michael@0: /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0:  * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0:  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0: /* 
michael@0:  * The following code handles the storage of PKCS 11 modules used by the
michael@0:  * NSS. This file is written to abstract away how the modules are
michael@0:  * stored so we can decide that later.
michael@0:  */
michael@0: #include "secport.h"
michael@0: #include "prprf.h" 
michael@0: #include "prenv.h"
michael@0: #include "utilpars.h"
michael@0: #include "utilmodt.h"
michael@0: 
michael@0: /*
michael@0:  * return the expected matching quote value for the one specified
michael@0:  */
michael@0: PRBool NSSUTIL_ArgGetPair(char c) {
michael@0:     switch (c) {
michael@0:     case '\'': return c;
michael@0:     case '\"': return c;
michael@0:     case '<': return '>';
michael@0:     case '{': return '}';
michael@0:     case '[': return ']';
michael@0:     case '(': return ')';
michael@0:     default: break;
michael@0:     }
michael@0:     return ' ';
michael@0: }
michael@0: 
michael@0: PRBool NSSUTIL_ArgIsBlank(char c) {
michael@0:    return isspace((unsigned char )c);
michael@0: }
michael@0: 
michael@0: PRBool NSSUTIL_ArgIsEscape(char c) {
michael@0:     return c == '\\';
michael@0: }
michael@0: 
michael@0: PRBool NSSUTIL_ArgIsQuote(char c) {
michael@0:     switch (c) {
michael@0:     case '\'':
michael@0:     case '\"':
michael@0:     case '<':
michael@0:     case '{': /* } end curly to keep vi bracket matching working */
michael@0:     case '(': /* ) */
michael@0:     case '[': /* ] */ return PR_TRUE;
michael@0:     default: break;
michael@0:     }
michael@0:     return PR_FALSE;
michael@0: }
michael@0: 
michael@0: char *NSSUTIL_ArgStrip(char *c) {
michael@0:    while (*c && NSSUTIL_ArgIsBlank(*c)) c++;
michael@0:    return c;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * find the end of the current tag/value pair. string should be pointing just
michael@0:  * after the equal sign. Handles quoted characters.
michael@0:  */
michael@0: char *
michael@0: NSSUTIL_ArgFindEnd(char *string) {
michael@0:     char endChar = ' ';
michael@0:     PRBool lastEscape = PR_FALSE;
michael@0: 
michael@0:     if (NSSUTIL_ArgIsQuote(*string)) {
michael@0: 	endChar = NSSUTIL_ArgGetPair(*string);
michael@0: 	string++;
michael@0:     }
michael@0: 
michael@0:     for (;*string; string++) {
michael@0: 	if (lastEscape) {
michael@0: 	    lastEscape = PR_FALSE;
michael@0: 	    continue;
michael@0: 	}
michael@0: 	if (NSSUTIL_ArgIsEscape(*string) && !lastEscape) {
michael@0: 	    lastEscape = PR_TRUE;
michael@0: 	    continue;
michael@0: 	} 
michael@0: 	if ((endChar == ' ') && NSSUTIL_ArgIsBlank(*string)) break;
michael@0: 	if (*string == endChar) {
michael@0: 	    break;
michael@0: 	}
michael@0:     }
michael@0: 
michael@0:     return string;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * get the value pointed to by string. string should be pointing just beyond
michael@0:  * the equal sign.
michael@0:  */
michael@0: char *
michael@0: NSSUTIL_ArgFetchValue(char *string, int *pcount)
michael@0: {
michael@0:     char *end = NSSUTIL_ArgFindEnd(string);
michael@0:     char *retString, *copyString;
michael@0:     PRBool lastEscape = PR_FALSE;
michael@0:     int len;
michael@0: 
michael@0:     len = end - string;
michael@0:     if (len == 0) {
michael@0: 	*pcount = 0;
michael@0: 	return NULL;
michael@0:     }
michael@0: 
michael@0:     copyString = retString = (char *)PORT_Alloc(len+1);
michael@0: 
michael@0:     if (*end) len++;
michael@0:     *pcount = len;
michael@0:     if (retString == NULL) return NULL;
michael@0: 
michael@0: 
michael@0:     if (NSSUTIL_ArgIsQuote(*string)) string++;
michael@0:     for (; string < end; string++) {
michael@0: 	if (NSSUTIL_ArgIsEscape(*string) && !lastEscape) {
michael@0: 	    lastEscape = PR_TRUE;
michael@0: 	    continue;
michael@0: 	}
michael@0: 	lastEscape = PR_FALSE;
michael@0: 	*copyString++ = *string;
michael@0:     }
michael@0:     *copyString = 0;
michael@0:     return retString;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * point to the next parameter in string
michael@0:  */
michael@0: char *
michael@0: NSSUTIL_ArgSkipParameter(char *string) 
michael@0: {
michael@0:      char *end;
michael@0:      /* look for the end of the <name>= */
michael@0:      for (;*string; string++) {
michael@0: 	if (*string == '=') { string++; break; }
michael@0: 	if (NSSUTIL_ArgIsBlank(*string)) return(string); 
michael@0:      }
michael@0: 
michael@0:      end = NSSUTIL_ArgFindEnd(string);
michael@0:      if (*end) end++;
michael@0:      return end;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * get the value from that tag value pair.
