文件安全传输服务器,安全传输：从文件加载服务器证书

如果两个文件都可以进行分组并转换为pkcs 12格式，则可以使用SecPKCS12Import方法。

但是SecPKCS12Import在根上下文中无法正常工作。我不知道这种不端行为的原因。

OSStatus extractIdentityAndTrust(CFDataRef inPKCS12Data,

SecIdentityRef *outIdentity,

SecTrustRef *outTrust,

CFStringRef keyPassword)

{

OSStatus securityError = errSecSuccess;

const void *keys[] = { kSecImportExportPassphrase };

const void *values[] = { keyPassword };

CFDictionaryRef optionsDictionary = NULL;

optionsDictionary = CFDictionaryCreate(

NULL, keys,

values, (keyPassword ? 1 : 0),

NULL, NULL);

CFArrayRef items = NULL;

securityError = SecPKCS12Import(inPKCS12Data,

optionsDictionary,

&items);

if (securityError == 0)

{

CFDictionaryRef myIdentityAndTrust = (CFDictionaryRef)CFArrayGetValueAtIndex (items, 0);

const void *tempIdentity = NULL;

tempIdentity = CFDictionaryGetValue (myIdentityAndTrust,

kSecImportItemIdentity);

CFRetain(tempIdentity);

*outIdentity = (SecIdentityRef)tempIdentity;

const void *tempTrust = NULL;

tempTrust = CFDictionaryGetValue (myIdentityAndTrust, kSecImportItemTrust);

CFRetain(tempTrust);

*outTrust = (SecTrustRef)tempTrust;

}

if (optionsDictionary)

CFRelease(optionsDictionary);

if (items)

CFRelease(items);

return securityError;

}

阿南德