Add a utility method to convert SPKI from DER to JWK, so far implemented only for EC P256v1 (which …

net/cert/x509_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_CERT_X509_UTIL_H_
 #define NET_CERT_X509_UTIL_H_
 
 #include <string>
 
 #include "base/memory/ref_counted.h"
+#include "base/strings/string_piece.h"
 #include "base/time/time.h"
 #include "net/base/net_export.h"
 
+namespace base {
+class DictionaryValue;
+}
+
 namespace crypto {
 class ECPrivateKey;
 class RSAPrivateKey;
 }
 
 namespace net {
 
 class X509Certificate;
 
 namespace x509_util {
@@ skipping 14 matching lines @@
 // See Internet Draft draft-balfanz-tls-obc-00 for more details:
 // http://tools.ietf.org/html/draft-balfanz-tls-obc-00
 NET_EXPORT_PRIVATE bool CreateDomainBoundCertEC(
     crypto::ECPrivateKey* key,
     const std::string& domain,
     uint32 serial_number,
     base::Time not_valid_before,
     base::Time not_valid_after,
     std::string* der_cert);
 
+// Converts a subject public key info from DER to JWK.
+// See http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-13 for
+// the output format.
+NET_EXPORT_PRIVATE bool ConvertSPKIFromDERToJWK(
+    base::StringPiece spki,

[Ryan Sleevi, 2013/08/02 23:08:43]

"const base::StringPiece&" [Yes, I realize there is frequent debate internally
on this point - particularly for 64-bit - but this is at least what the Chromium
team uses as the vastly dominant pattern]

+    base::DictionaryValue* public_key_jwk);
+
 // Create a self-signed certificate containing the public key in |key|.
 // Subject, serial number and validity period are given as parameters.
 // The certificate is signed by the private key in |key|. The hashing
 // algorithm for the signature is SHA-1.
 //
 // |subject| is a distinguished name defined in RFC4514.
 //
 // An example:
 // CN=Michael Wong,O=FooBar Corporation,DC=foobar,DC=com
 //
@@ skipping 32 matching lines @@
 
  private:
   base::Time now_;
 };
 
 } // namespace x509_util
 
 } // namespace net
 
 #endif  // NET_CERT_X509_UTIL_H_