| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef NET_SSL_CLIENT_CERT_STORE_NSS_H_ | |
| 6 #define NET_SSL_CLIENT_CERT_STORE_NSS_H_ | |
| 7 | |
| 8 #include "base/basictypes.h" | |
| 9 #include "base/callback.h" | |
| 10 #include "base/gtest_prod_util.h" | |
| 11 #include "net/base/net_export.h" | |
| 12 #include "net/ssl/client_cert_store.h" | |
| 13 #include "net/ssl/ssl_cert_request_info.h" | |
| 14 | |
| 15 typedef struct CERTCertListStr CERTCertList; | |
| 16 | |
| 17 namespace crypto { | |
| 18 class CryptoModuleBlockingPasswordDelegate; | |
| 19 } | |
| 20 | |
| 21 namespace net { | |
| 22 | |
| 23 class NET_EXPORT ClientCertStoreNSS : public ClientCertStore { | |
| 24 public: | |
| 25 typedef base::Callback<crypto::CryptoModuleBlockingPasswordDelegate*( | |
| 26 const HostPortPair& /* server */)> PasswordDelegateFactory; | |
| 27 | |
| 28 explicit ClientCertStoreNSS( | |
| 29 const PasswordDelegateFactory& password_delegate_factory); | |
| 30 ~ClientCertStoreNSS() override; | |
| 31 | |
| 32 // ClientCertStore: | |
| 33 void GetClientCerts(const SSLCertRequestInfo& cert_request_info, | |
| 34 CertificateList* selected_certs, | |
| 35 const base::Closure& callback) override; | |
| 36 | |
| 37 protected: | |
| 38 // Examines the certificates in |cert_list| to find all certificates that | |
| 39 // match the client certificate request in |request|, storing the matching | |
| 40 // certificates in |selected_certs|. | |
| 41 // If |query_nssdb| is true, NSS will be queried to construct full certificate | |
| 42 // chains. If it is false, only the certificate will be considered. | |
| 43 virtual void GetClientCertsImpl(CERTCertList* cert_list, | |
| 44 const SSLCertRequestInfo& request, | |
| 45 bool query_nssdb, | |
| 46 CertificateList* selected_certs); | |
| 47 | |
| 48 private: | |
| 49 friend class ClientCertStoreNSSTestDelegate; | |
| 50 | |
| 51 void GetClientCertsOnWorkerThread( | |
| 52 scoped_ptr<crypto::CryptoModuleBlockingPasswordDelegate> | |
| 53 password_delegate, | |
| 54 const SSLCertRequestInfo* request, | |
| 55 CertificateList* selected_certs); | |
| 56 | |
| 57 // A hook for testing. Filters |input_certs| using the logic being used to | |
| 58 // filter the system store when GetClientCerts() is called. | |
| 59 // Implemented by creating a list of certificates that otherwise would be | |
| 60 // extracted from the system store and filtering it using the common logic | |
| 61 // (less adequate than the approach used on Windows). | |
| 62 bool SelectClientCertsForTesting(const CertificateList& input_certs, | |
| 63 const SSLCertRequestInfo& cert_request_info, | |
| 64 CertificateList* selected_certs); | |
| 65 | |
| 66 // The factory for creating the delegate for requesting a password to a | |
| 67 // PKCS #11 token. May be null. | |
| 68 PasswordDelegateFactory password_delegate_factory_; | |
| 69 | |
| 70 DISALLOW_COPY_AND_ASSIGN(ClientCertStoreNSS); | |
| 71 }; | |
| 72 | |
| 73 } // namespace net | |
| 74 | |
| 75 #endif // NET_SSL_CLIENT_CERT_STORE_NSS_H_ | |
| OLD | NEW |