Documentation request: How to create a `Certificate` instance based on `SecCertificateCopyData(:)` DER data? about swift-certificates HOT 8 OPEN

Very nice! If you wanted to upstream a minimal version of the conversion code into this repo we'd happily accept it.

from swift-certificates.

Yes, this would be a really good bit of narrative documentation.

The reality is that it's just two steps: take the object from SecCertificateCopyData, pass it to the Certificate(derEncoded:) constructor. Everything should work well from there. But it'd be very valuable to add a piece of narrative documentation.

Even nicer might be to add a helper extension into the code that can do this directly. Something like:

#if canImport(Security)
import Security 

extension SecCertificate {
    public init(_ certificate: Certificate) throws {
        // code here
    }
}

extension Certificate {
    public init(_ certificate: SecCertificate) throws {
        // code here
    }
}
#endif

That plus tests would be really nice. Are you interested in adding either?

from swift-certificates.

@Lukasa thanks for your response! I put it on my list :).

I already tried your approach:

import CryptoKit
import X509
import SwiftASN1

// 1. get the SecCertificate
var rawCert: SecCertificate!
SecIdentityCopyCertificate(identity, &rawCert)
         
// 2. pass it to the constructor   
let certificate = Certificate(derData: SecCertificateCopyData(rawCert))

// 3. Causing an error
'CFData' is not convertible to 'String'

Using a as Data and than a String(data:encoding) was not helpful, too.
I know this is not a support platform, I just want to understand it - so I can contribute (and get my work done). :)

from swift-certificates.

Not convertible to String is a weird error. Similarly, derData is not one of the constructors we offer.

Does this line work? let certificate = Certificate(derEncoded: SecCertificateCopyData(rawCert) as Data)

from swift-certificates.

Oh sorry, this is the right line:

let certificate = Certificate(derEncoded: Array(SecCertificateCopyData(rawCert) as Data))

from swift-certificates.

@Lukasa awesome! derData was an autocompletion, maybe an hiccup because a property was named the same.

Thank you a lot for providing such an amazing lib. :)

from swift-certificates.

I will check if I'm capable of doing the implementation - but sadly not now. :)

from swift-certificates.

I'm making SwiftSecurity library for type-safe working with Apple Security framework. My library supports storage of X509.Certificate from current package in Keychain.

If you want to check, there is implementation of bridging between SecCertificate and X509.Certificate.

The final code syntax for developers:

import X509
import SwiftSecurity

// Create X.509 Certificate
let certificate = try Certificate(derRepresentation: certificateData)

// Get Data
certificate.derRepresentation /* Uses DER.Encoder() */

// Store X.509 Certificate in Keychain
try keychain.store(certificate, query: .certificate(for: "Root CA"))

// Retrieve from Keychain
let certificate: Certificate? = try keychain.retrieve(.certificate(for: "Root CA"))

from swift-certificates.