blob: b014edf53e8e9c7ca8aa0ac43dac89d7571f1e29 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
// Copyright 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_SERVICE_H_
#define CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_SERVICE_H_
#include <string>
#include <vector>
#include "base/basictypes.h"
#include "base/compiler_specific.h"
#include "base/memory/ref_counted.h"
#include "base/memory/scoped_ptr.h"
#include "base/memory/weak_ptr.h"
#include "chrome/browser/chromeos/policy/user_network_configuration_updater.h"
#include "components/keyed_service/core/keyed_service.h"
namespace user_manager {
class UserManager;
}
namespace net {
class X509Certificate;
typedef std::vector<scoped_refptr<X509Certificate> > CertificateList;
}
namespace policy {
class PolicyCertVerifier;
// This service is the counterpart of PolicyCertVerifier on the UI thread. It's
// responsible for pushing the current list of trust anchors to the CertVerifier
// and marking the profile's prefs if any of the trust anchors was used.
// Except for unit tests, PolicyCertVerifier should only be created through this
// class.
class PolicyCertService
: public KeyedService,
public UserNetworkConfigurationUpdater::WebTrustedCertsObserver {
public:
PolicyCertService(const std::string& user_id,
UserNetworkConfigurationUpdater* net_conf_updater,
user_manager::UserManager* user_manager);
virtual ~PolicyCertService();
// Creates an associated PolicyCertVerifier. The returned object must only be
// used on the IO thread and must outlive this object.
scoped_ptr<PolicyCertVerifier> CreatePolicyCertVerifier();
// Returns true if the profile that owns this service has used certificates
// installed via policy to establish a secure connection before. This means
// that it may have cached content from an untrusted source.
bool UsedPolicyCertificates() const;
bool has_policy_certificates() const { return has_trust_anchors_; }
// UserNetworkConfigurationUpdater::WebTrustedCertsObserver:
virtual void OnTrustAnchorsChanged(const net::CertificateList& trust_anchors)
override;
// KeyedService:
virtual void Shutdown() override;
static scoped_ptr<PolicyCertService> CreateForTesting(
const std::string& user_id,
PolicyCertVerifier* verifier,
user_manager::UserManager* user_manager);
private:
PolicyCertService(const std::string& user_id,
PolicyCertVerifier* verifier,
user_manager::UserManager* user_manager);
PolicyCertVerifier* cert_verifier_;
std::string user_id_;
UserNetworkConfigurationUpdater* net_conf_updater_;
user_manager::UserManager* user_manager_;
bool has_trust_anchors_;
// Weak pointers to handle callbacks from PolicyCertVerifier on the IO thread.
// The factory and the created WeakPtrs must only be used on the UI thread.
base::WeakPtrFactory<PolicyCertService> weak_ptr_factory_;
DISALLOW_COPY_AND_ASSIGN(PolicyCertService);
};
} // namespace policy
#endif // CHROME_BROWSER_CHROMEOS_POLICY_POLICY_CERT_SERVICE_H_
|
