implemented cert and keypair gen

Limelight/CryptoManager.h

@@ -0,0 +1,15 @@
+//
+//  CryptoManager.h
+//  Limelight
+//
+//  Created by Diego Waxemberg on 10/14/14.
+//  Copyright (c) 2014 Limelight Stream. All rights reserved.
+//
+
+#import <Foundation/Foundation.h>
+
+@interface CryptoManager : NSObject <NSURLConnectionDelegate>
+
+- (void) generateKeyPairUsingSSl;
+
+@end

Limelight/CryptoManager.m

@@ -0,0 +1,34 @@
+//
+//  CryptoManager.m
+//  Limelight
+//
+//  Created by Diego Waxemberg on 10/14/14.
+//  Copyright (c) 2014 Limelight Stream. All rights reserved.
+//
+
+#import "CryptoManager.h"
+#import "mkcert.h"
+
+
+@implementation CryptoManager
+
+- (void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge {
+    
+    
+}
+
+- (void) generateKeyPairUsingSSl {
+    NSLog(@"Generating Certificate: ");
+    CertKeyPair certKeyPair = generateCertKeyPair();
+    
+    NSArray *paths = NSSearchPathForDirectoriesInDomains(NSDocumentDirectory, NSUserDomainMask, YES);
+    NSString *documentsDirectory = [paths objectAtIndex:0];
+    NSString *certFile = [documentsDirectory stringByAppendingPathComponent:@"client.crt"];
+    NSString *keyPairFile = [documentsDirectory stringByAppendingPathComponent:@"client.key"];
+    
+    NSLog(@"Writing cert and key to: \n%@\n%@", certFile, keyPairFile);
+    saveCertKeyPair([certFile UTF8String], [keyPairFile UTF8String], certKeyPair);
+    freeCertKeyPair(certKeyPair);
+}
+
+@end

Limelight/MainFrameViewController.m

@@ -10,6 +10,7 @@
 #import "VideoDepacketizer.h"
 #import "ConnectionHandler.h"
 #import "Computer.h"
+#import "CryptoManager.h"
 
 @implementation MainFrameViewController
 NSString* hostAddr;
@@ -86,6 +87,7 @@ MDNSManager* mDNSManager;
     
     mDNSManager = [[MDNSManager alloc] initWithCallback:self];
     [mDNSManager searchForHosts];
+    [[[CryptoManager alloc] init] generateKeyPairUsingSSl];
 }
 