michael@0:  */
michael@0: char *
michael@0: NSSUTIL_ArgGetParamValue(char *paramName,char *parameters)
michael@0: {
michael@0:     char searchValue[256];
michael@0:     int paramLen = strlen(paramName);
michael@0:     char *returnValue = NULL;
michael@0:     int next;
michael@0: 
michael@0:     if ((parameters == NULL) || (*parameters == 0)) return NULL;
michael@0: 
michael@0:     PORT_Assert(paramLen+2 < sizeof(searchValue));
michael@0: 
michael@0:     PORT_Strcpy(searchValue,paramName);
michael@0:     PORT_Strcat(searchValue,"=");
michael@0:     while (*parameters) {
michael@0: 	if (PORT_Strncasecmp(parameters,searchValue,paramLen+1) == 0) {
michael@0: 	    parameters += paramLen+1;
michael@0: 	    returnValue = NSSUTIL_ArgFetchValue(parameters,&next);
michael@0: 	    break;
michael@0: 	} else {
michael@0: 	    parameters = NSSUTIL_ArgSkipParameter(parameters);
michael@0: 	}
michael@0: 	parameters = NSSUTIL_ArgStrip(parameters);
michael@0:    }
michael@0:    return returnValue;
michael@0: }
michael@0:   
michael@0: /*
michael@0:  * find the next flag in the parameter list
michael@0:  */  
michael@0: char *
michael@0: NSSUTIL_ArgNextFlag(char *flags)
michael@0: {
michael@0:     for (; *flags ; flags++) {
michael@0: 	if (*flags == ',') {
michael@0: 	    flags++;
michael@0: 	    break;
michael@0: 	}
michael@0:     }
michael@0:     return flags;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * return true if the flag is set in the label parameter.
michael@0:  */
michael@0: PRBool
michael@0: NSSUTIL_ArgHasFlag(char *label, char *flag, char *parameters)
michael@0: {
michael@0:     char *flags,*index;
michael@0:     int len = strlen(flag);
michael@0:     PRBool found = PR_FALSE;
michael@0: 
michael@0:     flags = NSSUTIL_ArgGetParamValue(label,parameters);
michael@0:     if (flags == NULL) return PR_FALSE;
michael@0: 
michael@0:     for (index=flags; *index; index=NSSUTIL_ArgNextFlag(index)) {
michael@0: 	if (PORT_Strncasecmp(index,flag,len) == 0) {
michael@0: 	    found=PR_TRUE;
michael@0: 	    break;
michael@0: 	}
michael@0:     }
michael@0:     PORT_Free(flags);
michael@0:     return found;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * decode a number. handle octal (leading '0'), hex (leading '0x') or decimal
michael@0:  */
michael@0: long
michael@0: NSSUTIL_ArgDecodeNumber(char *num)
michael@0: {
michael@0:     int	radix = 10;
michael@0:     unsigned long value = 0;
michael@0:     long retValue = 0;
michael@0:     int sign = 1;
michael@0:     int digit;
michael@0: 
michael@0:     if (num == NULL) return retValue;
michael@0: 
michael@0:     num = NSSUTIL_ArgStrip(num);
michael@0: 
michael@0:     if (*num == '-') {
michael@0: 	sign = -1;
michael@0: 	num++;
michael@0:     }
michael@0: 
michael@0:     if (*num == '0') {
michael@0: 	radix = 8;
michael@0: 	num++;
michael@0: 	if ((*num == 'x') || (*num == 'X')) {
michael@0: 	    radix = 16;
michael@0: 	    num++;
michael@0: 	}
michael@0:     }
michael@0: 
michael@0:    
michael@0:     for ( ;*num; num++ ) {
michael@0: 	if (isdigit(*num)) {
michael@0: 	    digit = *num - '0';
michael@0: 	} else if ((*num >= 'a') && (*num <= 'f'))  {
michael@0: 	    digit = *num - 'a' + 10;
michael@0: 	} else if ((*num >= 'A') && (*num <= 'F'))  {
michael@0: 	    digit = *num - 'A' + 10;
michael@0: 	} else {
michael@0: 	    break;
michael@0: 	}
michael@0: 	if (digit >= radix) break;
michael@0: 	value = value*radix + digit;
michael@0:     }
michael@0: 
michael@0:     retValue = ((int) value) * sign;
michael@0:     return retValue;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * parameters are tag value pairs. This function returns the tag or label (the
michael@0:  * value before the equal size.
michael@0:  */
michael@0: char *
michael@0: NSSUTIL_ArgGetLabel(char *inString, int *next) 
michael@0: {
michael@0:     char *name=NULL;
michael@0:     char *string;
michael@0:     int len;
michael@0: 
michael@0:     /* look for the end of the <label>= */
michael@0:     for (string = inString;*string; string++) {
michael@0: 	if (*string == '=') { break; }
michael@0: 	if (NSSUTIL_ArgIsBlank(*string)) break;
michael@0:     }
michael@0: 
michael@0:     len = string - inString;
michael@0: 
michael@0:     *next = len; 
michael@0:     if (*string == '=') (*next) += 1;
michael@0:     if (len > 0) {
michael@0: 	name = PORT_Alloc(len+1);
michael@0: 	PORT_Strncpy(name,inString,len);
michael@0: 	name[len] = 0;
michael@0:     }
michael@0:     return name;
michael@0: }
michael@0: 
michael@0: /*
michael@0:  * read an argument at a Long integer
michael@0:  */
michael@0: long
michael@0: NSSUTIL_ArgReadLong(char *label,char *params, long defValue, PRBool *isdefault)
michael@0: {
michael@0:     char *value;
michael@0:     long retValue;
michael@0:     if (isdefault) *isdefault = PR_FALSE; 
michael@0: 
michael@0:     value = NSSUTIL_ArgGetParamValue(label,params);
michael@0:     if (value == NULL) {
michael@0: 	if (isdefault) *isdefault = PR_TRUE;
michael@0: 	return defValue;
michael@0:     }
michael@0:     retValue = NSSUTIL_ArgDecodeNumber(value);
michael@0:     if (value) PORT_Free(value);
michael@0: 
michael@0:     return retValue;
michael@0: }
michael@0: 
michael@0: 
michael@0: /*
michael@0:  * prepare a string to be quoted with 'quote' marks. We do that by adding
michael@0:  * appropriate escapes.
