Added support to parse PKCS#8 encoded ECDSA private keys.

src/libstrongswan/plugins/pkcs8/pkcs8_builder.c

@@ -42,7 +42,7 @@ static const asn1Object_t pkinfoObjects[] = {
 static private_key_t *parse_private_key(chunk_t blob)
 {
 	asn1_parser_t *parser;
-	chunk_t object;
+	chunk_t object, params = chunk_empty;
 	int objectID;
 	private_key_t *key = NULL;
 	key_type_t type = KEY_ANY;
@@ -57,23 +57,38 @@ static private_key_t *parse_private_key(chunk_t blob)
 			case PKINFO_PRIVATE_KEY_ALGORITHM:
 			{
 				int oid = asn1_parse_algorithmIdentifier(object,
-										parser->get_level(parser) + 1, NULL);
+									parser->get_level(parser) + 1, &params);
 
-				if (oid == OID_RSA_ENCRYPTION)
+				switch (oid)
 				{
-					type = KEY_RSA;
+					case OID_RSA_ENCRYPTION:
-				}
+						type = KEY_RSA;
-				else
+						break;
-				{	/* key type not supported */
+					case OID_EC_PUBLICKEY:
-					goto end;
+						type = KEY_ECDSA;
+						break;
+					default:
+						/* key type not supported */
+						goto end;
 				}
 				break;
 			}
 			case PKINFO_PRIVATE_KEY:
 			{
 				DBG2(DBG_ASN, "-- > --");
-				key = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, type,
+				if (params.ptr)
-										 BUILD_BLOB_ASN1_DER, object, BUILD_END);
+				{
+					key = lib->creds->create(lib->creds, CRED_PRIVATE_KEY,
+											 type, BUILD_BLOB_ALGID_PARAMS,
+											 params, BUILD_BLOB_ASN1_DER,
+											 object, BUILD_END);
+				}
+				else
+				{
+					key = lib->creds->create(lib->creds, CRED_PRIVATE_KEY,
+											 type, BUILD_BLOB_ASN1_DER, object,
+											 BUILD_END);
+				}
 				DBG2(DBG_ASN, "-- < --");
 				break;
 			}

src/libstrongswan/plugins/pkcs8/pkcs8_builder.h

@@ -25,9 +25,9 @@
 #include <credentials/keys/private_key.h>
 
 /**
- * Load an RSA private key from PKCS#8 data.
+ * Load an RSA or ECDSA private key from PKCS#8 data.
  *
- * @param type		type of the key, KEY_RSA
+ * @param type		type of the key, KEY_RSA or KEY_ECDSA
  * @param args		builder_part_t argument list
  * @return			private key, NULL on failure
  */

src/libstrongswan/plugins/pkcs8/pkcs8_plugin.c

@@ -44,6 +44,7 @@ METHOD(plugin_t, get_features, int,
 	static plugin_feature_t f[] = {
 		PLUGIN_REGISTER(PRIVKEY, pkcs8_private_key_load, FALSE),
 			PLUGIN_PROVIDE(PRIVKEY, KEY_RSA),
+			PLUGIN_PROVIDE(PRIVKEY, KEY_ECDSA),
 	};
 	*features = f;
 	return countof(f);