Google Git
Sign in
chromium / chromium / src.git / 68b6502084af7e2021f7321633f5fbb5f997a58b / . / chrome / browser / ssl / ssl_error_info.cc
blob: d33960e55ff85b6899415bd0be1f0f9e14daca04 [file] [log] [blame]
[email protected]09581d12012-02-27 05:12:47[diff] [blame]1// Copyright (c) 2012 The Chromium Authors. All rights reserved.
license.botbf09a502008-08-24 00:55:55[diff] [blame]2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]4
[email protected]3b073b22009-01-16 03:29:03[diff] [blame]5#include "chrome/browser/ssl/ssl_error_info.h"
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]6
[email protected]09581d12012-02-27 05:12:47[diff] [blame]7#include "base/i18n/time_formatting.h"
[email protected]4bf41352010-03-08 21:21:36[diff] [blame]8#include "base/utf_string_conversions.h"
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]9#include "chrome/common/time_format.h"
[email protected]b59c6cf02012-03-12 20:51:42[diff] [blame]10#include "content/public/browser/cert_store.h"
[email protected]34ac8f32009-02-22 23:03:27[diff] [blame]11#include "googleurl/src/gurl.h"
12#include "grit/chromium_strings.h"
13#include "grit/generated_resources.h"
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]14#include "net/base/cert_status_flags.h"
[email protected]68b65022012-08-18 01:58:42[diff] [blame^]15#include "net/base/escape.h"
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]16#include "net/base/net_errors.h"
17#include "net/base/ssl_info.h"
[email protected]c051a1b2011-01-21 23:30:17[diff] [blame]18#include "ui/base/l10n/l10n_util.h"
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]19
[email protected]42197a22010-12-28 23:29:42[diff] [blame]20SSLErrorInfo::SSLErrorInfo(const string16& title,
21 const string16& details,
22 const string16& short_description,
23 const std::vector<string16>& extra_info)
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]24 : title_(title),
25 details_(details),
26 short_description_(short_description),
27 extra_information_(extra_info) {
28}
29
30// static
31SSLErrorInfo SSLErrorInfo::CreateError(ErrorType error_type,
[email protected]8ac1a752008-07-31 19:40:37[diff] [blame]32 net::X509Certificate* cert,
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]33 const GURL& request_url) {
[email protected]42197a22010-12-28 23:29:42[diff] [blame]34 string16 title, details, short_description;
35 std::vector<string16> extra_info;
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]36 switch (error_type) {
37 case CERT_COMMON_NAME_INVALID: {
[email protected]42197a22010-12-28 23:29:42[diff] [blame]38 title =
39 l10n_util::GetStringUTF16(IDS_CERT_ERROR_COMMON_NAME_INVALID_TITLE);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]40 // If the certificate contains multiple DNS names, we choose the most
41 // representative one -- either the DNS name that's also in the subject
42 // field, or the first one. If this heuristic turns out to be
43 // inadequate, we can consider choosing the DNS name that is the
44 // "closest match" to the host name in the request URL, or listing all
45 // the DNS names with an HTML <ul>.
46 std::vector<std::string> dns_names;
47 cert->GetDNSNames(&dns_names);
48 DCHECK(!dns_names.empty());
49 size_t i = 0;
50 for (; i < dns_names.size(); ++i) {
51 if (dns_names[i] == cert->subject().common_name)
52 break;
53 }
54 if (i == dns_names.size())
55 i = 0;
56 details =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]57 l10n_util::GetStringFUTF16(IDS_CERT_ERROR_COMMON_NAME_INVALID_DETAILS,
58 UTF8ToUTF16(request_url.host()),
[email protected]68b65022012-08-18 01:58:42[diff] [blame^]59 net::EscapeForHTML(
60 UTF8ToUTF16(dns_names[i])),
[email protected]42197a22010-12-28 23:29:42[diff] [blame]61 UTF8ToUTF16(request_url.host()));
62 short_description = l10n_util::GetStringUTF16(
63 IDS_CERT_ERROR_COMMON_NAME_INVALID_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]64 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]65 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]66 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]67 l10n_util::GetStringFUTF16(
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]68 IDS_CERT_ERROR_COMMON_NAME_INVALID_EXTRA_INFO_2,
[email protected]68b65022012-08-18 01:58:42[diff] [blame^]69 net::EscapeForHTML(UTF8ToUTF16(cert->subject().common_name)),
[email protected]42197a22010-12-28 23:29:42[diff] [blame]70 UTF8ToUTF16(request_url.host())));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]71 break;
72 }
73 case CERT_DATE_INVALID:
74 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]75 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]76 if (cert->HasExpired()) {
[email protected]42197a22010-12-28 23:29:42[diff] [blame]77 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXPIRED_TITLE);
[email protected]09581d12012-02-27 05:12:47[diff] [blame]78 details = l10n_util::GetStringFUTF16(
79 IDS_CERT_ERROR_EXPIRED_DETAILS,
80 UTF8ToUTF16(request_url.host()),
81 UTF8ToUTF16(request_url.host()),
82 base::TimeFormatFriendlyDateAndTime(base::Time::Now()));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]83 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]84 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXPIRED_DESCRIPTION);
85 extra_info.push_back(l10n_util::GetStringUTF16(
86 IDS_CERT_ERROR_EXPIRED_DETAILS_EXTRA_INFO_2));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]87 } else {
88 // Then it must be not yet valid. We don't check that it is not yet
89 // valid as there is still a very unlikely chance that the cert might
90 // have become valid since the error occurred.
