1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
// Copyright (c) 2010 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/ssl/ssl_add_cert_handler.h"
#include "chrome/browser/browser_thread.h"
#include "chrome/browser/renderer_host/render_view_host_delegate.h"
#include "chrome/browser/renderer_host/render_view_host_notification_task.h"
#include "chrome/browser/renderer_host/resource_dispatcher_host.h"
#include "chrome/browser/renderer_host/resource_dispatcher_host_request_info.h"
#include "net/base/cert_database.h"
#include "net/base/net_errors.h"
#include "net/base/x509_certificate.h"
#include "net/url_request/url_request.h"
SSLAddCertHandler::SSLAddCertHandler(net::URLRequest* request,
net::X509Certificate* cert,
int render_process_host_id,
int render_view_id)
: cert_(cert),
render_process_host_id_(render_process_host_id),
render_view_id_(render_view_id) {
ResourceDispatcherHostRequestInfo* info =
ResourceDispatcherHost::InfoForRequest(request);
network_request_id_ = info->request_id();
// Stay alive until the process completes and Finished() is called.
AddRef();
// Delay adding the certificate until the next mainloop iteration.
BrowserThread::PostTask(
BrowserThread::IO, FROM_HERE,
NewRunnableMethod(this, &SSLAddCertHandler::Run));
}
SSLAddCertHandler::~SSLAddCertHandler() {}
void SSLAddCertHandler::Run() {
int cert_error;
{
net::CertDatabase db;
cert_error = db.CheckUserCert(cert_);
}
if (cert_error != net::OK) {
CallRenderViewHostSSLDelegate(
render_process_host_id_, render_view_id_,
&RenderViewHostDelegate::SSL::OnVerifyClientCertificateError,
scoped_refptr<SSLAddCertHandler>(this), cert_error);
Finished(false);
return;
}
// TODO(davidben): Move the existing certificate dialog elsewhere, make
// AskToAddCert send a message to the RenderViewHostDelegate, and ask when we
// cannot completely verify the certificate for whatever reason.
// AskToAddCert();
Finished(true);
}
#if !defined(OS_MACOSX)
void SSLAddCertHandler::AskToAddCert() {
// TODO(snej): Someone should add Windows and GTK implementations with UI.
Finished(true);
}
#endif
void SSLAddCertHandler::Finished(bool add_cert) {
if (add_cert) {
net::CertDatabase db;
int cert_error = db.AddUserCert(cert_);
if (cert_error != net::OK) {
CallRenderViewHostSSLDelegate(
render_process_host_id_, render_view_id_,
&RenderViewHostDelegate::SSL::OnAddClientCertificateError,
scoped_refptr<SSLAddCertHandler>(this), cert_error);
} else {
CallRenderViewHostSSLDelegate(
render_process_host_id_, render_view_id_,
&RenderViewHostDelegate::SSL::OnAddClientCertificateSuccess,
scoped_refptr<SSLAddCertHandler>(this));
}
}
// Inform the RVH that we're finished
CallRenderViewHostSSLDelegate(
render_process_host_id_, render_view_id_,
&RenderViewHostDelegate::SSL::OnAddClientCertificateFinished,
scoped_refptr<SSLAddCertHandler>(this));
Release();
}
|
