 } |
| 271 | 271 |
| 272 bool SQLiteServerBoundCertStore::Backend::EnsureDatabaseVersion() { | 272 bool SQLiteChannelIDStore::Backend::EnsureDatabaseVersion() { |
| 273 // Version check. | 273 // Version check. |
| 274 if (!meta_table_.Init( | 274 if (!meta_table_.Init( |
| 275 db_.get(), kCurrentVersionNumber, kCompatibleVersionNumber)) { | 275 db_.get(), kCurrentVersionNumber, kCompatibleVersionNumber)) { |
| 276 return false; | 276 return false; |
| 277 } | 277 } |
| 278 | 278 |
| 279 if (meta_table_.GetCompatibleVersionNumber() > kCurrentVersionNumber) { | 279 if (meta_table_.GetCompatibleVersionNumber() > kCurrentVersionNumber) { |
| 280 LOG(WARNING) << "Server bound cert database is too new."; | 280 LOG(WARNING) << "Server bound cert database is too new."; |
| 281 return false; | 281 return false; |
| 282 } | 282 } |
| (...skipping 106 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 389 | 389 |
| 390 // When the version is too old, we just try to continue anyway, there should | 390 // When the version is too old, we just try to continue anyway, there should |
| 391 // not be a released product that makes a database too old for us to handle. | 391 // not be a released product that makes a database too old for us to handle. |
| 392 LOG_IF(WARNING, cur_version < kCurrentVersionNumber) << | 392 LOG_IF(WARNING, cur_version < kCurrentVersionNumber) << |
| 393 "Server bound cert database version " << cur_version << | 393 "Server bound cert database version " << cur_version << |
| 394 " is too old to handle."; | 394 " is too old to handle."; |
| 395 | 395 |
| 396 return true; | 396 return true; |
| 397 } | 397 } |
| 398 | 398 |
| 399 void SQLiteServerBoundCertStore::Backend::DatabaseErrorCallback( | 399 void SQLiteChannelIDStore::Backend::DatabaseErrorCallback( |
| 400 int error, | 400 int error, |
| 401 sql::Statement* stmt) { | 401 sql::Statement* stmt) { |
| 402 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 402 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 403 | 403 |
| 404 if (!sql::IsErrorCatastrophic(error)) | 404 if (!sql::IsErrorCatastrophic(error)) |
| 405 return; | 405 return; |
| 406 | 406 |
| 407 // TODO(shess): Running KillDatabase() multiple times should be | 407 // TODO(shess): Running KillDatabase() multiple times should be |
| 408 // safe. | 408 // safe. |
| 409 if (corruption_detected_) | 409 if (corruption_detected_) |
| 410 return; | 410 return; |
| 411 | 411 |
| 412 corruption_detected_ = true; | 412 corruption_detected_ = true; |
| 413 | 413 |
| 414 // TODO(shess): Consider just calling RazeAndClose() immediately. | 414 // TODO(shess): Consider just calling RazeAndClose() immediately. |
| 415 // db_ may not be safe to reset at this point, but RazeAndClose() | 415 // db_ may not be safe to reset at this point, but RazeAndClose() |
| 416 // would cause the stack to unwind safely with errors. | 416 // would cause the stack to unwind safely with errors. |
| 417 background_task_runner_->PostTask(FROM_HERE, | 417 background_task_runner_->PostTask(FROM_HERE, |
| 418 base::Bind(&Backend::KillDatabase, this)); | 418 base::Bind(&Backend::KillDatabase, this)); |
| 419 } | 419 } |
| 420 | 420 |
| 421 void SQLiteServerBoundCertStore::Backend::KillDatabase() { | 421 void SQLiteChannelIDStore::Backend::KillDatabase() { |
| 422 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 422 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 423 | 423 |
| 424 if (db_) { | 424 if (db_) { |
| 425 // This Backend will now be in-memory only. In a future run the database | 425 // This Backend will now be in-memory only. In a future run the database |
