blob: 2ee0f9e98edf9101752cd588d7d3ea584837664e [file] [log] [blame]
// Copyright 2018 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef SERVICES_NETWORK_SSL_CONFIG_SERVICE_MOJO_H_
#define SERVICES_NETWORK_SSL_CONFIG_SERVICE_MOJO_H_
#include "base/component_export.h"
#include "mojo/public/cpp/bindings/binding.h"
#include "net/cert/cert_verifier.h"
#include "net/ssl/ssl_config_service.h"
#include "services/network/crl_set_distributor.h"
#include "services/network/public/mojom/ssl_config.mojom.h"
namespace network {
// An SSLConfigClient that serves as a net::SSLConfigService, listening to
// SSLConfig changes on a Mojo pipe, and providing access to the updated config.
class COMPONENT_EXPORT(NETWORK_SERVICE) SSLConfigServiceMojo
: public mojom::SSLConfigClient,
public net::SSLConfigService,
public CRLSetDistributor::Observer {
public:
// If |ssl_config_client_request| is not provided, just sticks with the
// initial configuration.
// Note: |crl_set_distributor| must outlive this object.
SSLConfigServiceMojo(mojom::SSLConfigPtr initial_config,
mojom::SSLConfigClientRequest ssl_config_client_request,
CRLSetDistributor* crl_set_distributor);
~SSLConfigServiceMojo() override;
// Sets |cert_verifier| to be configured by certificate-related settings
// provided by the mojom::SSLConfigClient via OnSSLConfigUpdated. Once set,
// |cert_verifier| must outlive the SSLConfigServiceMojo or be cleared by
// passing nullptr as |cert_verifier| prior to destruction.
void SetCertVerifierForConfiguring(net::CertVerifier* cert_verifier);
// mojom::SSLConfigClient implementation:
void OnSSLConfigUpdated(const mojom::SSLConfigPtr ssl_config) override;
// net::SSLConfigService implementation:
net::SSLContextConfig GetSSLContextConfig() override;
bool CanShareConnectionWithClientCerts(
const std::string& hostname) const override;
// CRLSetDistributor::Observer implementation:
void OnNewCRLSet(scoped_refptr<net::CRLSet> crl_set) override;
private:
mojo::Binding<mojom::SSLConfigClient> binding_;
net::SSLContextConfig ssl_context_config_;
net::CertVerifier::Config cert_verifier_config_;
net::CertVerifier* cert_verifier_;
CRLSetDistributor* crl_set_distributor_;
// The list of domains and subdomains from enterprise policy where connection
// coalescing is allowed when client certs are in use if the hosts being
// coalesced match this list.
std::vector<std::string> client_cert_pooling_policy_;
DISALLOW_COPY_AND_ASSIGN(SSLConfigServiceMojo);
};
} // namespace network
#endif // SERVICES_NETWORK_SSL_CONFIG_SERVICE_MOJO_H_