michael@0:  */
michael@0: static int
michael@0: nssutil_escapeQuotesSize(const char *string, char quote, PRBool addquotes)
michael@0: {
michael@0:     int escapes = 0, size = 0;
michael@0:     const char *src;
michael@0: 
michael@0:     size= addquotes ? 2 : 0;
michael@0:     for (src=string; *src ; src++) {
michael@0: 	if ((*src == quote) || (*src == '\\')) escapes++;
michael@0: 	size++;
michael@0:     }
michael@0:     return size+escapes+1;
michael@0: 
michael@0: }
michael@0: 
michael@0: static char *
michael@0: nssutil_escapeQuotes(const char *string, char quote, PRBool addquotes)
michael@0: {
michael@0:     char *newString = 0;
michael@0:     int size = 0;
michael@0:     const char *src;
michael@0:     char *dest;
michael@0: 
michael@0:     size = nssutil_escapeQuotesSize(string, quote, addquotes);
michael@0: 
michael@0:     dest = newString = PORT_ZAlloc(size); 
michael@0:     if (newString == NULL) {
michael@0: 	return NULL;
michael@0:     }
michael@0: 
michael@0:     if (addquotes) *dest++=quote;
michael@0:     for (src=string; *src; src++,dest++) {
michael@0: 	if ((*src == '\\') || (*src == quote)) {
michael@0: 	    *dest++ = '\\';
michael@0: 	}
michael@0: 	*dest = *src;
michael@0:     }
michael@0:     if (addquotes) *dest=quote;
michael@0: 
michael@0:     return newString;
michael@0: }
michael@0: 
michael@0: int
michael@0: NSSUTIL_EscapeSize(const char *string, char quote)
michael@0: {
michael@0:      return nssutil_escapeQuotesSize(string, quote, PR_FALSE);
michael@0: }
michael@0: 
michael@0: char *
michael@0: NSSUTIL_Escape(const char *string, char quote)
michael@0: {
michael@0:     return nssutil_escapeQuotes(string, quote, PR_FALSE);
michael@0: }
michael@0: 
michael@0: 
michael@0: int
michael@0: NSSUTIL_QuoteSize(const char *string, char quote)
michael@0: {
michael@0:      return nssutil_escapeQuotesSize(string, quote, PR_TRUE);
michael@0: }
michael@0: 
michael@0: char *
michael@0: NSSUTIL_Quote(const char *string, char quote)
michael@0: {
michael@0:     return nssutil_escapeQuotes(string, quote, PR_TRUE);
michael@0: }
michael@0: 
michael@0: int
michael@0: NSSUTIL_DoubleEscapeSize(const char *string, char quote1, char quote2)
michael@0: {
michael@0:     int escapes = 0, size = 0;
michael@0:     const char *src;
michael@0:     for (src=string; *src ; src++) {
michael@0:         if (*src == '\\')   escapes+=3; /* \\\\ */
michael@0:         if (*src == quote1) escapes+=2; /* \\quote1 */
michael@0:         if (*src == quote2) escapes++;   /* \quote2 */
michael@0:         size++;
michael@0:     }
michael@0: 
michael@0:     return escapes+size+1;
michael@0: }
michael@0: 
michael@0: char *
michael@0: NSSUTIL_DoubleEscape(const char *string, char quote1, char quote2)
michael@0: {
michael@0:     char *round1 = NULL;
michael@0:     char *retValue = NULL;
michael@0:     if (string == NULL) {
michael@0:         goto done;
michael@0:     }
michael@0:     round1 = nssutil_escapeQuotes(string, quote1, PR_FALSE);
michael@0:     if (round1) {
michael@0:         retValue = nssutil_escapeQuotes(round1, quote2, PR_FALSE);
michael@0:         PORT_Free(round1);
michael@0:     }
michael@0: 
michael@0: done:
michael@0:     if (retValue == NULL) {
michael@0:         retValue = PORT_Strdup("");
michael@0:     }
michael@0:     return retValue;
michael@0: }
michael@0: 
michael@0: 
michael@0: /************************************************************************
michael@0:  * These functions are used in contructing strings.
michael@0:  * NOTE: they will always return a string, but sometimes it will return
michael@0:  * a specific NULL string. These strings must be freed with util_freePair.
