| OLD | NEW |
|---|
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "net/cert/jwk_serializer.h" | |
| 6 | |
| 7 #include <openssl/bn.h> | |
| 8 #include <openssl/bytestring.h> | |
| 9 #include <openssl/ec.h> | |
| 10 #include <openssl/ec_key.h> | |
| 11 #include <openssl/evp.h> | |
| 12 | |
| 13 #include "base/base64url.h" | |
| 14 #include "base/logging.h" | |
| 15 #include "base/strings/string_util.h" | |
| 16 #include "base/values.h" | |
| 17 #include "crypto/openssl_util.h" | |
| 18 #include "crypto/scoped_openssl_types.h" | |
| 19 | |
| 20 namespace net { | |
| 21 | |
| 22 namespace JwkSerializer { | |
| 23 | |
| 24 namespace { | |
| 25 | |
| 26 bool ConvertEcKeyToJwk(EVP_PKEY* pkey, | |
| 27 base::DictionaryValue* public_key_jwk, | |
| 28 const crypto::OpenSSLErrStackTracer& err_tracer) { | |
| 29 crypto::ScopedEC_KEY ec_key(EVP_PKEY_get1_EC_KEY(pkey)); | |
| 30 if (!ec_key) | |
| 31 return false; | |
| 32 const EC_GROUP* ec_group = EC_KEY_get0_group(ec_key.get()); | |
| 33 if (!ec_group) | |
| 34 return false; | |
| 35 | |
| 36 std::string curve_name; | |
| 37 int nid = EC_GROUP_get_curve_name(ec_group); | |
| 38 if (nid == NID_X9_62_prime256v1) { | |
| 39 curve_name = "P-256"; | |
| 40 } else if (nid == NID_secp384r1) { | |
| 41 curve_name = "P-384"; | |
| 42 } else if (nid == NID_secp521r1) { | |
| 43 curve_name = "P-521"; | |
| 44 } else { | |
| 45 return false; | |
| 46 } | |
| 47 | |
| 48 int degree_bytes = (EC_GROUP_get_degree(ec_group) + 7) / 8; | |
| 49 | |
| 50 const EC_POINT* ec_point = EC_KEY_get0_public_key(ec_key.get()); | |
| 51 if (!ec_point) | |
| 52 return false; | |
| 53 | |
| 54 crypto::ScopedBIGNUM x(BN_new()); | |
| 55 crypto::ScopedBIGNUM y(BN_new()); | |
| 56 if (!EC_POINT_get_affine_coordinates_GFp(ec_group, ec_point, | |
| 57 x.get(), y.get(), NULL)) { | |
| 58 return false; | |
| 59 } | |
| 60 | |
| 61 // The coordinates are encoded with leading zeros included. | |
| 62 std::string x_bytes; | |
| 63 std::string y_bytes; | |
| 64 if (!BN_bn2bin_padded(reinterpret_cast<uint8_t*>( | |
| 65 base::WriteInto(&x_bytes, degree_bytes + 1)), | |
| 66 degree_bytes, x.get()) || | |
| 67 !BN_bn2bin_padded(reinterpret_cast<uint8_t*>( | |
| 68 base::WriteInto(&y_bytes, degree_bytes + 1)), | |
| 69 degree_bytes, y.get())) { | |
| 70 return false; | |
| 71 } | |
| 72 | |
| 73 public_key_jwk->SetString("kty", "EC"); | |
| 74 public_key_jwk->SetString("crv", curve_name); | |
| 75 | |
| 76 std::string x_b64; | |
| 77 base::Base64UrlEncode(x_bytes, base::Base64UrlEncodePolicy::OMIT_PADDING, | |
| 78 &x_b64); | |
| 79 public_key_jwk->SetString("x", x_b64); | |
| 80 | |
| 81 std::string y_b64; | |
| 82 base::Base64UrlEncode(y_bytes, base::Base64UrlEncodePolicy::OMIT_PADDING, | |
| 83 &y_b64); | |
| 84 public_key_jwk->SetString("y", y_b64); | |
| 85 | |
| 86 return true; | |
| 87 } | |
| 88 | |
| 89 } // namespace | |
| 90 | |
| 91 bool ConvertSpkiFromDerToJwk( | |
| 92 const base::StringPiece& spki_der, | |
| 93 base::DictionaryValue* public_key_jwk) { | |
| 94 public_key_jwk->Clear(); | |
| 95 | |
| 96 crypto::EnsureOpenSSLInit(); | |
| 97 crypto::OpenSSLErrStackTracer err_tracer(FROM_HERE); | |
| 98 | |
| 99 CBS cbs; | |
| 100 CBS_init(&cbs, reinterpret_cast<const uint8_t*>(spki_der.data()), | |
| 101 spki_der.size()); | |
| 102 crypto::ScopedEVP_PKEY pubkey(EVP_parse_public_key(&cbs)); | |
| 103 if (!pubkey || CBS_len(&cbs) != 0) | |
| 104 return false; | |
| 105 | |
| 106 if (pubkey->type == EVP_PKEY_EC) { | |
| 107 return ConvertEcKeyToJwk(pubkey.get(), public_key_jwk, err_tracer); | |
| 108 } else { | |
| 109 // TODO(juanlang): other algorithms | |
| 110 return false; | |
| 111 } | |
| 112 } | |
| 113 | |
| 114 } // namespace JwkSerializer | |
| 115 | |
| 116 } // namespace net | |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 1918903002:
Rename net/ _openssl files (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master