summaryrefslogtreecommitdiffstats
path: root/net/base/openssl_private_key_store.h
blob: 0ad3b1a99c004b64a8d0989db8b50275815c5be5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
// Copyright (c) 2010 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef NET_BASE_OPENSSL_PRIVATE_KEY_STORE_H_
#define NET_BASE_OPENSSL_PRIVATE_KEY_STORE_H_

#include <vector>

// Avoid including <openssl/evp.h>
typedef struct evp_pkey_st EVP_PKEY;

#include "base/basictypes.h"
#include "net/base/net_export.h"

class GURL;

namespace net {

class X509Certificate;

// OpenSSLPrivateKeyStore provides an interface for storing
// public/private key pairs to system storage on platforms where
// OpenSSL is used.
// This class shall only be used from the network thread.
class NET_EXPORT OpenSSLPrivateKeyStore {
 public:
  // Called to permanently store a private/public key pair, generated
  // via <keygen> while visiting |url|, to an appropriate system
  // location. Increments |pkey|'s reference count, so the caller is still
  // responsible for calling EVP_PKEY_free on it.
  // |url| is the corresponding server URL.
  // |pkey| is the key pair handle.
  // Returns false if an error occurred whilst attempting to store the key.
  static bool StoreKeyPair(const GURL& url, EVP_PKEY* pkey);

  // Checks that the private key for a given public key is installed.
  // |pub_key| a public key.
  // Returns true if there is a private key that was previously
  // recorded through StoreKeyPair().
  // NOTE: Intentionally not implemented on Android because there is no
  // platform API that can perform this operation silently.
  static bool HasPrivateKey(EVP_PKEY* pub_key);

 private:
  OpenSSLPrivateKeyStore();  // not implemented.
  ~OpenSSLPrivateKeyStore();  // not implemented.
  DISALLOW_COPY_AND_ASSIGN(OpenSSLPrivateKeyStore);
};

} // namespace net

#endif  // NET_BASE_OPENSSL_PRIVATE_KEY_STORE_H_