[email protected]42197a22010-12-28 23:29:42[diff] [blame]91 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_NOT_YET_VALID_TITLE);
92 details = l10n_util::GetStringFUTF16(
93 IDS_CERT_ERROR_NOT_YET_VALID_DETAILS,
94 UTF8ToUTF16(request_url.host()),
[email protected]09581d12012-02-27 05:12:47[diff] [blame]95 UTF8ToUTF16(request_url.host()),
96 base::TimeFormatFriendlyDateAndTime(base::Time::Now()));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]97 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]98 l10n_util::GetStringUTF16(IDS_CERT_ERROR_NOT_YET_VALID_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]99 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]100 l10n_util::GetStringUTF16(
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]101 IDS_CERT_ERROR_NOT_YET_VALID_DETAILS_EXTRA_INFO_2));
102 }
103 break;
104 case CERT_AUTHORITY_INVALID:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]105 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_AUTHORITY_INVALID_TITLE);
106 details = l10n_util::GetStringFUTF16(
107 IDS_CERT_ERROR_AUTHORITY_INVALID_DETAILS,
108 UTF8ToUTF16(request_url.host()));
109 short_description = l10n_util::GetStringUTF16(
110 IDS_CERT_ERROR_AUTHORITY_INVALID_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]111 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]112 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
113 extra_info.push_back(l10n_util::GetStringFUTF16(
114 IDS_CERT_ERROR_AUTHORITY_INVALID_EXTRA_INFO_2,
115 UTF8ToUTF16(request_url.host()),
116 UTF8ToUTF16(request_url.host())));
117 extra_info.push_back(l10n_util::GetStringUTF16(
118 IDS_CERT_ERROR_AUTHORITY_INVALID_EXTRA_INFO_3));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]119 break;
120 case CERT_CONTAINS_ERRORS:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]121 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_CONTAINS_ERRORS_TITLE);
122 details = l10n_util::GetStringFUTF16(
123 IDS_CERT_ERROR_CONTAINS_ERRORS_DETAILS,
124 UTF8ToUTF16(request_url.host()));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]125 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]126 l10n_util::GetStringUTF16(IDS_CERT_ERROR_CONTAINS_ERRORS_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]127 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]128 l10n_util::GetStringFUTF16(IDS_CERT_ERROR_EXTRA_INFO_1,
129 UTF8ToUTF16(request_url.host())));
130 extra_info.push_back(l10n_util::GetStringUTF16(
131 IDS_CERT_ERROR_CONTAINS_ERRORS_EXTRA_INFO_2));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]132 break;
133 case CERT_NO_REVOCATION_MECHANISM:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]134 title = l10n_util::GetStringUTF16(
135 IDS_CERT_ERROR_NO_REVOCATION_MECHANISM_TITLE);
136 details = l10n_util::GetStringUTF16(
137 IDS_CERT_ERROR_NO_REVOCATION_MECHANISM_DETAILS);
138 short_description = l10n_util::GetStringUTF16(
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]139 IDS_CERT_ERROR_NO_REVOCATION_MECHANISM_DESCRIPTION);
140 break;
141 case CERT_UNABLE_TO_CHECK_REVOCATION:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]142 title = l10n_util::GetStringUTF16(
143 IDS_CERT_ERROR_UNABLE_TO_CHECK_REVOCATION_TITLE);
144 details = l10n_util::GetStringUTF16(
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]145 IDS_CERT_ERROR_UNABLE_TO_CHECK_REVOCATION_DETAILS);
[email protected]42197a22010-12-28 23:29:42[diff] [blame]146 short_description = l10n_util::GetStringUTF16(
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]147 IDS_CERT_ERROR_UNABLE_TO_CHECK_REVOCATION_DESCRIPTION);
148 break;
