Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-01-10 13:54:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

bug 137506, Only internal token's keys can be exported

Browse Source 
Patch by Bob Relyea, r=kengert
This commit is contained in:
kaie%kuix.de 2006-01-10 02:29:25 +00:00
parent f10412907f
commit 76c2868c0e
1 changed files with 35 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
security/manager/ssl/src/nsPKCS12Blob.cpp
View File

@ -34,7 +34,7 @@
* the terms of any one of the MPL, the GPL or the LGPL.
*
* ***** END LICENSE BLOCK ***** */
/* $Id: nsPKCS12Blob.cpp,v 1.43 2005/11/11 13:28:56 kaie%kuix.de Exp $ */
/* $Id: nsPKCS12Blob.cpp,v 1.44 2006/01/10 02:29:25 kaie%kuix.de Exp $ */
#include "prmem.h"
#include "prprf.h"
@ -310,6 +310,24 @@ nsPKCS12Blob::LoadCerts(const PRUnichar **certNames, int numCerts)
}
#endif
static PRBool
isExtractable(SECKEYPrivateKey *privKey)
{
SECItem value;
PRBool isExtractable = PR_FALSE;
SECStatus rv;
rv=PK11_ReadRawAttribute(PK11_TypePrivKey, privKey, CKA_EXTRACTABLE, &value);
if (rv != SECSuccess) {
return PR_FALSE;
}
if ((value.len == 1) && (value.data != NULL)) {
isExtractable = *(CK_BBOOL*)value.data;
}
SECITEM_FreeItem(&value, PR_FALSE);
return isExtractable;
}
// nsPKCS12Blob::ExportToFile
//
// Having already loaded the certs, form them into a blob (loading the keys
@ -387,11 +405,23 @@ nsPKCS12Blob::ExportToFile(nsILocalFile *file,
// shape or form) from the card. So let's punt if
// the cert is not in the internal db.
if (nssCert->slot && !PK11_IsInternal(nssCert->slot)) {
if (!InformedUserNoSmartcardBackup) {
InformedUserNoSmartcardBackup = PR_TRUE;
handleError(PIP_PKCS12_NOSMARTCARD_EXPORT);
// we aren't the internal token, see if the key is extractable.
SECKEYPrivateKey *privKey=PK11_FindKeyByDERCert(nssCert->slot,
nssCert, this);
if (privKey) {
PRBool privKeyIsExtractable = isExtractable(privKey);
SECKEY_DestroyPrivateKey(privKey);
if (!privKeyIsExtractable) {
if (!InformedUserNoSmartcardBackup) {
InformedUserNoSmartcardBackup = PR_TRUE;
handleError(PIP_PKCS12_NOSMARTCARD_EXPORT);
}
continue;
}
}
continue;
}
// XXX this is why, to verify the slot is the same