OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "net/ocsp/nss_ocsp.h" | 5 #include "net/ocsp/nss_ocsp.h" |
6 | 6 |
7 #include <certt.h> | 7 #include <certt.h> |
8 #include <certdb.h> | 8 #include <certdb.h> |
9 #include <ocsp.h> | 9 #include <ocsp.h> |
10 #include <nspr.h> | 10 #include <nspr.h> |
11 #include <nss.h> | 11 #include <nss.h> |
12 #include <pthread.h> | 12 #include <pthread.h> |
13 #include <secerr.h> | 13 #include <secerr.h> |
14 | 14 |
15 #include <algorithm> | 15 #include <algorithm> |
16 #include <string> | 16 #include <string> |
17 | 17 |
18 #include "base/basictypes.h" | 18 #include "base/basictypes.h" |
19 #include "base/callback.h" | 19 #include "base/callback.h" |
20 #include "base/compiler_specific.h" | 20 #include "base/compiler_specific.h" |
21 #include "base/lazy_instance.h" | 21 #include "base/lazy_instance.h" |
22 #include "base/logging.h" | 22 #include "base/logging.h" |
| 23 #include "base/memory/scoped_ptr.h" |
23 #include "base/message_loop/message_loop.h" | 24 #include "base/message_loop/message_loop.h" |
24 #include "base/metrics/histogram.h" | 25 #include "base/metrics/histogram.h" |
25 #include "base/stl_util.h" | 26 #include "base/stl_util.h" |
26 #include "base/strings/string_util.h" | 27 #include "base/strings/string_util.h" |
27 #include "base/strings/stringprintf.h" | 28 #include "base/strings/stringprintf.h" |
28 #include "base/synchronization/condition_variable.h" | 29 #include "base/synchronization/condition_variable.h" |
29 #include "base/synchronization/lock.h" | 30 #include "base/synchronization/lock.h" |
30 #include "base/threading/thread_checker.h" | 31 #include "base/threading/thread_checker.h" |
31 #include "base/time/time.h" | 32 #include "base/time/time.h" |
32 #include "net/base/host_port_pair.h" | 33 #include "net/base/host_port_pair.h" |
(...skipping 146 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
179 class OCSPRequestSession | 180 class OCSPRequestSession |
180 : public base::RefCountedThreadSafe<OCSPRequestSession>, | 181 : public base::RefCountedThreadSafe<OCSPRequestSession>, |
181 public URLRequest::Delegate { | 182 public URLRequest::Delegate { |
182 public: | 183 public: |
183 OCSPRequestSession(const GURL& url, | 184 OCSPRequestSession(const GURL& url, |
184 const char* http_request_method, | 185 const char* http_request_method, |
185 base::TimeDelta timeout) | 186 base::TimeDelta timeout) |
186 : url_(url), | 187 : url_(url), |
187 http_request_method_(http_request_method), | 188 http_request_method_(http_request_method), |
188 timeout_(timeout), | 189 timeout_(timeout), |
189 request_(NULL), | |
190 buffer_(new IOBuffer(kRecvBufferSize)), | 190 buffer_(new IOBuffer(kRecvBufferSize)), |
191 response_code_(-1), | 191 response_code_(-1), |
192 cv_(&lock_), | 192 cv_(&lock_), |
193 io_loop_(NULL), | 193 io_loop_(NULL), |
194 finished_(false) {} | 194 finished_(false) {} |
195 | 195 |
196 void SetPostData(const char* http_data, PRUint32 http_data_len, | 196 void SetPostData(const char* http_data, PRUint32 http_data_len, |
197 const char* http_content_type) { | 197 const char* http_content_type) { |
198 // |upload_content_| should not be modified if |request_| is active. | 198 // |upload_content_| should not be modified if |request_| is active. |
199 DCHECK(!request_); | 199 DCHECK(!request_); |
(...skipping 10 matching lines...) Expand all Loading... |
210 // At this point, it runs on worker thread. | 210 // At this point, it runs on worker thread. |
211 // |io_loop_| was initialized to be NULL in constructor, and | 211 // |io_loop_| was initialized to be NULL in constructor, and |
