andre@0: /* This Source Code Form is subject to the terms of the Mozilla Public
andre@0:  * License, v. 2.0. If a copy of the MPL was not distributed with this
andre@0:  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
andre@0: /* 
andre@0:  * The following code handles the storage of PKCS 11 modules used by the
andre@0:  * NSS. This file is written to abstract away how the modules are
andre@0:  * stored so we can decide that later.
andre@0:  */
andre@0: #include "secport.h"
andre@0: #include "prprf.h" 
andre@0: #include "prenv.h"
andre@0: #include "utilpars.h"
andre@0: #include "utilmodt.h"
andre@0: 
andre@0: /*
andre@0:  * return the expected matching quote value for the one specified
andre@0:  */
andre@0: PRBool NSSUTIL_ArgGetPair(char c) {
andre@0:     switch (c) {
andre@0:     case '\'': return c;
andre@0:     case '\"': return c;
andre@0:     case '<': return '>';
andre@0:     case '{': return '}';
andre@0:     case '[': return ']';
andre@0:     case '(': return ')';
andre@0:     default: break;
andre@0:     }
andre@0:     return ' ';
andre@0: }
andre@0: 
andre@0: PRBool NSSUTIL_ArgIsBlank(char c) {
andre@0:    return isspace((unsigned char )c);
andre@0: }
andre@0: 
andre@0: PRBool NSSUTIL_ArgIsEscape(char c) {
andre@0:     return c == '\\';
andre@0: }
andre@0: 
andre@0: PRBool NSSUTIL_ArgIsQuote(char c) {
andre@0:     switch (c) {
andre@0:     case '\'':
andre@0:     case '\"':
andre@0:     case '<':
andre@0:     case '{': /* } end curly to keep vi bracket matching working */
andre@0:     case '(': /* ) */
andre@0:     case '[': /* ] */ return PR_TRUE;
andre@0:     default: break;
andre@0:     }
andre@0:     return PR_FALSE;
andre@0: }
andre@0: 
andre@0: char *NSSUTIL_ArgStrip(char *c) {
andre@0:    while (*c && NSSUTIL_ArgIsBlank(*c)) c++;
andre@0:    return c;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * find the end of the current tag/value pair. string should be pointing just
andre@0:  * after the equal sign. Handles quoted characters.
andre@0:  */
andre@0: char *
andre@0: NSSUTIL_ArgFindEnd(char *string) {
andre@0:     char endChar = ' ';
andre@0:     PRBool lastEscape = PR_FALSE;
andre@0: 
andre@0:     if (NSSUTIL_ArgIsQuote(*string)) {
andre@0: 	endChar = NSSUTIL_ArgGetPair(*string);
andre@0: 	string++;
andre@0:     }
andre@0: 
andre@0:     for (;*string; string++) {
andre@0: 	if (lastEscape) {
andre@0: 	    lastEscape = PR_FALSE;
andre@0: 	    continue;
andre@0: 	}
andre@0: 	if (NSSUTIL_ArgIsEscape(*string) && !lastEscape) {
andre@0: 	    lastEscape = PR_TRUE;
andre@0: 	    continue;
andre@0: 	} 
andre@0: 	if ((endChar == ' ') && NSSUTIL_ArgIsBlank(*string)) break;
andre@0: 	if (*string == endChar) {
andre@0: 	    break;
andre@0: 	}
andre@0:     }
andre@0: 
andre@0:     return string;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * get the value pointed to by string. string should be pointing just beyond
andre@0:  * the equal sign.
andre@0:  */
andre@0: char *
andre@0: NSSUTIL_ArgFetchValue(char *string, int *pcount)
andre@0: {
andre@0:     char *end = NSSUTIL_ArgFindEnd(string);
andre@0:     char *retString, *copyString;
andre@0:     PRBool lastEscape = PR_FALSE;
andre@0:     int len;
andre@0: 
andre@0:     len = end - string;
andre@0:     if (len == 0) {
andre@0: 	*pcount = 0;
andre@0: 	return NULL;
andre@0:     }
andre@0: 
andre@0:     copyString = retString = (char *)PORT_Alloc(len+1);
andre@0: 
andre@0:     if (*end) len++;
andre@0:     *pcount = len;
andre@0:     if (retString == NULL) return NULL;
andre@0: 
andre@0: 
andre@0:     if (NSSUTIL_ArgIsQuote(*string)) string++;
andre@0:     for (; string < end; string++) {
andre@0: 	if (NSSUTIL_ArgIsEscape(*string) && !lastEscape) {
andre@0: 	    lastEscape = PR_TRUE;
andre@0: 	    continue;
andre@0: 	}
andre@0: 	lastEscape = PR_FALSE;
andre@0: 	*copyString++ = *string;
andre@0:     }
andre@0:     *copyString = 0;
andre@0:     return retString;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * point to the next parameter in string
andre@0:  */
andre@0: char *
andre@0: NSSUTIL_ArgSkipParameter(char *string) 
andre@0: {
andre@0:      char *end;
andre@0:      /* look for the end of the <name>= */
andre@0:      for (;*string; string++) {
andre@0: 	if (*string == '=') { string++; break; }
andre@0: 	if (NSSUTIL_ArgIsBlank(*string)) return(string); 
andre@0:      }
andre@0: 
andre@0:      end = NSSUTIL_ArgFindEnd(string);
andre@0:      if (*end) end++;
andre@0:      return end;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * get the value from that tag value pair.
