1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/enterprise/client_certificates/cert_utils.h"
#include <utility>
#include "chrome/common/chrome_version.h"
#include "components/enterprise/client_certificates/core/ec_private_key_factory.h"
#include "components/enterprise/client_certificates/core/private_key_types.h"
#include "components/enterprise/client_certificates/core/unexportable_private_key_factory.h"
#if BUILDFLAG(IS_WIN)
#include "components/enterprise/client_certificates/core/features.h"
#include "components/enterprise/client_certificates/core/win/windows_software_private_key_factory.h"
#endif // BUILDFLAG(IS_WIN)
namespace client_certificates {
namespace {
#if BUILDFLAG(IS_MAC)
constexpr char kUnexportableKeyKeychainAccessGroup[] =
MAC_TEAM_IDENTIFIER_STRING "." MAC_BUNDLE_IDENTIFIER_STRING ".devicetrust";
#endif // BUILDFLAG(IS_MAC)
} // namespace
std::unique_ptr<PrivateKeyFactory> CreatePrivateKeyFactory() {
PrivateKeyFactory::PrivateKeyFactoriesMap sub_factories;
crypto::UnexportableKeyProvider::Config config;
#if BUILDFLAG(IS_MAC)
config.keychain_access_group = kUnexportableKeyKeychainAccessGroup;
#endif // BUILDFLAG(IS_MAC)
auto unexportable_key_factory =
UnexportablePrivateKeyFactory::TryCreate(std::move(config));
if (unexportable_key_factory) {
sub_factories.insert_or_assign(PrivateKeySource::kUnexportableKey,
std::move(unexportable_key_factory));
}
#if BUILDFLAG(IS_WIN)
if (features::AreWindowsSoftwareKeysEnabled()) {
auto windows_software_key_factory =
WindowsSoftwarePrivateKeyFactory::TryCreate();
if (windows_software_key_factory) {
sub_factories.insert_or_assign(PrivateKeySource::kOsSoftwareKey,
std::move(windows_software_key_factory));
}
}
#endif // BUILDFLAG(IS_WIN)
sub_factories.insert_or_assign(PrivateKeySource::kSoftwareKey,
std::make_unique<ECPrivateKeyFactory>());
return PrivateKeyFactory::Create(std::move(sub_factories));
}
} // namespace client_certificates
|