212 // set only in StartURLRequest, so no need to lock |lock_| here. | 212 // set only in StartURLRequest, so no need to lock |lock_| here. |
213 DCHECK(!io_loop_); | 213 DCHECK(!io_loop_); |
214 g_ocsp_io_loop.Get().PostTaskToIOLoop( | 214 g_ocsp_io_loop.Get().PostTaskToIOLoop( |
215 FROM_HERE, | 215 FROM_HERE, |
216 base::Bind(&OCSPRequestSession::StartURLRequest, this)); | 216 base::Bind(&OCSPRequestSession::StartURLRequest, this)); |
217 } | 217 } |
218 | 218 |
219 bool Started() const { | 219 bool Started() const { |
220 return request_ != NULL; | 220 return request_.get() != NULL; |
221 } | 221 } |
222 | 222 |
223 void Cancel() { | 223 void Cancel() { |
224 // IO thread may set |io_loop_| to NULL, so protect by |lock_|. | 224 // IO thread may set |io_loop_| to NULL, so protect by |lock_|. |
225 base::AutoLock autolock(lock_); | 225 base::AutoLock autolock(lock_); |
226 CancelLocked(); | 226 CancelLocked(); |
227 } | 227 } |
228 | 228 |
229 bool Finished() const { | 229 bool Finished() const { |
230 base::AutoLock autolock(lock_); | 230 base::AutoLock autolock(lock_); |
(...skipping 47 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
278 } | 278 } |
279 | 279 |
280 const std::string& http_response_data() const { | 280 const std::string& http_response_data() const { |
281 DCHECK(finished_); | 281 DCHECK(finished_); |
282 return data_; | 282 return data_; |
283 } | 283 } |
284 | 284 |
285 virtual void OnReceivedRedirect(URLRequest* request, | 285 virtual void OnReceivedRedirect(URLRequest* request, |
286 const GURL& new_url, | 286 const GURL& new_url, |
287 bool* defer_redirect) OVERRIDE { | 287 bool* defer_redirect) OVERRIDE { |
288 DCHECK_EQ(request, request_); | 288 DCHECK_EQ(request_.get(), request); |
289 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); | 289 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); |
290 | 290 |
291 if (!new_url.SchemeIs("http")) { | 291 if (!new_url.SchemeIs("http")) { |
292 // Prevent redirects to non-HTTP schemes, including HTTPS. This matches | 292 // Prevent redirects to non-HTTP schemes, including HTTPS. This matches |
293 // the initial check in OCSPServerSession::CreateRequest(). | 293 // the initial check in OCSPServerSession::CreateRequest(). |
294 CancelURLRequest(); | 294 CancelURLRequest(); |
295 } | 295 } |
296 } | 296 } |
297 | 297 |
298 virtual void OnResponseStarted(URLRequest* request) OVERRIDE { | 298 virtual void OnResponseStarted(URLRequest* request) OVERRIDE { |
299 DCHECK_EQ(request, request_); | 299 DCHECK_EQ(request_.get(), request); |
300 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); | 300 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); |
301 | 301 |
302 int bytes_read = 0; | 302 int bytes_read = 0; |
303 if (request->status().is_success()) { | 303 if (request->status().is_success()) { |
304 response_code_ = request_->GetResponseCode(); | 304 response_code_ = request_->GetResponseCode(); |
305 response_headers_ = request_->response_headers(); | 305 response_headers_ = request_->response_headers(); |
306 response_headers_->GetMimeType(&response_content_type_); | 306 response_headers_->GetMimeType(&response_content_type_); |
307 request_->Read(buffer_.get(), kRecvBufferSize, &bytes_read); | 307 request_->Read(buffer_.get(), kRecvBufferSize, &bytes_read); |
308 } | 308 } |
309 OnReadCompleted(request_, bytes_read); | 309 OnReadCompleted(request_.get(), bytes_read); |
310 } | 310 } |
311 | 311 |
312 virtual void OnReadCompleted(URLRequest* request, | 312 virtual void OnReadCompleted(URLRequest* request, |
