X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/79b9da22a1f4b26279940d285c1bc28ce4e99252..7e6b461318c8a779d91381531435a68ee4e8b6ed:/OSX/libsecurity_ssl/lib/sslCrypto.c diff --git a/OSX/libsecurity_ssl/lib/sslCrypto.c b/OSX/libsecurity_ssl/lib/sslCrypto.c index 60362e4a..e26fff2f 100644 --- a/OSX/libsecurity_ssl/lib/sslCrypto.c +++ b/OSX/libsecurity_ssl/lib/sslCrypto.c @@ -48,22 +48,6 @@ #include -/* - * Get algorithm id for a SSLPubKey object. - */ -CFIndex sslPubKeyGetAlgorithmID(SecKeyRef pubKey) -{ - return SecKeyGetAlgorithmId(pubKey); -} - -/* - * Get algorithm id for a SSLPrivKey object. - */ -CFIndex sslPrivKeyGetAlgorithmID(SecKeyRef privKey) -{ - return SecKeyGetAlgorithmId(privKey); -} - OSStatus sslCreateSecTrust( @@ -213,37 +197,6 @@ errOut: return status; } -/* Convert cert in DER format into an CFArray of SecCertificateRef */ -CFArrayRef -tls_get_peer_certs(const SSLCertificate *certs) -{ - const SSLCertificate *cert; - - CFMutableArrayRef certArray = NULL; - CFDataRef certData = NULL; - SecCertificateRef cfCert = NULL; - - certArray = CFArrayCreateMutable(kCFAllocatorDefault, 0, &kCFTypeArrayCallBacks); - require(certArray, out); - cert = certs; - while(cert) { - require((certData = CFDataCreate(kCFAllocatorDefault, cert->derCert.data, cert->derCert.length)), out); - require((cfCert = SecCertificateCreateWithData(kCFAllocatorDefault, certData)), out); - CFArrayAppendValue(certArray, cfCert); - CFReleaseNull(cfCert); - CFReleaseNull(certData); - cert=cert->next; - } - - return certArray; - -out: - CFReleaseNull(cfCert); - CFReleaseNull(certData); - CFReleaseNull(certArray); - return NULL; -} - int tls_verify_peer_cert(SSLContext *ctx) { @@ -382,7 +335,7 @@ OSStatus sslVerifySelectedCipher(SSLContext *ctx) } /* Check the alg of our signing key. */ - CFIndex keyAlg = sslPrivKeyGetAlgorithmID(ctx->signingPrivKeyRef); + CFIndex keyAlg = SecKeyGetAlgorithmId(ctx->signingPrivKeyRef); if (requireAlg != keyAlg) { sslErrorLog("sslVerifySelectedCipher: signing key alg mismatch\n"); return errSSLBadConfiguration;