mirror of
				https://github.com/RGBCube/serenity
				synced 2025-10-31 21:52:45 +00:00 
			
		
		
		
	 06340ca674
			
		
	
	
		06340ca674
		
	
	
	
	
		
			
			This adds a function to parse multiple PEMs out of a single input. This allows us to load certificates from a cacert.pem file without need for preprocessing.
		
			
				
	
	
		
			96 lines
		
	
	
	
		
			2.4 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
			
		
		
	
	
			96 lines
		
	
	
	
		
			2.4 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
| /*
 | |
|  * Copyright (c) 2021, the SerenityOS developers.
 | |
|  *
 | |
|  * SPDX-License-Identifier: BSD-2-Clause
 | |
|  */
 | |
| 
 | |
| #include <AK/Base64.h>
 | |
| #include <AK/GenericLexer.h>
 | |
| #include <LibCrypto/ASN1/PEM.h>
 | |
| 
 | |
| namespace Crypto {
 | |
| 
 | |
| ByteBuffer decode_pem(ReadonlyBytes data)
 | |
| {
 | |
|     GenericLexer lexer { data };
 | |
|     ByteBuffer decoded;
 | |
| 
 | |
|     // FIXME: Parse multiple.
 | |
|     enum {
 | |
|         PreStartData,
 | |
|         Started,
 | |
|         Ended,
 | |
|     } state { PreStartData };
 | |
|     while (!lexer.is_eof()) {
 | |
|         switch (state) {
 | |
|         case PreStartData:
 | |
|             if (lexer.consume_specific("-----BEGIN"))
 | |
|                 state = Started;
 | |
|             lexer.consume_line();
 | |
|             break;
 | |
|         case Started: {
 | |
|             if (lexer.consume_specific("-----END")) {
 | |
|                 state = Ended;
 | |
|                 lexer.consume_line();
 | |
|                 break;
 | |
|             }
 | |
|             auto b64decoded = decode_base64(lexer.consume_line().trim_whitespace(TrimMode::Right));
 | |
|             if (b64decoded.is_error()) {
 | |
|                 dbgln("Failed to decode PEM: {}", b64decoded.error().string_literal());
 | |
|                 return {};
 | |
|             }
 | |
|             if (decoded.try_append(b64decoded.value().data(), b64decoded.value().size()).is_error()) {
 | |
|                 dbgln("Failed to decode PEM, likely OOM condition");
 | |
|                 return {};
 | |
|             }
 | |
|             break;
 | |
|         }
 | |
|         case Ended:
 | |
|             lexer.consume_all();
 | |
|             break;
 | |
|         default:
 | |
|             VERIFY_NOT_REACHED();
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     return decoded;
 | |
| }
 | |
| 
 | |
| ErrorOr<Vector<ByteBuffer>> decode_pems(ReadonlyBytes data)
 | |
| {
 | |
|     GenericLexer lexer { data };
 | |
|     ByteBuffer decoded;
 | |
|     Vector<ByteBuffer> pems;
 | |
| 
 | |
|     enum {
 | |
|         Junk,
 | |
|         Parsing,
 | |
|     } state { Junk };
 | |
|     while (!lexer.is_eof()) {
 | |
|         switch (state) {
 | |
|         case Junk:
 | |
|             if (lexer.consume_specific("-----BEGIN"))
 | |
|                 state = Parsing;
 | |
|             lexer.consume_line();
 | |
|             break;
 | |
|         case Parsing: {
 | |
|             if (lexer.consume_specific("-----END")) {
 | |
|                 state = Junk;
 | |
|                 lexer.consume_line();
 | |
|                 TRY(pems.try_append(decoded));
 | |
|                 decoded.clear();
 | |
|                 break;
 | |
|             }
 | |
|             auto b64decoded = TRY(decode_base64(lexer.consume_line().trim_whitespace(TrimMode::Right)));
 | |
|             TRY(decoded.try_append(b64decoded.data(), b64decoded.size()));
 | |
|             break;
 | |
|         }
 | |
|         default:
 | |
|             VERIFY_NOT_REACHED();
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     return pems;
 | |
| }
 | |
| 
 | |
| }
 |