149 case CERT_REVOKED:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]150 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_REVOKED_CERT_TITLE);
151 details = l10n_util::GetStringFUTF16(IDS_CERT_ERROR_REVOKED_CERT_DETAILS,
152 UTF8ToUTF16(request_url.host()));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]153 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]154 l10n_util::GetStringUTF16(IDS_CERT_ERROR_REVOKED_CERT_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]155 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]156 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]157 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]158 l10n_util::GetStringUTF16(IDS_CERT_ERROR_REVOKED_CERT_EXTRA_INFO_2));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]159 break;
160 case CERT_INVALID:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]161 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_INVALID_CERT_TITLE);
[email protected]eb8a06d2011-03-04 04:40:38[diff] [blame]162 details = l10n_util::GetStringFUTF16(
163 IDS_CERT_ERROR_INVALID_CERT_DETAILS,
164 UTF8ToUTF16(request_url.host()));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]165 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]166 l10n_util::GetStringUTF16(IDS_CERT_ERROR_INVALID_CERT_DESCRIPTION);
[email protected]eb8a06d2011-03-04 04:40:38[diff] [blame]167 extra_info.push_back(
168 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
169 extra_info.push_back(l10n_util::GetStringUTF16(
170 IDS_CERT_ERROR_INVALID_CERT_EXTRA_INFO_2));
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]171 break;
[email protected]0374b292009-08-14 23:49:19[diff] [blame]172 case CERT_WEAK_SIGNATURE_ALGORITHM:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]173 title = l10n_util::GetStringUTF16(
174 IDS_CERT_ERROR_WEAK_SIGNATURE_ALGORITHM_TITLE);
175 details = l10n_util::GetStringFUTF16(
[email protected]0374b292009-08-14 23:49:19[diff] [blame]176 IDS_CERT_ERROR_WEAK_SIGNATURE_ALGORITHM_DETAILS,
[email protected]42197a22010-12-28 23:29:42[diff] [blame]177 UTF8ToUTF16(request_url.host()));
178 short_description = l10n_util::GetStringUTF16(
[email protected]0374b292009-08-14 23:49:19[diff] [blame]179 IDS_CERT_ERROR_WEAK_SIGNATURE_ALGORITHM_DESCRIPTION);
180 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]181 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
[email protected]0374b292009-08-14 23:49:19[diff] [blame]182 extra_info.push_back(
[email protected]42197a22010-12-28 23:29:42[diff] [blame]183 l10n_util::GetStringUTF16(
[email protected]0374b292009-08-14 23:49:19[diff] [blame]184 IDS_CERT_ERROR_WEAK_SIGNATURE_ALGORITHM_EXTRA_INFO_2));
185 break;
[email protected]aaa20bde2011-12-16 23:27:35[diff] [blame]186 case CERT_WEAK_KEY:
187 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_WEAK_KEY_TITLE);
188 details = l10n_util::GetStringFUTF16(
189 IDS_CERT_ERROR_WEAK_KEY_DETAILS, UTF8ToUTF16(request_url.host()));
190 short_description = l10n_util::GetStringUTF16(
191 IDS_CERT_ERROR_WEAK_KEY_DESCRIPTION);
192 extra_info.push_back(
193 l10n_util::GetStringUTF16(IDS_CERT_ERROR_EXTRA_INFO_1));
194 extra_info.push_back(
195 l10n_util::GetStringUTF16(
196 IDS_CERT_ERROR_WEAK_KEY_EXTRA_INFO_2));
197 break;
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]198 case UNKNOWN:
[email protected]42197a22010-12-28 23:29:42[diff] [blame]199 title = l10n_util::GetStringUTF16(IDS_CERT_ERROR_UNKNOWN_ERROR_TITLE);
200 details = l10n_util::GetStringUTF16(IDS_CERT_ERROR_UNKNOWN_ERROR_DETAILS);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]201 short_description =
