Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(518)

Side by Side Diff: net/ssl/client_cert_store_nss.h

Issue 992733002: Remove //net (except for Android test stuff) and sdch (Closed) Base URL: git@github.com:domokit/mojo.git@master
Patch Set: Created 5 years, 9 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « net/ssl/client_cert_store_mac_unittest.cc ('k') | net/ssl/client_cert_store_nss.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef NET_SSL_CLIENT_CERT_STORE_NSS_H_
6 #define NET_SSL_CLIENT_CERT_STORE_NSS_H_
7
8 #include "base/basictypes.h"
9 #include "base/callback.h"
10 #include "base/gtest_prod_util.h"
11 #include "net/base/net_export.h"
12 #include "net/ssl/client_cert_store.h"
13 #include "net/ssl/ssl_cert_request_info.h"
14
15 typedef struct CERTCertListStr CERTCertList;
16
17 namespace crypto {
18 class CryptoModuleBlockingPasswordDelegate;
19 }
20
21 namespace net {
22
23 class NET_EXPORT ClientCertStoreNSS : public ClientCertStore {
24 public:
25 typedef base::Callback<crypto::CryptoModuleBlockingPasswordDelegate*(
26 const HostPortPair& /* server */)> PasswordDelegateFactory;
27
28 explicit ClientCertStoreNSS(
29 const PasswordDelegateFactory& password_delegate_factory);
30 ~ClientCertStoreNSS() override;
31
32 // ClientCertStore:
33 void GetClientCerts(const SSLCertRequestInfo& cert_request_info,
34 CertificateList* selected_certs,
35 const base::Closure& callback) override;
36
37 protected:
38 // Examines the certificates in |cert_list| to find all certificates that
39 // match the client certificate request in |request|, storing the matching
40 // certificates in |selected_certs|.
41 // If |query_nssdb| is true, NSS will be queried to construct full certificate
42 // chains. If it is false, only the certificate will be considered.
43 virtual void GetClientCertsImpl(CERTCertList* cert_list,
44 const SSLCertRequestInfo& request,
45 bool query_nssdb,
46 CertificateList* selected_certs);
47
48 private:
49 friend class ClientCertStoreNSSTestDelegate;
50
51 void GetClientCertsOnWorkerThread(
52 scoped_ptr<crypto::CryptoModuleBlockingPasswordDelegate>
53 password_delegate,
54 const SSLCertRequestInfo* request,
55 CertificateList* selected_certs);
56
57 // A hook for testing. Filters |input_certs| using the logic being used to
58 // filter the system store when GetClientCerts() is called.
59 // Implemented by creating a list of certificates that otherwise would be
60 // extracted from the system store and filtering it using the common logic
61 // (less adequate than the approach used on Windows).
62 bool SelectClientCertsForTesting(const CertificateList& input_certs,
63 const SSLCertRequestInfo& cert_request_info,
64 CertificateList* selected_certs);
65
66 // The factory for creating the delegate for requesting a password to a
67 // PKCS #11 token. May be null.
68 PasswordDelegateFactory password_delegate_factory_;
69
70 DISALLOW_COPY_AND_ASSIGN(ClientCertStoreNSS);
71 };
72
73 } // namespace net
74
75 #endif // NET_SSL_CLIENT_CERT_STORE_NSS_H_
OLDNEW
« no previous file with comments | « net/ssl/client_cert_store_mac_unittest.cc ('k') | net/ssl/client_cert_store_nss.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698