Adds SecurityContext.setClientAuthoritiesBytes

runtime/bin/secure_socket.cc

 // Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 #include "bin/secure_socket.h"
 
 #include <errno.h>
 #include <fcntl.h>
 #include <sys/stat.h>
 #include <stdio.h>
@@ skipping 579 matching lines @@
     ThrowIfError(Dart_TypedDataReleaseData(chain_object));
   } else {
     delete[] chain_bytes;
   }
   CheckStatus(status,
               "TlsException",
               "Failure in useCertificateChainBytes");
 }
 
 
-void FUNCTION_NAME(SecurityContext_SetClientAuthorities)(
+static STACK_OF(X509_NAME)* GetCertificateNames(
+    uint8_t* certs_bytes, intptr_t certs_bytes_len) {
+  BIO* bio = BIO_new_mem_buf(certs_bytes, certs_bytes_len);
+  if (bio == NULL) {
+    return NULL;
+  }
+
+  STACK_OF(X509_NAME)* result = sk_X509_NAME_new_null();
+  if (result == NULL) {
+    BIO_free(bio);
+    return NULL;
+  }
+
+  while (true) {
+    X509* x509 = PEM_read_bio_X509(bio, NULL, NULL, NULL);
+    if (x509 == NULL) {
+      break;
+    }
+
+    X509_NAME* x509_name = X509_get_subject_name(x509);
+    if (x509_name == NULL) {
+      sk_X509_NAME_pop_free(result, X509_NAME_free);
+      BIO_free(bio);
+      X509_free(x509);
+      return NULL;
+    }
+
+    // Duplicate the name to put it on the stack.
+    x509_name = X509_NAME_dup(x509_name);
+    if (x509_name == NULL) {
+      sk_X509_NAME_pop_free(result, X509_NAME_free);
+      BIO_free(bio);
+      X509_free(x509);
+      return NULL;
+    }
+    sk_X509_NAME_push(result, x509_name);
+    X509_free(x509);
+  }
+
+  BIO_free(bio);
+  return result;
+}
+
+
+void FUNCTION_NAME(SecurityContext_SetClientAuthoritiesBytes)(
     Dart_NativeArguments args) {
   SSL_CTX* context = GetSecurityContext(args);
-  Dart_Handle filename_object = ThrowIfError(Dart_GetNativeArgument(args, 1));
-  const char* filename = NULL;
-  if (Dart_IsString(filename_object)) {
-    ThrowIfError(Dart_StringToCString(filename_object, &filename));
+
+  Dart_Handle certs_object = ThrowIfError(Dart_GetNativeArgument(args, 1));
+  if (!Dart_IsTypedData(certs_object) && !Dart_IsList(certs_object)) {
+    Dart_ThrowException(DartUtils::NewDartArgumentError(
+        "authCertBytes argument to SecurityContext.setClientAuthoritiesBytes "
+        "is not a List<int>"));
+  }
+
+  uint8_t* certs_bytes = NULL;
+  intptr_t certs_bytes_len = 0;
+  bool is_typed_data = false;
+  if (Dart_IsTypedData(certs_object)) {
+    is_typed_data = true;
+    Dart_TypedData_Type typ;
+    ThrowIfError(Dart_TypedDataAcquireData(
+        certs_object,
+        &typ,
+        reinterpret_cast<void**>(&certs_bytes),
+        &certs_bytes_len));
   } else {
-    Dart_ThrowException(DartUtils::NewDartArgumentError(
-         "file argument in SecurityContext.setClientAuthorities"
-         " is not a String"));
+    ASSERT(Dart_IsList(certs_object));
+    ThrowIfError(Dart_ListLength(certs_object, &certs_bytes_len));
+    certs_bytes = new uint8_t[certs_bytes_len];
+    Dart_Handle err =
+        Dart_ListGetAsBytes(certs_object, 0, certs_bytes, certs_bytes_len);
+    if (Dart_IsError(err)) {
+      delete[] certs_bytes;
+      Dart_PropagateError(err);
+    }
   }
-  STACK_OF(X509_NAME)* certificate_names;
-  certificate_names = SSL_load_client_CA_file(filename);
+  ASSERT(certs_bytes != NULL);
+
+  STACK_OF(X509_NAME)* certificate_names =
+      GetCertificateNames(certs_bytes, certs_bytes_len);
+
+  if (is_typed_data) {
+    ThrowIfError(Dart_TypedDataReleaseData(certs_object));
+  } else {
+    delete[] certs_bytes;
+  }
+
   if (certificate_names != NULL) {
     SSL_CTX_set_client_CA_list(context, certificate_names);
   } else {
     Dart_ThrowException(DartUtils::NewDartArgumentError(
         "Could not load certificate names from file in SetClientAuthorities"));
   }
 }
 
 
 void FUNCTION_NAME(SecurityContext_SetAlpnProtocols)(
@@ skipping 612 matching lines @@
     } else {
       if (SSL_LOG_DATA) Log::Print(
           "WriteEncrypted  BIO_read wrote %d bytes\n", bytes_processed);
     }
   }
   return bytes_processed;
 }
 
 }  // namespace bin
 }  // namespace dart