From 5ed77df197afc33c04569edcd3db5993a695fbae Mon Sep 17 00:00:00 2001
From: Onur Aslan <onuraslan@gmail.com>
Date: Fri, 29 Jul 2016 12:11:53 +0300
Subject: Implement save_der for X509 and X509Req

---
 openssl/src/x509/mod.rs   | 22 ++++++++++++++++++++++
 openssl/src/x509/tests.rs | 13 +++++++++++++
 2 files changed, 35 insertions(+)

(limited to 'openssl/src')

diff --git a/openssl/src/x509/mod.rs b/openssl/src/x509/mod.rs
index 3150cc6e..396d50df 100644
--- a/openssl/src/x509/mod.rs
+++ b/openssl/src/x509/mod.rs
@@ -532,6 +532,17 @@ impl<'ctx> X509<'ctx> {
         }
         io::copy(&mut mem_bio, writer).map_err(StreamError).map(|_| ())
     }
+
+    /// Returns a DER serialized form of the certificate
+    pub fn save_der(&self) -> Result<Vec<u8>, SslError> {
+        let mut mem_bio = try!(MemBio::new());
+        unsafe {
+            ffi::i2d_X509_bio(mem_bio.get_handle(), self.handle);
+        }
+        let mut v = Vec::new();
+        try!(io::copy(&mut mem_bio, &mut v).map_err(StreamError));
+        Ok(v)
+    }
 }
 
 extern "C" {
@@ -637,6 +648,17 @@ impl X509Req {
         }
         io::copy(&mut mem_bio, writer).map_err(StreamError).map(|_| ())
     }
+
+    /// Returns a DER serialized form of the CSR
+    pub fn save_der(&self) -> Result<Vec<u8>, SslError> {
+        let mut mem_bio = try!(MemBio::new());
+        unsafe {
+            ffi::i2d_X509_REQ_bio(mem_bio.get_handle(), self.handle);
+        }
+        let mut v = Vec::new();
+        try!(io::copy(&mut mem_bio, &mut v).map_err(StreamError));
+        Ok(v)
+    }
 }
 
 impl Drop for X509Req {
diff --git a/openssl/src/x509/tests.rs b/openssl/src/x509/tests.rs
index f547a982..5d9b30ab 100644
--- a/openssl/src/x509/tests.rs
+++ b/openssl/src/x509/tests.rs
@@ -92,6 +92,19 @@ fn test_cert_loading() {
     assert_eq!(fingerprint, hash_vec);
 }
 
+#[test]
+fn test_save_der() {
+    let cert_path = Path::new("test/cert.pem");
+    let mut file = File::open(&cert_path)
+                       .ok()
+                       .expect("Failed to open `test/cert.pem`");
+
+    let cert = X509::from_pem(&mut file).ok().expect("Failed to load PEM");
+
+    let der = cert.save_der().unwrap();
+    assert!(!der.is_empty());
+}
+
 #[test]
 fn test_subject_read_cn() {
     let cert_path = Path::new("test/cert.pem");
-- 
cgit v1.2.3