blob: 1104a36a487545a3fc679e8b9e07be5ad14dd69b [file] [log] [blame]
// Copyright (c) 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <memory>
#include <vector>
#include "base/callback.h"
#include "base/compiler_specific.h"
#include "base/component_export.h"
#include "base/macros.h"
#include "base/memory/ref_counted.h"
#include "base/threading/thread_checker.h"
#include "net/base/completion_once_callback.h"
#include "net/cert/cert_verifier.h"
namespace net {
class CertVerifyProc;
class CertVerifyResult;
class X509Certificate;
typedef std::vector<scoped_refptr<X509Certificate>> CertificateList;
} // namespace net
namespace network {
// Wraps a MultiThreadedCertVerifier to make it use the additional trust anchors
// configured by the ONC user policy.
class COMPONENT_EXPORT(NETWORK_SERVICE) CertVerifierWithTrustAnchors
: public net::CertVerifier {
// Except of the constructor, all methods and the destructor must be called on
// the IO thread. Calls |anchor_used_callback| on the IO thread every time a
// certificate from the additional trust anchors (set with SetTrustAnchors) is
// used.
explicit CertVerifierWithTrustAnchors(
const base::Closure& anchor_used_callback);
~CertVerifierWithTrustAnchors() override;
// TODO(jam): once the network service is the only path, rename or get rid of
// this method.
void InitializeOnIOThread(
const scoped_refptr<net::CertVerifyProc>& verify_proc);
// Sets the additional trust anchors.
void SetTrustAnchors(const net::CertificateList& trust_anchors);
// CertVerifier:
int Verify(const RequestParams& params,
net::CertVerifyResult* verify_result,
net::CompletionOnceCallback callback,
std::unique_ptr<Request>* out_req,
const net::NetLogWithSource& net_log) override;
void SetConfig(const Config& config) override;
net::CertVerifier::Config orig_config_;
net::CertificateList trust_anchors_;
base::Closure anchor_used_callback_;
std::unique_ptr<CertVerifier> delegate_;
} // namespace network