313 int bytes_read) OVERRIDE { | 313 int bytes_read) OVERRIDE { |
314 DCHECK_EQ(request, request_); | 314 DCHECK_EQ(request_.get(), request); |
315 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); | 315 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); |
316 | 316 |
317 do { | 317 do { |
318 if (!request_->status().is_success() || bytes_read <= 0) | 318 if (!request_->status().is_success() || bytes_read <= 0) |
319 break; | 319 break; |
320 data_.append(buffer_->data(), bytes_read); | 320 data_.append(buffer_->data(), bytes_read); |
321 } while (request_->Read(buffer_.get(), kRecvBufferSize, &bytes_read)); | 321 } while (request_->Read(buffer_.get(), kRecvBufferSize, &bytes_read)); |
322 | 322 |
323 if (!request_->status().is_io_pending()) { | 323 if (!request_->status().is_io_pending()) { |
324 delete request_; | 324 request_.reset(); |
325 request_ = NULL; | |
326 g_ocsp_io_loop.Get().RemoveRequest(this); | 325 g_ocsp_io_loop.Get().RemoveRequest(this); |
327 { | 326 { |
328 base::AutoLock autolock(lock_); | 327 base::AutoLock autolock(lock_); |
329 finished_ = true; | 328 finished_ = true; |
330 io_loop_ = NULL; | 329 io_loop_ = NULL; |
331 } | 330 } |
332 cv_.Signal(); | 331 cv_.Signal(); |
333 Release(); // Balanced with StartURLRequest(). | 332 Release(); // Balanced with StartURLRequest(). |
334 } | 333 } |
335 } | 334 } |
336 | 335 |
337 // Must be called on the IO loop thread. | 336 // Must be called on the IO loop thread. |
338 void CancelURLRequest() { | 337 void CancelURLRequest() { |
339 #ifndef NDEBUG | 338 #ifndef NDEBUG |
340 { | 339 { |
341 base::AutoLock autolock(lock_); | 340 base::AutoLock autolock(lock_); |
342 if (io_loop_) | 341 if (io_loop_) |
343 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); | 342 DCHECK_EQ(base::MessageLoopForIO::current(), io_loop_); |
344 } | 343 } |
345 #endif | 344 #endif |
346 if (request_) { | 345 if (request_) { |
347 request_->Cancel(); | 346 request_.reset(); |
348 delete request_; | |
349 request_ = NULL; | |
350 g_ocsp_io_loop.Get().RemoveRequest(this); | 347 g_ocsp_io_loop.Get().RemoveRequest(this); |
351 { | 348 { |
352 base::AutoLock autolock(lock_); | 349 base::AutoLock autolock(lock_); |
353 finished_ = true; | 350 finished_ = true; |
354 io_loop_ = NULL; | 351 io_loop_ = NULL; |
355 } | 352 } |
356 cv_.Signal(); | 353 cv_.Signal(); |
357 Release(); // Balanced with StartURLRequest(). | 354 Release(); // Balanced with StartURLRequest(). |
358 } | 355 } |
359 } | 356 } |
(...skipping 30 matching lines...) Expand all Loading... |
390 if (url_request_context == NULL) | 387 if (url_request_context == NULL) |
391 return; | 388 return; |
392 | 389 |
393 { | 390 { |
394 base::AutoLock autolock(lock_); | 391 base::AutoLock autolock(lock_); |
395 DCHECK(!io_loop_); | 392 DCHECK(!io_loop_); |
396 io_loop_ = base::MessageLoopForIO::current(); | 393 io_loop_ = base::MessageLoopForIO::current(); |
397 g_ocsp_io_loop.Get().AddRequest(this); | 394 g_ocsp_io_loop.Get().AddRequest(this); |
398 } | 395 } |
399 | 396 |
400 request_ = | 397 request_ = url_request_context->CreateRequest( |
401 new URLRequest(url_, DEFAULT_PRIORITY, this, url_request_context); | 398 url_, DEFAULT_PRIORITY, this, NULL); |
402 // To meet the privacy requirements of incognito mode. | 399 // To meet the privacy requirements of incognito mode. |
403 request_->SetLoadFlags(LOAD_DISABLE_CACHE | LOAD_DO_NOT_SAVE_COOKIES | | 400 request_->SetLoadFlags(LOAD_DISABLE_CACHE | LOAD_DO_NOT_SAVE_COOKIES | |
404 LOAD_DO_NOT_SEND_COOKIES); | 401 LOAD_DO_NOT_SEND_COOKIES); |
