blob: b3c6dcb090c03372366601cc8408a88a8c2093ac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/certificate_viewer.h"
#include <windows.h>
#include <cryptuiapi.h>
#pragma comment(lib, "cryptui.lib")
#include "base/logging.h"
#include "base/message_loop/message_loop.h"
#include "chrome/browser/ui/host_desktop.h"
#include "net/cert/x509_certificate.h"
#include "ui/aura/window.h"
#include "ui/aura/window_tree_host.h"
namespace {
void ShowCertificateViewerImpl(content::WebContents* web_contents,
HWND parent,
net::X509Certificate* cert) {
// Create a new cert context and store containing just the certificate
// and its intermediate certificates.
PCCERT_CONTEXT cert_list = cert->CreateOSCertChainForCert();
CHECK(cert_list);
CRYPTUI_VIEWCERTIFICATE_STRUCT view_info = { 0 };
view_info.dwSize = sizeof(view_info);
// We set our parent to the tab window. This makes the cert dialog created
// in CryptUIDlgViewCertificate modal to the browser.
view_info.hwndParent = parent;
view_info.dwFlags = CRYPTUI_DISABLE_EDITPROPERTIES |
CRYPTUI_DISABLE_ADDTOSTORE;
view_info.pCertContext = cert_list;
HCERTSTORE cert_store = cert_list->hCertStore;
view_info.cStores = 1;
view_info.rghStores = &cert_store;
BOOL properties_changed;
// We must allow nested tasks to dispatch so that, e.g. gpu tasks are
// processed for painting. This allows a second window to continue painting
// while the the certificate dialog is open.
base::MessageLoop::ScopedNestableTaskAllower allow(
base::MessageLoop::current());
// Tell the message loop to only handle certain types of messages while the
// dialog is open to avoid bad things happening. See https://crbug.com/344012
// for details.
base::MessageLoop::current()->set_os_modal_loop(true);
// This next call blocks but keeps processing windows messages, making it
// modal to the browser window.
::CryptUIDlgViewCertificate(&view_info, &properties_changed);
base::MessageLoop::current()->set_os_modal_loop(false);
CertFreeCertificateContext(cert_list);
}
} // namespace
void ShowCertificateViewer(content::WebContents* web_contents,
gfx::NativeWindow parent,
net::X509Certificate* cert) {
if (chrome::GetHostDesktopTypeForNativeWindow(parent) !=
chrome::HOST_DESKTOP_TYPE_ASH) {
ShowCertificateViewerImpl(
web_contents,
parent->GetHost()->GetAcceleratedWidget(), cert);
} else {
NOTIMPLEMENTED();
}
}
|