1/*
2 * Copyright (c) 2008,2011 Apple Inc. All Rights Reserved.
3 *
4 * @APPLE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
11 * file.
12 *
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
20 *
21 * @APPLE_LICENSE_HEADER_END@
22 */
23
24/*
25 * siginfoUtils.cpp - private C++ routines for cmssiginfo
26 */
27
28#include <Security/SecCmsSignerInfo.h>
29#include <security_utilities/simpleprefs.h>
30#include "cmspriv.h"    /* prototype */
31
32/*
33 * RFC 3278 section section 2.1.1 states that the signatureAlgorithm
34 * field contains the full ecdsa-with-SHA1 OID, not plain old ecPublicKey
35 * as would appear in other forms of signed datas. However Microsoft doesn't
36 * do this, it puts ecPublicKey there, and if we put ecdsa-with-SHA1 there,
37 * MS can't verify - presumably because it takes the digest of the digest
38 * before feeding it to ECDSA.
39 * We handle this with a preference; default if it's not there is
40 * "Microsoft compatibility mode".
41 */
42
43bool SecCmsMsEcdsaCompatMode()
44{
45	bool msCompat = true;
46	Dictionary *pd = Dictionary::CreateDictionary(kMSCompatibilityDomain, Dictionary::US_User, false);
47	if(pd == NULL) {
48	    pd = Dictionary::CreateDictionary(kMSCompatibilityDomain, Dictionary::US_System, false);
49	}
50	if(pd != NULL) {
51	    /*
52	     * not present means true, the opposite of getBoolValue(), so we have to see if
53	     * it's there...
54	     */
55	    if(pd->getValue(kMSCompatibilityMode)) {
56			msCompat = pd->getBoolValue(kMSCompatibilityMode);
57	    }
58	    delete pd;
59	}
60	return msCompat;
61}
62
63