| 426 // will be recreated. Hopefully things go better then! | 426 // will be recreated. Hopefully things go better then! |
| 427 bool success = db_->RazeAndClose(); | 427 bool success = db_->RazeAndClose(); |
| 428 UMA_HISTOGRAM_BOOLEAN("DomainBoundCerts.KillDatabaseResult", success); | 428 UMA_HISTOGRAM_BOOLEAN("DomainBoundCerts.KillDatabaseResult", success); |
| 429 meta_table_.Reset(); | 429 meta_table_.Reset(); |
| 430 db_.reset(); | 430 db_.reset(); |
| 431 } | 431 } |
| 432 } | 432 } |
| 433 | 433 |
| 434 void SQLiteServerBoundCertStore::Backend::AddServerBoundCert( | 434 void SQLiteChannelIDStore::Backend::AddChannelID( |
| 435 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) { | 435 const net::DefaultChannelIDStore::ChannelID& cert) { |
| 436 BatchOperation(PendingOperation::CERT_ADD, cert); | 436 BatchOperation(PendingOperation::CERT_ADD, cert); |
| 437 } | 437 } |
| 438 | 438 |
| 439 void SQLiteServerBoundCertStore::Backend::DeleteServerBoundCert( | 439 void SQLiteChannelIDStore::Backend::DeleteChannelID( |
| 440 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) { | 440 const net::DefaultChannelIDStore::ChannelID& cert) { |
| 441 BatchOperation(PendingOperation::CERT_DELETE, cert); | 441 BatchOperation(PendingOperation::CERT_DELETE, cert); |
| 442 } | 442 } |
| 443 | 443 |
| 444 void SQLiteServerBoundCertStore::Backend::BatchOperation( | 444 void SQLiteChannelIDStore::Backend::BatchOperation( |
| 445 PendingOperation::OperationType op, | 445 PendingOperation::OperationType op, |
| 446 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) { | 446 const net::DefaultChannelIDStore::ChannelID& cert) { |
|
wtc
2014/07/01 19:50:50
cert => channel_id
in these three methods.
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 447 // Commit every 30 seconds. | 447 // Commit every 30 seconds. |
| 448 static const int kCommitIntervalMs = 30 * 1000; | 448 static const int kCommitIntervalMs = 30 * 1000; |
| 449 // Commit right away if we have more than 512 outstanding operations. | 449 // Commit right away if we have more than 512 outstanding operations. |
| 450 static const size_t kCommitAfterBatchSize = 512; | 450 static const size_t kCommitAfterBatchSize = 512; |
| 451 | 451 |
| 452 // We do a full copy of the cert here, and hopefully just here. | 452 // We do a full copy of the cert here, and hopefully just here. |
| 453 scoped_ptr<PendingOperation> po(new PendingOperation(op, cert)); | 453 scoped_ptr<PendingOperation> po(new PendingOperation(op, cert)); |
| 454 | 454 |
| 455 PendingOperationsList::size_type num_pending; | 455 PendingOperationsList::size_type num_pending; |
| 456 { | 456 { |
| 457 base::AutoLock locked(lock_); | 457 base::AutoLock locked(lock_); |
| 458 pending_.push_back(po.release()); | 458 pending_.push_back(po.release()); |
| 459 num_pending = ++num_pending_; | 459 num_pending = ++num_pending_; |
| 460 } | 460 } |
| 461 | 461 |
| 462 if (num_pending == 1) { | 462 if (num_pending == 1) { |
| 463 // We've gotten our first entry for this batch, fire off the timer. | 463 // We've gotten our first entry for this batch, fire off the timer. |
| 464 background_task_runner_->PostDelayedTask( | 464 background_task_runner_->PostDelayedTask( |
| 465 FROM_HERE, | 465 FROM_HERE, |
| 466 base::Bind(&Backend::Commit, this), | 466 base::Bind(&Backend::Commit, this), |
| 467 base::TimeDelta::FromMilliseconds(kCommitIntervalMs)); | 467 base::TimeDelta::FromMilliseconds(kCommitIntervalMs)); |
| 468 } else if (num_pending == kCommitAfterBatchSize) { | 468 } else if (num_pending == kCommitAfterBatchSize) { |
