SecKeychainAddIToolsPassword.cpp [plain text]
#include <Security/SecKeychain.h>
#include <Security/SecKeychainItem.h>
#include <Security/SecAccess.h>
#include <Security/SecAccessPriv.h>
#include <Security/SecTrustedApplicationPriv.h>
#include <Security/SecACL.h>
#include "SecBridge.h"
#include <CoreFoundation/CoreFoundation.h>
#include <security_utilities/cfutilities.h>
OSStatus SecKeychainAddIToolsPassword(SecKeychainRef keychain, UInt32 accountNameLength, const char *accountName,
UInt32 passwordLength, const void *passwordData, SecKeychainItemRef *itemRef)
{
BEGIN_SECAPI
const char *serviceUTF8 = "iTools";
CFRef<CFStringRef> itemLabel = CFStringCreateWithBytes(kCFAllocatorDefault,
(const UInt8 *)accountName, accountNameLength, kCFStringEncodingUTF8, FALSE);
CFRef<CFMutableArrayRef> apps = CFArrayCreateMutable(NULL, 0, &kCFTypeArrayCallBacks);
CFRef<SecTrustedApplicationRef> dotMacGroup, accountsGroup;
MacOSError::check(SecTrustedApplicationCreateApplicationGroup("dot-mac", NULL, &dotMacGroup.aref()));
CFArrayAppendValue(apps, dotMacGroup);
MacOSError::check(SecTrustedApplicationCreateApplicationGroup("InternetAccounts", NULL, &accountsGroup.aref()));
CFArrayAppendValue(apps, accountsGroup);
CFRef<SecTrustedApplicationRef> myself;
MacOSError::check(SecTrustedApplicationCreateFromPath(NULL, &myself.aref()));
CFArrayAppendValue(apps, myself);
if (CFRef<CFBundleRef> myBundle = CFBundleGetBundleWithIdentifier(CFSTR("com.apple.security")))
if (CFRef<CFURLRef> url = CFBundleCopyResourceURL(myBundle,
CFSTR("iToolsTrustedApps"), CFSTR("plist"), NULL)) {
CFRef<CFDataRef> data;
if (CFURLCreateDataAndPropertiesFromResource(NULL, url, &data.aref(), NULL, NULL, NULL))
if (CFRef<CFArrayRef> list =
CFArrayRef(CFPropertyListCreateFromXMLData(NULL, data, kCFPropertyListImmutable, NULL))) {
CFIndex size = CFArrayGetCount(list);
for (CFIndex n = 0; n < size; n++) {
CFStringRef path = (CFStringRef)CFArrayGetValueAtIndex(list, n);
CFRef<SecTrustedApplicationRef> app;
if (SecTrustedApplicationCreateFromPath(cfString(path).c_str(), &app.aref()) == errSecSuccess)
CFArrayAppendValue(apps, app);
}
}
}
CFRef<SecAccessRef> access;
MacOSError::check(SecAccessCreate(itemLabel, (CFArrayRef)apps, &access.aref()));
SecKeychainAttribute attrs[] = {
{ kSecLabelItemAttr, accountNameLength, (char *)accountName }, { kSecAccountItemAttr, accountNameLength, (char *)accountName },
{ kSecServiceItemAttr, (UInt32)strlen(serviceUTF8), (char *)serviceUTF8 }
};
SecKeychainAttributeList attributes = { sizeof(attrs) / sizeof(attrs[0]), attrs };
return SecKeychainItemCreateFromContent(kSecGenericPasswordItemClass,
&attributes,
passwordLength,
(const char *)passwordData,
keychain,
access,
itemRef);
END_SECAPI
}