summaryrefslogtreecommitdiffstats
path: root/chrome/browser/certificate_manager_model.h
diff options
context:
space:
mode:
authorsatorux@chromium.org <satorux@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-05-22 19:16:59 +0000
committersatorux@chromium.org <satorux@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2012-05-22 19:16:59 +0000
commite0ad08965570e57bdf1ad781c3dab31c470c4244 (patch)
tree417ebf2377b2db35d068acf33ea2f2542834e73f /chrome/browser/certificate_manager_model.h
parentae77f32010cd2c0344279d7dca8388e86ab93f98 (diff)
downloadchromium_src-e0ad08965570e57bdf1ad781c3dab31c470c4244.zip
chromium_src-e0ad08965570e57bdf1ad781c3dab31c470c4244.tar.gz
chromium_src-e0ad08965570e57bdf1ad781c3dab31c470c4244.tar.bz2
certificate manager: Disable export option for TPM-backed certs.
Add a separate boolean property to indicate that a client certificate is hardware (TPM) backed. Certificate manager should disable the export button for such certificates because there is no way to extract the private key from the TPM. BUG=126886 TEST=lumpy Review URL: https://chromiumcodereview.appspot.com/10407072 Patch from Haixia Shi <hshi@chromium.org>. git-svn-id: svn://svn.chromium.org/chrome/trunk/src@138314 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/certificate_manager_model.h')
-rw-r--r--chrome/browser/certificate_manager_model.h5
1 files changed, 4 insertions, 1 deletions
diff --git a/chrome/browser/certificate_manager_model.h b/chrome/browser/certificate_manager_model.h
index a824094..5196e36 100644
--- a/chrome/browser/certificate_manager_model.h
+++ b/chrome/browser/certificate_manager_model.h
@@ -1,4 +1,4 @@
-// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
@@ -100,6 +100,9 @@ class CertificateManagerModel {
// function returns.
bool Delete(net::X509Certificate* cert);
+ // IsHardwareBacked returns true if |cert| is hardware backed.
+ bool IsHardwareBacked(const net::X509Certificate* cert) const;
+
private:
// Callback used by Refresh() for when the cert slots have been unlocked.
// This method does the actual refreshing.