andre@0:  */
andre@0: char *
andre@0: NSSUTIL_ArgGetParamValue(char *paramName,char *parameters)
andre@0: {
andre@0:     char searchValue[256];
andre@0:     int paramLen = strlen(paramName);
andre@0:     char *returnValue = NULL;
andre@0:     int next;
andre@0: 
andre@0:     if ((parameters == NULL) || (*parameters == 0)) return NULL;
andre@0: 
andre@0:     PORT_Assert(paramLen+2 < sizeof(searchValue));
andre@0: 
andre@0:     PORT_Strcpy(searchValue,paramName);
andre@0:     PORT_Strcat(searchValue,"=");
andre@0:     while (*parameters) {
andre@0: 	if (PORT_Strncasecmp(parameters,searchValue,paramLen+1) == 0) {
andre@0: 	    parameters += paramLen+1;
andre@0: 	    returnValue = NSSUTIL_ArgFetchValue(parameters,&next);
andre@0: 	    break;
andre@0: 	} else {
andre@0: 	    parameters = NSSUTIL_ArgSkipParameter(parameters);
andre@0: 	}
andre@0: 	parameters = NSSUTIL_ArgStrip(parameters);
andre@0:    }
andre@0:    return returnValue;
andre@0: }
andre@0:   
andre@0: /*
andre@0:  * find the next flag in the parameter list
andre@0:  */  
andre@0: char *
andre@0: NSSUTIL_ArgNextFlag(char *flags)
andre@0: {
andre@0:     for (; *flags ; flags++) {
andre@0: 	if (*flags == ',') {
andre@0: 	    flags++;
andre@0: 	    break;
andre@0: 	}
andre@0:     }
andre@0:     return flags;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * return true if the flag is set in the label parameter.
andre@0:  */
andre@0: PRBool
andre@0: NSSUTIL_ArgHasFlag(char *label, char *flag, char *parameters)
andre@0: {
andre@0:     char *flags,*index;
andre@0:     int len = strlen(flag);
andre@0:     PRBool found = PR_FALSE;
andre@0: 
andre@0:     flags = NSSUTIL_ArgGetParamValue(label,parameters);
andre@0:     if (flags == NULL) return PR_FALSE;
andre@0: 
andre@0:     for (index=flags; *index; index=NSSUTIL_ArgNextFlag(index)) {
andre@0: 	if (PORT_Strncasecmp(index,flag,len) == 0) {
andre@0: 	    found=PR_TRUE;
andre@0: 	    break;
andre@0: 	}
andre@0:     }
andre@0:     PORT_Free(flags);
andre@0:     return found;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * decode a number. handle octal (leading '0'), hex (leading '0x') or decimal
andre@0:  */
andre@0: long
andre@0: NSSUTIL_ArgDecodeNumber(char *num)
andre@0: {
andre@0:     int	radix = 10;
andre@0:     unsigned long value = 0;
andre@0:     long retValue = 0;
andre@0:     int sign = 1;
andre@0:     int digit;
andre@0: 
andre@0:     if (num == NULL) return retValue;
andre@0: 
andre@0:     num = NSSUTIL_ArgStrip(num);
andre@0: 
andre@0:     if (*num == '-') {
andre@0: 	sign = -1;
andre@0: 	num++;
andre@0:     }
andre@0: 
andre@0:     if (*num == '0') {
andre@0: 	radix = 8;
andre@0: 	num++;
andre@0: 	if ((*num == 'x') || (*num == 'X')) {
andre@0: 	    radix = 16;
andre@0: 	    num++;
andre@0: 	}
andre@0:     }
andre@0: 
andre@0:    
andre@0:     for ( ;*num; num++ ) {
andre@0: 	if (isdigit(*num)) {
andre@0: 	    digit = *num - '0';
andre@0: 	} else if ((*num >= 'a') && (*num <= 'f'))  {
andre@0: 	    digit = *num - 'a' + 10;
andre@0: 	} else if ((*num >= 'A') && (*num <= 'F'))  {
andre@0: 	    digit = *num - 'A' + 10;
andre@0: 	} else {
andre@0: 	    break;
andre@0: 	}
andre@0: 	if (digit >= radix) break;
andre@0: 	value = value*radix + digit;
andre@0:     }
andre@0: 
andre@0:     retValue = ((int) value) * sign;
andre@0:     return retValue;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * parameters are tag value pairs. This function returns the tag or label (the
andre@0:  * value before the equal size.
andre@0:  */
andre@0: char *
andre@0: NSSUTIL_ArgGetLabel(char *inString, int *next) 
andre@0: {
andre@0:     char *name=NULL;
andre@0:     char *string;
andre@0:     int len;
andre@0: 
andre@0:     /* look for the end of the <label>= */
andre@0:     for (string = inString;*string; string++) {
andre@0: 	if (*string == '=') { break; }
andre@0: 	if (NSSUTIL_ArgIsBlank(*string)) break;
andre@0:     }
andre@0: 
andre@0:     len = string - inString;
andre@0: 
andre@0:     *next = len; 
andre@0:     if (*string == '=') (*next) += 1;
andre@0:     if (len > 0) {
andre@0: 	name = PORT_Alloc(len+1);
andre@0: 	PORT_Strncpy(name,inString,len);
andre@0: 	name[len] = 0;
andre@0:     }
andre@0:     return name;
andre@0: }
andre@0: 
andre@0: /*
andre@0:  * read an argument at a Long integer
andre@0:  */
andre@0: long
andre@0: NSSUTIL_ArgReadLong(char *label,char *params, long defValue, PRBool *isdefault)
andre@0: {
andre@0:     char *value;
andre@0:     long retValue;
andre@0:     if (isdefault) *isdefault = PR_FALSE; 
andre@0: 
andre@0:     value = NSSUTIL_ArgGetParamValue(label,params);
andre@0:     if (value == NULL) {
andre@0: 	if (isdefault) *isdefault = PR_TRUE;
andre@0: 	return defValue;
andre@0:     }
andre@0:     retValue = NSSUTIL_ArgDecodeNumber(value);
andre@0:     if (value) PORT_Free(value);
andre@0: 
andre@0:     return retValue;
andre@0: }
andre@0: 
andre@0: 
andre@0: /*
andre@0:  * prepare a string to be quoted with 'quote' marks. We do that by adding
andre@0:  * appropriate escapes.
