summaryrefslogtreecommitdiffstats
path: root/chromeos/network/onc
Commit message (Collapse)AuthorAgeFilesLines
* Extract certificate policy application from NetworkLibrary.pneubeck@google.com2013-04-264-19/+149
| | | | | | | | | | | | | | This is mostly a refactoring: - Import of certificates is handled by a new CertifcateHandler, which will get more functionality like resolving CertificatePatterns in upcoming commits. - Policy validation moved into NetworkConfigurationUpdater and net_internals, because it covers both certificates and networks. The only functional change is that certificate policies should now also work if ManagedNetworkConfigurationHandler is used instead of NetworkLibrary. BUG=223869 Review URL: https://codereview.chromium.org/14192017 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@196735 0039d316-1c4b-4281-b951-d872f2087c98
* Adding policy support to the new network configuration stack.pneubeck@chromium.org2013-04-1910-55/+180
| | | | | | | | | | | | Adapts in particular the ManagedNetworkConfigurationHandler, the networkingPrivate extension API and the network configuration extension. BUG=223869 TBR=thestig@chromium.org (for chrome_browser_chromeos.gypi) Review URL: https://chromiumcodereview.appspot.com/12676017 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@195267 0039d316-1c4b-4281-b951-d872f2087c98
* Rename ONC field Trust to TrustBits.pneubeck@chromium.org2013-04-097-50/+54
| | | | | | | | BUG=159058, 216495 Review URL: https://chromiumcodereview.appspot.com/13473003 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@193111 0039d316-1c4b-4281-b951-d872f2087c98
* This is a refactoring that moves the list of credential fields of ONC from ↵pneubeck@chromium.org2013-04-045-1/+90
| | | | | | | | | | | | NetworkConfigurationPolicyHandler to chromeos/signature.h. This allows to use the same list of sensitive fields e.g. for sanitization before exposing network configurations through the networking extension API. BUG=NONE Review URL: https://chromiumcodereview.appspot.com/13194003 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@192401 0039d316-1c4b-4281-b951-d872f2087c98
* Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.joaodasilva@chromium.org2013-04-043-58/+104
| | | | | | | | | | | | | | | | | | | | | | | | | The MultiThreadedCertVerifier can optionally use a CertTrustAnchorProvider to get a list of additional certificates to trust, without importing them into the NSS database. This CL wraps the MultiThreadedCertVerifier with a custom verifier that includes a trust anchor provider. The trust anchor provider returns all the certificates from the user ONC policy that have the Web trust flag. The PolicyCertVerifier also writes a preference in the Profile once any such certificate is used. This feature is currently behind a flag, until a warning UI is implemented. The warning should be displayed if UsedPolicyCertificates() is true for the given profile. TBR=pneubeck@chromium.org BUG=216495 NOTE: this is a reland of https://codereview.chromium.org/13035003, with tests fixed. Review URL: https://chromiumcodereview.appspot.com/13532005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@192324 0039d316-1c4b-4281-b951-d872f2087c98
* Replace HasNext() by !IsAtEnd() in network related folders.pneubeck@chromium.org2013-04-043-5/+6
| | | | | | | | | BUG=162611 Review URL: https://chromiumcodereview.appspot.com/13532002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@192294 0039d316-1c4b-4281-b951-d872f2087c98
* Revert 192102 "Added a PolicyCertVerifier that uses the trust an..."joaodasilva@chromium.org2013-04-033-104/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | > Added a PolicyCertVerifier that uses the trust anchors from the ONC policies. > > The MultiThreadedCertVerifier can optionally use a CertTrustAnchorProvider to > get a list of additional certificates to trust, without importing them into the > NSS database. This CL wraps the MultiThreadedCertVerifier with a custom verifier > that includes a trust anchor provider. > > The trust anchor provider returns all the certificates from the user ONC policy > that have the Web trust flag. The PolicyCertVerifier also writes a preference > in the Profile once any such certificate is used. > > This feature is currently behind a flag, until a warning UI is implemented. > The warning should be displayed if UsedPolicyCertificates() is true for the > given profile. > > BUG=216495 > > Review URL: https://codereview.chromium.org/13035003 TBR=joaodasilva@chromium.org Review URL: https://codereview.chromium.org/13581002 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@192120 0039d316-1c4b-4281-b951-d872f2087c98
* Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.joaodasilva@chromium.org2013-04-033-58/+104
| | | | | | | | | | | | | | | | | | | | | The MultiThreadedCertVerifier can optionally use a CertTrustAnchorProvider to get a list of additional certificates to trust, without importing them into the NSS database. This CL wraps the MultiThreadedCertVerifier with a custom verifier that includes a trust anchor provider. The trust anchor provider returns all the certificates from the user ONC policy that have the Web trust flag. The PolicyCertVerifier also writes a preference in the Profile once any such certificate is used. This feature is currently behind a flag, until a warning UI is implemented. The warning should be displayed if UsedPolicyCertificates() is true for the given profile. BUG=216495 Review URL: https://codereview.chromium.org/13035003 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@192102 0039d316-1c4b-4281-b951-d872f2087c98
* net: extract net/cert out of net/basephajdan.jr@chromium.org2013-03-292-6/+6
| | | | | | | | | | | | This introduces the following dependency of net/base on things outside: net/base/openssl_client_key_store.cc:#include "net/cert/x509_certificate.h" BUG=70818 Review URL: https://codereview.chromium.org/13006020 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@191450 0039d316-1c4b-4281-b951-d872f2087c98
* Chromium style checker cleanuprsleevi@chromium.org2013-03-151-2/+4
| | | | | | | | | | | | Automated clean up of style checker errors that were missed due to the plugin not being executed on implementation files. BUG=115047 TBR=ben, brettw, jamesr, joi, satorux, piman, wez Review URL: https://chromiumcodereview.appspot.com/12813004 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@188311 0039d316-1c4b-4281-b951-d872f2087c98
* This adds the setProperties and getState functions to the networking APIgspencer@chromium.org2013-03-141-1/+1
| | | | | | | | | | | | | | | for JavaScript. (TBR'ing kalman because it's a private API, and because I may need to merge it to R26) TBR=kalman@chromium.org BUG=chromium:180633 TEST=ran new browser tests. Review URL: https://chromiumcodereview.appspot.com/12541007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@188199 0039d316-1c4b-4281-b951-d872f2087c98
* Moves the mapping between Shill's and ONC's field names out of the ONC ↵pneubeck@chromium.org2013-03-0512-372/+544
| | | | | | | | | | | | | | | | | | | | signature into separate tables. Adds a base_signature pointer to ONC value signatures and uses that to define an derived signatures with additional state fields. The advantage of such derived ONC signatures is that we can have specialized validation that don't influence each other: - ONC with readonly state from Shill - ONC from UI (like the JS extension API) Both will be derived from standard ONC. This commit adds the first of these two specializations: ONC with Shill's state information. TBR=stevenjb@chromium.org (for test/data changes) BUG=147614, 157696 Review URL: https://chromiumcodereview.appspot.com/12390017 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@186156 0039d316-1c4b-4281-b951-d872f2087c98
* Replacing DictionaryValue::key_iterator by DictionaryValue::Iterator in ↵pneubeck@chromium.org2013-02-261-4/+4
| | | | | | | | | | | | | chrome/browser/{policy,prefs} and chromeos/network/. This is one of several CLs of a larger refactoring that prepares for the removal of key_iterator. BUG=162611 Review URL: https://chromiumcodereview.appspot.com/12310104 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@184624 0039d316-1c4b-4281-b951-d872f2087c98
