chrome/browser/net/nss_context_chromeos.cc

   1 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "chrome/browser/net/nss_context.h"
   6
   7 #include "base/memory/weak_ptr.h"
   8 #include "base/supports_user_data.h"
   9 #include "chrome/browser/profiles/profile_io_data.h"
  10 #include "content/public/browser/browser_thread.h"
  11 #include "crypto/nss_util_internal.h"
  12 #include "net/cert/nss_cert_database_chromeos.h"
  13
  14 namespace {
  15
  16 void* kDatabaseManagerKey = &kDatabaseManagerKey;
  17
  18 class NSSCertDatabaseChromeOSManager : public base::SupportsUserData::Data {
  19  public:
  20   explicit NSSCertDatabaseChromeOSManager(const std::string& username_hash)
  21       : username_hash_(username_hash), weak_ptr_factory_(this) {
  22     DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  23     crypto::ScopedPK11Slot private_slot(crypto::GetPrivateSlotForChromeOSUser(
  24         username_hash,
  25         base::Bind(&NSSCertDatabaseChromeOSManager::DidGetPrivateSlot,
  26                    weak_ptr_factory_.GetWeakPtr())));
  27     if (private_slot)
  28       DidGetPrivateSlot(private_slot.Pass());
  29   }
  30
  31   virtual ~NSSCertDatabaseChromeOSManager() {
  32     DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  33   }
  34
  35   net::NSSCertDatabase* GetNSSCertDatabase(
  36       const base::Callback<void(net::NSSCertDatabase*)>& callback) {
  37     DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  38
  39     if (nss_cert_database_)
  40       return nss_cert_database_.get();
  41
  42     ready_callback_list_.push_back(callback);
  43     return NULL;
  44   }
  45
  46  private:
  47   typedef std::vector<base::Callback<void(net::NSSCertDatabase*)> >
  48       ReadyCallbackList;
  49
  50   void DidGetPrivateSlot(crypto::ScopedPK11Slot private_slot) {
  51     DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  52     nss_cert_database_.reset(new net::NSSCertDatabaseChromeOS(
  53         crypto::GetPublicSlotForChromeOSUser(username_hash_),
  54         private_slot.Pass()));
  55
  56     ReadyCallbackList callback_list;
  57     callback_list.swap(ready_callback_list_);
  58     for (ReadyCallbackList::iterator i = callback_list.begin();
  59          i != callback_list.end();
  60          ++i) {
  61       (*i).Run(nss_cert_database_.get());
  62     }
  63   }
  64
  65   std::string username_hash_;
  66   scoped_ptr<net::NSSCertDatabaseChromeOS> nss_cert_database_;
  67   ReadyCallbackList ready_callback_list_;
  68   base::WeakPtrFactory<NSSCertDatabaseChromeOSManager> weak_ptr_factory_;
  69
  70   DISALLOW_COPY_AND_ASSIGN(NSSCertDatabaseChromeOSManager);
  71 };
  72
  73 std::string GetUsername(content::ResourceContext* context) {
  74   return ProfileIOData::FromResourceContext(context)->username_hash();
  75 }
  76
  77 }  // namespace
  78
  79 crypto::ScopedPK11Slot GetPublicNSSKeySlotForResourceContext(
  80     content::ResourceContext* context) {
  81   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  82   return crypto::GetPublicSlotForChromeOSUser(GetUsername(context));
  83 }
  84
  85 crypto::ScopedPK11Slot GetPrivateNSSKeySlotForResourceContext(
  86     content::ResourceContext* context,
  87     const base::Callback<void(crypto::ScopedPK11Slot)>& callback) {
  88   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  89   return crypto::GetPrivateSlotForChromeOSUser(GetUsername(context), callback);
  90 }
  91
  92 net::NSSCertDatabase* GetNSSCertDatabaseForResourceContext(
  93     content::ResourceContext* context,
  94     const base::Callback<void(net::NSSCertDatabase*)>& callback) {
  95   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::IO));
  96   NSSCertDatabaseChromeOSManager* manager =
  97       static_cast<NSSCertDatabaseChromeOSManager*>(
  98           context->GetUserData(kDatabaseManagerKey));
  99   if (!manager) {
 100     manager = new NSSCertDatabaseChromeOSManager(GetUsername(context));
 101     context->SetUserData(kDatabaseManagerKey, manager);
 102   }
 103   return manager->GetNSSCertDatabase(callback);
 104 }