diff options
| author | pneubeck@chromium.org <pneubeck@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-08-15 23:21:51 +0000 |
|---|---|---|
| committer | pneubeck@chromium.org <pneubeck@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2014-08-15 23:23:17 +0000 |
| commit | 56c6597c1201c3173fc225f1c3ae950de46c8340 (patch) | |
| tree | f64cf822cd2b772082ff74bd8b0eb22b6ce41e4a /chromeos/network/network_cert_migrator.h | |
| parent | ccb6d9236d5b610f061ad8a3eec227400c480f0a (diff) | |
| download | chromium_src-56c6597c1201c3173fc225f1c3ae950de46c8340.zip chromium_src-56c6597c1201c3173fc225f1c3ae950de46c8340.tar.gz chromium_src-56c6597c1201c3173fc225f1c3ae950de46c8340.tar.bz2 | |
Migrate slot ID of client certs in network configuration.
If a network was configured with a client certificate before R38, the slot ID will either be missing or not be valid in R38 and later because of the added device wide token.
This migration code will look up a configured client certificate by its PKCS#11 ID and update the slot id.
If the certificate can't be found, the client configuration will be removed in order to trigger a clean 'missing configuration' error in the UI.
This change is primarily targeted for manually configured networks and not policy-configured networks. The latter are automatically updated by the chromeos::ClientCertResolver.
BUG=403900
Review URL: https://codereview.chromium.org/471183002
Cr-Commit-Position: refs/heads/master@{#290044}
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@290044 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chromeos/network/network_cert_migrator.h')
| -rw-r--r-- | chromeos/network/network_cert_migrator.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/chromeos/network/network_cert_migrator.h b/chromeos/network/network_cert_migrator.h index 05b69e6..1acc816 100644 --- a/chromeos/network/network_cert_migrator.h +++ b/chromeos/network/network_cert_migrator.h @@ -16,7 +16,7 @@ namespace chromeos { class NetworkStateHandler; // Migrates network configurations from deprecated CaCertNSS properties to -// CaCertPEM. +// CaCertPEM and incorrect or missing slot IDs of client certificates. class CHROMEOS_EXPORT NetworkCertMigrator : public NetworkStateHandlerObserver, public CertLoader::Observer { public: |