Allow the SSL session cache on Win/Mac to be used even after a client cert key is removed

net/third_party/nss/ssl/sslplatf.c

 /*
  * Platform specific crypto wrappers
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
@@ skipping 91 matching lines @@
 ssl_FreePlatformKey(PlatformKey key)
 {
     if (key) {
         if (key->dwKeySpec != CERT_NCRYPT_KEY_SPEC)
             CryptReleaseContext(key->hCryptProv, 0);
         /* FIXME(rsleevi): Close CNG keys. */
         PORT_Free(key);
     }
 }
 
-void
-ssl_FreePlatformAuthInfo(PlatformAuthInfo* info)
-{
-    if (info->provider != NULL) {
-        PORT_Free(info->provider);
-        info->provider = NULL;
-    }
-    if (info->container != NULL) {
-        PORT_Free(info->container);
-        info->container = NULL;
-    }
-    info->provType = 0;
-}
-
-void
-ssl_InitPlatformAuthInfo(PlatformAuthInfo* info)
-{
-    info->provider  = NULL;
-    info->container = NULL;
-    info->provType  = 0;
-}
-
-PRBool
-ssl_PlatformAuthTokenPresent(PlatformAuthInfo *info)
-{
-    HCRYPTPROV prov = 0;
-
-    if (!info || !info->provider || !info->container)
-        return PR_FALSE;
-
-    if (!CryptAcquireContextA(&prov, info->container, info->provider,
-                              info->provType, 0))
-        return PR_FALSE;
-
-    CryptReleaseContext(prov, 0);
-    return PR_TRUE;
-}
-
-void
-ssl_GetPlatformAuthInfoForKey(PlatformKey key,
-                              PlatformAuthInfo *info)
-{
-    DWORD bytesNeeded = 0;
-    ssl_InitPlatformAuthInfo(info);
-    if (!key || key->dwKeySpec == CERT_NCRYPT_KEY_SPEC)
-        goto error;
-
-    bytesNeeded = sizeof(info->provType);
-    if (!CryptGetProvParam(key->hCryptProv, PP_PROVTYPE,
-                           (BYTE*)&info->provType, &bytesNeeded, 0))
-        goto error;
-
-    bytesNeeded = 0;
-    if (!CryptGetProvParam(key->hCryptProv, PP_CONTAINER, NULL, &bytesNeeded,
-                           0))
-        goto error;
-    info->container = (char*)PORT_Alloc(bytesNeeded);
-    if (info->container == NULL)
-        goto error;
-    if (!CryptGetProvParam(key->hCryptProv, PP_CONTAINER,
-                           (BYTE*)info->container, &bytesNeeded, 0))
-        goto error;
-
-    bytesNeeded = 0;
-    if (!CryptGetProvParam(key->hCryptProv, PP_NAME, NULL, &bytesNeeded, 0))
-        goto error;
-    info->provider = (char*)PORT_Alloc(bytesNeeded);
-    if (info->provider == NULL)
-        goto error;
-    if (!CryptGetProvParam(key->hCryptProv, PP_NAME, (BYTE*)info->provider,
-                           &bytesNeeded, 0))
-        goto error;
-
-    goto done;
-error:
-    ssl_FreePlatformAuthInfo(info);
-
-done:
-    return;
-}
-
 SECStatus
 ssl3_PlatformSignHashes(SSL3Hashes *hash, PlatformKey key, SECItem *buf, 
                         PRBool isTLS)
 {
     SECStatus    rv             = SECFailure;
     PRBool       doDerEncode    = PR_FALSE;
     SECItem      hashItem;
     HCRYPTKEY    hKey           = 0;
     DWORD        argLen         = 0;
     ALG_ID       keyAlg         = 0;
@@ skipping 106 matching lines @@
     if (rv != SECSuccess && buf->data) {
         PORT_Free(buf->data);
         buf->data = NULL;
     }
     return rv;
 }
 