andre@0:  */
andre@0: static int
andre@0: nssutil_escapeQuotesSize(const char *string, char quote, PRBool addquotes)
andre@0: {
andre@0:     int escapes = 0, size = 0;
andre@0:     const char *src;
andre@0: 
andre@0:     size= addquotes ? 2 : 0;
andre@0:     for (src=string; *src ; src++) {
andre@0: 	if ((*src == quote) || (*src == '\\')) escapes++;
andre@0: 	size++;
andre@0:     }
andre@0:     return size+escapes+1;
andre@0: 
andre@0: }
andre@0: 
andre@0: static char *
andre@0: nssutil_escapeQuotes(const char *string, char quote, PRBool addquotes)
andre@0: {
andre@0:     char *newString = 0;
andre@0:     int size = 0;
andre@0:     const char *src;
andre@0:     char *dest;
andre@0: 
andre@0:     size = nssutil_escapeQuotesSize(string, quote, addquotes);
andre@0: 
andre@0:     dest = newString = PORT_ZAlloc(size); 
andre@0:     if (newString == NULL) {
andre@0: 	return NULL;
andre@0:     }
andre@0: 
andre@0:     if (addquotes) *dest++=quote;
andre@0:     for (src=string; *src; src++,dest++) {
andre@0: 	if ((*src == '\\') || (*src == quote)) {
andre@0: 	    *dest++ = '\\';
andre@0: 	}
andre@0: 	*dest = *src;
andre@0:     }
andre@0:     if (addquotes) *dest=quote;
andre@0: 
andre@0:     return newString;
andre@0: }
andre@0: 
andre@0: int
andre@0: NSSUTIL_EscapeSize(const char *string, char quote)
andre@0: {
andre@0:      return nssutil_escapeQuotesSize(string, quote, PR_FALSE);
andre@0: }
andre@0: 
andre@0: char *
andre@0: NSSUTIL_Escape(const char *string, char quote)
andre@0: {
andre@0:     return nssutil_escapeQuotes(string, quote, PR_FALSE);
andre@0: }
andre@0: 
andre@0: 
andre@0: int
andre@0: NSSUTIL_QuoteSize(const char *string, char quote)
andre@0: {
andre@0:      return nssutil_escapeQuotesSize(string, quote, PR_TRUE);
andre@0: }
andre@0: 
andre@0: char *
andre@0: NSSUTIL_Quote(const char *string, char quote)
andre@0: {
andre@0:     return nssutil_escapeQuotes(string, quote, PR_TRUE);
andre@0: }
andre@0: 
andre@0: int
andre@0: NSSUTIL_DoubleEscapeSize(const char *string, char quote1, char quote2)
andre@0: {
andre@0:     int escapes = 0, size = 0;
andre@0:     const char *src;
andre@0:     for (src=string; *src ; src++) {
andre@0:         if (*src == '\\')   escapes+=3; /* \\\\ */
andre@0:         if (*src == quote1) escapes+=2; /* \\quote1 */
andre@0:         if (*src == quote2) escapes++;   /* \quote2 */
andre@0:         size++;
andre@0:     }
andre@0: 
andre@0:     return escapes+size+1;
andre@0: }
andre@0: 
andre@0: char *
andre@0: NSSUTIL_DoubleEscape(const char *string, char quote1, char quote2)
andre@0: {
andre@0:     char *round1 = NULL;
andre@0:     char *retValue = NULL;
andre@0:     if (string == NULL) {
andre@0:         goto done;
andre@0:     }
andre@0:     round1 = nssutil_escapeQuotes(string, quote1, PR_FALSE);
andre@0:     if (round1) {
andre@0:         retValue = nssutil_escapeQuotes(round1, quote2, PR_FALSE);
andre@0:         PORT_Free(round1);
andre@0:     }
andre@0: 
andre@0: done:
andre@0:     if (retValue == NULL) {
andre@0:         retValue = PORT_Strdup("");
andre@0:     }
andre@0:     return retValue;
andre@0: }
andre@0: 
andre@0: 
andre@0: /************************************************************************
andre@0:  * These functions are used in contructing strings.
andre@0:  * NOTE: they will always return a string, but sometimes it will return
andre@0:  * a specific NULL string. These strings must be freed with util_freePair.
andre@0:  */
andre@0: 
andre@0: /* string to return on error... */
andre@0: static char *nssutil_nullString = "";
andre@0: 
andre@0: static char *
andre@0: nssutil_formatValue(PLArenaPool *arena, char *value, char quote)
andre@0: {
andre@0:     char *vp,*vp2,*retval;
andre@0:     int size = 0, escapes = 0;
andre@0: 
andre@0:     for (vp=value; *vp ;vp++) {
andre@0: 	if ((*vp == quote) || (*vp == NSSUTIL_ARG_ESCAPE)) escapes++;
andre@0: 	size++;
andre@0:     }
andre@0:     if (arena) {
andre@0: 	retval = PORT_ArenaZAlloc(arena,size+escapes+1);
andre@0:     } else {
andre@0: 	retval = PORT_ZAlloc(size+escapes+1);
andre@0:     }
andre@0:     if (retval == NULL) return NULL;
andre@0:     vp2 = retval;
andre@0:     for (vp=value; *vp; vp++) {
andre@0: 	if ((*vp == quote) || (*vp == NSSUTIL_ARG_ESCAPE)) 
andre@0: 				*vp2++ = NSSUTIL_ARG_ESCAPE;
andre@0: 	*vp2++ = *vp;
andre@0:     }
andre@0:     return retval;
andre@0: }
andre@0: 
andre@0: 
andre@0: static PRBool nssutil_argHasChar(char *v, char c)
andre@0: {
andre@0:    for ( ;*v; v++) {
andre@0:         if (*v == c) return PR_TRUE;
andre@0:    }
andre@0:    return PR_FALSE;
andre@0: }
andre@0: 
andre@0: static PRBool nssutil_argHasBlanks(char *v)
andre@0: {
andre@0:    for ( ;*v; v++) {
andre@0:         if (NSSUTIL_ArgIsBlank(*v)) return PR_TRUE;
andre@0:    }
andre@0:    return PR_FALSE;
andre@0: }
andre@0: 
andre@0: static char *
andre@0: nssutil_formatPair(char *name, char *value, char quote)
andre@0: {
andre@0:     char openQuote = quote;
andre@0:     char closeQuote = NSSUTIL_ArgGetPair(quote);
andre@0:     char *newValue = NULL;
andre@0:     char *returnValue;
andre@0:     PRBool need_quote = PR_FALSE;
andre@0: 
andre@0:     if (!value || (*value == 0)) return nssutil_nullString;
andre@0: 
andre@0:     if (nssutil_argHasBlanks(value) || NSSUTIL_ArgIsQuote(value[0]))
andre@0: 							 need_quote=PR_TRUE;
andre@0: 
andre@0:     if ((need_quote && nssutil_argHasChar(value,closeQuote))
andre@0: 			|| nssutil_argHasChar(value,NSSUTIL_ARG_ESCAPE)) {
andre@0: 	value = newValue = nssutil_formatValue(NULL, value,quote);
andre@0: 	if (newValue == NULL) return nssutil_nullString;
andre@0:     }
andre@0:     if (need_quote) {
andre@0:     	returnValue = PR_smprintf("%s=%c%s%c",name,openQuote,value,closeQuote);
andre@0:     } else {
andre@0:     	returnValue = PR_smprintf("%s=%s",name,value);
andre@0:     }
andre@0:     if (returnValue == NULL) returnValue = nssutil_nullString;
andre@0: 
andre@0:     if (newValue) PORT_Free(newValue);
andre@0: 
andre@0:     return returnValue;
andre@0: }
andre@0: 
andre@0: static char *nssutil_formatIntPair(char *name, unsigned long value, 
andre@0:                                   unsigned long def)
andre@0: {
andre@0:     char *returnValue;
andre@0: 
andre@0:     if (value == def) return nssutil_nullString;
andre@0: 
andre@0:     returnValue = PR_smprintf("%s=%d",name,value);
andre@0: 
andre@0:     return returnValue;
andre@0: }
andre@0: 
andre@0: static void
andre@0: nssutil_freePair(char *pair)
andre@0: {
andre@0:     if (pair && pair != nssutil_nullString) {
andre@0: 	PR_smprintf_free(pair);
andre@0:     }
andre@0: }
andre@0: 
andre@0: 
andre@0: /************************************************************************
andre@0:  * Parse the Slot specific parameters in the NSS params.
