tests/set_pkcs12_cred.c

   1 /*
   2  * Copyright (C) 2005, 2006, 2008 Free Software Foundation
   3  *
   4  * Author: Simon Josefsson
   5  *
   6  * This file is part of GNUTLS.
   7  *
   8  * GNUTLS is free software; you can redistribute it and/or modify it
   9  * under the terms of the GNU General Public License as published by
  10  * the Free Software Foundation; either version 3 of the License, or
  11  * (at your option) any later version.
  12  *
  13  * GNUTLS is distributed in the hope that it will be useful, but
  14  * WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with GNUTLS; if not, write to the Free Software Foundation,
  20  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
  21  */
  22
  23 #ifdef HAVE_CONFIG_H
  24 # include <config.h>
  25 #endif
  26
  27 #include <stdlib.h>
  28
  29 #include "utils.h"
  30
  31 void
  32 doit (void)
  33 {
  34   gnutls_certificate_credentials_t x509cred;
  35   const char *file, *password;
  36   int ret;
  37
  38   ret = gnutls_global_init ();
  39   if (ret < 0)
  40     fail ("gnutls_global_init failed %d\n", ret);
  41
  42   ret = gnutls_certificate_allocate_credentials (&x509cred);
  43   if (ret < 0)
  44     fail ("gnutls_certificate_allocate_credentials failed %d\n", ret);
  45
  46   file = getenv ("PKCS12FILE");
  47   password = getenv ("PKCS12PASSWORD");
  48
  49   if (!file)
  50     file = "pkcs12-decode/client.p12";
  51   if (!password)
  52     password = "foobar";
  53
  54   success ("Reading PKCS#12 blob from `%s' using password `%s'.\n",
  55            file, password);
  56   ret = gnutls_certificate_set_x509_simple_pkcs12_file (x509cred,
  57                                                         file,
  58                                                         GNUTLS_X509_FMT_DER,
  59                                                         password);
  60   if (ret < 0)
  61     fail ("x509_pkcs12 failed %d: %s\n", ret, gnutls_strerror (ret));
  62
  63   success ("Read file OK\n");
  64
  65   gnutls_certificate_free_credentials (x509cred);
  66
  67   /* try now if we can read correctly from a pkcs12 file that
  68    * contains two certificates (one unrelated with key)
  69    */
  70   ret = gnutls_certificate_allocate_credentials (&x509cred);
  71   if (ret < 0)
  72     fail ("gnutls_certificate_allocate_credentials failed %d\n", ret);
  73
  74   file = getenv ("PKCS12FILE_2");
  75   password = getenv ("PKCS12PASSWORD_2");
  76
  77   if (!file)
  78     file = "pkcs12-decode/pkcs12_2certs.p12";
  79   if (!password)
  80     password = "";
  81
  82   success ("Reading PKCS#12 blob from `%s' using password `%s'.\n",
  83            file, password);
  84   ret = gnutls_certificate_set_x509_simple_pkcs12_file (x509cred,
  85                                                         file,
  86                                                         GNUTLS_X509_FMT_DER,
  87                                                         password);
  88   if (ret < 0)
  89     fail ("x509_pkcs12 failed %d: %s\n", ret, gnutls_strerror (ret));
  90
  91   success ("Read file OK\n");
  92
  93   gnutls_certificate_free_credentials (x509cred);
  94
  95   gnutls_global_deinit ();
  96 }