[email protected]42197a22010-12-28 23:29:42[diff] [blame]202 l10n_util::GetStringUTF16(IDS_CERT_ERROR_UNKNOWN_ERROR_DESCRIPTION);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]203 break;
204 default:
205 NOTREACHED();
206 }
207 return SSLErrorInfo(title, details, short_description, extra_info);
208}
209
210SSLErrorInfo::~SSLErrorInfo() {
211}
212
213// static
214SSLErrorInfo::ErrorType SSLErrorInfo::NetErrorToErrorType(int net_error) {
215 switch (net_error) {
216 case net::ERR_CERT_COMMON_NAME_INVALID:
217 return CERT_COMMON_NAME_INVALID;
218 case net::ERR_CERT_DATE_INVALID:
219 return CERT_DATE_INVALID;
220 case net::ERR_CERT_AUTHORITY_INVALID:
221 return CERT_AUTHORITY_INVALID;
222 case net::ERR_CERT_CONTAINS_ERRORS:
223 return CERT_CONTAINS_ERRORS;
224 case net::ERR_CERT_NO_REVOCATION_MECHANISM:
225 return CERT_NO_REVOCATION_MECHANISM;
226 case net::ERR_CERT_UNABLE_TO_CHECK_REVOCATION:
227 return CERT_UNABLE_TO_CHECK_REVOCATION;
228 case net::ERR_CERT_REVOKED:
229 return CERT_REVOKED;
230 case net::ERR_CERT_INVALID:
231 return CERT_INVALID;
[email protected]0374b292009-08-14 23:49:19[diff] [blame]232 case net::ERR_CERT_WEAK_SIGNATURE_ALGORITHM:
233 return CERT_WEAK_SIGNATURE_ALGORITHM;
[email protected]aaa20bde2011-12-16 23:27:35[diff] [blame]234 case net::ERR_CERT_WEAK_KEY:
235 return CERT_WEAK_KEY;
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]236 default:
237 NOTREACHED();
238 return UNKNOWN;
239 }
240}
241
242// static
243int SSLErrorInfo::GetErrorsForCertStatus(int cert_id,
[email protected]70d66502011-09-23 00:55:08[diff] [blame]244 net::CertStatus cert_status,
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]245 const GURL& url,
246 std::vector<SSLErrorInfo>* errors) {
[email protected]70d66502011-09-23 00:55:08[diff] [blame]247 const net::CertStatus kErrorFlags[] = {
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]248 net::CERT_STATUS_COMMON_NAME_INVALID,
249 net::CERT_STATUS_DATE_INVALID,
250 net::CERT_STATUS_AUTHORITY_INVALID,
251 net::CERT_STATUS_NO_REVOCATION_MECHANISM,
252 net::CERT_STATUS_UNABLE_TO_CHECK_REVOCATION,
253 net::CERT_STATUS_REVOKED,
[email protected]0374b292009-08-14 23:49:19[diff] [blame]254 net::CERT_STATUS_INVALID,
[email protected]aaa20bde2011-12-16 23:27:35[diff] [blame]255 net::CERT_STATUS_WEAK_SIGNATURE_ALGORITHM,
256 net::CERT_STATUS_WEAK_KEY
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]257 };
258
259 const ErrorType kErrorTypes[] = {
260 CERT_COMMON_NAME_INVALID,
261 CERT_DATE_INVALID,
262 CERT_AUTHORITY_INVALID,
263 CERT_NO_REVOCATION_MECHANISM,
264 CERT_UNABLE_TO_CHECK_REVOCATION,
265 CERT_REVOKED,
[email protected]0374b292009-08-14 23:49:19[diff] [blame]266 CERT_INVALID,
[email protected]aaa20bde2011-12-16 23:27:35[diff] [blame]267 CERT_WEAK_SIGNATURE_ALGORITHM,
268 CERT_WEAK_KEY
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]269 };
270 DCHECK(arraysize(kErrorFlags) == arraysize(kErrorTypes));
271
[email protected]8ac1a752008-07-31 19:40:37[diff] [blame]272 scoped_refptr<net::X509Certificate> cert = NULL;
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]273 int count = 0;
[email protected]85e0f1f2008-12-17 18:30:28[diff] [blame]274 for (size_t i = 0; i < arraysize(kErrorFlags); ++i) {
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]275 if (cert_status & kErrorFlags[i]) {
276 count++;
277 if (!cert.get()) {
[email protected]b59c6cf02012-03-12 20:51:42[diff] [blame]278 bool r = content::CertStore::GetInstance()->RetrieveCert(
279 cert_id, &cert);
initial.commit09911bf2008-07-26 23:55:29[diff] [blame]280 DCHECK(r);
281 }
282 if (errors)
283 errors->push_back(SSLErrorInfo::CreateError(kErrorTypes[i], cert, url));
284 }
285 }
286 return count;
287}