1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "chrome/browser/certificate_viewer.h"
8 #include <cryptuiapi.h>
9 #pragma comment(lib, "cryptui.lib")
11 #include "base/logging.h"
12 #include "base/message_loop/message_loop.h"
13 #include "chrome/browser/ui/host_desktop.h"
14 #include "net/cert/x509_certificate.h"
15 #include "ui/aura/window.h"
16 #include "ui/aura/window_tree_host.h"
20 void ShowCertificateViewerImpl(content::WebContents
* web_contents
,
22 net::X509Certificate
* cert
) {
23 // Create a new cert context and store containing just the certificate
24 // and its intermediate certificates.
25 PCCERT_CONTEXT cert_list
= cert
->CreateOSCertChainForCert();
28 CRYPTUI_VIEWCERTIFICATE_STRUCT view_info
= { 0 };
29 view_info
.dwSize
= sizeof(view_info
);
30 // We set our parent to the tab window. This makes the cert dialog created
31 // in CryptUIDlgViewCertificate modal to the browser.
32 view_info
.hwndParent
= parent
;
33 view_info
.dwFlags
= CRYPTUI_DISABLE_EDITPROPERTIES
|
34 CRYPTUI_DISABLE_ADDTOSTORE
;
35 view_info
.pCertContext
= cert_list
;
36 HCERTSTORE cert_store
= cert_list
->hCertStore
;
37 view_info
.cStores
= 1;
38 view_info
.rghStores
= &cert_store
;
39 BOOL properties_changed
;
41 // We must allow nested tasks to dispatch so that, e.g. gpu tasks are
42 // processed for painting. This allows a second window to continue painting
43 // while the the certificate dialog is open.
44 base::MessageLoop::ScopedNestableTaskAllower
allow(
45 base::MessageLoop::current());
46 // This next call blocks but keeps processing windows messages, making it
47 // modal to the browser window.
48 ::CryptUIDlgViewCertificate(&view_info
, &properties_changed
);
50 CertFreeCertificateContext(cert_list
);
55 void ShowCertificateViewer(content::WebContents
* web_contents
,
56 gfx::NativeWindow parent
,
57 net::X509Certificate
* cert
) {
58 if (chrome::GetHostDesktopTypeForNativeWindow(parent
) !=
59 chrome::HOST_DESKTOP_TYPE_ASH
) {
60 ShowCertificateViewerImpl(
62 parent
->GetHost()->GetAcceleratedWidget(), cert
);