將客戶端證書導入到iPhone的鑰匙串

我正在寫一個應用程序與需要客戶端使用客戶端證書進行身份驗證的服務器進行通信。我需要從應用程序包中的.p12文件中提取證書並將其添加到應用程序鑰匙串中。將客戶端證書導入到iPhone的鑰匙串

我一直在試圖弄清楚如何從蘋果的"Certificate, Key, and Trust Services Tasks for iOS"工作，但對我來說，它似乎不完整，並沒有指定我如何添加任何東西到鑰匙串（？）。

我很失落，任何幫助appriciated，在此先感謝！

2011-12-01 mban09

「Certificate, Key, and Trust Services Tasks for iOS」包含的信息足以從.p12文件中提取證書。

從列表2-1演示瞭如何從上市2-2二線提取SecIdentityRef
（// 1）展示瞭如何複製 SecCertificateRef出SecIdentityRef的。

例如加載P12文件，提取證書，安裝到鑰匙串。（不包括錯誤處理和內存管理）

NSString * password = @"Your-P12-File-Password"; 
    NSString * path = [[NSBundle mainBundle] 
        pathForResource:@"Your-P12-File" ofType:@"p12"]; 

    // prepare password 
    CFStringRef cfPassword = CFStringCreateWithCString(NULL, 
                password.UTF8String, 
                kCFStringEncodingUTF8); 
    const void *keys[] = { kSecImportExportPassphrase }; 
    const void *values[] = { cfPassword }; 
    CFDictionaryRef optionsDictionary 
    = CFDictionaryCreate(kCFAllocatorDefault, keys, values, 1, 
                NULL, NULL); 

    // prepare p12 file content 
    NSData * fileContent = [[NSData alloc] initWithContentsOfFile:path]; 
    CFDataRef cfDataOfFileContent = (__bridge CFDataRef)fileContent; 

    // extract p12 file content into items (array) 
    CFArrayRef items = CFArrayCreate(NULL, 0, 0, NULL); 
    OSStatus status = errSecSuccess; 
    status = SecPKCS12Import(cfDataOfFileContent, 
          optionsDictionary, 
          &items); 
    // TODO: error handling on status 

    // extract identity 
    CFDictionaryRef yourIdentityAndTrust = CFArrayGetValueAtIndex(items, 0); 
    const void *tempIdentity = NULL; 
    tempIdentity = CFDictionaryGetValue(yourIdentityAndTrust, 
             kSecImportItemIdentity); 

    SecIdentityRef yourIdentity = (SecIdentityRef)tempIdentity; 


    // get certificate from identity 
    SecCertificateRef yourCertificate = NULL; 
    status = SecIdentityCopyCertificate(yourIdentity, &yourCertificate); 


    // at last, install certificate into keychain 
    const void *keys2[] = { kSecValueRef,    kSecClass }; 
    const void *values2[] = { yourCertificate, kSecClassCertificate }; 
    CFDictionaryRef dict 
    = CFDictionaryCreate(kCFAllocatorDefault, keys2, values2, 
              2, NULL, NULL); 
    status = SecItemAdd(dict, NULL); 

    // TODO: error handling on status

來源

2012-10-20 05:39:34 coder9t99

將客戶端證書導入到iPhone的鑰匙串

回答

相關問題