 #elif defined(XP_MACOSX)
 #include <Security/cssm.h>
 
-/*
- * In Mac OS X 10.5, these two functions are private but implemented, and
- * in Mac OS X 10.6, these are exposed publicly.  To compile with the 10.5
- * SDK, we declare them here.
- */
-OSStatus SecKeychainItemCreatePersistentReference(SecKeychainItemRef itemRef, CFDataRef *persistentItemRef);
-OSStatus SecKeychainItemCopyFromPersistentReference(CFDataRef persistentItemRef, SecKeychainItemRef *itemRef);
-
 void
 ssl_FreePlatformKey(PlatformKey key)
 {
     CFRelease(key);
 }
 
-void
-ssl_FreePlatformAuthInfo(PlatformAuthInfo* info)
-{
-    if (info->keychain != NULL) {
-        CFRelease(info->keychain);
-        info->keychain = NULL;
-    }
-    if (info->persistentKey != NULL) {
-        CFRelease(info->persistentKey);
-        info->persistentKey = NULL;
-    }
-}
-
-void
-ssl_InitPlatformAuthInfo(PlatformAuthInfo* info)
-{
-    info->keychain = NULL;
-    info->persistentKey = NULL;
-}
-
-PRBool
-ssl_PlatformAuthTokenPresent(PlatformAuthInfo* info)
-{
-    if (!info || !info->keychain || !info->persistentKey)
-        return PR_FALSE;
-
-    // Not actually interested in the status, but it can be used to make sure
-    // that the keychain still exists (as smart card ejection will remove
-    // the keychain)
-    SecKeychainStatus keychainStatus;
-    OSStatus rv = SecKeychainGetStatus(info->keychain, &keychainStatus);
-    if (rv != noErr)
-        return PR_FALSE;
-
-    // Make sure the individual key still exists within the keychain, if
-    // the keychain is present
-    SecKeychainItemRef keychainItem;
-    rv = SecKeychainItemCopyFromPersistentReference(info->persistentKey,
-                                                    &keychainItem);
-    if (rv != noErr)
-        return PR_FALSE;
-
-    CFRelease(keychainItem);
-    return PR_TRUE;
-}
-
-void
-ssl_GetPlatformAuthInfoForKey(PlatformKey key,
-                              PlatformAuthInfo *info)
-{
-    SecKeychainItemRef keychainItem = (SecKeychainItemRef)key;
-    OSStatus rv = SecKeychainItemCopyKeychain(keychainItem, &info->keychain);
-    if (rv == noErr) {
-        rv = SecKeychainItemCreatePersistentReference(keychainItem,
-                                                      &info->persistentKey);
-    }
-    if (rv != noErr) {
-        ssl_FreePlatformAuthInfo(info);
-    }
-    return;
-}
-
 SECStatus
 ssl3_PlatformSignHashes(SSL3Hashes *hash, PlatformKey key, SECItem *buf, 
                         PRBool isTLS)
 {
     SECStatus       rv                  = SECFailure;
     PRBool          doDerEncode         = PR_FALSE;
     unsigned int    signatureLen;
     OSStatus        status              = noErr;
     CSSM_CSP_HANDLE cspHandle           = 0;
     const CSSM_KEY *cssmKey             = NULL;
@@ skipping 126 matching lines @@
         buf->data = NULL;
     }
     return rv;
 }
 #else
 void
 ssl_FreePlatformKey(PlatformKey key)
 {
 }
 
-void
-ssl_FreePlatformAuthInfo(PlatformAuthInfo *info)
-{
-}
-
-void
-ssl_InitPlatformAuthInfo(PlatformAuthInfo *info)
-{
-}
-
-PRBool
-ssl_PlatformAuthTokenPresent(PlatformAuthInfo *info)
-{
-    return PR_FALSE;
-}
-
-void
-ssl_GetPlatformAuthInfoForKey(PlatformKey key, PlatformAuthInfo *info)
-{
-}
-
 SECStatus
 ssl3_PlatformSignHashes(SSL3Hashes *hash, PlatformKey key, SECItem *buf,
                         PRBool isTLS)
 {
     PORT_SetError(PR_NOT_IMPLEMENTED_ERROR);
     return SECFailure;
 }
 #endif
 
 #endif /* NSS_PLATFORM_CLIENT_AUTH */