michael@0:  */
michael@0: 
michael@0: /* string to return on error... */
michael@0: static char *nssutil_nullString = "";
michael@0: 
michael@0: static char *
michael@0: nssutil_formatValue(PLArenaPool *arena, char *value, char quote)
michael@0: {
michael@0:     char *vp,*vp2,*retval;
michael@0:     int size = 0, escapes = 0;
michael@0: 
michael@0:     for (vp=value; *vp ;vp++) {
michael@0: 	if ((*vp == quote) || (*vp == NSSUTIL_ARG_ESCAPE)) escapes++;
michael@0: 	size++;
michael@0:     }
michael@0:     if (arena) {
michael@0: 	retval = PORT_ArenaZAlloc(arena,size+escapes+1);
michael@0:     } else {
michael@0: 	retval = PORT_ZAlloc(size+escapes+1);
michael@0:     }
michael@0:     if (retval == NULL) return NULL;
michael@0:     vp2 = retval;
michael@0:     for (vp=value; *vp; vp++) {
michael@0: 	if ((*vp == quote) || (*vp == NSSUTIL_ARG_ESCAPE)) 
michael@0: 				*vp2++ = NSSUTIL_ARG_ESCAPE;
michael@0: 	*vp2++ = *vp;
michael@0:     }
michael@0:     return retval;
michael@0: }
michael@0: 
michael@0: 
michael@0: static PRBool nssutil_argHasChar(char *v, char c)
michael@0: {
michael@0:    for ( ;*v; v++) {
michael@0:         if (*v == c) return PR_TRUE;
michael@0:    }
michael@0:    return PR_FALSE;
michael@0: }
michael@0: 
michael@0: static PRBool nssutil_argHasBlanks(char *v)
michael@0: {
michael@0:    for ( ;*v; v++) {
michael@0:         if (NSSUTIL_ArgIsBlank(*v)) return PR_TRUE;
michael@0:    }
michael@0:    return PR_FALSE;
michael@0: }
michael@0: 
michael@0: static char *
michael@0: nssutil_formatPair(char *name, char *value, char quote)
michael@0: {
michael@0:     char openQuote = quote;
michael@0:     char closeQuote = NSSUTIL_ArgGetPair(quote);
michael@0:     char *newValue = NULL;
michael@0:     char *returnValue;
michael@0:     PRBool need_quote = PR_FALSE;
michael@0: 
michael@0:     if (!value || (*value == 0)) return nssutil_nullString;
michael@0: 
michael@0:     if (nssutil_argHasBlanks(value) || NSSUTIL_ArgIsQuote(value[0]))
michael@0: 							 need_quote=PR_TRUE;
michael@0: 
michael@0:     if ((need_quote && nssutil_argHasChar(value,closeQuote))
michael@0: 			|| nssutil_argHasChar(value,NSSUTIL_ARG_ESCAPE)) {
michael@0: 	value = newValue = nssutil_formatValue(NULL, value,quote);
michael@0: 	if (newValue == NULL) return nssutil_nullString;
michael@0:     }
michael@0:     if (need_quote) {
michael@0:     	returnValue = PR_smprintf("%s=%c%s%c",name,openQuote,value,closeQuote);
michael@0:     } else {
michael@0:     	returnValue = PR_smprintf("%s=%s",name,value);
michael@0:     }
michael@0:     if (returnValue == NULL) returnValue = nssutil_nullString;
michael@0: 
michael@0:     if (newValue) PORT_Free(newValue);
michael@0: 
michael@0:     return returnValue;
michael@0: }
michael@0: 
michael@0: static char *nssutil_formatIntPair(char *name, unsigned long value, 
michael@0:                                   unsigned long def)
michael@0: {
michael@0:     char *returnValue;
michael@0: 
michael@0:     if (value == def) return nssutil_nullString;
michael@0: 
michael@0:     returnValue = PR_smprintf("%s=%d",name,value);
michael@0: 
michael@0:     return returnValue;
michael@0: }
michael@0: 
michael@0: static void
michael@0: nssutil_freePair(char *pair)
michael@0: {
michael@0:     if (pair && pair != nssutil_nullString) {
michael@0: 	PR_smprintf_free(pair);
michael@0:     }
michael@0: }
michael@0: 
michael@0: 
michael@0: /************************************************************************
michael@0:  * Parse the Slot specific parameters in the NSS params.
