1// Copyright (c) 2012 The Chromium Authors. All rights reserved. 2// Use of this source code is governed by a BSD-style license that can be 3// found in the LICENSE file. 4 5// This file contains functions for iOS to glue NSS and Security.framework 6// together. 7 8#ifndef NET_CERT_X509_UTIL_IOS_H_ 9#define NET_CERT_X509_UTIL_IOS_H_ 10 11#include <Security/Security.h> 12#include <vector> 13 14#include "net/cert/x509_cert_types.h" 15 16// Forward declaration; real one in <cert.h> 17typedef struct CERTCertificateStr CERTCertificate; 18 19namespace net { 20 21class X509Certificate; 22 23namespace x509_util_ios { 24 25// Converts a Security.framework certificate handle (SecCertificateRef) into 26// an NSS certificate handle (CERTCertificate*). 27CERTCertificate* CreateNSSCertHandleFromOSHandle(SecCertificateRef cert_handle); 28 29// Converts an NSS certificate handle (CERTCertificate*) into a 30// Security.framework handle (SecCertificateRef) 31SecCertificateRef CreateOSCertHandleFromNSSHandle( 32 CERTCertificate* nss_cert_handle); 33 34// Create a new X509Certificate from the specified NSS server cert and 35// intermediates. This is functionally equivalent to 36// X509Certificate::CreateFromHandle(), except it supports receiving 37// NSS CERTCertificate*s rather than iOS SecCertificateRefs. 38X509Certificate* CreateCertFromNSSHandles( 39 CERTCertificate* cert_handle, 40 const std::vector<CERTCertificate*>& intermediates); 41 42SHA1HashValue CalculateFingerprintNSS(CERTCertificate* cert); 43 44// This is a wrapper class around the native NSS certificate handle. 45// The constructor copies the certificate data from |cert_handle| and 46// uses the NSS library to parse it. 47class NSSCertificate { 48 public: 49 explicit NSSCertificate(SecCertificateRef cert_handle); 50 ~NSSCertificate(); 51 CERTCertificate* cert_handle() const; 52 private: 53 CERTCertificate* nss_cert_handle_; 54}; 55 56// A wrapper class that loads a certificate and all of its intermediates into 57// NSS. This is necessary for libpkix path building to be able to locate 58// needed intermediates. 59class NSSCertChain { 60 public: 61 explicit NSSCertChain(X509Certificate* certificate); 62 ~NSSCertChain(); 63 CERTCertificate* cert_handle() const; 64 const std::vector<CERTCertificate*>& cert_chain() const; 65 private: 66 std::vector<CERTCertificate*> certs_; 67}; 68 69} // namespace x509_util_ios 70} // namespace net 71 72#endif // NET_CERT_X509_UTIL_IOS_H_ 73