 - (void)updateHosts:(NSArray *)hosts {

Limelight/mkcert.c

@@ -0,0 +1,153 @@
+
+#include "mkcert.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+
+#include <openssl/pem.h>
+#include <openssl/conf.h>
+
+#ifndef OPENSSL_NO_ENGINE
+#include <openssl/engine.h>
+#endif
+
+static const int NUM_BITS = 2048;
+static const int SERIAL = 0;
+static const int NUM_YEARS = 20;
+
+int mkcert(X509 **x509p, EVP_PKEY **pkeyp, int bits, int serial, int years);
+int add_ext(X509 *cert, int nid, char *value);
+
+struct CertKeyPair generateCertKeyPair() {
+    BIO *bio_err;
+    X509 *x509 = NULL;
+    EVP_PKEY *pkey = NULL;
+    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
+    
+    bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
+    
+    mkcert(&x509, &pkey, NUM_BITS, SERIAL, NUM_YEARS);
+    
+    // Debug Print statements
+    //RSA_print_fp(stdout, pkey->pkey.rsa, 0);
+    //X509_print_fp(stdout, x509);
+    //PEM_write_PUBKEY(stdout, pkey);
+    //PEM_write_PrivateKey(stdout, pkey, NULL, NULL, 0, NULL, NULL);
+    //PEM_write_X509(stdout, x509);
+    
+#ifndef OPENSSL_NO_ENGINE
+    ENGINE_cleanup();
+#endif
+    CRYPTO_cleanup_all_ex_data();
+    
+    CRYPTO_mem_leaks(bio_err);
+    BIO_free(bio_err);
+    
+    return (CertKeyPair){x509, pkey};
+}
+
+void freeCertKeyPair(struct CertKeyPair certKeyPair) {
+    X509_free(certKeyPair.x509);
+    EVP_PKEY_free(certKeyPair.pkey);
+}
+
+void saveCertKeyPair(const char* certFile, const char* keyPairFile, CertKeyPair certKeyPair) {
+    FILE* certFilePtr = fopen(certFile, "w");
+    FILE* keyPairFilePtr = fopen(keyPairFile, "w");
+    
+    PEM_write_PrivateKey(keyPairFilePtr, certKeyPair.pkey, NULL, NULL, 0, NULL, NULL);
+    PEM_write_X509(certFilePtr, certKeyPair.x509);
+    
+    fclose(certFilePtr);
+    fclose(keyPairFilePtr);
+}
+
+int mkcert(X509 **x509p, EVP_PKEY **pkeyp, int bits, int serial, int years) {
+    X509 *x;
+    EVP_PKEY *pk;
+    RSA *rsa;
+    X509_NAME *name = NULL;
+    
+    if ((pkeyp == NULL) || (*pkeyp == NULL)) {
+        if ((pk=EVP_PKEY_new()) == NULL) {
+            abort();
+            return(0);
+        }
+    } else {
+        pk = *pkeyp;
+    }
+    
+    if ((x509p == NULL) || (*x509p == NULL)) {
+        if ((x = X509_new()) == NULL) {
+            goto err;
+        }
+    } else {
+        x = *x509p;
+    }
+    
+    rsa = RSA_generate_key(bits, RSA_F4, NULL, NULL);
+    if (!EVP_PKEY_assign_RSA(pk, rsa)) {
+        abort();
+        goto err;
+    }
+    
+    X509_set_version(x, 3);
+    ASN1_INTEGER_set(X509_get_serialNumber(x), serial);
+    X509_gmtime_adj(X509_get_notBefore(x), 0);
+    X509_gmtime_adj(X509_get_notAfter(x), (long)60*60*24*365*years);
+    X509_set_pubkey(x, pk);
+    
+    name = X509_get_subject_name(x);
+    
+    /* This function creates and adds the entry, working out the
+     * correct string type and performing checks on its length.
+     */
+    X509_NAME_add_entry_by_txt(name,"CN", MBSTRING_ASC, (unsigned char*)"NVIDIA GameStream Client", -1, -1, 0);
+    
+    /* Its self signed so set the issuer name to be the same as the
+     * subject.
+     */
+    X509_set_issuer_name(x, name);
+    
+    /* Add various extensions: standard extensions */
+    add_ext(x, NID_basic_constraints, "critical,CA:TRUE");
+    add_ext(x, NID_key_usage, "critical,keyCertSign,cRLSign");
+    
+    add_ext(x, NID_subject_key_identifier, "hash");
+    
+    if (!X509_sign(x, pk, EVP_sha1())) {
+        goto err;
+    }
+    
+    *x509p = x;
+    *pkeyp = pk;
+    return(1);
+err:
+    return(0);
+}
+
+/* Add extension using V3 code: we can set the config file as NULL
+ * because we wont reference any other sections.
+ */
+
+int add_ext(X509 *cert, int nid, char *value)
+{
+    X509_EXTENSION *ex;
+    X509V3_CTX ctx;
+    /* This sets the 'context' of the extensions. */
+    /* No configuration database */
+    X509V3_set_ctx_nodb(&ctx);
+    /* Issuer and subject certs: both the target since it is self signed,
+     * no request and no CRL
+     */
+    X509V3_set_ctx(&ctx, cert, cert, NULL, NULL, 0);
+    ex = X509V3_EXT_conf_nid(NULL, &ctx, nid, value);
+    if (!ex) {
+        return 0;
+    }
+    
+    X509_add_ext(cert, ex, -1);
+    X509_EXTENSION_free(ex);
+    return 1;
+}
+

Limelight/mkcert.h

@@ -0,0 +1,22 @@
+//
+//  mkcert.h
+//  Limelight
+//
+//  Created by Diego Waxemberg on 10/16/14.
+//  Copyright (c) 2014 Limelight Stream. All rights reserved.
+//
+
+#ifndef Limelight_mkcert_h
+#define Limelight_mkcert_h
+
+#include <openssl/x509v3.h>
+
+typedef struct CertKeyPair {
+    X509 *x509;
+    EVP_PKEY *pkey;
+} CertKeyPair;
+
+struct CertKeyPair generateCertKeyPair();
+void freeCertKeyPair(CertKeyPair);
+void saveCertKeyPair(const char* certFile, const char* keyPairFile, CertKeyPair certKeyPair);
+#endif