PKIFNSSPasswordStorage.cpp

Go to the documentation of this file.

#include "PKIFNSSPasswordStorage.h"
#include "PKIFNSSHelper.h"

#include "ToolkitUtils.h"
#include "PKIFMemoryUtils.h"
#include "IPKIFPasswordCallback.h"

#include "PKIFNSSConfig.h"
#include "nspr.h"
struct PKIFNSSPasswordStorageImpl
{
    static char * GetPassword(PK11SlotInfo * slot, PRBool retry, void * arg);
    IPKIFPasswordCallback * m_pwfunc;
};

CPKIFNSSPasswordStorage * CPKIFNSSPasswordStorage::s_instance = 0;

char * PKIFNSSPasswordStorageImpl::GetPassword(
    PK11SlotInfo * slot, 
    PRBool retry, 
    void * arg)
{
    CPKIFNSSPasswordStorage * ps = CPKIFNSSPasswordStorage::GetInstance();
    if(!ps->m_impl->m_pwfunc) return PORT_Strdup("");
    char * token = PK11_GetSlotName(slot);
    char * gotpass =  (*(ps->m_impl->m_pwfunc))(token,
        retry == PR_TRUE ? true : false);
    if(!gotpass) return 0;
    // NSS will free the returned value, so we need to copy it using NSS's allocator
    char * rv = PORT_Strdup(gotpass);
    // securely zero the memory
    PKIFZero(gotpass,strlen(gotpass));
    PKIFDelete(gotpass);
    return rv;
}
void CPKIFNSSPasswordStorage::InstallCallback(void)
{
    if(!s_instance) {
        s_instance = new CPKIFNSSPasswordStorage();
    }
    // sun pro didn't like the address operator here.
    PK11_SetPasswordFunc(s_instance->m_impl->GetPassword);
}
void CPKIFNSSPasswordStorage::SetUserCallback(
    IPKIFPasswordCallback * cb)
{
    // if NSS can't be used, just return. This will be caught elsewhere
    if(!CPKIFNSSHelper::NSSAvaliable()) return;
    if(!cb) {
        PKIFDelete(s_instance);
        s_instance = 0;
        PK11_SetPasswordFunc(0);
    } else {
        if(!s_instance) {
            s_instance = new CPKIFNSSPasswordStorage();
        }
        s_instance->m_impl->m_pwfunc = cb;
    }
}
CPKIFNSSPasswordStorage * CPKIFNSSPasswordStorage::GetInstance(void)
{
    if(!s_instance) {
        // this will be caught elsewhere if NSS is unavailable. No need
        // to throw here
        if(!CPKIFNSSHelper::NSSAvaliable()) return 0;
        s_instance = new CPKIFNSSPasswordStorage();
    }
    return s_instance;
}
CPKIFNSSPasswordStorage::CPKIFNSSPasswordStorage()
:m_impl(new PKIFNSSPasswordStorageImpl)
{
    m_impl->m_pwfunc = 0;
}