OLD | NEW |
| (Empty) |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "net/ssl/client_cert_store_chromeos.h" | |
6 | |
7 #include <cert.h> | |
8 | |
9 #include "base/bind.h" | |
10 #include "crypto/nss_crypto_module_delegate.h" | |
11 #include "crypto/nss_util_internal.h" | |
12 | |
13 namespace net { | |
14 | |
15 namespace { | |
16 | |
17 typedef base::Callback<void(crypto::ScopedPK11Slot system_slot, | |
18 crypto::ScopedPK11Slot private_slot)> | |
19 GetSystemAndPrivateSlotCallback; | |
20 | |
21 // Gets the private slot for the user with the username hash |username_hash| and | |
22 // calls |callback| with both |system_slot| and the obtained private slot. | |
23 void GetPrivateSlotAndCallBack(const std::string& username_hash, | |
24 const GetSystemAndPrivateSlotCallback& callback, | |
25 crypto::ScopedPK11Slot system_slot) { | |
26 base::Callback<void(crypto::ScopedPK11Slot)> wrapped_callback = | |
27 base::Bind(callback, base::Passed(&system_slot)); | |
28 | |
29 crypto::ScopedPK11Slot slot( | |
30 crypto::GetPrivateSlotForChromeOSUser(username_hash, wrapped_callback)); | |
31 if (slot) | |
32 wrapped_callback.Run(slot.Pass()); | |
33 } | |
34 | |
35 // Gets the system slot, then the private slot for the user with the username | |
36 // hash |username_hash|, and finally calls |callback| with both slots. | |
37 void GetSystemAndPrivateSlot(const std::string& username_hash, | |
38 const GetSystemAndPrivateSlotCallback& callback) { | |
39 crypto::ScopedPK11Slot system_slot(crypto::GetSystemNSSKeySlot( | |
40 base::Bind(&GetPrivateSlotAndCallBack, username_hash, callback))); | |
41 if (system_slot) | |
42 GetPrivateSlotAndCallBack(username_hash, callback, system_slot.Pass()); | |
43 } | |
44 | |
45 } // namespace | |
46 | |
47 ClientCertStoreChromeOS::ClientCertStoreChromeOS( | |
48 bool use_system_slot, | |
49 const std::string& username_hash, | |
50 const PasswordDelegateFactory& password_delegate_factory) | |
51 : ClientCertStoreNSS(password_delegate_factory), | |
52 use_system_slot_(use_system_slot), | |
53 username_hash_(username_hash) { | |
54 } | |
55 | |
56 ClientCertStoreChromeOS::~ClientCertStoreChromeOS() {} | |
57 | |
58 void ClientCertStoreChromeOS::GetClientCerts( | |
59 const SSLCertRequestInfo& cert_request_info, | |
60 CertificateList* selected_certs, | |
61 const base::Closure& callback) { | |
62 GetSystemAndPrivateSlotCallback bound_callback = | |
63 base::Bind(&ClientCertStoreChromeOS::DidGetSystemAndPrivateSlot, | |
64 // Caller is responsible for keeping the ClientCertStore alive | |
65 // until the callback is run. | |
66 base::Unretained(this), | |
67 &cert_request_info, | |
68 selected_certs, | |
69 callback); | |
70 | |
71 if (use_system_slot_) { | |
72 GetSystemAndPrivateSlot(username_hash_, bound_callback); | |
73 } else { | |
74 // Skip getting the system slot. | |
75 GetPrivateSlotAndCallBack( | |
76 username_hash_, bound_callback, crypto::ScopedPK11Slot()); | |
77 } | |
78 } | |
79 | |
80 void ClientCertStoreChromeOS::GetClientCertsImpl( | |
81 CERTCertList* cert_list, | |
82 const SSLCertRequestInfo& request, | |
83 bool query_nssdb, | |
84 CertificateList* selected_certs) { | |
85 ClientCertStoreNSS::GetClientCertsImpl( | |
86 cert_list, request, query_nssdb, selected_certs); | |
87 | |
88 size_t pre_size = selected_certs->size(); | |
89 selected_certs->erase( | |
90 std::remove_if( | |
91 selected_certs->begin(), | |
92 selected_certs->end(), | |
93 NSSProfileFilterChromeOS::CertNotAllowedForProfilePredicate( | |
94 profile_filter_)), | |
95 selected_certs->end()); | |
96 DVLOG(1) << "filtered " << pre_size - selected_certs->size() << " of " | |
97 << pre_size << " certs"; | |
98 } | |
99 | |
100 void ClientCertStoreChromeOS::DidGetSystemAndPrivateSlot( | |
101 const SSLCertRequestInfo* request, | |
102 CertificateList* selected_certs, | |
103 const base::Closure& callback, | |
104 crypto::ScopedPK11Slot system_slot, | |
105 crypto::ScopedPK11Slot private_slot) { | |
106 profile_filter_.Init(crypto::GetPublicSlotForChromeOSUser(username_hash_), | |
107 private_slot.Pass(), | |
108 system_slot.Pass()); | |
109 ClientCertStoreNSS::GetClientCerts(*request, selected_certs, callback); | |
110 } | |
111 | |
112 } // namespace net | |
OLD | NEW |