andre@0:  */
andre@0: 
andre@0: struct nssutilArgSlotFlagTable {
andre@0:     char *name;
andre@0:     int len;
andre@0:     unsigned long value;
andre@0: };
andre@0: 
andre@0: #define NSSUTIL_ARG_ENTRY(arg,flag) \
andre@0: { #arg , sizeof(#arg)-1, flag }
andre@0: static struct nssutilArgSlotFlagTable nssutil_argSlotFlagTable[] = {
andre@0: 	NSSUTIL_ARG_ENTRY(RSA,SECMOD_RSA_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(DSA,SECMOD_RSA_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(RC2,SECMOD_RC4_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(RC4,SECMOD_RC2_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(DES,SECMOD_DES_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(DH,SECMOD_DH_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(FORTEZZA,SECMOD_FORTEZZA_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(RC5,SECMOD_RC5_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(SHA1,SECMOD_SHA1_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(SHA256,SECMOD_SHA256_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(SHA512,SECMOD_SHA512_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(MD5,SECMOD_MD5_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(MD2,SECMOD_MD2_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(SSL,SECMOD_SSL_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(TLS,SECMOD_TLS_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(AES,SECMOD_AES_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(Camellia,SECMOD_CAMELLIA_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(SEED,SECMOD_SEED_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(PublicCerts,SECMOD_FRIENDLY_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(RANDOM,SECMOD_RANDOM_FLAG),
andre@0: 	NSSUTIL_ARG_ENTRY(Disable, SECMOD_DISABLE_FLAG),
andre@0: };
andre@0: 
andre@0: static int nssutil_argSlotFlagTableSize = 
andre@0: 	sizeof(nssutil_argSlotFlagTable)/sizeof(nssutil_argSlotFlagTable[0]);
andre@0: 
andre@0: 
andre@0: /* turn the slot flags into a bit mask */
andre@0: unsigned long
andre@0: NSSUTIL_ArgParseSlotFlags(char *label,char *params)
andre@0: {
andre@0:     char *flags,*index;
andre@0:     unsigned long retValue = 0;
andre@0:     int i;
andre@0:     PRBool all = PR_FALSE;
andre@0: 
andre@0:     flags = NSSUTIL_ArgGetParamValue(label,params);
andre@0:     if (flags == NULL) return 0;
andre@0: 
andre@0:     if (PORT_Strcasecmp(flags,"all") == 0) all = PR_TRUE;
andre@0: 
andre@0:     for (index=flags; *index; index=NSSUTIL_ArgNextFlag(index)) {
andre@0: 	for (i=0; i < nssutil_argSlotFlagTableSize; i++) {
andre@0: 	    if (all || 
andre@0: 		(PORT_Strncasecmp(index, nssutil_argSlotFlagTable[i].name,
andre@0: 				nssutil_argSlotFlagTable[i].len) == 0)) {
andre@0: 		retValue |= nssutil_argSlotFlagTable[i].value;
andre@0: 	    }
andre@0: 	}
andre@0:     }
andre@0:     PORT_Free(flags);
andre@0:     return retValue;
andre@0: }
andre@0: 
andre@0: 
andre@0: /* parse a single slot specific parameter */
andre@0: static void
andre@0: nssutil_argDecodeSingleSlotInfo(char *name, char *params, 
andre@0:                                struct NSSUTILPreSlotInfoStr *slotInfo)
andre@0: {
andre@0:     char *askpw;
andre@0: 
andre@0:     slotInfo->slotID=NSSUTIL_ArgDecodeNumber(name);
andre@0:     slotInfo->defaultFlags=NSSUTIL_ArgParseSlotFlags("slotFlags",params);
andre@0:     slotInfo->timeout=NSSUTIL_ArgReadLong("timeout",params, 0, NULL);
andre@0: 
andre@0:     askpw = NSSUTIL_ArgGetParamValue("askpw",params);
andre@0:     slotInfo->askpw = 0;
andre@0: 
andre@0:     if (askpw) {
andre@0: 	if (PORT_Strcasecmp(askpw,"every") == 0) {
andre@0:     	    slotInfo->askpw = -1;
andre@0: 	} else if (PORT_Strcasecmp(askpw,"timeout") == 0) {
andre@0:     	    slotInfo->askpw = 1;
andre@0: 	} 
andre@0: 	PORT_Free(askpw);
andre@0: 	slotInfo->defaultFlags |= PK11_OWN_PW_DEFAULTS;
andre@0:     }
andre@0:     slotInfo->hasRootCerts = NSSUTIL_ArgHasFlag("rootFlags", "hasRootCerts", 
andre@0:                                                params);
andre@0:     slotInfo->hasRootTrust = NSSUTIL_ArgHasFlag("rootFlags", "hasRootTrust", 
andre@0:                                                params);
andre@0: }
andre@0: 
andre@0: /* parse all the slot specific parameters. */
andre@0: struct NSSUTILPreSlotInfoStr *
andre@0: NSSUTIL_ArgParseSlotInfo(PLArenaPool *arena, char *slotParams, int *retCount)
andre@0: {
andre@0:     char *slotIndex;
andre@0:     struct NSSUTILPreSlotInfoStr *slotInfo = NULL;
andre@0:     int i=0,count = 0,next;
andre@0: 
andre@0:     *retCount = 0;
andre@0:     if ((slotParams == NULL) || (*slotParams == 0))  return NULL;
andre@0: 
andre@0:     /* first count the number of slots */
andre@0:     for (slotIndex = NSSUTIL_ArgStrip(slotParams); *slotIndex; 
