15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2011 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#ifndef NET_BASE_KEYGEN_HANDLER_H_ 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define NET_BASE_KEYGEN_HANDLER_H_ 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <string> 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 105d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)#include "base/callback_forward.h" 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/memory/scoped_ptr.h" 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "build/build_config.h" 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "net/base/net_export.h" 147dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include "url/gurl.h" 155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 165d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)namespace crypto { 175d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)class NSSCryptoModuleDelegate; 185d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles)} 195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace net { 215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// This class handles keypair generation for generating client 235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// certificates via the <keygen> tag. 245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// <http://dev.w3.org/html5/spec/Overview.html#the-keygen-element> 255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// <https://developer.mozilla.org/En/HTML/HTML_Extensions/KEYGEN_Tag> 265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)class NET_EXPORT KeygenHandler { 285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) public: 295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Creates a handler that will generate a key with the given key size and 305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // incorporate the |challenge| into the Netscape SPKAC structure. The request 315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // for the key originated from |url|. 325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) KeygenHandler(int key_size_in_bits, 335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const std::string& challenge, 345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) const GURL& url); 355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) ~KeygenHandler(); 365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Actually generates the key-pair and the cert request (SPKAC), and returns 385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // a base64-encoded string suitable for use as the form value of <keygen>. 395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string GenKeyAndSignChallenge(); 405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // Exposed only for unit tests. 425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) void set_stores_key(bool store) { stores_key_ = store;} 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 445821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(USE_NSS) 455d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) // Register the delegate to be used to get the token to store the key in, and 465d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) // to get the password if the token is unauthenticated. 475d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) // GenKeyAndSignChallenge runs on a worker thread, so using a blocking 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // password callback is okay here. 495d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) void set_crypto_module_delegate( 505d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) scoped_ptr<crypto::NSSCryptoModuleDelegate> delegate); 515821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif // defined(USE_NSS) 525821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 535821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) private: 545821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) int key_size_in_bits_; // key size in bits (usually 2048) 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) std::string challenge_; // challenge string sent by server 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) GURL url_; // the URL that requested the key 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) bool stores_key_; // should the generated key-pair be stored persistently? 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(USE_NSS) 595821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) // The callback for requesting a password to the PKCS#11 token. 605d1f7b1de12d16ceb2c938c56701a3e8bfa558f7Torne (Richard Coles) scoped_ptr<crypto::NSSCryptoModuleDelegate> crypto_module_delegate_; 615821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif // defined(USE_NSS) 625821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}; 635821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 645821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace net 655821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 665821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif // NET_BASE_KEYGEN_HANDLER_H_ 67