chromeos/login/auth/challenge_response/cert_utils.cc

// Copyright 2019 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chromeos/login/auth/challenge_response/cert_utils.h"

#include <string>

#include "base/logging.h"
#include "base/strings/string_piece.h"
#include "net/cert/asn1_util.h"
#include "net/cert/x509_certificate.h"
#include "net/cert/x509_util.h"

namespace chromeos {

namespace {

bool GetSubjectPublicKeyInfo(const net::X509Certificate& certificate,
                             std::string* spki_der) {
  base::StringPiece spki_der_piece;
  if (!net::asn1::ExtractSPKIFromDERCert(
          net::x509_util::CryptoBufferAsStringPiece(certificate.cert_buffer()),
          &spki_der_piece)) {
    return false;
  }
  *spki_der = spki_der_piece.as_string();
  return !spki_der->empty();
}

}  // namespace

bool ExtractChallengeResponseKeyFromCert(
    const net::X509Certificate& certificate,
    const std::vector<ChallengeResponseKey::SignatureAlgorithm>&
        signature_algorithms,
    ChallengeResponseKey* challenge_response_key) {
  if (signature_algorithms.empty()) {
    LOG(ERROR)
        << "No signature algorithms provided for the challenge-response key";
    return false;
  }
  std::string spki_der;
  if (!GetSubjectPublicKeyInfo(certificate, &spki_der)) {
    LOG(ERROR) << "Failed to extract Subject Public Key Information from the "
                  "given certificate";
    return false;
  }
  challenge_response_key->set_public_key_spki_der(spki_der);
  challenge_response_key->set_signature_algorithms(signature_algorithms);
  return true;
}

}  // namespace chromeos