Exceptions indicated.
chromex.ext.platform-keys
Use the chrome.platformKeys API to access client certificates managed by the platform. If the user or policy grants the permission, an extension can use such a certficate in its custom authentication protocol. E.g. this allows usage of platform managed certificates in third party VPNs (see 'vpnProvider chrome.vpnProvider').
- available since Chrome 45
- https://developer.chrome.com/extensions/platformKeys
Use the chrome.platformKeys API to access client certificates managed by the platform. If the user or policy grants the permission, an extension can use such a certficate in its custom authentication protocol. E.g. this allows usage of platform managed certificates in third party VPNs (see 'vpnProvider chrome.vpnProvider'). * available since Chrome 45 * https://developer.chrome.com/extensions/platformKeys
get-key-pairclj/smacro
(get-key-pair certificate parameters)Passes the key pair of certificate for usage with 'platformKeys.subtleCrypto' to callback.
|certificate| - The certificate of a 'Match' returned by 'selectClientCertificates'. |parameters| - Determines signature/hash algorithm parameters additionally to the parameters fixed by the key itself. The same parameters are accepted as by WebCrypto's importKey function, e.g. RsaHashedImportParams for a RSASSA-PKCS1-v1_5 key and EcKeyImportParams for EC key. Additionally for RSASSA-PKCS1-v1_5 keys, hashing algorithm name parameter can be specified with one of the following values: 'none', 'SHA-1', 'SHA-256', 'SHA-384', or 'SHA-512', e.g. {'hash': { 'name': 'none' } }. The sign function will then apply PKCS#1 v1.5 padding but not hash the given data. Currently, this function only supports the 'RSASSA-PKCS1-v1_5' and 'ECDSA' algorithms.
This function returns a core.async channel of type promise-chan which eventually receives a result value.
Signature of the result value put on the channel is [public-key private-key] where:
|public-key| - https://developer.chrome.com/extensions/platformKeys#property-callback-publicKey. |private-key| - Might be null if this extension does not have access to it.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-getKeyPair.
Passes the key pair of certificate for usage with 'platformKeys.subtleCrypto' to callback.
|certificate| - The certificate of a 'Match' returned by 'selectClientCertificates'.
|parameters| - Determines signature/hash algorithm parameters additionally to the parameters fixed by the key itself.
The same parameters are accepted as by WebCrypto's importKey function, e.g. RsaHashedImportParams for a
RSASSA-PKCS1-v1_5 key and EcKeyImportParams for EC key. Additionally for RSASSA-PKCS1-v1_5 keys, hashing
algorithm name parameter can be specified with one of the following values: 'none', 'SHA-1', 'SHA-256',
'SHA-384', or 'SHA-512', e.g. {'hash': { 'name': 'none' } }. The sign function will then apply PKCS#1
v1.5 padding but not hash the given data. Currently, this function only supports the 'RSASSA-PKCS1-v1_5'
and 'ECDSA' algorithms.
This function returns a core.async channel of type `promise-chan` which eventually receives a result value.
Signature of the result value put on the channel is [public-key private-key] where:
|public-key| - https://developer.chrome.com/extensions/platformKeys#property-callback-publicKey.
|private-key| - Might be null if this extension does not have access to it.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via
chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-getKeyPair.get-key-pair-by-spkiclj/smacro
(get-key-pair-by-spki public-key-spki-der parameters)Passes the key pair identified by publicKeySpkiDer for usage with 'platformKeys.subtleCrypto' to callback.
|public-key-spki-der| - A DER-encoded X.509 SubjectPublicKeyInfo, obtained e.g. by calling WebCrypto's exportKey function with format='spki'. |parameters| - Provides signature and hash algorithm parameters, in addition to those fixed by the key itself. The same parameters are accepted as by WebCrypto's importKey function, e.g. RsaHashedImportParams for a RSASSA-PKCS1-v1_5 key. For RSASSA-PKCS1-v1_5 keys, we need to also pass a 'hash' parameter { 'hash': { 'name': string } }. The 'hash' parameter represents the name of the hashing algorithm to be used in the digest operation before a sign. It is possible to pass 'none' as the hash name, in which case the sign function will apply PKCS#1 v1.5 padding and but not hash the given data. Currently, this function only supports the 'RSASSA-PKCS1-v1_5' algorithm with one of the hashing algorithms 'none', 'SHA-1', 'SHA-256', 'SHA-384', and 'SHA-512'.
This function returns a core.async channel of type promise-chan which eventually receives a result value.
Signature of the result value put on the channel is [public-key private-key] where:
|public-key| - https://developer.chrome.com/extensions/platformKeys#property-callback-publicKey. |private-key| - Might be null if this extension does not have access to it.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-getKeyPairBySpki.
