blob: 12ba6943d193af4ee4790f037916c2c3b5842b25 [file] [log] [blame]
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <stdint.h>
#include <memory>
#include <set>
#include <string>
#include "base/callback.h"
#include "base/macros.h"
#include "net/url_request/report_sender.h"
#include "url/gurl.h"
namespace net {
class URLRequestContext;
namespace certificate_reporting {
class EncryptedCertLoggerRequest;
// Provides functionality for sending reports about invalid SSL
// certificate chains to a report collection server.
class ErrorReporter {
// Creates a certificate error reporter that will send certificate
// error reports to |upload_url|, using |request_context| as the
// context for the reports.
ErrorReporter(net::URLRequestContext* request_context,
const GURL& upload_url);
// Allows tests to use a server public key with known private key and
// a mock ReportSender. |server_public_key| must outlive
// the ErrorReporter.
ErrorReporter(const GURL& upload_url,
const uint8_t server_public_key[/* 32 */],
const uint32_t server_public_key_version,
std::unique_ptr<net::ReportSender> certificate_report_sender);
virtual ~ErrorReporter();
// Sends a certificate report to the report collection server. The
// |serialized_report| is expected to be a serialized protobuf
// containing information about the hostname, certificate chain, and
// certificate errors encountered when validating the chain.
// |SendReport| actually sends the report over the network; callers are
// responsible for enforcing any preconditions (such as obtaining user
// opt-in, only sending reports for certain hostnames, checking for
// incognito mode, etc.).
// On some platforms (but not all), ErrorReporter can use
// an HTTP endpoint to send encrypted extended reporting reports. On
// unsupported platforms, callers must send extended reporting reports
// over SSL.
// Calls |success_callback| when the report is successfully sent and the
// server returns an HTTP 200 response.
// In all other cases, calls |error_callback| with the URL of the upload,
// net error and HTTP response code parameters.
virtual void SendExtendedReportingReport(
const std::string& serialized_report,
const base::Callback<void()>& success_callback,
const base::Callback<void(const GURL&,
int /* net_error */,
int /* http_response_code */)>& error_callback);
// Used by tests.
static bool DecryptErrorReport(
const uint8_t server_private_key[32],
const EncryptedCertLoggerRequest& encrypted_report,
std::string* decrypted_serialized_report);
void set_upload_url_for_testing(const GURL& url) { upload_url_ = url; }
std::unique_ptr<net::ReportSender> certificate_report_sender_;
GURL upload_url_;
const uint8_t* server_public_key_;
const uint32_t server_public_key_version_;
} // namespace certificate_reporting