andre@0: 	 slotIndex = NSSUTIL_ArgStrip(NSSUTIL_ArgSkipParameter(slotIndex))) {
andre@0: 	count++;
andre@0:     }
andre@0: 
andre@0:     /* get the data structures */
andre@0:     if (arena) {
andre@0: 	slotInfo = PORT_ArenaZNewArray(arena,
andre@0: 				struct NSSUTILPreSlotInfoStr, count); 
andre@0:     } else {
andre@0: 	slotInfo = PORT_ZNewArray(struct NSSUTILPreSlotInfoStr, count);
andre@0:     }
andre@0:     if (slotInfo == NULL) return NULL;
andre@0: 
andre@0:     for (slotIndex = NSSUTIL_ArgStrip(slotParams), i = 0; 
andre@0: 					*slotIndex && i < count ; ) {
andre@0: 	char *name;
andre@0: 	name = NSSUTIL_ArgGetLabel(slotIndex,&next);
andre@0: 	slotIndex += next;
andre@0: 
andre@0: 	if (!NSSUTIL_ArgIsBlank(*slotIndex)) {
andre@0: 	    char *args = NSSUTIL_ArgFetchValue(slotIndex,&next);
andre@0: 	    slotIndex += next;
andre@0: 	    if (args) {
andre@0: 		nssutil_argDecodeSingleSlotInfo(name,args,&slotInfo[i]);
andre@0: 		i++;
andre@0: 		PORT_Free(args);
andre@0: 	    }
andre@0: 	}
andre@0: 	if (name) PORT_Free(name);
andre@0: 	slotIndex = NSSUTIL_ArgStrip(slotIndex);
andre@0:     }
andre@0:     *retCount = i;
andre@0:     return slotInfo;
andre@0: }
andre@0: 
andre@0: /************************************************************************
andre@0:  * make a new slot specific parameter 
andre@0:  */
andre@0: /* first make the slot flags */
andre@0: static char *
andre@0: nssutil_mkSlotFlags(unsigned long defaultFlags)
andre@0: {
andre@0:     char *flags=NULL;
andre@0:     int i,j;
andre@0: 
andre@0:     for (i=0; i < sizeof(defaultFlags)*8; i++) {
andre@0: 	if (defaultFlags & (1UL <<i)) {
andre@0: 	    char *string = NULL;
andre@0: 
andre@0: 	    for (j=0; j < nssutil_argSlotFlagTableSize; j++) {
andre@0: 		if (nssutil_argSlotFlagTable[j].value == ( 1UL << i )) {
andre@0: 		    string = nssutil_argSlotFlagTable[j].name;
andre@0: 		    break;
andre@0: 		}
andre@0: 	    }
andre@0: 	    if (string) {
andre@0: 		if (flags) {
andre@0: 		    char *tmp;
andre@0: 		    tmp = PR_smprintf("%s,%s",flags,string);
andre@0: 		    PR_smprintf_free(flags);
andre@0: 		    flags = tmp;
andre@0: 		} else {
andre@0: 		    flags = PR_smprintf("%s",string);
andre@0: 		}
andre@0: 	    }
andre@0: 	}
andre@0:     }
andre@0: 
andre@0:     return flags;
andre@0: }
andre@0: 
andre@0: /* now make the root flags */
andre@0: #define NSSUTIL_MAX_ROOT_FLAG_SIZE  sizeof("hasRootCerts")+sizeof("hasRootTrust")
andre@0: static char *
andre@0: nssutil_mkRootFlags(PRBool hasRootCerts, PRBool hasRootTrust)
andre@0: {
andre@0:     char *flags= (char *)PORT_ZAlloc(NSSUTIL_MAX_ROOT_FLAG_SIZE);
andre@0:     PRBool first = PR_TRUE;
andre@0: 
andre@0:     PORT_Memset(flags,0,NSSUTIL_MAX_ROOT_FLAG_SIZE);
andre@0:     if (hasRootCerts) {
andre@0: 	PORT_Strcat(flags,"hasRootCerts");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     if (hasRootTrust) {
andre@0: 	if (!first) PORT_Strcat(flags,",");
andre@0: 	PORT_Strcat(flags,"hasRootTrust");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     return flags;
andre@0: }
andre@0: 
andre@0: /* now make a full slot string */
andre@0: char *
andre@0: NSSUTIL_MkSlotString(unsigned long slotID, unsigned long defaultFlags,
andre@0: 		  unsigned long timeout, unsigned char askpw_in,
andre@0: 		  PRBool hasRootCerts, PRBool hasRootTrust) {
andre@0:     char *askpw,*flags,*rootFlags,*slotString;
andre@0:     char *flagPair,*rootFlagsPair;
andre@0: 	
andre@0:     switch (askpw_in) {
andre@0:     case 0xff:
andre@0: 	askpw = "every";
andre@0: 	break;
andre@0:     case 1:
andre@0: 	askpw = "timeout";
andre@0: 	break;
andre@0:     default:
andre@0: 	askpw = "any";
andre@0: 	break;
andre@0:     }
andre@0:     flags = nssutil_mkSlotFlags(defaultFlags);
andre@0:     rootFlags = nssutil_mkRootFlags(hasRootCerts,hasRootTrust);
andre@0:     flagPair = nssutil_formatPair("slotFlags",flags,'\'');
andre@0:     rootFlagsPair = nssutil_formatPair("rootFlags",rootFlags,'\'');
andre@0:     if (flags) PR_smprintf_free(flags);
andre@0:     if (rootFlags) PORT_Free(rootFlags);
andre@0:     if (defaultFlags & PK11_OWN_PW_DEFAULTS) {
andre@0:     	slotString = PR_smprintf("0x%08lx=[%s askpw=%s timeout=%d %s]",
andre@0: 				(PRUint32)slotID,flagPair,askpw,timeout,
andre@0: 				rootFlagsPair);
andre@0:     } else {
andre@0:     	slotString = PR_smprintf("0x%08lx=[%s %s]",
andre@0: 				(PRUint32)slotID,flagPair,rootFlagsPair);
andre@0:     }
andre@0:     nssutil_freePair(flagPair);
andre@0:     nssutil_freePair(rootFlagsPair);
andre@0:     return slotString;
andre@0: }
andre@0: 
andre@0: 
andre@0: /************************************************************************
andre@0:  * Parse Full module specs into: library, commonName, module parameters,
andre@0:  * and NSS specifi parameters.
