| Index: crypto/rsa_private_key_openssl.cc
|
| diff --git a/crypto/rsa_private_key_openssl.cc b/crypto/rsa_private_key_openssl.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..52a0a7a1815e820f69a54d953168f93b7bdd2ea4
|
| --- /dev/null
|
| +++ b/crypto/rsa_private_key_openssl.cc
|
| @@ -0,0 +1,138 @@
|
| +// Copyright (c) 2011 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "crypto/rsa_private_key.h"
|
| +
|
| +#include <openssl/bio.h>
|
| +#include <openssl/bn.h>
|
| +#include <openssl/evp.h>
|
| +#include <openssl/pkcs12.h>
|
| +#include <openssl/rsa.h>
|
| +
|
| +#include "base/logging.h"
|
| +#include "base/memory/scoped_ptr.h"
|
| +#include "crypto/openssl_util.h"
|
| +#include "crypto/scoped_openssl_types.h"
|
| +
|
| +namespace crypto {
|
| +
|
| +namespace {
|
| +
|
| +using ScopedPKCS8_PRIV_KEY_INFO =
|
| + ScopedOpenSSL<PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_free>;
|
| +
|
| +// Function pointer definition, for injecting the required key export function
|
| +// into ExportKey, below. The supplied function should export EVP_PKEY into
|
| +// the supplied BIO, returning 1 on success or 0 on failure.
|
| +using ExportFunction = int (*)(BIO*, EVP_PKEY*);
|
| +
|
| +// Helper to export |key| into |output| via the specified ExportFunction.
|
| +bool ExportKey(EVP_PKEY* key,
|
| + ExportFunction export_fn,
|
| + std::vector<uint8>* output) {
|
| + if (!key)
|
| + return false;
|
| +
|
| + OpenSSLErrStackTracer err_tracer(FROM_HERE);
|
| + ScopedBIO bio(BIO_new(BIO_s_mem()));
|
| +
|
| + int res = export_fn(bio.get(), key);
|
| + if (!res)
|
| + return false;
|
| +
|
| + char* data = NULL;
|
| + long len = BIO_get_mem_data(bio.get(), &data);
|
| + if (!data || len < 0)
|
| + return false;
|
| +
|
| + output->assign(data, data + len);
|
| + return true;
|
| +}
|
| +
|
| +} // namespace
|
| +
|
| +// static
|
| +RSAPrivateKey* RSAPrivateKey::Create(uint16 num_bits) {
|
| + OpenSSLErrStackTracer err_tracer(FROM_HERE);
|
| +
|
| + ScopedRSA rsa_key(RSA_new());
|
| + ScopedBIGNUM bn(BN_new());
|
| + if (!rsa_key.get() || !bn.get() || !BN_set_word(bn.get(), 65537L))
|
| + return NULL;
|
| +
|
| + if (!RSA_generate_key_ex(rsa_key.get(), num_bits, bn.get(), NULL))
|
| + return NULL;
|
| +
|
| + scoped_ptr<RSAPrivateKey> result(new RSAPrivateKey);
|
| + result->key_ = EVP_PKEY_new();
|
| + if (!result->key_ || !EVP_PKEY_set1_RSA(result->key_, rsa_key.get()))
|
| + return NULL;
|
| +
|
| + return result.release();
|
| +}
|
| +
|
| +// static
|
| +RSAPrivateKey* RSAPrivateKey::CreateFromPrivateKeyInfo(
|
| + const std::vector<uint8>& input) {
|
| + if (input.empty())
|
| + return NULL;
|
| +
|
| + OpenSSLErrStackTracer err_tracer(FROM_HERE);
|
| +
|
| + // Importing is a little more involved than exporting, as we must first
|
| + // PKCS#8 decode the input, and then import the EVP_PKEY from Private Key
|
| + // Info structure returned.
|
| + const uint8_t* ptr = &input[0];
|
| + ScopedPKCS8_PRIV_KEY_INFO p8inf(
|
| + d2i_PKCS8_PRIV_KEY_INFO(nullptr, &ptr, input.size()));
|
| + if (!p8inf.get() || ptr != &input[0] + input.size())
|
| + return NULL;
|
| +
|
| + scoped_ptr<RSAPrivateKey> result(new RSAPrivateKey);
|
| + result->key_ = EVP_PKCS82PKEY(p8inf.get());
|
| + if (!result->key_ || EVP_PKEY_id(result->key_) != EVP_PKEY_RSA)
|
| + return NULL;
|
| +
|
| + return result.release();
|
| +}
|
| +
|
| +// static
|
| +RSAPrivateKey* RSAPrivateKey::CreateFromKey(EVP_PKEY* key) {
|
| + DCHECK(key);
|
| + if (EVP_PKEY_type(key->type) != EVP_PKEY_RSA)
|
| + return NULL;
|
| + RSAPrivateKey* copy = new RSAPrivateKey();
|
| + copy->key_ = EVP_PKEY_up_ref(key);
|
| + return copy;
|
| +}
|
| +
|
| +RSAPrivateKey::RSAPrivateKey()
|
| + : key_(NULL) {
|
| +}
|
| +
|
| +RSAPrivateKey::~RSAPrivateKey() {
|
| + if (key_)
|
| + EVP_PKEY_free(key_);
|
| +}
|
| +
|
| +RSAPrivateKey* RSAPrivateKey::Copy() const {
|
| + scoped_ptr<RSAPrivateKey> copy(new RSAPrivateKey());
|
| + ScopedRSA rsa(EVP_PKEY_get1_RSA(key_));
|
| + if (!rsa)
|
| + return NULL;
|
| + copy->key_ = EVP_PKEY_new();
|
| + if (!EVP_PKEY_set1_RSA(copy->key_, rsa.get()))
|
| + return NULL;
|
| + return copy.release();
|
| +}
|
| +
|
| +bool RSAPrivateKey::ExportPrivateKey(std::vector<uint8>* output) const {
|
| + return ExportKey(key_, i2d_PKCS8PrivateKeyInfo_bio, output);
|
| +}
|
| +
|
| +bool RSAPrivateKey::ExportPublicKey(std::vector<uint8>* output) const {
|
| + return ExportKey(key_, i2d_PUBKEY_bio, output);
|
| +}
|
| +
|
| +} // namespace crypto
|
|
|