Implements keygen handler for openssl, but without private key persistence

net/base/keygen_handler_openssl.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/keygen_handler.h"
 
+#include <openssl/ssl.h>
+#include <openssl/x509.h>
+
+#include "base/crypto/rsa_private_key.h"
 #include "base/logging.h"
+#include "base/openssl_util.h"
+#include "base/scoped_ptr.h"
 
 namespace net {
 
 std::string KeygenHandler::GenKeyAndSignChallenge() {
-  // TODO(bulach): implement me.
-  NOTIMPLEMENTED();
-  return "";
+  scoped_ptr<base::RSAPrivateKey> key(
+      base::RSAPrivateKey::Create(key_size_in_bits_));
+  DCHECK(key != NULL);
+  EVP_PKEY* pkey = key->key();
+
+  if (stores_key_) {
+    // TODO(joth): Add an abstraction for persisting OpenSSL private keys.
+    NOTIMPLEMENTED();
+  }
+
+  base::ScopedOpenSSL<NETSCAPE_SPKI, NETSCAPE_SPKI_free> spki(
+       NETSCAPE_SPKI_new());
+  ASN1_STRING_set(spki.get()->spkac->challenge,
+                  challenge_.data(), challenge_.size());
+  NETSCAPE_SPKI_set_pubkey(spki.get(), pkey);
+  NETSCAPE_SPKI_sign(spki.get(), pkey, EVP_md5());

[wtc, 2010/12/03 19:15:44]

Please add a comment to note that you're using MD5 signature here because
it's specified in HTML5, even though the SPKI structure's format allows you to
use SHA-1 signature.

[joth, 2010/12/06 18:04:20]

Done.

+  char* spkistr = NETSCAPE_SPKI_b64_encode(spki.get());
+
+  std::string result(spkistr);
+  OPENSSL_free(spkistr);
+
+  return result;
 }
 
 }  // namespace net