andre@0:  */
andre@0: SECStatus
andre@0: NSSUTIL_ArgParseModuleSpec(char *modulespec, char **lib, char **mod, 
andre@0: 					char **parameters, char **nss)
andre@0: {
andre@0:     int next;
andre@0:     modulespec = NSSUTIL_ArgStrip(modulespec);
andre@0: 
andre@0:     *lib = *mod = *parameters = *nss = 0;
andre@0: 
andre@0:     while (*modulespec) {
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*lib,"library=",;)
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*mod,"name=",;)
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*parameters,"parameters=",;)
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*nss,"nss=",;)
andre@0: 	NSSUTIL_HANDLE_FINAL_ARG(modulespec)
andre@0:    }
andre@0:    return SECSuccess;
andre@0: }
andre@0: 
andre@0: /************************************************************************
andre@0:  * make a new module spec from it's components */
andre@0: char *
andre@0: NSSUTIL_MkModuleSpec(char *dllName, char *commonName, char *parameters, 
andre@0: 								char *NSS)
andre@0: {
andre@0:     char *moduleSpec;
andre@0:     char *lib,*name,*param,*nss;
andre@0: 
andre@0:     /*
andre@0:      * now the final spec
andre@0:      */
andre@0:     lib = nssutil_formatPair("library",dllName,'\"');
andre@0:     name = nssutil_formatPair("name",commonName,'\"');
andre@0:     param = nssutil_formatPair("parameters",parameters,'\"');
andre@0:     nss = nssutil_formatPair("NSS",NSS,'\"');
andre@0:     moduleSpec = PR_smprintf("%s %s %s %s", lib,name,param,nss);
andre@0:     nssutil_freePair(lib);
andre@0:     nssutil_freePair(name);
andre@0:     nssutil_freePair(param);
andre@0:     nssutil_freePair(nss);
andre@0:     return (moduleSpec);
andre@0: }
andre@0: 
andre@0: 
andre@0: #define NSSUTIL_ARG_FORTEZZA_FLAG "FORTEZZA"
andre@0: /******************************************************************************
andre@0:  * Parse the cipher flags from the NSS parameter
andre@0:  */
andre@0: void
andre@0: NSSUTIL_ArgParseCipherFlags(unsigned long *newCiphers,char *cipherList)
andre@0: {
andre@0:     newCiphers[0] = newCiphers[1] = 0;
andre@0:     if ((cipherList == NULL) || (*cipherList == 0)) return;
andre@0: 
andre@0:     for (;*cipherList; cipherList=NSSUTIL_ArgNextFlag(cipherList)) {
andre@0: 	if (PORT_Strncasecmp(cipherList,NSSUTIL_ARG_FORTEZZA_FLAG,
andre@0: 				sizeof(NSSUTIL_ARG_FORTEZZA_FLAG)-1) == 0) {
andre@0: 	    newCiphers[0] |= SECMOD_FORTEZZA_FLAG;
andre@0: 	} 
andre@0: 
andre@0: 	/* add additional flags here as necessary */
andre@0: 	/* direct bit mapping escape */
andre@0: 	if (*cipherList == 0) {
andre@0: 	   if (cipherList[1] == 'l') {
andre@0: 		newCiphers[1] |= atoi(&cipherList[2]);
andre@0: 	   } else {
andre@0: 		newCiphers[0] |= atoi(&cipherList[2]);
andre@0: 	   }
andre@0: 	}
andre@0:     }
andre@0: }
andre@0: 
andre@0: 
andre@0: /*********************************************************************
andre@0:  * make NSS parameter...
