mirror of
https://github.com/klzgrad/naiveproxy.git
synced 2024-11-24 14:26:09 +03:00
114 lines
3.3 KiB
C++
114 lines
3.3 KiB
C++
// Copyright 2013 The Chromium Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#include "net/cert/jwk_serializer.h"
|
|
|
|
#include "base/base64url.h"
|
|
#include "base/logging.h"
|
|
#include "base/strings/string_util.h"
|
|
#include "base/values.h"
|
|
#include "crypto/openssl_util.h"
|
|
#include "third_party/boringssl/src/include/openssl/bn.h"
|
|
#include "third_party/boringssl/src/include/openssl/bytestring.h"
|
|
#include "third_party/boringssl/src/include/openssl/ec.h"
|
|
#include "third_party/boringssl/src/include/openssl/ec_key.h"
|
|
#include "third_party/boringssl/src/include/openssl/evp.h"
|
|
|
|
namespace net {
|
|
|
|
namespace JwkSerializer {
|
|
|
|
namespace {
|
|
|
|
bool ConvertEcKeyToJwk(EVP_PKEY* pkey,
|
|
base::DictionaryValue* public_key_jwk,
|
|
const crypto::OpenSSLErrStackTracer& err_tracer) {
|
|
EC_KEY* ec_key = EVP_PKEY_get0_EC_KEY(pkey);
|
|
if (!ec_key)
|
|
return false;
|
|
const EC_GROUP* ec_group = EC_KEY_get0_group(ec_key);
|
|
if (!ec_group)
|
|
return false;
|
|
|
|
std::string curve_name;
|
|
int nid = EC_GROUP_get_curve_name(ec_group);
|
|
if (nid == NID_X9_62_prime256v1) {
|
|
curve_name = "P-256";
|
|
} else if (nid == NID_secp384r1) {
|
|
curve_name = "P-384";
|
|
} else if (nid == NID_secp521r1) {
|
|
curve_name = "P-521";
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
int degree_bytes = (EC_GROUP_get_degree(ec_group) + 7) / 8;
|
|
|
|
const EC_POINT* ec_point = EC_KEY_get0_public_key(ec_key);
|
|
if (!ec_point)
|
|
return false;
|
|
|
|
bssl::UniquePtr<BIGNUM> x(BN_new());
|
|
bssl::UniquePtr<BIGNUM> y(BN_new());
|
|
if (!EC_POINT_get_affine_coordinates_GFp(ec_group, ec_point, x.get(), y.get(),
|
|
NULL)) {
|
|
return false;
|
|
}
|
|
|
|
// The coordinates are encoded with leading zeros included.
|
|
std::string x_bytes;
|
|
std::string y_bytes;
|
|
if (!BN_bn2bin_padded(reinterpret_cast<uint8_t*>(
|
|
base::WriteInto(&x_bytes, degree_bytes + 1)),
|
|
degree_bytes, x.get()) ||
|
|
!BN_bn2bin_padded(reinterpret_cast<uint8_t*>(
|
|
base::WriteInto(&y_bytes, degree_bytes + 1)),
|
|
degree_bytes, y.get())) {
|
|
return false;
|
|
}
|
|
|
|
public_key_jwk->SetString("kty", "EC");
|
|
public_key_jwk->SetString("crv", curve_name);
|
|
|
|
std::string x_b64;
|
|
base::Base64UrlEncode(x_bytes, base::Base64UrlEncodePolicy::OMIT_PADDING,
|
|
&x_b64);
|
|
public_key_jwk->SetString("x", x_b64);
|
|
|
|
std::string y_b64;
|
|
base::Base64UrlEncode(y_bytes, base::Base64UrlEncodePolicy::OMIT_PADDING,
|
|
&y_b64);
|
|
public_key_jwk->SetString("y", y_b64);
|
|
|
|
return true;
|
|
}
|
|
|
|
} // namespace
|
|
|
|
bool ConvertSpkiFromDerToJwk(const base::StringPiece& spki_der,
|
|
base::DictionaryValue* public_key_jwk) {
|
|
public_key_jwk->Clear();
|
|
|
|
crypto::EnsureOpenSSLInit();
|
|
crypto::OpenSSLErrStackTracer err_tracer(FROM_HERE);
|
|
|
|
CBS cbs;
|
|
CBS_init(&cbs, reinterpret_cast<const uint8_t*>(spki_der.data()),
|
|
spki_der.size());
|
|
bssl::UniquePtr<EVP_PKEY> pubkey(EVP_parse_public_key(&cbs));
|
|
if (!pubkey || CBS_len(&cbs) != 0)
|
|
return false;
|
|
|
|
if (pubkey->type == EVP_PKEY_EC) {
|
|
return ConvertEcKeyToJwk(pubkey.get(), public_key_jwk, err_tracer);
|
|
} else {
|
|
// TODO(juanlang): other algorithms
|
|
return false;
|
|
}
|
|
}
|
|
|
|
} // namespace JwkSerializer
|
|
|
|
} // namespace net
|