| 469 // We've reached a big enough batch, fire off a commit now. | 469 // We've reached a big enough batch, fire off a commit now. |
| 470 background_task_runner_->PostTask(FROM_HERE, | 470 background_task_runner_->PostTask(FROM_HERE, |
| 471 base::Bind(&Backend::Commit, this)); | 471 base::Bind(&Backend::Commit, this)); |
| 472 } | 472 } |
| 473 } | 473 } |
| 474 | 474 |
| 475 void SQLiteServerBoundCertStore::Backend::Commit() { | 475 void SQLiteChannelIDStore::Backend::Commit() { |
| 476 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 476 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 477 | 477 |
| 478 PendingOperationsList ops; | 478 PendingOperationsList ops; |
| 479 { | 479 { |
| 480 base::AutoLock locked(lock_); | 480 base::AutoLock locked(lock_); |
| 481 pending_.swap(ops); | 481 pending_.swap(ops); |
| 482 num_pending_ = 0; | 482 num_pending_ = 0; |
| 483 } | 483 } |
| 484 | 484 |
| 485 // Maybe an old timer fired or we are already Close()'ed. | 485 // Maybe an old timer fired or we are already Close()'ed. |
| (...skipping 47 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 533 NOTREACHED(); | 533 NOTREACHED(); |
| 534 break; | 534 break; |
| 535 } | 535 } |
| 536 } | 536 } |
| 537 transaction.Commit(); | 537 transaction.Commit(); |
| 538 } | 538 } |
| 539 | 539 |
| 540 // Fire off a close message to the background thread. We could still have a | 540 // Fire off a close message to the background thread. We could still have a |
| 541 // pending commit timer that will be holding a reference on us, but if/when | 541 // pending commit timer that will be holding a reference on us, but if/when |
| 542 // this fires we will already have been cleaned up and it will be ignored. | 542 // this fires we will already have been cleaned up and it will be ignored. |
| 543 void SQLiteServerBoundCertStore::Backend::Close() { | 543 void SQLiteChannelIDStore::Backend::Close() { |
| 544 // Must close the backend on the background thread. | 544 // Must close the backend on the background thread. |
| 545 background_task_runner_->PostTask( | 545 background_task_runner_->PostTask( |
| 546 FROM_HERE, base::Bind(&Backend::InternalBackgroundClose, this)); | 546 FROM_HERE, base::Bind(&Backend::InternalBackgroundClose, this)); |
| 547 } | 547 } |
| 548 | 548 |
| 549 void SQLiteServerBoundCertStore::Backend::InternalBackgroundClose() { | 549 void SQLiteChannelIDStore::Backend::InternalBackgroundClose() { |
| 550 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 550 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 551 // Commit any pending operations | 551 // Commit any pending operations |
| 552 Commit(); | 552 Commit(); |
| 553 | 553 |
| 554 if (!force_keep_session_state_ && | 554 if (!force_keep_session_state_ && |
| 555 special_storage_policy_.get() && | 555 special_storage_policy_.get() && |
| 556 special_storage_policy_->HasSessionOnlyOrigins()) { | 556 special_storage_policy_->HasSessionOnlyOrigins()) { |
| 557 DeleteCertificatesOnShutdown(); | 557 DeleteCertificatesOnShutdown(); |
| 558 } | 558 } |
| 559 | 559 |
| 560 db_.reset(); | 560 db_.reset(); |
| 561 } | 561 } |
| 562 | 562 |
| 563 void SQLiteServerBoundCertStore::Backend::DeleteCertificatesOnShutdown() { | 563 void SQLiteChannelIDStore::Backend::DeleteCertificatesOnShutdown() { |
| 564 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); | 564 DCHECK(background_task_runner_->RunsTasksOnCurrentThread()); |
| 565 | 565 |
| 566 if (!db_.get()) | 566 if (!db_.get()) |
| 567 return; | 567 return; |
| 568 | 568 |
| 569 if (cert_origins_.empty()) | 569 if (cert_origins_.empty()) |
| 570 return; | 570 return; |
| 571 | 571 |
