| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "net/ssl/client_cert_store_chromeos.h" | |
| 6 | |
| 7 #include <cert.h> | |
| 8 | |
| 9 #include "base/bind.h" | |
| 10 #include "crypto/nss_crypto_module_delegate.h" | |
| 11 #include "crypto/nss_util_internal.h" | |
| 12 | |
| 13 namespace net { | |
| 14 | |
| 15 namespace { | |
| 16 | |
| 17 typedef base::Callback<void(crypto::ScopedPK11Slot system_slot, | |
| 18 crypto::ScopedPK11Slot private_slot)> | |
| 19 GetSystemAndPrivateSlotCallback; | |
| 20 | |
| 21 // Gets the private slot for the user with the username hash |username_hash| and | |
| 22 // calls |callback| with both |system_slot| and the obtained private slot. | |
| 23 void GetPrivateSlotAndCallBack(const std::string& username_hash, | |
| 24 const GetSystemAndPrivateSlotCallback& callback, | |
| 25 crypto::ScopedPK11Slot system_slot) { | |
| 26 base::Callback<void(crypto::ScopedPK11Slot)> wrapped_callback = | |
| 27 base::Bind(callback, base::Passed(&system_slot)); | |
| 28 | |
| 29 crypto::ScopedPK11Slot slot( | |
| 30 crypto::GetPrivateSlotForChromeOSUser(username_hash, wrapped_callback)); | |
| 31 if (slot) | |
| 32 wrapped_callback.Run(slot.Pass()); | |
| 33 } | |
| 34 | |
| 35 // Gets the system slot, then the private slot for the user with the username | |
| 36 // hash |username_hash|, and finally calls |callback| with both slots. | |
| 37 void GetSystemAndPrivateSlot(const std::string& username_hash, | |
| 38 const GetSystemAndPrivateSlotCallback& callback) { | |
| 39 crypto::ScopedPK11Slot system_slot(crypto::GetSystemNSSKeySlot( | |
| 40 base::Bind(&GetPrivateSlotAndCallBack, username_hash, callback))); | |
| 41 if (system_slot) | |
| 42 GetPrivateSlotAndCallBack(username_hash, callback, system_slot.Pass()); | |
| 43 } | |
| 44 | |
| 45 } // namespace | |
| 46 | |
| 47 ClientCertStoreChromeOS::ClientCertStoreChromeOS( | |
| 48 bool use_system_slot, | |
| 49 const std::string& username_hash, | |
| 50 const PasswordDelegateFactory& password_delegate_factory) | |
| 51 : ClientCertStoreNSS(password_delegate_factory), | |
| 52 use_system_slot_(use_system_slot), | |
| 53 username_hash_(username_hash) { | |
| 54 } | |
| 55 | |
| 56 ClientCertStoreChromeOS::~ClientCertStoreChromeOS() {} | |
| 57 | |
| 58 void ClientCertStoreChromeOS::GetClientCerts( | |
| 59 const SSLCertRequestInfo& cert_request_info, | |
| 60 CertificateList* selected_certs, | |
| 61 const base::Closure& callback) { | |
| 62 GetSystemAndPrivateSlotCallback bound_callback = | |
| 63 base::Bind(&ClientCertStoreChromeOS::DidGetSystemAndPrivateSlot, | |
| 64 // Caller is responsible for keeping the ClientCertStore alive | |
| 65 // until the callback is run. | |
| 66 base::Unretained(this), | |
| 67 &cert_request_info, | |
| 68 selected_certs, | |
| 69 callback); | |
| 70 | |
| 71 if (use_system_slot_) { | |
| 72 GetSystemAndPrivateSlot(username_hash_, bound_callback); | |
| 73 } else { | |
| 74 // Skip getting the system slot. | |
| 75 GetPrivateSlotAndCallBack( | |
| 76 username_hash_, bound_callback, crypto::ScopedPK11Slot()); | |
| 77 } | |
| 78 } | |
| 79 | |
| 80 void ClientCertStoreChromeOS::GetClientCertsImpl( | |
| 81 CERTCertList* cert_list, | |
| 82 const SSLCertRequestInfo& request, | |
| 83 bool query_nssdb, | |
| 84 CertificateList* selected_certs) { | |
| 85 ClientCertStoreNSS::GetClientCertsImpl( | |
| 86 cert_list, request, query_nssdb, selected_certs); | |
| 87 | |
| 88 size_t pre_size = selected_certs->size(); | |
| 89 selected_certs->erase( | |
| 90 std::remove_if( | |
| 91 selected_certs->begin(), | |
| 92 selected_certs->end(), | |
| 93 NSSProfileFilterChromeOS::CertNotAllowedForProfilePredicate( | |
| 94 profile_filter_)), | |
| 95 selected_certs->end()); | |
| 96 DVLOG(1) << "filtered " << pre_size - selected_certs->size() << " of " | |
| 97 << pre_size << " certs"; | |
| 98 } | |
| 99 | |
| 100 void ClientCertStoreChromeOS::DidGetSystemAndPrivateSlot( | |
| 101 const SSLCertRequestInfo* request, | |
| 102 CertificateList* selected_certs, | |
| 103 const base::Closure& callback, | |
| 104 crypto::ScopedPK11Slot system_slot, | |
| 105 crypto::ScopedPK11Slot private_slot) { | |
| 106 profile_filter_.Init(crypto::GetPublicSlotForChromeOSUser(username_hash_), | |
| 107 private_slot.Pass(), | |
| 108 system_slot.Pass()); | |
| 109 ClientCertStoreNSS::GetClientCerts(*request, selected_certs, callback); | |
| 110 } | |
| 111 | |
| 112 } // namespace net | |
| OLD | NEW |