//

//  MYCertificate-iPhone.m

//  MYCrypto-iPhone

//

//  Created by Jens Alfke on 3/30/09.

//  Copyright 2009 Jens Alfke. All rights reserved.

//

#import "MYCertificate.h"

#import "MYCrypto_Private.h"

#if MYCRYPTO_USE_IPHONE_API

@implementation MYCertificate

/** Creates a MYCertificate object for an existing Keychain certificate reference. */

- (id) initWithCertificateRef: (SecCertificateRef)certificateRef {

    self = [super initWithKeychainItemRef: (SecKeychainItemRef)certificateRef];

    if (self) {

        _certificateRef = certificateRef;     // superclass has already CFRetained it

    }

    return self;

}

/** Creates a MYCertificate object from exported key data, but does not add it to any keychain. */

- (id) initWithCertificateData: (NSData*)data

{

    SecCertificateRef certificateRef = SecCertificateCreateWithData(NULL, (CFDataRef)data);

    self = [self initWithCertificateRef: certificateRef];

    CFRelease(certificateRef);

    return self;

}

@synthesize certificateRef=_certificateRef;

- (NSData*) certificateData {

    CFDataRef data = SecCertificateCopyData(_certificateRef);

    return data ?[(id)CFMakeCollectable(data) autorelease] :nil;

}

- (MYPublicKey*) publicKey {

    SecTrustRef trust = NULL;

    SecPolicyRef policy = SecPolicyCreateBasicX509();

    OSStatus err = SecTrustCreateWithCertificates((CFArrayRef)$array((id)_certificateRef),

                                                  policy,

                                                  &trust);

    CFRelease(policy);

    if (!check(err,@"SecTrustCreateWithCertificates"))

        return nil;

    MYPublicKey *key = nil;

    SecKeyRef keyRef = SecTrustCopyPublicKey(trust);

    if (keyRef) {

        key = [[[MYPublicKey alloc] initWithKeyRef: keyRef] autorelease];

        CFRelease(keyRef);

    }

    CFRelease(trust);

    return key;

}

- (NSString*) commonName {

    CFStringRef name = SecCertificateCopySubjectSummary(_certificateRef);

    return name ?[(id)CFMakeCollectable(name) autorelease] :nil;

}

@end

#endif MYCRYPTO_USE_IPHONE_API