PKIFNSSCredential.cpp

Go to the documentation of this file.

#include "PKIFNSSCredential.h"

#include "PKIFNSSDatabase.h"

#include "ToolkitUtils.h"
#include "PKIFMemoryUtils.h"
#include "components.h"
#include "PKIFNSSErrors.h"
#include "PKIFCryptoException.h"
#include "Name.h"
#include "Buffer.h"

#include "Certificate.h"
#include "SubjectKeyIdentifier.h"

#include "PKIFNSSConfig.h"

using namespace std;

CPKIFNSSCredential::CPKIFNSSCredential(
    SECKEYPrivateKey * key, 
    SECItem * derCert)
:m_password(0),m_pwLen(0),m_pkifCert(new CPKIFCertificate()),m_privateKey(0)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_CRYPTO_NSSCRED,0,this);
    // this poorly named function retains a reference to a PKCS#11 private key
    m_privateKey = SECKEY_CopyPrivateKey(key);
    if(!m_privateKey) {
        RAISE_CRYPTO_EXCEPTION("Unable to retain a reference to an NSS private key",TOOLKIT_CRYPTO_NSSCRED,PKIFNSS_COPYKEY_FAILED,this);
    }
    m_pkifCert->Decode(derCert->data,derCert->len);
    char * nick = PK11_GetPrivateKeyNickname(m_privateKey);
    if(nick && strlen(nick)) {
        CPKIFCredential::m_name = CPKIFStringPtr(new string(nick));
    } else {
        CPKIFCredential::m_name = CPKIFStringPtr(new string(m_pkifCert->Subject()->ToString()));
    }
    if(nick) PR_Delete(nick);
    CPKIFSubjectKeyIdentifierPtr skid = m_pkifCert->GetExtension<CPKIFSubjectKeyIdentifier>();
    if(skid) {
        CPKIFBufferPtr idbuf = skid->KeyIdentifier();
        char * id = new char[idbuf->GetLength() * 2 + 1];
        btoa((char *)idbuf->GetBuffer(),id,idbuf->GetLength());
        CPKIFCredential::m_id = CPKIFStringPtr(new string(id));
        delete[] id;
    }   
}
CPKIFNSSCredential::~CPKIFNSSCredential(void)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_CRYPTO_NSSCRED,0,this);
    if(m_password) {
        PKIFZero(m_password,m_pwLen);
        PKIFDelete(m_password);
        m_password = 0;
    }
    if(m_privateKey) {
        SECKEY_DestroyPrivateKey(m_privateKey);
        m_privateKey = 0;
    }
}

void CPKIFNSSCredential::SetPassword(
    unsigned char* password, 
    int len)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_CRYPTO_NSSCRED,0,this);
    RAISE_CRYPTO_EXCEPTION("Credential-level passwords make no sense for NSS",
        TOOLKIT_CRYPTO_NSSCRED,COMMON_NOT_IMPLEMENTED,this);

}
CPKIFCertificatePtr CPKIFNSSCredential::GetCertificate() const
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_CRYPTO_NSSCRED,0,this);
    return m_pkifCert;
}