405 | 402 |
406 if (http_request_method_ == "POST") { | 403 if (http_request_method_ == "POST") { |
407 DCHECK(!upload_content_.empty()); | 404 DCHECK(!upload_content_.empty()); |
408 DCHECK(!upload_content_type_.empty()); | 405 DCHECK(!upload_content_type_.empty()); |
409 | 406 |
410 request_->set_method("POST"); | 407 request_->set_method("POST"); |
411 extra_request_headers_.SetHeader( | 408 extra_request_headers_.SetHeader( |
412 HttpRequestHeaders::kContentType, upload_content_type_); | 409 HttpRequestHeaders::kContentType, upload_content_type_); |
413 | 410 |
414 scoped_ptr<UploadElementReader> reader(new UploadBytesElementReader( | 411 scoped_ptr<UploadElementReader> reader(new UploadBytesElementReader( |
415 upload_content_.data(), upload_content_.size())); | 412 upload_content_.data(), upload_content_.size())); |
416 request_->set_upload(make_scoped_ptr( | 413 request_->set_upload(make_scoped_ptr( |
417 UploadDataStream::CreateWithReader(reader.Pass(), 0))); | 414 UploadDataStream::CreateWithReader(reader.Pass(), 0))); |
418 } | 415 } |
419 if (!extra_request_headers_.IsEmpty()) | 416 if (!extra_request_headers_.IsEmpty()) |
420 request_->SetExtraRequestHeaders(extra_request_headers_); | 417 request_->SetExtraRequestHeaders(extra_request_headers_); |
421 | 418 |
422 request_->Start(); | 419 request_->Start(); |
423 AddRef(); // Release after |request_| deleted. | 420 AddRef(); // Release after |request_| deleted. |
424 } | 421 } |
425 | 422 |
426 GURL url_; // The URL we eventually wound up at | 423 GURL url_; // The URL we eventually wound up at |
427 std::string http_request_method_; | 424 std::string http_request_method_; |
428 base::TimeDelta timeout_; // The timeout for OCSP | 425 base::TimeDelta timeout_; // The timeout for OCSP |
429 URLRequest* request_; // The actual request this wraps | 426 scoped_ptr<URLRequest> request_; // The actual request this wraps |
430 scoped_refptr<IOBuffer> buffer_; // Read buffer | 427 scoped_refptr<IOBuffer> buffer_; // Read buffer |
431 HttpRequestHeaders extra_request_headers_; | 428 HttpRequestHeaders extra_request_headers_; |
432 | 429 |
433 // HTTP POST payload. |request_| reads bytes from this. | 430 // HTTP POST payload. |request_| reads bytes from this. |
434 std::string upload_content_; | 431 std::string upload_content_; |
435 std::string upload_content_type_; // MIME type of POST payload | 432 std::string upload_content_type_; // MIME type of POST payload |
436 | 433 |
437 int response_code_; // HTTP status code for the request | 434 int response_code_; // HTTP status code for the request |
438 std::string response_content_type_; | 435 std::string response_content_type_; |
439 scoped_refptr<HttpResponseHeaders> response_headers_; | 436 scoped_refptr<HttpResponseHeaders> response_headers_; |
(...skipping 530 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
970 void SetURLRequestContextForNSSHttpIO(URLRequestContext* request_context) { | 967 void SetURLRequestContextForNSSHttpIO(URLRequestContext* request_context) { |
971 pthread_mutex_lock(&g_request_context_lock); | 968 pthread_mutex_lock(&g_request_context_lock); |
972 if (request_context) { | 969 if (request_context) { |
973 DCHECK(!g_request_context); | 970 DCHECK(!g_request_context); |
974 } | 971 } |
975 g_request_context = request_context; | 972 g_request_context = request_context; |
976 pthread_mutex_unlock(&g_request_context_lock); | 973 pthread_mutex_unlock(&g_request_context_lock); |
977 } | 974 } |
978 | 975 |
979 } // namespace net | 976 } // namespace net |
OLD | NEW |