/**
* gnutls_pkcs11_privkey_export_pubkey
* @pkey: The private key
* @fmt: the format of output params. PEM or DER.
* @data: will hold the public key
* @flags: should be zero
*
* This function will extract the public key (modulus and public
* exponent) from the private key specified by the @url private key.
* This public key will be stored in @pubkey in the format specified
* by @fmt. @pubkey should be deinitialized using gnutls_free().
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
*
* Since: 3.3.7
**/
int
gnutls_pkcs11_privkey_export_pubkey(gnutls_pkcs11_privkey_t pkey,
gnutls_x509_crt_fmt_t fmt,
gnutls_datum_t * data,
unsigned int flags)
{
int ret;
gnutls_pubkey_t pubkey = NULL;
ret = _pkcs11_privkey_get_pubkey(pkey, &pubkey, flags);
if (ret < 0)
return gnutls_assert_val(ret);
ret = gnutls_pubkey_export2(pubkey, fmt, data);
if (ret < 0) {
gnutls_assert();
goto cleanup;
}
ret = 0;
cleanup:
if (pubkey != NULL)
gnutls_pubkey_deinit(pubkey);
return ret;
}
/* Returns the public key of the private key (if possible)
*/
int
_gnutls_privkey_get_mpis(gnutls_privkey_t key, gnutls_pk_params_st * params)
{
int ret;
switch (key->type) {
#ifdef ENABLE_OPENPGP
case GNUTLS_PRIVKEY_OPENPGP:
{
uint32_t kid[2];
uint8_t keyid[GNUTLS_OPENPGP_KEYID_SIZE];
ret =
gnutls_openpgp_privkey_get_preferred_key_id
(key->key.openpgp, keyid);
if (ret == 0) {
KEYID_IMPORT(kid, keyid);
ret =
_gnutls_openpgp_privkey_get_mpis
(key->key.openpgp, kid, params);
} else
ret =
_gnutls_openpgp_privkey_get_mpis
(key->key.openpgp, NULL, params);
if (ret < 0) {
gnutls_assert();
return ret;
}
}
break;
#endif
case GNUTLS_PRIVKEY_X509:
ret = _gnutls_pk_params_copy(params, &key->key.x509->params);
break;
#ifdef ENABLE_PKCS11
case GNUTLS_PRIVKEY_PKCS11: {
gnutls_pubkey_t pubkey;
ret = _pkcs11_privkey_get_pubkey(key->key.pkcs11, &pubkey, 0);
if (ret < 0)
return gnutls_assert_val(ret);
ret = _gnutls_pubkey_get_mpis(pubkey, params);
gnutls_pubkey_deinit(pubkey);
break;
}
#endif
default:
gnutls_assert();
return GNUTLS_E_INVALID_REQUEST;
}
return ret;
}