| 572 if (!special_storage_policy_.get()) | 572 if (!special_storage_policy_.get()) |
| 573 return; | 573 return; |
| (...skipping 19 matching lines...) Expand all Loading... | |
| 593 del_smt.Reset(true); | 593 del_smt.Reset(true); |
| 594 del_smt.BindString(0, *it); | 594 del_smt.BindString(0, *it); |
| 595 if (!del_smt.Run()) | 595 if (!del_smt.Run()) |
| 596 NOTREACHED() << "Could not delete a certificate from the DB."; | 596 NOTREACHED() << "Could not delete a certificate from the DB."; |
| 597 } | 597 } |
| 598 | 598 |
| 599 if (!transaction.Commit()) | 599 if (!transaction.Commit()) |
| 600 LOG(WARNING) << "Unable to delete certificates on shutdown."; | 600 LOG(WARNING) << "Unable to delete certificates on shutdown."; |
| 601 } | 601 } |
| 602 | 602 |
| 603 void SQLiteServerBoundCertStore::Backend::SetForceKeepSessionState() { | 603 void SQLiteChannelIDStore::Backend::SetForceKeepSessionState() { |
| 604 base::AutoLock locked(lock_); | 604 base::AutoLock locked(lock_); |
| 605 force_keep_session_state_ = true; | 605 force_keep_session_state_ = true; |
| 606 } | 606 } |
| 607 | 607 |
| 608 SQLiteServerBoundCertStore::SQLiteServerBoundCertStore( | 608 SQLiteChannelIDStore::SQLiteChannelIDStore( |
| 609 const base::FilePath& path, | 609 const base::FilePath& path, |
| 610 const scoped_refptr<base::SequencedTaskRunner>& background_task_runner, | 610 const scoped_refptr<base::SequencedTaskRunner>& background_task_runner, |
| 611 quota::SpecialStoragePolicy* special_storage_policy) | 611 quota::SpecialStoragePolicy* special_storage_policy) |
| 612 : backend_(new Backend(path, | 612 : backend_(new Backend(path, |
| 613 background_task_runner, | 613 background_task_runner, |
| 614 special_storage_policy)) {} | 614 special_storage_policy)) {} |
| 615 | 615 |
| 616 void SQLiteServerBoundCertStore::Load( | 616 void SQLiteChannelIDStore::Load( |
| 617 const LoadedCallback& loaded_callback) { | 617 const LoadedCallback& loaded_callback) { |
| 618 backend_->Load(loaded_callback); | 618 backend_->Load(loaded_callback); |
| 619 } | 619 } |
| 620 | 620 |
| 621 void SQLiteServerBoundCertStore::AddServerBoundCert( | 621 void SQLiteChannelIDStore::AddChannelID( |
| 622 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) { | 622 const net::DefaultChannelIDStore::ChannelID& cert) { |
| 623 backend_->AddServerBoundCert(cert); | 623 backend_->AddChannelID(cert); |
| 624 } | 624 } |
| 625 | 625 |
| 626 void SQLiteServerBoundCertStore::DeleteServerBoundCert( | 626 void SQLiteChannelIDStore::DeleteChannelID( |
| 627 const net::DefaultServerBoundCertStore::ServerBoundCert& cert) { | 627 const net::DefaultChannelIDStore::ChannelID& cert) { |
|
wtc
2014/07/01 19:50:51
cert => channel_id
in these two methods.
Ryan Hamilton
2014/07/21 19:12:06
Done.
| |
| 628 backend_->DeleteServerBoundCert(cert); | 628 backend_->DeleteChannelID(cert); |
| 629 } | 629 } |
| 630 | 630 |
| 631 void SQLiteServerBoundCertStore::SetForceKeepSessionState() { | 631 void SQLiteChannelIDStore::SetForceKeepSessionState() { |
| 632 backend_->SetForceKeepSessionState(); | 632 backend_->SetForceKeepSessionState(); |
| 633 } | 633 } |
| 634 | 634 |
| 635 SQLiteServerBoundCertStore::~SQLiteServerBoundCertStore() { | 635 SQLiteChannelIDStore::~SQLiteChannelIDStore() { |
| 636 backend_->Close(); | 636 backend_->Close(); |
| 637 // We release our reference to the Backend, though it will probably still have | 637 // We release our reference to the Backend, though it will probably still have |
| 638 // a reference if the background thread has not run Close() yet. | 638 // a reference if the background thread has not run Close() yet. |
| 639 } | 639 } |
| OLD | NEW |