* A recent change in Shill (https://gerrit.chromium.org/gerrit/#/c/41664/) ↵pneubeck@chromium.org2013-02-251-0/+3
| | | | | | | | | | | | | uncovered that Chrome isn't sending the WiFi Mode to Shill in case of configuration by policy and user import. Changing the ONC to Shill translation code, so that the WiFi mode property will be sent in case of policies and user import. BUG=177661 TBR=stevenjb@chromium.org (for test file changes in chromeos/test) Review URL: https://chromiumcodereview.appspot.com/12320065 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@184425 0039d316-1c4b-4281-b951-d872f2087c98
* Move file_path.h to base/files.brettw@chromium.org2013-02-241-1/+1
| | | | | | TBR=sky git-svn-id: svn://svn.chromium.org/chrome/trunk/src@184344 0039d316-1c4b-4281-b951-d872f2087c98
* Disable "using base::FilePath" on Linux since it now compiles.brettw@chromium.org2013-02-171-2/+2
| | | | | | | | | | | | | This keeps the using for other platforms temporarily. This patch is to "stop the bleeding" since new conflicts are added every day. The other platforms will be fixed in followup patches. This also adds an exception for the MTPD code which has a circular dependency on FilePath. Review URL: https://codereview.chromium.org/12282019 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@183043 0039d316-1c4b-4281-b951-d872f2087c98
* Add an ONC merge that produces an augmented dictionary.pneubeck@chromium.org2013-02-155-151/+356
| | | | | | | | | BUG=148905 TBR=stevenjb@chromium.org (only added a test file) Review URL: https://chromiumcodereview.appspot.com/12208075 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@182683 0039d316-1c4b-4281-b951-d872f2087c98
* Linux/ChromeOS Chromium style checker cleanup, chromeos edition.rsleevi@chromium.org2013-02-061-1/+1
| | | | | | | | | | | Automated clean up of style checker errors that were missed due to the plugin not being executed on implementation files. BUG=115047 Review URL: https://chromiumcodereview.appspot.com/12217030 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@181043 0039d316-1c4b-4281-b951-d872f2087c98
* Add a check for server and CA certificates in device policies to the ONC ↵pneubeck@chromium.org2013-01-256-94/+100
| | | | | | | | | | | | | | | validator. Checking for empty GUIDs and added a note to the ONC spec. Cleaned up the CertificateImporter on the way. TBR=stevenjb@chromium.org (small NetworkLibrary change reviewed by Greg, added a test file) BUG=170357 Review URL: https://chromiumcodereview.appspot.com/11970012 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@178820 0039d316-1c4b-4281-b951-d872f2087c98
* Adding a type check for properties with a shill_name in the ONC signature.pneubeck@chromium.org2013-01-247-34/+73
| | | | | | | | | | | | | | The translator is applied to input from Shill that is outside of Chrome. Thus we should guarantee validity of the resulting ONC. TBR=stevenjb@chromium.org (Added test files to chromeos only) BUG=171240 TEST=New unit test. Review URL: https://chromiumcodereview.appspot.com/12036008 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@178611 0039d316-1c4b-4281-b951-d872f2087c98
* Adding AutoConnect UI and policy for VPN.pneubeck@chromium.org2013-01-243-0/+3
| | | | | | | | | | | | - Extending the ONC spec and implementation. - Extending the VPN settings page. BUG=chromium-os:37227 Review URL: https://chromiumcodereview.appspot.com/12052007 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@178603 0039d316-1c4b-4281-b951-d872f2087c98
* Fixing cellular ONC validation and one incorrect namespace.pneubeck@chromium.org2013-01-232-14/+12
| | | | | | | | | | | | | | | | Added here https://codereview.chromium.org/11962048/ crrev.com/178228 Cleaning up some nits along the way. TBR=stevenjb@chromium.org (namespace change in network_library_impl_base.cc) BUG=None Review URL: https://chromiumcodereview.appspot.com/12041042 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@178303 0039d316-1c4b-4281-b951-d872f2087c98
* This adds Cellular to the Shill to ONC translation.gspencer@chromium.org2013-01-2313-91/+364
