1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "chrome/browser/certificate_viewer.h"
6
7 #include <windows.h>
8 #include <cryptuiapi.h>
9 #pragma comment(lib, "cryptui.lib")
10
11 #include "base/logging.h"
12 #include "base/message_loop/message_loop.h"
13 #include "chrome/browser/ui/host_desktop.h"
14 #include "net/cert/x509_certificate.h"
15 #include "ui/aura/window.h"
16 #include "ui/aura/window_tree_host.h"
17
18 namespace {
19
ShowCertificateViewerImpl(content::WebContents * web_contents,HWND parent,net::X509Certificate * cert)20 void ShowCertificateViewerImpl(content::WebContents* web_contents,
21 HWND parent,
22 net::X509Certificate* cert) {
23 // Create a new cert context and store containing just the certificate
24 // and its intermediate certificates.
25 PCCERT_CONTEXT cert_list = cert->CreateOSCertChainForCert();
26 CHECK(cert_list);
27
28 CRYPTUI_VIEWCERTIFICATE_STRUCT view_info = { 0 };
29 view_info.dwSize = sizeof(view_info);
30 // We set our parent to the tab window. This makes the cert dialog created
31 // in CryptUIDlgViewCertificate modal to the browser.
32 view_info.hwndParent = parent;
33 view_info.dwFlags = CRYPTUI_DISABLE_EDITPROPERTIES |
34 CRYPTUI_DISABLE_ADDTOSTORE;
35 view_info.pCertContext = cert_list;
36 HCERTSTORE cert_store = cert_list->hCertStore;
37 view_info.cStores = 1;
38 view_info.rghStores = &cert_store;
39 BOOL properties_changed;
40
41 // We must allow nested tasks to dispatch so that, e.g. gpu tasks are
42 // processed for painting. This allows a second window to continue painting
43 // while the the certificate dialog is open.
44 base::MessageLoop::ScopedNestableTaskAllower allow(
45 base::MessageLoop::current());
46 // This next call blocks but keeps processing windows messages, making it
47 // modal to the browser window.
48 BOOL rv = ::CryptUIDlgViewCertificate(&view_info, &properties_changed);
49
50 CertFreeCertificateContext(cert_list);
51 }
52
53 } // namespace
54
ShowCertificateViewer(content::WebContents * web_contents,gfx::NativeWindow parent,net::X509Certificate * cert)55 void ShowCertificateViewer(content::WebContents* web_contents,
56 gfx::NativeWindow parent,
57 net::X509Certificate* cert) {
58 if (chrome::GetHostDesktopTypeForNativeWindow(parent) !=
59 chrome::HOST_DESKTOP_TYPE_ASH) {
60 ShowCertificateViewerImpl(
61 web_contents,
62 parent->GetHost()->GetAcceleratedWidget(), cert);
63 } else {
64 NOTIMPLEMENTED();
65 }
66 }
67