michael@0:  */
michael@0: 
michael@0: struct nssutilArgSlotFlagTable {
michael@0:     char *name;
michael@0:     int len;
michael@0:     unsigned long value;
michael@0: };
michael@0: 
michael@0: #define NSSUTIL_ARG_ENTRY(arg,flag) \
michael@0: { #arg , sizeof(#arg)-1, flag }
michael@0: static struct nssutilArgSlotFlagTable nssutil_argSlotFlagTable[] = {
michael@0: 	NSSUTIL_ARG_ENTRY(RSA,SECMOD_RSA_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(DSA,SECMOD_RSA_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(RC2,SECMOD_RC4_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(RC4,SECMOD_RC2_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(DES,SECMOD_DES_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(DH,SECMOD_DH_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(FORTEZZA,SECMOD_FORTEZZA_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(RC5,SECMOD_RC5_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(SHA1,SECMOD_SHA1_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(SHA256,SECMOD_SHA256_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(SHA512,SECMOD_SHA512_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(MD5,SECMOD_MD5_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(MD2,SECMOD_MD2_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(SSL,SECMOD_SSL_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(TLS,SECMOD_TLS_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(AES,SECMOD_AES_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(Camellia,SECMOD_CAMELLIA_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(SEED,SECMOD_SEED_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(PublicCerts,SECMOD_FRIENDLY_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(RANDOM,SECMOD_RANDOM_FLAG),
michael@0: 	NSSUTIL_ARG_ENTRY(Disable, SECMOD_DISABLE_FLAG),
michael@0: };
michael@0: 
michael@0: static int nssutil_argSlotFlagTableSize = 
michael@0: 	sizeof(nssutil_argSlotFlagTable)/sizeof(nssutil_argSlotFlagTable[0]);
michael@0: 
michael@0: 
michael@0: /* turn the slot flags into a bit mask */
michael@0: unsigned long
michael@0: NSSUTIL_ArgParseSlotFlags(char *label,char *params)
michael@0: {
michael@0:     char *flags,*index;
michael@0:     unsigned long retValue = 0;
michael@0:     int i;
michael@0:     PRBool all = PR_FALSE;
michael@0: 
michael@0:     flags = NSSUTIL_ArgGetParamValue(label,params);
michael@0:     if (flags == NULL) return 0;
michael@0: 
michael@0:     if (PORT_Strcasecmp(flags,"all") == 0) all = PR_TRUE;
michael@0: 
michael@0:     for (index=flags; *index; index=NSSUTIL_ArgNextFlag(index)) {
michael@0: 	for (i=0; i < nssutil_argSlotFlagTableSize; i++) {
michael@0: 	    if (all || 
michael@0: 		(PORT_Strncasecmp(index, nssutil_argSlotFlagTable[i].name,
michael@0: 				nssutil_argSlotFlagTable[i].len) == 0)) {
michael@0: 		retValue |= nssutil_argSlotFlagTable[i].value;
michael@0: 	    }
michael@0: 	}
michael@0:     }
michael@0:     PORT_Free(flags);
michael@0:     return retValue;
michael@0: }
michael@0: 
michael@0: 
michael@0: /* parse a single slot specific parameter */
michael@0: static void
michael@0: nssutil_argDecodeSingleSlotInfo(char *name, char *params, 
michael@0:                                struct NSSUTILPreSlotInfoStr *slotInfo)
michael@0: {
michael@0:     char *askpw;
michael@0: 
michael@0:     slotInfo->slotID=NSSUTIL_ArgDecodeNumber(name);
michael@0:     slotInfo->defaultFlags=NSSUTIL_ArgParseSlotFlags("slotFlags",params);
michael@0:     slotInfo->timeout=NSSUTIL_ArgReadLong("timeout",params, 0, NULL);
michael@0: 
michael@0:     askpw = NSSUTIL_ArgGetParamValue("askpw",params);
michael@0:     slotInfo->askpw = 0;
michael@0: 
michael@0:     if (askpw) {
michael@0: 	if (PORT_Strcasecmp(askpw,"every") == 0) {
michael@0:     	    slotInfo->askpw = -1;
michael@0: 	} else if (PORT_Strcasecmp(askpw,"timeout") == 0) {
michael@0:     	    slotInfo->askpw = 1;
michael@0: 	} 
michael@0: 	PORT_Free(askpw);
michael@0: 	slotInfo->defaultFlags |= PK11_OWN_PW_DEFAULTS;
michael@0:     }
michael@0:     slotInfo->hasRootCerts = NSSUTIL_ArgHasFlag("rootFlags", "hasRootCerts", 
michael@0:                                                params);
michael@0:     slotInfo->hasRootTrust = NSSUTIL_ArgHasFlag("rootFlags", "hasRootTrust", 
michael@0:                                                params);
michael@0: }
michael@0: 
michael@0: /* parse all the slot specific parameters. */
michael@0: struct NSSUTILPreSlotInfoStr *
michael@0: NSSUTIL_ArgParseSlotInfo(PLArenaPool *arena, char *slotParams, int *retCount)
michael@0: {
michael@0:     char *slotIndex;
michael@0:     struct NSSUTILPreSlotInfoStr *slotInfo = NULL;
michael@0:     int i=0,count = 0,next;
michael@0: 
michael@0:     *retCount = 0;
michael@0:     if ((slotParams == NULL) || (*slotParams == 0))  return NULL;
michael@0: 
michael@0:     /* first count the number of slots */
michael@0:     for (slotIndex = NSSUTIL_ArgStrip(slotParams); *slotIndex; 