andre@0:  */
andre@0: /* First make NSS specific flags */
andre@0: #define MAX_FLAG_SIZE  sizeof("internal")+sizeof("FIPS")+sizeof("moduleDB")+\
andre@0: 				sizeof("moduleDBOnly")+sizeof("critical")
andre@0: static char *
andre@0: nssutil_mkNSSFlags(PRBool internal, PRBool isFIPS,
andre@0: 		PRBool isModuleDB, PRBool isModuleDBOnly, PRBool isCritical)
andre@0: {
andre@0:     char *flags = (char *)PORT_ZAlloc(MAX_FLAG_SIZE);
andre@0:     PRBool first = PR_TRUE;
andre@0: 
andre@0:     PORT_Memset(flags,0,MAX_FLAG_SIZE);
andre@0:     if (internal) {
andre@0: 	PORT_Strcat(flags,"internal");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     if (isFIPS) {
andre@0: 	if (!first) PORT_Strcat(flags,",");
andre@0: 	PORT_Strcat(flags,"FIPS");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     if (isModuleDB) {
andre@0: 	if (!first) PORT_Strcat(flags,",");
andre@0: 	PORT_Strcat(flags,"moduleDB");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     if (isModuleDBOnly) {
andre@0: 	if (!first) PORT_Strcat(flags,",");
andre@0: 	PORT_Strcat(flags,"moduleDBOnly");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     if (isCritical) {
andre@0: 	if (!first) PORT_Strcat(flags,",");
andre@0: 	PORT_Strcat(flags,"critical");
andre@0: 	first = PR_FALSE;
andre@0:     }
andre@0:     return flags;
andre@0: }
andre@0: 
andre@0: 
andre@0: /* construct the NSS cipher flags */
andre@0: static char *
andre@0: nssutil_mkCipherFlags(unsigned long ssl0, unsigned long ssl1)
andre@0: {
andre@0:     char *cipher = NULL;
andre@0:     int i;
andre@0: 
andre@0:     for (i=0; i < sizeof(ssl0)*8; i++) {
andre@0: 	if (ssl0 & (1UL <<i)) {
andre@0: 	    char *string;
andre@0: 	    if ((1UL <<i) == SECMOD_FORTEZZA_FLAG) {
andre@0: 		string = PR_smprintf("%s",NSSUTIL_ARG_FORTEZZA_FLAG);
andre@0: 	    } else {
andre@0: 		string = PR_smprintf("0h0x%08lx", 1UL <<i);
andre@0: 	    }
andre@0: 	    if (cipher) {
andre@0: 		char *tmp;
andre@0: 		tmp = PR_smprintf("%s,%s",cipher,string);
andre@0: 		PR_smprintf_free(cipher);
andre@0: 		PR_smprintf_free(string);
andre@0: 		cipher = tmp;
andre@0: 	    } else {
andre@0: 		cipher = string;
andre@0: 	    }
andre@0: 	}
andre@0:     }
andre@0:     for (i=0; i < sizeof(ssl0)*8; i++) {
andre@0: 	if (ssl1 & (1UL <<i)) {
andre@0: 	    if (cipher) {
andre@0: 		char *tmp;
andre@0: 		tmp = PR_smprintf("%s,0l0x%08lx",cipher, 1UL <<i);
andre@0: 		PR_smprintf_free(cipher);
andre@0: 		cipher = tmp;
andre@0: 	    } else {
andre@0: 		cipher = PR_smprintf("0l0x%08lx", 1UL <<i);
andre@0: 	    }
andre@0: 	}
andre@0:     }
andre@0: 
andre@0:     return cipher;
andre@0: }
andre@0: 
andre@0: /* Assemble a full NSS string. */
andre@0: char *
andre@0: NSSUTIL_MkNSSString(char **slotStrings, int slotCount, PRBool internal, 
andre@0: 	  PRBool isFIPS, PRBool isModuleDB,  PRBool isModuleDBOnly, 
andre@0: 	  PRBool isCritical, unsigned long trustOrder, 
andre@0: 	  unsigned long cipherOrder, unsigned long ssl0, unsigned long ssl1)
andre@0: {
andre@0:     int slotLen, i;
andre@0:     char *slotParams, *ciphers, *nss, *nssFlags, *tmp;
andre@0:     char *trustOrderPair,*cipherOrderPair,*slotPair,*cipherPair,*flagPair;
andre@0: 
andre@0: 
andre@0:     /* now let's build up the string
andre@0:      * first the slot infos
andre@0:      */
andre@0:     slotLen=0;
andre@0:     for (i=0; i < (int)slotCount; i++) {
andre@0: 	slotLen += PORT_Strlen(slotStrings[i])+1;
andre@0:     }
andre@0:     slotLen += 1; /* space for the final NULL */
andre@0: 
andre@0:     slotParams = (char *)PORT_ZAlloc(slotLen);
andre@0:     PORT_Memset(slotParams,0,slotLen);
andre@0:     for (i=0; i < (int)slotCount; i++) {
andre@0: 	PORT_Strcat(slotParams,slotStrings[i]);
andre@0: 	PORT_Strcat(slotParams," ");
andre@0: 	PR_smprintf_free(slotStrings[i]);
andre@0: 	slotStrings[i]=NULL;
andre@0:     }
andre@0:     
andre@0:     /*
andre@0:      * now the NSS structure
andre@0:      */
andre@0:     nssFlags = nssutil_mkNSSFlags(internal,isFIPS,isModuleDB,isModuleDBOnly,
andre@0: 							isCritical); 
andre@0: 	/* for now only the internal module is critical */
andre@0:     ciphers = nssutil_mkCipherFlags(ssl0, ssl1);
andre@0: 
andre@0:     trustOrderPair = nssutil_formatIntPair("trustOrder",trustOrder,
andre@0: 					NSSUTIL_DEFAULT_TRUST_ORDER);
andre@0:     cipherOrderPair = nssutil_formatIntPair("cipherOrder",cipherOrder,
andre@0: 					NSSUTIL_DEFAULT_CIPHER_ORDER);
andre@0:     slotPair=nssutil_formatPair("slotParams",slotParams,'{'); /* } */
andre@0:     if (slotParams) PORT_Free(slotParams);
andre@0:     cipherPair=nssutil_formatPair("ciphers",ciphers,'\'');
andre@0:     if (ciphers) PR_smprintf_free(ciphers);
andre@0:     flagPair=nssutil_formatPair("Flags",nssFlags,'\'');
andre@0:     if (nssFlags) PORT_Free(nssFlags);
andre@0:     nss = PR_smprintf("%s %s %s %s %s",trustOrderPair,
andre@0: 			cipherOrderPair,slotPair,cipherPair,flagPair);
andre@0:     nssutil_freePair(trustOrderPair);
andre@0:     nssutil_freePair(cipherOrderPair);
andre@0:     nssutil_freePair(slotPair);
