content/browser/ssl/ssl_client_auth_handler.cc

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "content/browser/ssl/ssl_client_auth_handler.h"
   6
   7 #include "base/bind.h"
   8 #include "base/callback_helpers.h"
   9 #include "content/public/browser/browser_thread.h"
  10 #include "content/public/browser/content_browser_client.h"
  11 #include "content/public/browser/resource_request_info.h"
  12 #include "net/ssl/client_cert_store.h"
  13 #include "net/url_request/url_request.h"
  14
  15 namespace content {
  16
  17 SSLClientAuthHandler::SSLClientAuthHandler(
  18     scoped_ptr<net::ClientCertStore> client_cert_store,
  19     net::URLRequest* request,
  20     net::SSLCertRequestInfo* cert_request_info,
  21     const SSLClientAuthHandler::CertificateCallback& callback)
  22     : request_(request),
  23       cert_request_info_(cert_request_info),
  24       client_cert_store_(client_cert_store.Pass()),
  25       callback_(callback) {
  26   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
  27 }
  28
  29 SSLClientAuthHandler::~SSLClientAuthHandler() {
  30   // If we were simply dropped, then act as if we selected no certificate.
  31   DoCertificateSelected(NULL);
  32 }
  33
  34 void SSLClientAuthHandler::OnRequestCancelled() {
  35   request_ = NULL;
  36   callback_.Reset();
  37 }
  38
  39 void SSLClientAuthHandler::SelectCertificate() {
  40   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
  41   DCHECK(request_);
  42
  43   if (client_cert_store_) {
  44     client_cert_store_->GetClientCerts(
  45         *cert_request_info_,
  46         &cert_request_info_->client_certs,
  47         base::Bind(&SSLClientAuthHandler::DidGetClientCerts, this));
  48   } else {
  49     DidGetClientCerts();
  50   }
  51 }
  52
  53 void SSLClientAuthHandler::CertificateSelected(net::X509Certificate* cert) {
  54   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
  55
  56   DVLOG(1) << this << " CertificateSelected " << cert;
  57   BrowserThread::PostTask(
  58       BrowserThread::IO, FROM_HERE,
  59       base::Bind(
  60           &SSLClientAuthHandler::DoCertificateSelected, this,
  61           make_scoped_refptr(cert)));
  62 }
  63
  64 void SSLClientAuthHandler::DidGetClientCerts() {
  65   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
  66   // Request may have cancelled while we were getting client certs.
  67   if (!request_)
  68     return;
  69
  70   // Note that if |client_cert_store_| is NULL, we intentionally fall through to
  71   // DoCertificateSelected. This is for platforms where the client cert matching
  72   // is not performed by Chrome, the platform can handle the cert matching
  73   // before showing the dialog.
  74   if (client_cert_store_ && cert_request_info_->client_certs.empty()) {
  75     // No need to query the user if there are no certs to choose from.
  76     DoCertificateSelected(NULL);
  77     return;
  78   }
  79
  80   int render_process_host_id;
  81   int render_frame_host_id;
  82   if (!ResourceRequestInfo::ForRequest(request_)->GetAssociatedRenderFrame(
  83           &render_process_host_id,
  84           &render_frame_host_id))
  85     NOTREACHED();
  86
  87   // If the RVH does not exist by the time this task gets run, then the task
  88   // will be dropped and the scoped_refptr to SSLClientAuthHandler will go
  89   // away, so we do not leak anything. The destructor takes care of ensuring
  90   // the net::URLRequest always gets a response.
  91   BrowserThread::PostTask(
  92       BrowserThread::UI, FROM_HERE,
  93       base::Bind(
  94           &SSLClientAuthHandler::DoSelectCertificate, this,
  95           render_process_host_id, render_frame_host_id));
  96 }
  97
  98 void SSLClientAuthHandler::DoCertificateSelected(net::X509Certificate* cert) {
  99   DVLOG(1) << this << " DoCertificateSelected " << cert;
 100   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
 101   // request_ could have been NULLed if the request was cancelled while the
 102   // user was choosing a cert, or because we have already responded to the
 103   // certificate.
 104   if (request_) {
 105     request_ = NULL;
 106     DCHECK(!callback_.is_null());
 107     base::ResetAndReturn(&callback_).Run(cert);
 108   }
 109 }
 110
 111 void SSLClientAuthHandler::DoSelectCertificate(
 112     int render_process_host_id, int render_frame_host_id) {
 113   GetContentClient()->browser()->SelectClientCertificate(
 114       render_process_host_id,
 115       render_frame_host_id,
 116       cert_request_info_.get(),
 117       base::Bind(&SSLClientAuthHandler::CertificateSelected, this));
 118 }
 119
 120 }  // namespace content