michael@0: 	 slotIndex = NSSUTIL_ArgStrip(NSSUTIL_ArgSkipParameter(slotIndex))) {
michael@0: 	count++;
michael@0:     }
michael@0: 
michael@0:     /* get the data structures */
michael@0:     if (arena) {
michael@0: 	slotInfo = PORT_ArenaZNewArray(arena,
michael@0: 				struct NSSUTILPreSlotInfoStr, count); 
michael@0:     } else {
michael@0: 	slotInfo = PORT_ZNewArray(struct NSSUTILPreSlotInfoStr, count);
michael@0:     }
michael@0:     if (slotInfo == NULL) return NULL;
michael@0: 
michael@0:     for (slotIndex = NSSUTIL_ArgStrip(slotParams), i = 0; 
michael@0: 					*slotIndex && i < count ; ) {
michael@0: 	char *name;
michael@0: 	name = NSSUTIL_ArgGetLabel(slotIndex,&next);
michael@0: 	slotIndex += next;
michael@0: 
michael@0: 	if (!NSSUTIL_ArgIsBlank(*slotIndex)) {
michael@0: 	    char *args = NSSUTIL_ArgFetchValue(slotIndex,&next);
michael@0: 	    slotIndex += next;
michael@0: 	    if (args) {
michael@0: 		nssutil_argDecodeSingleSlotInfo(name,args,&slotInfo[i]);
michael@0: 		i++;
michael@0: 		PORT_Free(args);
michael@0: 	    }
michael@0: 	}
michael@0: 	if (name) PORT_Free(name);
michael@0: 	slotIndex = NSSUTIL_ArgStrip(slotIndex);
michael@0:     }
michael@0:     *retCount = i;
michael@0:     return slotInfo;
michael@0: }
michael@0: 
michael@0: /************************************************************************
michael@0:  * make a new slot specific parameter 
michael@0:  */
michael@0: /* first make the slot flags */
michael@0: static char *
michael@0: nssutil_mkSlotFlags(unsigned long defaultFlags)
michael@0: {
michael@0:     char *flags=NULL;
michael@0:     int i,j;
michael@0: 
michael@0:     for (i=0; i < sizeof(defaultFlags)*8; i++) {
michael@0: 	if (defaultFlags & (1UL <<i)) {
michael@0: 	    char *string = NULL;
michael@0: 
michael@0: 	    for (j=0; j < nssutil_argSlotFlagTableSize; j++) {
michael@0: 		if (nssutil_argSlotFlagTable[j].value == ( 1UL << i )) {
michael@0: 		    string = nssutil_argSlotFlagTable[j].name;
michael@0: 		    break;
michael@0: 		}
michael@0: 	    }
michael@0: 	    if (string) {
michael@0: 		if (flags) {
michael@0: 		    char *tmp;
michael@0: 		    tmp = PR_smprintf("%s,%s",flags,string);
michael@0: 		    PR_smprintf_free(flags);
michael@0: 		    flags = tmp;
michael@0: 		} else {
michael@0: 		    flags = PR_smprintf("%s",string);
michael@0: 		}
michael@0: 	    }
michael@0: 	}
michael@0:     }
michael@0: 
michael@0:     return flags;
michael@0: }
michael@0: 
michael@0: /* now make the root flags */
michael@0: #define NSSUTIL_MAX_ROOT_FLAG_SIZE  sizeof("hasRootCerts")+sizeof("hasRootTrust")
michael@0: static char *
michael@0: nssutil_mkRootFlags(PRBool hasRootCerts, PRBool hasRootTrust)
michael@0: {
michael@0:     char *flags= (char *)PORT_ZAlloc(NSSUTIL_MAX_ROOT_FLAG_SIZE);
michael@0:     PRBool first = PR_TRUE;
michael@0: 
michael@0:     PORT_Memset(flags,0,NSSUTIL_MAX_ROOT_FLAG_SIZE);
michael@0:     if (hasRootCerts) {
michael@0: 	PORT_Strcat(flags,"hasRootCerts");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     if (hasRootTrust) {
michael@0: 	if (!first) PORT_Strcat(flags,",");
michael@0: 	PORT_Strcat(flags,"hasRootTrust");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     return flags;
michael@0: }
michael@0: 
michael@0: /* now make a full slot string */
michael@0: char *
michael@0: NSSUTIL_MkSlotString(unsigned long slotID, unsigned long defaultFlags,
michael@0: 		  unsigned long timeout, unsigned char askpw_in,
michael@0: 		  PRBool hasRootCerts, PRBool hasRootTrust) {
michael@0:     char *askpw,*flags,*rootFlags,*slotString;
michael@0:     char *flagPair,*rootFlagsPair;
michael@0: 	
michael@0:     switch (askpw_in) {
michael@0:     case 0xff:
michael@0: 	askpw = "every";
michael@0: 	break;
michael@0:     case 1:
michael@0: 	askpw = "timeout";
michael@0: 	break;
michael@0:     default:
michael@0: 	askpw = "any";
michael@0: 	break;
michael@0:     }
michael@0:     flags = nssutil_mkSlotFlags(defaultFlags);
michael@0:     rootFlags = nssutil_mkRootFlags(hasRootCerts,hasRootTrust);
michael@0:     flagPair = nssutil_formatPair("slotFlags",flags,'\'');
michael@0:     rootFlagsPair = nssutil_formatPair("rootFlags",rootFlags,'\'');
michael@0:     if (flags) PR_smprintf_free(flags);
michael@0:     if (rootFlags) PORT_Free(rootFlags);
michael@0:     if (defaultFlags & PK11_OWN_PW_DEFAULTS) {
michael@0:     	slotString = PR_smprintf("0x%08lx=[%s askpw=%s timeout=%d %s]",
michael@0: 				(PRUint32)slotID,flagPair,askpw,timeout,
michael@0: 				rootFlagsPair);
michael@0:     } else {
michael@0:     	slotString = PR_smprintf("0x%08lx=[%s %s]",
michael@0: 				(PRUint32)slotID,flagPair,rootFlagsPair);
michael@0:     }
michael@0:     nssutil_freePair(flagPair);
michael@0:     nssutil_freePair(rootFlagsPair);
michael@0:     return slotString;
michael@0: }
michael@0: 
michael@0: 
michael@0: /************************************************************************
michael@0:  * Parse Full module specs into: library, commonName, module parameters,
michael@0:  * and NSS specifi parameters.