andre@0:     nssutil_freePair(cipherPair);
andre@0:     nssutil_freePair(flagPair);
andre@0:     tmp = NSSUTIL_ArgStrip(nss);
andre@0:     if (*tmp == '\0') {
andre@0: 	PR_smprintf_free(nss);
andre@0: 	nss = NULL;
andre@0:     }
andre@0:     return nss;
andre@0: }
andre@0: 
andre@0: /*****************************************************************************
andre@0:  *
andre@0:  * Private calls for use by softoken and utilmod.c
andre@0:  */
andre@0: 
andre@0: #define SQLDB "sql:"
andre@0: #define EXTERNDB "extern:"
andre@0: #define LEGACY "dbm:"
andre@0: #define MULTIACCESS "multiaccess:"
andre@0: #define SECMOD_DB "secmod.db"
andre@0: const char *
andre@0: _NSSUTIL_EvaluateConfigDir(const char *configdir, 
andre@0: 			   NSSDBType *pdbType, char **appName)
andre@0: {
andre@0:     NSSDBType dbType;
andre@0:     *appName = NULL;
andre@0: /* force the default */
andre@0: #ifdef NSS_DISABLE_DBM
andre@0:     dbType = NSS_DB_TYPE_SQL;
andre@0: #else
andre@0:     dbType = NSS_DB_TYPE_LEGACY;
andre@0: #endif
andre@0:     if (PORT_Strncmp(configdir, MULTIACCESS, sizeof(MULTIACCESS)-1) == 0) {
andre@0: 	char *cdir;
andre@0: 	dbType = NSS_DB_TYPE_MULTIACCESS;
andre@0: 
andre@0: 	*appName = PORT_Strdup(configdir+sizeof(MULTIACCESS)-1);
andre@0: 	if (*appName == NULL) {
andre@0: 	    return configdir;
andre@0: 	}
andre@0: 	cdir = *appName;
andre@0: 	while (*cdir && *cdir != ':') {
andre@0: 	    cdir++;
andre@0: 	}
andre@0: 	if (*cdir == ':') {
andre@0: 	   *cdir = 0;
andre@0: 	   cdir++;
andre@0: 	}
andre@0: 	configdir = cdir;
andre@0:     } else if (PORT_Strncmp(configdir, SQLDB, sizeof(SQLDB)-1) == 0) {
andre@0: 	dbType = NSS_DB_TYPE_SQL;
andre@0: 	configdir = configdir + sizeof(SQLDB) -1;
andre@0:     } else if (PORT_Strncmp(configdir, EXTERNDB, sizeof(EXTERNDB)-1) == 0) {
andre@0: 	dbType = NSS_DB_TYPE_EXTERN;
andre@0: 	configdir = configdir + sizeof(EXTERNDB) -1;
andre@0:     } else if (PORT_Strncmp(configdir, LEGACY, sizeof(LEGACY)-1) == 0) {
andre@0: 	dbType = NSS_DB_TYPE_LEGACY;
andre@0: 	configdir = configdir + sizeof(LEGACY) -1;
andre@0:     } else {
andre@0: 	/* look up the default from the environment */
andre@0: 	char *defaultType = PR_GetEnv("NSS_DEFAULT_DB_TYPE");
andre@0: 	if (defaultType != NULL) {
andre@0: 	    if (PORT_Strncmp(defaultType, SQLDB, sizeof(SQLDB)-2) == 0) {
andre@0: 		dbType = NSS_DB_TYPE_SQL;
andre@0: 	    } else if (PORT_Strncmp(defaultType,EXTERNDB,sizeof(EXTERNDB)-2)==0) {
andre@0: 		dbType = NSS_DB_TYPE_EXTERN;
andre@0: 	    } else if (PORT_Strncmp(defaultType, LEGACY, sizeof(LEGACY)-2) == 0) {
andre@0: 		dbType = NSS_DB_TYPE_LEGACY;
andre@0: 	    }
andre@0: 	}
andre@0:     }
andre@0:     /* if the caller has already set a type, don't change it */
andre@0:     if (*pdbType == NSS_DB_TYPE_NONE) {
andre@0: 	*pdbType = dbType;
andre@0:     }
andre@0:     return configdir;
andre@0: }
andre@0: 
andre@0: char *
andre@0: _NSSUTIL_GetSecmodName(char *param, NSSDBType *dbType, char **appName,
andre@0: 		   char **filename, PRBool *rw)
andre@0: {
andre@0:     int next;
andre@0:     char *configdir = NULL;
andre@0:     char *secmodName = NULL;
andre@0:     char *value = NULL;
andre@0:     char *save_params = param;
andre@0:     const char *lconfigdir;
andre@0:     PRBool noModDB = PR_FALSE;
andre@0:     param = NSSUTIL_ArgStrip(param);
andre@0: 	
andre@0: 
andre@0:     while (*param) {
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(param,configdir,"configDir=",;)
andre@0: 	NSSUTIL_HANDLE_STRING_ARG(param,secmodName,"secmod=",;)
andre@0: 	NSSUTIL_HANDLE_FINAL_ARG(param)
andre@0:    }
andre@0: 
andre@0:    *rw = PR_TRUE;
andre@0:    if (NSSUTIL_ArgHasFlag("flags","readOnly",save_params)) {
andre@0: 	*rw = PR_FALSE;
andre@0:    }
andre@0: 
andre@0:    if (!secmodName || *secmodName == '\0') {
andre@0: 	if (secmodName) PORT_Free(secmodName);
andre@0: 	secmodName = PORT_Strdup(SECMOD_DB);
andre@0:    }
andre@0: 
andre@0:    *filename = secmodName;
andre@0:    lconfigdir = _NSSUTIL_EvaluateConfigDir(configdir, dbType, appName);
andre@0: 
andre@0:    if (NSSUTIL_ArgHasFlag("flags","noModDB",save_params)) {
andre@0: 	/* there isn't a module db, don't load the legacy support */
andre@0: 	noModDB = PR_TRUE;
andre@0: 	*dbType = NSS_DB_TYPE_SQL;
andre@0: 	PORT_Free(*filename);
andre@0: 	*filename = NULL;
andre@0:         *rw = PR_FALSE;
andre@0:    }
andre@0: 
andre@0:    /* only use the renamed secmod for legacy databases */
andre@0:    if ((*dbType != NSS_DB_TYPE_LEGACY) && 
andre@0: 	(*dbType != NSS_DB_TYPE_MULTIACCESS)) {
andre@0: 	secmodName="pkcs11.txt";
andre@0:    }
andre@0: 
andre@0:    if (noModDB) {
andre@0: 	value = NULL;
andre@0:    } else if (lconfigdir && lconfigdir[0] != '\0') {
andre@0: 	value = PR_smprintf("%s" NSSUTIL_PATH_SEPARATOR "%s",
andre@0: 			lconfigdir,secmodName);
andre@0:    } else {
andre@0: 	value = PR_smprintf("%s",secmodName);
andre@0:    }
andre@0:    if (configdir) PORT_Free(configdir);
andre@0:    return value;
andre@0: }
andre@0: 
andre@0: