Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(159)

Side by Side Diff: content/browser/ssl/ssl_client_auth_handler.cc

Issue 766463002: Revert of Remove SSLClientAuthHandler's RDH dependency. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 6 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/browser/ssl/ssl_client_auth_handler.h" 5 #include "content/browser/ssl/ssl_client_auth_handler.h"
6 6
7 #include "base/bind.h" 7 #include "base/bind.h"
8 #include "base/logging.h" 8 #include "content/browser/loader/resource_dispatcher_host_impl.h"
9 #include "content/browser/loader/resource_request_info_impl.h" 9 #include "content/browser/loader/resource_request_info_impl.h"
10 #include "content/public/browser/browser_thread.h" 10 #include "content/public/browser/browser_thread.h"
11 #include "content/public/browser/content_browser_client.h" 11 #include "content/public/browser/content_browser_client.h"
12 #include "net/cert/x509_certificate.h" 12 #include "net/cert/x509_certificate.h"
13 #include "net/http/http_transaction_factory.h"
13 #include "net/ssl/client_cert_store.h" 14 #include "net/ssl/client_cert_store.h"
14 #include "net/url_request/url_request.h" 15 #include "net/url_request/url_request.h"
16 #include "net/url_request/url_request_context.h"
15 17
16 namespace content { 18 namespace content {
17 19
18 namespace {
19
20 typedef base::Callback<void(net::X509Certificate*)> CertificateCallback;
21
22 void CertificateSelectedOnUIThread(
23 const CertificateCallback& io_thread_callback,
24 net::X509Certificate* cert) {
25 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
26
27 BrowserThread::PostTask(
28 BrowserThread::IO, FROM_HERE,
29 base::Bind(io_thread_callback, make_scoped_refptr(cert)));
30 }
31
32 void SelectCertificateOnUIThread(
33 int render_process_host_id,
34 int render_frame_host_id,
35 net::SSLCertRequestInfo* cert_request_info,
36 const CertificateCallback& io_thread_callback) {
37 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
38
39 GetContentClient()->browser()->SelectClientCertificate(
40 render_process_host_id, render_frame_host_id, cert_request_info,
41 base::Bind(&CertificateSelectedOnUIThread, io_thread_callback));
42 }
43
44 } // namespace
45
46 SSLClientAuthHandler::SSLClientAuthHandler( 20 SSLClientAuthHandler::SSLClientAuthHandler(
47 scoped_ptr<net::ClientCertStore> client_cert_store, 21 scoped_ptr<net::ClientCertStore> client_cert_store,
48 net::URLRequest* request, 22 net::URLRequest* request,
49 net::SSLCertRequestInfo* cert_request_info, 23 net::SSLCertRequestInfo* cert_request_info)
50 const SSLClientAuthHandler::CertificateCallback& callback)
51 : request_(request), 24 : request_(request),
25 http_network_session_(
26 request_->context()->http_transaction_factory()->GetSession()),
52 cert_request_info_(cert_request_info), 27 cert_request_info_(cert_request_info),
53 client_cert_store_(client_cert_store.Pass()), 28 client_cert_store_(client_cert_store.Pass()) {
54 callback_(callback),
55 weak_factory_(this) {
56 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); 29 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
57 } 30 }
58 31
59 SSLClientAuthHandler::~SSLClientAuthHandler() { 32 SSLClientAuthHandler::~SSLClientAuthHandler() {
33 // If we were simply dropped, then act as if we selected no certificate.
34 DoCertificateSelected(NULL);
35 }
36
37 void SSLClientAuthHandler::OnRequestCancelled() {
38 request_ = NULL;
60 } 39 }
61 40
62 void SSLClientAuthHandler::SelectCertificate() { 41 void SSLClientAuthHandler::SelectCertificate() {
63 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); 42 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
43 DCHECK(request_);
64 44
65 if (client_cert_store_) { 45 if (client_cert_store_) {
66 client_cert_store_->GetClientCerts( 46 client_cert_store_->GetClientCerts(
67 *cert_request_info_, 47 *cert_request_info_,
68 &cert_request_info_->client_certs, 48 &cert_request_info_->client_certs,
69 base::Bind(&SSLClientAuthHandler::DidGetClientCerts, 49 base::Bind(&SSLClientAuthHandler::DidGetClientCerts, this));
70 weak_factory_.GetWeakPtr()));
71 } else { 50 } else {
72 DidGetClientCerts(); 51 DidGetClientCerts();
73 } 52 }
74 } 53 }
75 54
55 void SSLClientAuthHandler::CertificateSelected(net::X509Certificate* cert) {
56 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
57
58 VLOG(1) << this << " CertificateSelected " << cert;
59 BrowserThread::PostTask(
60 BrowserThread::IO, FROM_HERE,
61 base::Bind(
62 &SSLClientAuthHandler::DoCertificateSelected, this,
63 make_scoped_refptr(cert)));
64 }
65
76 void SSLClientAuthHandler::DidGetClientCerts() { 66 void SSLClientAuthHandler::DidGetClientCerts() {
77 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); 67 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
68 // Request may have cancelled while we were getting client certs.
69 if (!request_)
70 return;
78 71
79 // Note that if |client_cert_store_| is NULL, we intentionally fall through to 72 // Note that if |client_cert_store_| is NULL, we intentionally fall through to
80 // DoCertificateSelected. This is for platforms where the client cert matching 73 // DoCertificateSelected. This is for platforms where the client cert matching
81 // is not performed by Chrome. Those platforms handle the cert matching before 74 // is not performed by Chrome, the platform can handle the cert matching
82 // showing the dialog. 75 // before showing the dialog.
83 if (client_cert_store_ && cert_request_info_->client_certs.empty()) { 76 if (client_cert_store_ && cert_request_info_->client_certs.empty()) {
84 // No need to query the user if there are no certs to choose from. 77 // No need to query the user if there are no certs to choose from.
85 CertificateSelected(NULL); 78 DoCertificateSelected(NULL);
86 return; 79 return;
87 } 80 }
88 81
89 int render_process_host_id; 82 int render_process_host_id;
90 int render_frame_host_id; 83 int render_frame_host_id;
91 if (!ResourceRequestInfo::ForRequest(request_)->GetAssociatedRenderFrame( 84 if (!ResourceRequestInfo::ForRequest(request_)->GetAssociatedRenderFrame(
92 &render_process_host_id, 85 &render_process_host_id,
93 &render_frame_host_id)) { 86 &render_frame_host_id))
94 NOTREACHED(); 87 NOTREACHED();
95 CertificateSelected(NULL);
96 return;
97 }
98 88
89 // If the RVH does not exist by the time this task gets run, then the task
90 // will be dropped and the scoped_refptr to SSLClientAuthHandler will go
91 // away, so we do not leak anything. The destructor takes care of ensuring
92 // the net::URLRequest always gets a response.
99 BrowserThread::PostTask( 93 BrowserThread::PostTask(
100 BrowserThread::UI, FROM_HERE, 94 BrowserThread::UI, FROM_HERE,
101 base::Bind(&SelectCertificateOnUIThread, 95 base::Bind(
102 render_process_host_id, render_frame_host_id, 96 &SSLClientAuthHandler::DoSelectCertificate, this,
103 cert_request_info_, 97 render_process_host_id, render_frame_host_id));
104 base::Bind(&SSLClientAuthHandler::CertificateSelected,
105 weak_factory_.GetWeakPtr())));
106 } 98 }
107 99
108 void SSLClientAuthHandler::CertificateSelected(net::X509Certificate* cert) { 100 void SSLClientAuthHandler::DoCertificateSelected(net::X509Certificate* cert) {
109 VLOG(1) << this << " DoCertificateSelected " << cert; 101 VLOG(1) << this << " DoCertificateSelected " << cert;
110 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); 102 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
103 // request_ could have been NULLed if the request was cancelled while the
104 // user was choosing a cert, or because we have already responded to the
105 // certificate.
106 if (request_) {
107 request_->ContinueWithCertificate(cert);
111 108
112 callback_.Run(cert); 109 ResourceDispatcherHostImpl::Get()->
113 // |this| may be deleted at this point. 110 ClearSSLClientAuthHandlerForRequest(request_);
111 request_ = NULL;
112 }
113 }
114
115 void SSLClientAuthHandler::DoSelectCertificate(
116 int render_process_host_id, int render_frame_host_id) {
117 GetContentClient()->browser()->SelectClientCertificate(
118 render_process_host_id,
119 render_frame_host_id,
120 http_network_session_,
121 cert_request_info_.get(),
122 base::Bind(&SSLClientAuthHandler::CertificateSelected, this));
114 } 123 }
115 124
116 } // namespace content 125 } // namespace content
OLDNEW
« no previous file with comments | « content/browser/ssl/ssl_client_auth_handler.h ('k') | content/public/browser/content_browser_client.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698