michael@0:  */
michael@0: SECStatus
michael@0: NSSUTIL_ArgParseModuleSpec(char *modulespec, char **lib, char **mod, 
michael@0: 					char **parameters, char **nss)
michael@0: {
michael@0:     int next;
michael@0:     modulespec = NSSUTIL_ArgStrip(modulespec);
michael@0: 
michael@0:     *lib = *mod = *parameters = *nss = 0;
michael@0: 
michael@0:     while (*modulespec) {
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*lib,"library=",;)
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*mod,"name=",;)
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*parameters,"parameters=",;)
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(modulespec,*nss,"nss=",;)
michael@0: 	NSSUTIL_HANDLE_FINAL_ARG(modulespec)
michael@0:    }
michael@0:    return SECSuccess;
michael@0: }
michael@0: 
michael@0: /************************************************************************
michael@0:  * make a new module spec from it's components */
michael@0: char *
michael@0: NSSUTIL_MkModuleSpec(char *dllName, char *commonName, char *parameters, 
michael@0: 								char *NSS)
michael@0: {
michael@0:     char *moduleSpec;
michael@0:     char *lib,*name,*param,*nss;
michael@0: 
michael@0:     /*
michael@0:      * now the final spec
michael@0:      */
michael@0:     lib = nssutil_formatPair("library",dllName,'\"');
michael@0:     name = nssutil_formatPair("name",commonName,'\"');
michael@0:     param = nssutil_formatPair("parameters",parameters,'\"');
michael@0:     nss = nssutil_formatPair("NSS",NSS,'\"');
michael@0:     moduleSpec = PR_smprintf("%s %s %s %s", lib,name,param,nss);
michael@0:     nssutil_freePair(lib);
michael@0:     nssutil_freePair(name);
michael@0:     nssutil_freePair(param);
michael@0:     nssutil_freePair(nss);
michael@0:     return (moduleSpec);
michael@0: }
michael@0: 
michael@0: 
michael@0: #define NSSUTIL_ARG_FORTEZZA_FLAG "FORTEZZA"
michael@0: /******************************************************************************
michael@0:  * Parse the cipher flags from the NSS parameter
michael@0:  */
michael@0: void
michael@0: NSSUTIL_ArgParseCipherFlags(unsigned long *newCiphers,char *cipherList)
michael@0: {
michael@0:     newCiphers[0] = newCiphers[1] = 0;
michael@0:     if ((cipherList == NULL) || (*cipherList == 0)) return;
michael@0: 
michael@0:     for (;*cipherList; cipherList=NSSUTIL_ArgNextFlag(cipherList)) {
michael@0: 	if (PORT_Strncasecmp(cipherList,NSSUTIL_ARG_FORTEZZA_FLAG,
michael@0: 				sizeof(NSSUTIL_ARG_FORTEZZA_FLAG)-1) == 0) {
michael@0: 	    newCiphers[0] |= SECMOD_FORTEZZA_FLAG;
michael@0: 	} 
michael@0: 
michael@0: 	/* add additional flags here as necessary */
michael@0: 	/* direct bit mapping escape */
michael@0: 	if (*cipherList == 0) {
michael@0: 	   if (cipherList[1] == 'l') {
michael@0: 		newCiphers[1] |= atoi(&cipherList[2]);
michael@0: 	   } else {
michael@0: 		newCiphers[0] |= atoi(&cipherList[2]);
michael@0: 	   }
michael@0: 	}
michael@0:     }
michael@0: }
michael@0: 
michael@0: 
michael@0: /*********************************************************************
michael@0:  * make NSS parameter...
michael@0:  */
michael@0: /* First make NSS specific flags */
michael@0: #define MAX_FLAG_SIZE  sizeof("internal")+sizeof("FIPS")+sizeof("moduleDB")+\
michael@0: 				sizeof("moduleDBOnly")+sizeof("critical")
michael@0: static char *
michael@0: nssutil_mkNSSFlags(PRBool internal, PRBool isFIPS,
michael@0: 		PRBool isModuleDB, PRBool isModuleDBOnly, PRBool isCritical)
michael@0: {
michael@0:     char *flags = (char *)PORT_ZAlloc(MAX_FLAG_SIZE);
michael@0:     PRBool first = PR_TRUE;
michael@0: 
michael@0:     PORT_Memset(flags,0,MAX_FLAG_SIZE);
michael@0:     if (internal) {
michael@0: 	PORT_Strcat(flags,"internal");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     if (isFIPS) {
michael@0: 	if (!first) PORT_Strcat(flags,",");
michael@0: 	PORT_Strcat(flags,"FIPS");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     if (isModuleDB) {
michael@0: 	if (!first) PORT_Strcat(flags,",");
michael@0: 	PORT_Strcat(flags,"moduleDB");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     if (isModuleDBOnly) {
michael@0: 	if (!first) PORT_Strcat(flags,",");
michael@0: 	PORT_Strcat(flags,"moduleDBOnly");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     if (isCritical) {
