shithub: tlsclient

ref: f208e59263d823ebdd8f4160825be3de63556a10
dir: /libsec/readcert.c/

#include "os.h"
#include <libsec.h>

static char*
readfile(char *name)
{
	int fd;
	char *s;
	Dir *d;

	fd = open(name, OREAD);
	if(fd < 0)
		return nil;
	if((d = dirfstat(fd)) == nil) {
		close(fd);
		return nil;
	}
	s = malloc(d->length + 1);
	if(s == nil || readn(fd, s, d->length) != d->length){
		free(s);
		free(d);
		close(fd);
		return nil;
	}
	close(fd);
	s[d->length] = '\0';
	free(d);
	return s;
}

uchar*
readcert(char *filename, int *pcertlen)
{
	char *pem;
	uchar *binary;

	pem = readfile(filename);
	if(pem == nil){
		werrstr("can't read %s: %r", filename);
		return nil;
	}
	binary = decodePEM(pem, "CERTIFICATE", pcertlen, nil);
	free(pem);
	if(binary == nil){
		werrstr("can't parse %s", filename);
		return nil;
	}
	return binary;
}

PEMChain *
readcertchain(char *filename)
{
	char *chfile;

	chfile = readfile(filename);
	if (chfile == nil) {
		werrstr("can't read %s: %r", filename);
		return nil;
	}
	return decodepemchain(chfile, "CERTIFICATE");
}