Linux: implement Client SSL Certificate selection UI

chrome/browser/gtk/certificate_viewer.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/gtk/certificate_viewer.h"
 
 #include <cert.h>
 #include <gtk/gtk.h>
 #include <hasht.h>
 #include <sechash.h>
 
 #include <algorithm>
 
 #include "app/l10n_util.h"
 #include "base/i18n/time_formatting.h"
 #include "base/nss_util.h"
 #include "base/string_util.h"
 #include "base/time.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/browser/cert_store.h"
 #include "chrome/browser/gtk/gtk_util.h"
 #include "chrome/third_party/mozilla_security_manager/nsNSSCertHelper.h"
 #include "chrome/third_party/mozilla_security_manager/nsNSSCertificate.h"
+#include "chrome/third_party/mozilla_security_manager/nsUsageArrayHelper.h"
 #include "grit/generated_resources.h"
 
 // PSM = Mozilla's Personal Security Manager.
 namespace psm = mozilla_security_manager;
 
 namespace {
 
 const char kDetailsFontFamily[] = "monospace";
 
 ////////////////////////////////////////////////////////////////////////////////
@@ skipping 214 matching lines @@
                                  gtk_util::kContentAreaBorder);
 
   GtkWidget* uses_vbox = gtk_vbox_new(FALSE, gtk_util::kControlSpacing);
   gtk_box_pack_start(GTK_BOX(general_page_vbox_), uses_vbox, FALSE, FALSE, 0);
   gtk_box_pack_start(
       GTK_BOX(uses_vbox),
       gtk_util::CreateBoldLabel(
           l10n_util::GetStringUTF8(IDS_CERT_INFO_VERIFIED_USAGES_GROUP)),
       FALSE, FALSE, 0);
 
-  SECCertificateUsage usages = 0;
-  // TODO(wtc): See if we should use X509Certificate::Verify instead.
-  if (CERT_VerifyCertificateNow(CERT_GetDefaultCertDB(), cert, PR_TRUE,
-                                certificateUsageCheckAllUsages,
-                                NULL, &usages) == SECSuccess) {
-    // List of usages to display is borrowed from
-    // mozilla/source/security/manager/ssl/src/nsUsageArrayHelper.cpp
-    static const struct {
-      SECCertificateUsage usage;
-      int string_id;
-    } usage_string_map[] = {
-      {certificateUsageSSLClient, IDS_CERT_USAGE_SSL_CLIENT},
-      {certificateUsageSSLServer, IDS_CERT_USAGE_SSL_SERVER},
-      {certificateUsageSSLServerWithStepUp,
-        IDS_CERT_USAGE_SSL_SERVER_WITH_STEPUP},
-      {certificateUsageEmailSigner, IDS_CERT_USAGE_EMAIL_SIGNER},
-      {certificateUsageEmailRecipient, IDS_CERT_USAGE_EMAIL_RECEIVER},
-      {certificateUsageObjectSigner, IDS_CERT_USAGE_OBJECT_SIGNER},
-      {certificateUsageSSLCA, IDS_CERT_USAGE_SSL_CA},
-      {certificateUsageStatusResponder, IDS_CERT_USAGE_STATUS_RESPONDER},
-    };
-    for (size_t i = 0; i < ARRAYSIZE_UNSAFE(usage_string_map); ++i) {
-      if (usages & usage_string_map[i].usage)
-        gtk_box_pack_start(
-            GTK_BOX(uses_vbox),
-            gtk_util::IndentWidget(gtk_util::LeftAlignMisc(gtk_label_new(
-                l10n_util::GetStringUTF8(
-                    usage_string_map[i].string_id).c_str()))),
-            FALSE, FALSE, 0);
-    }
-  }
+  std::vector<std::string> usages;
+  psm::GetCertUsageStrings(cert, &usages);
+  for (size_t i = 0; i < usages.size(); ++i)
+    gtk_box_pack_start(
+        GTK_BOX(uses_vbox),
+        gtk_util::IndentWidget(gtk_util::LeftAlignMisc(gtk_label_new(
+            usages[i].c_str()))),
+        FALSE, FALSE, 0);
 
   gtk_box_pack_start(GTK_BOX(general_page_vbox_), gtk_hseparator_new(),
                      FALSE, FALSE, 0);
 
   const int num_rows = 21;
   GtkTable* table = GTK_TABLE(gtk_table_new(num_rows, 2, FALSE));
   gtk_table_set_col_spacing(table, 0, gtk_util::kLabelSpacing);
   gtk_table_set_row_spacings(table, gtk_util::kControlSpacing);
 
   gtk_box_pack_start(GTK_BOX(general_page_vbox_), GTK_WIDGET(table),
@@ skipping 418 matching lines @@
 void ShowCertificateViewer(gfx::NativeWindow parent, int cert_id) {
   scoped_refptr<net::X509Certificate> cert;
   CertStore::GetSharedInstance()->RetrieveCert(cert_id, &cert);
   if (!cert.get()) {
     // The certificate was not found. Could be that the renderer crashed before
     // we displayed the page info.
     return;
   }
   ShowCertificateViewer(parent, cert->os_cert_handle());
 }