tests/pkcs12_simple.c

   1 /*
   2  * Copyright (C) 2005-2012 Free Software Foundation, Inc.
   3  * Copyright (C) 2012 Nikos Mavrogiannopoulos
   4  *
   5  * Author: Simon Josefsson
   6  *
   7  * This file is part of GnuTLS.
   8  *
   9  * GnuTLS is free software; you can redistribute it and/or modify it
  10  * under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 3 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * GnuTLS is distributed in the hope that it will be useful, but
  15  * WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  17  * General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License
  20  * along with GnuTLS; if not, write to the Free Software Foundation,
  21  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
  22  */
  23
  24 #ifdef HAVE_CONFIG_H
  25 #include <config.h>
  26 #endif
  27
  28 #include <stdlib.h>
  29 #include <read-file.h>
  30 #include <gnutls/pkcs12.h>
  31 #include <gnutls/x509.h>
  32 #include "utils.h"
  33
  34 static void
  35 tls_log_func (int level, const char *str)
  36 {
  37   fprintf (stderr, "<%d>| %s", level, str);
  38 }
  39
  40 void
  41 doit (void)
  42 {
  43   const char *filename, *password = "1234";
  44   gnutls_pkcs12_t pkcs12;
  45   unsigned char* file_data;
  46   size_t file_size;
  47   gnutls_datum_t data;
  48   gnutls_x509_crt_t * chain, * extras;
  49   unsigned int chain_size, extras_size, i;
  50   gnutls_x509_privkey_t pkey;
  51   int ret;
  52
  53   ret = gnutls_global_init ();
  54   if (ret < 0)
  55     fail ("gnutls_global_init failed %d\n", ret);
  56
  57   gnutls_global_set_log_function (tls_log_func);
  58   if (debug)
  59     gnutls_global_set_log_level (2);
  60
  61   ret = gnutls_pkcs12_init(&pkcs12);
  62   if (ret < 0)
  63     fail ("initialization failed: %s\n", gnutls_strerror(ret));
  64
  65   filename = getenv ("PKCS12_MANY_CERTS_FILE");
  66
  67   if (!filename)
  68     filename = "pkcs12-decode/pkcs12_5certs.p12";
  69
  70   if (debug)
  71     success ("Reading PKCS#12 blob from `%s' using password `%s'.\n",
  72              filename, password);
  73
  74   file_data = (void*)read_binary_file( filename, &file_size);
  75   if (file_data == NULL)
  76     fail("cannot open file");
  77
  78   data.data = file_data;
  79   data.size = file_size;
  80   ret = gnutls_pkcs12_import(pkcs12, &data, GNUTLS_X509_FMT_DER, 0);
  81   if (ret < 0)
  82     fail ("pkcs12_import failed %d: %s\n", ret, gnutls_strerror (ret));
  83
  84   if (debug)
  85     success ("Read file OK\n");
  86
  87   ret = gnutls_pkcs12_simple_parse (pkcs12, password, &pkey, &chain, &chain_size,
  88                                     &extras, &extras_size, NULL, 0);
  89   if (ret < 0)
  90     fail ("pkcs12_simple_parse failed %d: %s\n", ret, gnutls_strerror (ret));
  91
  92   if (chain_size != 1)
  93     fail("chain size (%u) should have been 1\n", chain_size);
  94
  95   if (extras_size != 4)
  96     fail("extras size (%u) should have been 4\n", extras_size);
  97
  98   if (debug)
  99     {
 100       char dn[512];
 101       size_t dn_size;
 102
 103       dn_size = sizeof(dn);
 104       ret = gnutls_x509_crt_get_dn(chain[0], dn, &dn_size);
 105       if (ret < 0)
 106         fail ("crt_get_dn failed %d: %s\n", ret, gnutls_strerror (ret));
 107
 108       success("dn: %s\n", dn);
 109
 110       dn_size = sizeof(dn);
 111       ret = gnutls_x509_crt_get_issuer_dn(chain[0], dn, &dn_size);
 112       if (ret < 0)
 113         fail ("crt_get_dn failed %d: %s\n", ret, gnutls_strerror (ret));
 114
 115       success("issuer dn: %s\n", dn);
 116     }
 117
 118   gnutls_pkcs12_deinit(pkcs12);
 119   gnutls_x509_privkey_deinit(pkey);
 120
 121   for (i=0;i<chain_size;i++)
 122     gnutls_x509_crt_deinit(chain[i]);
 123   gnutls_free(chain);
 124
 125   for (i=0;i<extras_size;i++)
 126     gnutls_x509_crt_deinit(extras[i]);
 127   gnutls_free(extras);
 128
 129   /* Try gnutls_x509_privkey_import2() */
 130   ret = gnutls_x509_privkey_init(&pkey);
 131   if (ret < 0)
 132     fail ("gnutls_x509_privkey_init failed %d: %s\n", ret, gnutls_strerror (ret));
 133
 134   ret = gnutls_x509_privkey_import2(pkey, &data, GNUTLS_X509_FMT_DER, password, 0);
 135   if (ret < 0)
 136     fail ("gnutls_x509_privkey_import2 failed %d: %s\n", ret, gnutls_strerror (ret));
 137   gnutls_x509_privkey_deinit(pkey);
 138
 139   free(file_data);
 140
 141   gnutls_global_deinit ();
 142 }