oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Allow opening a specific chain, making "system" special and be the

Browse Source 
system X509Anchors file. By not specifing any keychain ("KEYCHAIN:"),
all keychains are probed.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20917 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-05 04:16:46 +00:00
parent a5c1aa04ce
commit a9130ec025
1 changed files with 32 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
lib/hx509/ks_keychain.c
View File

@@ -37,12 +37,38 @@ RCSID("$Id$");
#ifdef HAVE_FRAMEWORK_SECURITY
struct ks_keychain {
SecKeychainRef keychain;
};
static int
keychain_init(hx509_context context,
hx509_certs certs, void **data, int flags,
const char *residue, hx509_lock lock)
{
*data = NULL;
struct ks_keychain *ctx;
OSStatus ret;
ctx = calloc(1, sizeof(*ctx));
if (ctx == NULL) {
hx509_clear_error_string(context);
return ENOMEM;
}
if (strcasecmp(residue, "system") == 0)
residue = "/System/Library/Keychains/X509Anchors";
if (residue && residue[0] != '\0') {
ret = SecKeychainOpen(residue, &ctx->keychain);
if (ret != noErr) {
hx509_set_error_string(context, 0, ENOENT,
"Failed to open %s", residue);
return ENOENT;
}
}
*data = ctx;
return 0;
}
@@ -53,7 +79,11 @@ keychain_init(hx509_context context,
static int
keychain_free(hx509_certs certs, void *data)
{
assert(data == NULL);
struct ks_keychain *ctx = data;
if (ctx->keychain)
CFRelease(ctx->keychain);
memset(ctx, 0, sizeof(*ctx));
free(ctx);
return 0;
}