Import PEM encoded X.509 certificate into iOS KeyChain

Question

I'm receiving a String containing a PEM encoded X.509 certificate from somewhere. I'd like to import this certificate into the KeyChain of iOS. I'm planning to do the following: - convert NSString to openssl X509 - create PKCS12 - convert PKCS12 to NSData - import NSData with SecPKCS12Import So far I came up with the following code: ``` const char *cert_chars = [certStr cStringUsingEncoding:NSUTF8StringEncoding]; BIO *buffer = BIO_new(BIO_s_mem()); BIO_puts(buffer, cert_chars); X509 *cert; cert = PEM_read_bio_X509(buffer, NULL, 0, NULL); if (cert == NULL) { NSLog(@"error"); } X509_print_fp(stdout, cert); EVP_PKEY *privateKey; const unsigned char *privateBits = (unsigned char *) [privateKeyData bytes]; int privateLength = [privateKeyData length]; privateKey = d2i_AutoPrivateKey(NULL, &privateBits, privateLength); if (!X509_check_private_key(cert, privateKey)) { NSLog(@"PK error"); } PKCS12 *p12 = PKCS12_create("test", "David's Cert", privateKey, cert, NULL, 0, 0, 0, 0, 0); ``` Unfortun…

Accepted Answer

The following calls were missing before creating the PKCS12:

```
OpenSSL_add_all_algorithms();
OpenSSL_add_all_ciphers();
OpenSSL_add_all_digests();
```

These solved the problems with the missing cipher and also a subsequent problem of a missing digest.

Import PEM encoded X.509 certificate into iOS KeyChain

Solution

Problem