Passes the key pair identified by publicKeySpkiDer for usage with 'platformKeys.subtleCrypto' to callback.
|public-key-spki-der| - A DER-encoded X.509 SubjectPublicKeyInfo, obtained e.g. by calling WebCrypto's exportKey
function with format='spki'.
|parameters| - Provides signature and hash algorithm parameters, in addition to those fixed by the key itself. The same
parameters are accepted as by WebCrypto's importKey function, e.g. RsaHashedImportParams for a
RSASSA-PKCS1-v1_5 key. For RSASSA-PKCS1-v1_5 keys, we need to also pass a 'hash' parameter { 'hash': {
'name': string } }. The 'hash' parameter represents the name of the hashing algorithm to be used in the
digest operation before a sign. It is possible to pass 'none' as the hash name, in which case the sign
function will apply PKCS#1 v1.5 padding and but not hash the given data. Currently, this function only
supports the 'RSASSA-PKCS1-v1_5' algorithm with one of the hashing algorithms 'none', 'SHA-1',
'SHA-256', 'SHA-384', and 'SHA-512'.
This function returns a core.async channel of type `promise-chan` which eventually receives a result value.
Signature of the result value put on the channel is [public-key private-key] where:
|public-key| - https://developer.chrome.com/extensions/platformKeys#property-callback-publicKey.
|private-key| - Might be null if this extension does not have access to it.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via
chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-getKeyPairBySpki.select-client-certificatesclj/smacro
(select-client-certificates details)This function filters from a list of client certificates the ones that are known to the platform, match request and for which the extension has permission to access the certificate and its private key. If interactive is true, the user is presented a dialog where they can select from matching certificates and grant the extension access to the certificate. The selected/filtered client certificates will be passed to callback.
|details| - https://developer.chrome.com/extensions/platformKeys#property-selectClientCertificates-details.
This function returns a core.async channel of type promise-chan which eventually receives a result value.
Signature of the result value put on the channel is [matches] where:
|matches| - The list of certificates that match the request, that the extension has permission for and, if interactive is true, that were selected by the user.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-selectClientCertificates.
This function filters from a list of client certificates the ones that are known to the platform, match request and for
which the extension has permission to access the certificate and its private key. If interactive is true, the user is
presented a dialog where they can select from matching certificates and grant the extension access to the certificate. The
selected/filtered client certificates will be passed to callback.
|details| - https://developer.chrome.com/extensions/platformKeys#property-selectClientCertificates-details.
This function returns a core.async channel of type `promise-chan` which eventually receives a result value.
Signature of the result value put on the channel is [matches] where:
|matches| - The list of certificates that match the request, that the extension has permission for and, if interactive is
true, that were selected by the user.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via
chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-selectClientCertificates.subtle-cryptoclj/smacro
(subtle-crypto)An implementation of WebCrypto's SubtleCrypto that allows crypto operations on keys of client certificates that are available to this extension.
https://developer.chrome.com/extensions/platformKeys#method-subtleCrypto.
An implementation of WebCrypto's SubtleCrypto that allows crypto operations on keys of client certificates that are available to this extension. https://developer.chrome.com/extensions/platformKeys#method-subtleCrypto.
tap-all-eventsclj/smacro
(tap-all-events chan)Taps all valid non-deprecated events in chromex.ext.platform-keys namespace.
Taps all valid non-deprecated events in chromex.ext.platform-keys namespace.
verify-tls-server-certificateclj/smacro
(verify-tls-server-certificate details)Checks whether details.serverCertificateChain can be trusted for details.hostname according to the trust settings of the platform. Note: The actual behavior of the trust verification is not fully specified and might change in the future. The API implementation verifies certificate expiration, validates the certification path and checks trust by a known CA. The implementation is supposed to respect the EKU serverAuth and to support subject alternative names.
|details| - https://developer.chrome.com/extensions/platformKeys#property-verifyTLSServerCertificate-details.
This function returns a core.async channel of type promise-chan which eventually receives a result value.
Signature of the result value put on the channel is [result] where:
|result| - https://developer.chrome.com/extensions/platformKeys#property-callback-result.
In case of an error the channel closes without receiving any value and relevant error object can be obtained via chromex.error/get-last-error.
https://developer.chrome.com/extensions/platformKeys#method-verifyTLSServerCertificate.
Checks whether details.serverCertificateChain can be trusted for details.hostname according to the trust settings of the platform. Note: The actual behavior of the trust verification is not fully specified and might change in the future. The API implementation verifies certificate expiration, validates the certification path and checks trust by a known CA. The implementation is supposed to respect the EKU serverAuth and to support subject alternative names. |details| - https://developer.chrome.com/extensions/platformKeys#property-verifyTLSServerCertificate-details. This function returns a core.async channel of type `promise-chan` which eventually receives a result value. Signature of the result value put on the channel is [result] where: |result| - https://developer.chrome.com/extensions/platformKeys#property-callback-result. In case of an error the channel closes without receiving any value and relevant error object can be obtained via chromex.error/get-last-error. https://developer.chrome.com/extensions/platformKeys#method-verifyTLSServerCertificate.
cljdoc is a website building & hosting documentation for Clojure/Script libraries
× close