1 files changed, 74 insertions, 0 deletions
diff --git a/wgtpkg-certs.c b/wgtpkg-certs.c
new file mode 100644
index 0000000..c103c51
--- /dev/null
+++ b/wgtpkg-certs.c
@@ -0,0 +1,74 @@
+/*
+ Copyright 2015 IoT.bzh
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+*/
+
+
+#include <syslog.h>
+#include <openssl/x509.h>
+
+#include "wgtpkg.h"
+
+struct x509l {
+	int count;
+	X509 **certs;
+};
+
+static struct x509l certificates = { .count = 0, .certs = NULL };
+
+static int add_certificate_x509(X509 *x)
+{
+	X509 **p = realloc(certificates.certs, (certificates.count + 1) * sizeof(X509*));
+	if (!p) {
+		syslog(LOG_ERR, "reallocation failed for certificate");
+		return -1;
+	}
+	certificates.certs = p;
+	p[certificates.count++] = x;
+	return 0;
+}
+
+static int add_certificate_bin(const char *bin, int len)
+{
+	int rc;
+	const unsigned char *b = (const unsigned char *)bin;
+	X509 *x =  d2i_X509(NULL, &b, len);
+	if (x == NULL) {
+		syslog(LOG_ERR, "d2i_X509 failed");
+		return -1;
+	}
+	rc = add_certificate_x509(x);
+	if (rc)
+		X509_free(x);
+	return rc;
+}
+
+int add_certificate_b64(const char *b64)
+{
+	char *d;
+	int l = base64dec(b64, &d);
+	if (l > 0) {
+		l = add_certificate_bin(d, l);
+		free(d);
+	}
+	return l;
+}
+
+void clear_certificates()
+{
+	while(certificates.count)
+		X509_free(certificates.certs[--certificates.count]);
+}
+
+