| | | | | | | | | | | | | It also populates the Name property when translating from Shill to ONC, and adds a ConnectionState property in ONC that indicates the current connection state of the network. (TBR'ing OWNERS because it's just refactoring: moving symbols into more specific namespaces) TBR=zelidrag@chromium.org,glotov@chromium.org,mnissler@chromium.org BUG=none Review URL: https://chromiumcodereview.appspot.com/11962048 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@178228 0039d316-1c4b-4281-b951-d872f2087c98
* Explicitly state ignored fields in the ONC spec, update the ONC normalizer ↵pneubeck@chromium.org2013-01-152-10/+113
| | | | | | | | | | | and use it during import. BUG=169798 Review URL: https://chromiumcodereview.appspot.com/11876020 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@176890 0039d316-1c4b-4281-b951-d872f2087c98
* Updating the ownership of chromeos/network.pneubeck@chromium.org2013-01-151-0/+1
| | | | | | | | | BUG=None Review URL: https://chromiumcodereview.appspot.com/11885020 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@176760 0039d316-1c4b-4281-b951-d872f2087c98
* Replace OncNetworkParser by the new ONC translator.pneubeck@chromium.org2013-01-125-4/+103
| | | | | | | | | BUG=162040 TBR=jochen@chromium.org (gypi changes), bartfab@chromium.org (minor policy change) Review URL: https://chromiumcodereview.appspot.com/11578052 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@176520 0039d316-1c4b-4281-b951-d872f2087c98
* Extending the translation from ONC to Shill.pneubeck@chromium.org2013-01-1112-32/+274
| | | | | | | | | | | | Added string expansion and UIData creation. BUG=162040,147624 TBR=jochen@chromium.org (for gypi changes) Review URL: https://chromiumcodereview.appspot.com/11664005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@176312 0039d316-1c4b-4281-b951-d872f2087c98
* Adding more ONC validation tests.pneubeck@chromium.org2012-12-171-1/+18
| | | | | | | | | | | | - A typical configuration from real world. - A configuration generated from CPanel. BUG=162804 TBR=stevenjb@chromium.org Review URL: https://chromiumcodereview.appspot.com/11488008 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@173460 0039d316-1c4b-4281-b951-d872f2087c98
* Rejecting networks/certificates independently on ONC import and policy loading.pneubeck@chromium.org2012-12-171-8/+14
| | | | | | | | | | | | | Adapted NetworkLibrary and onc::CertificateImporter. BUG=162801 TEST=Import an ONC with one invalid and one valid network/certificate. Ensure that the valid one is correctly imported. TBR=eroman@chromium.org (net_internals, string change) Review URL: https://chromiumcodereview.appspot.com/11578005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@173444 0039d316-1c4b-4281-b951-d872f2087c98
* Rejecting networks/certificates individually from ONC during validation.pneubeck@chromium.org2012-12-174-138/+286
| | | | | | | | | | | | Cleaned up ONC validator unit tests to scale better with more tests. BUG=162801 TEST=Adapted the validator unit test. Review URL: https://chromiumcodereview.appspot.com/11428078 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@173404 0039d316-1c4b-4281-b951-d872f2087c98
* Extending ONC validator's logging. Completing toplevel validation.pneubeck@chromium.org2012-12-1614-255/+555
| | | | | | | | | | | | Adding also more validation tests. The logging is in line with https://codereview.chromium.org/11299236/. BUG=162802 TEST=Unit tests. TBR=stevenjb@chromium.org,eroman@chromium.org (whitespace change in net_interals.cc) Review URL: https://chromiumcodereview.appspot.com/11469026 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@173393 0039d316-1c4b-4281-b951-d872f2087c98
* This moves the ONC parsing code into chromeos/network/oncgspencer@chromium.org2012-12-1129-0/+4147
so that it can be used there without violating dependency rules. (Using the "refactoring" OWNERS TBR rule...) BUG=none TEST=ran unit tests TBR=jhawkins@chromium.org Review URL: https://chromiumcodereview.appspot.com/11299236 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@172446 0039d316-1c4b-4281-b951-d872f2087c98