Home / Browse / Keychain Framework / Mail / Archive

Keychain Framework

Email Archive: keychain-developers (read-only)

2004:	_Jan	_Feb	_Mar	_Apr	_May	_Jun	_Jul	_Aug (2)	_Sep	_Oct (2)	_Nov	_Dec
2005:	_Jan	_Feb	_Mar	_Apr	_May	_Jun	_Jul	_Aug	_Sep (4)	_Oct (1)	_Nov (1)	_Dec
2006:	_Jan	_Feb	_Mar (2)	_Apr	_May (3)	_Jun	_Jul	_Aug	_Sep	_Oct	_Nov	_Dec
2007:	_Jan	_Feb	_Mar	_Apr	_May	_Jun	_Jul	_Aug	_Sep (5)	_Oct	_Nov	_Dec

Getting DN information from cert crashes

From: Jon Martinsson <jon_martinsson@ma...> - 2004-10-22 13:59

Hi,

I have problems using the keychain framework to list the DN of a cert. I
want to retrieve the Subject, Issuer and other stuff from the cert as
strings. The following code crashed both on 10.3.5 and 10.4 DP.


Keychain *theKeychain = [[Keychain defaultKeychain] retain];
NSArray* identities = [theKeychain identities];
Identity *curIdentity = nil;
NSEnumerator *enumerator = nil;

enumerator = [identities objectEnumerator];
while (curIdentity = (Identity*)[enumerator nextObject]) {

	Certificate* certificate = [[curIdentity certificate] retain];
	NameList* nl = [[certificate issuer] retain];
	NameListEnumerator* enumerator = [NameListEnumerator
enumeratorForNameList:nl];
	DistinguishedName* dn = [[enumerator nextObject] retain]; // get first
object only
	BOOL classok = [dn isKindOfClass:[DistinguishedName class]];

>>>>> crashes here when requsting  subject, run inifinite when requesting
issuer.
	NSLog(@"string %@", [dn description]);


	DistinguishedNameEnumerator* dnenumerator = 
[DistinguishedNameEnumerator
enumeratorForDistinguishedName:dn];
	TypeValuePair* tvp = nil;
	while (tvp = [dnenumerator nextObject]) {
		[tvp retain];
		classok = [tvp isKindOfClass:[TypeValuePair class]];
		NSString *d = [tvp description];
		NSString *t = [tvp typeAsString];
		NSLog(@"string %@", d);
		NSLog(@"string %@", t);
		}
	}
}


Regards
Jon

Re: Getting DN information from cert crashes

From: Wade Tregaskis <wjtregaskis@st...> - 2004-10-22 16:27

> I have problems using the keychain framework to list the DN of a cert. 
> I
> want to retrieve the Subject, Issuer and other stuff from the cert as
> strings. The following code crashed both on 10.3.5 and 10.4 DP.

Just a note:  I don't have access to 10.4, so anything's possible with 
it.

>>>>>> crashes here when requsting  subject, run inifinite when 
>>>>>> requesting
> issuer.
> 	NSLog(@"string %@", [dn description]);

I assume you mean it crashes when you call [dn description]?  The 
likely place is in the TypeValuePair description method - there was a 
bug in Apple's implementation where the structure of the pair differed 
from what it claimed to be.  Unfortunately there's only one 
implementation in the code at the moment, and I can't remember whether 
it's the 10.2 or the 10.3 version... I presume the former, if it's 
crashing under later systems.

Are you using the pre-packaged code (from the download section of the 
Sourceforge site) or code straight from the CVS repository?  The latter 
is much more up to date.. ideally that would mean it works under 10.3, 
but again, I'm just not sure if I ever got time to do that.

The bad news, ultimately, is that I can't do too much about it right at 
the moment; I'm about to start end of year exams, so spare time is an 
absolute premium.  The good news is that I will be working on the 
framework as much as I can, within those limits, so if I do get some 
time I'll continue looking into it.  From memory the correct code for 
both 10.2 and 10.3 was hashed out on the CDSA list a while back (when I 
first reported the problem), so if that is indeed what's causing the 
crash, it should be relatively simple to fix.

So, in the mean time, any addition details or code you can provide 
would be most helpful.

Wade Tregaskis (AIM, Yahoo & Skype: wadetregaskis, ICQ: 40056898, MSN & 
email: wjtregaskis@..., Jabber: 
wadetregaskis@...
-- Sed quis custodiet ipsos custodes?