michael@0: 	if (!first) PORT_Strcat(flags,",");
michael@0: 	PORT_Strcat(flags,"critical");
michael@0: 	first = PR_FALSE;
michael@0:     }
michael@0:     return flags;
michael@0: }
michael@0: 
michael@0: 
michael@0: /* construct the NSS cipher flags */
michael@0: static char *
michael@0: nssutil_mkCipherFlags(unsigned long ssl0, unsigned long ssl1)
michael@0: {
michael@0:     char *cipher = NULL;
michael@0:     int i;
michael@0: 
michael@0:     for (i=0; i < sizeof(ssl0)*8; i++) {
michael@0: 	if (ssl0 & (1UL <<i)) {
michael@0: 	    char *string;
michael@0: 	    if ((1UL <<i) == SECMOD_FORTEZZA_FLAG) {
michael@0: 		string = PR_smprintf("%s",NSSUTIL_ARG_FORTEZZA_FLAG);
michael@0: 	    } else {
michael@0: 		string = PR_smprintf("0h0x%08lx", 1UL <<i);
michael@0: 	    }
michael@0: 	    if (cipher) {
michael@0: 		char *tmp;
michael@0: 		tmp = PR_smprintf("%s,%s",cipher,string);
michael@0: 		PR_smprintf_free(cipher);
michael@0: 		PR_smprintf_free(string);
michael@0: 		cipher = tmp;
michael@0: 	    } else {
michael@0: 		cipher = string;
michael@0: 	    }
michael@0: 	}
michael@0:     }
michael@0:     for (i=0; i < sizeof(ssl0)*8; i++) {
michael@0: 	if (ssl1 & (1UL <<i)) {
michael@0: 	    if (cipher) {
michael@0: 		char *tmp;
michael@0: 		tmp = PR_smprintf("%s,0l0x%08lx",cipher, 1UL <<i);
michael@0: 		PR_smprintf_free(cipher);
michael@0: 		cipher = tmp;
michael@0: 	    } else {
michael@0: 		cipher = PR_smprintf("0l0x%08lx", 1UL <<i);
michael@0: 	    }
michael@0: 	}
michael@0:     }
michael@0: 
michael@0:     return cipher;
michael@0: }
michael@0: 
michael@0: /* Assemble a full NSS string. */
michael@0: char *
michael@0: NSSUTIL_MkNSSString(char **slotStrings, int slotCount, PRBool internal, 
michael@0: 	  PRBool isFIPS, PRBool isModuleDB,  PRBool isModuleDBOnly, 
michael@0: 	  PRBool isCritical, unsigned long trustOrder, 
michael@0: 	  unsigned long cipherOrder, unsigned long ssl0, unsigned long ssl1)
michael@0: {
michael@0:     int slotLen, i;
michael@0:     char *slotParams, *ciphers, *nss, *nssFlags, *tmp;
michael@0:     char *trustOrderPair,*cipherOrderPair,*slotPair,*cipherPair,*flagPair;
michael@0: 
michael@0: 
michael@0:     /* now let's build up the string
michael@0:      * first the slot infos
michael@0:      */
michael@0:     slotLen=0;
michael@0:     for (i=0; i < (int)slotCount; i++) {
michael@0: 	slotLen += PORT_Strlen(slotStrings[i])+1;
michael@0:     }
michael@0:     slotLen += 1; /* space for the final NULL */
michael@0: 
michael@0:     slotParams = (char *)PORT_ZAlloc(slotLen);
michael@0:     PORT_Memset(slotParams,0,slotLen);
michael@0:     for (i=0; i < (int)slotCount; i++) {
michael@0: 	PORT_Strcat(slotParams,slotStrings[i]);
michael@0: 	PORT_Strcat(slotParams," ");
michael@0: 	PR_smprintf_free(slotStrings[i]);
michael@0: 	slotStrings[i]=NULL;
michael@0:     }
michael@0:     
michael@0:     /*
michael@0:      * now the NSS structure
michael@0:      */
michael@0:     nssFlags = nssutil_mkNSSFlags(internal,isFIPS,isModuleDB,isModuleDBOnly,
michael@0: 							isCritical); 
michael@0: 	/* for now only the internal module is critical */
michael@0:     ciphers = nssutil_mkCipherFlags(ssl0, ssl1);
michael@0: 
michael@0:     trustOrderPair = nssutil_formatIntPair("trustOrder",trustOrder,
michael@0: 					NSSUTIL_DEFAULT_TRUST_ORDER);
michael@0:     cipherOrderPair = nssutil_formatIntPair("cipherOrder",cipherOrder,
michael@0: 					NSSUTIL_DEFAULT_CIPHER_ORDER);
michael@0:     slotPair=nssutil_formatPair("slotParams",slotParams,'{'); /* } */
michael@0:     if (slotParams) PORT_Free(slotParams);
michael@0:     cipherPair=nssutil_formatPair("ciphers",ciphers,'\'');
michael@0:     if (ciphers) PR_smprintf_free(ciphers);
michael@0:     flagPair=nssutil_formatPair("Flags",nssFlags,'\'');
michael@0:     if (nssFlags) PORT_Free(nssFlags);
michael@0:     nss = PR_smprintf("%s %s %s %s %s",trustOrderPair,
michael@0: 			cipherOrderPair,slotPair,cipherPair,flagPair);
michael@0:     nssutil_freePair(trustOrderPair);
michael@0:     nssutil_freePair(cipherOrderPair);
michael@0:     nssutil_freePair(slotPair);
michael@0:     nssutil_freePair(cipherPair);
michael@0:     nssutil_freePair(flagPair);
michael@0:     tmp = NSSUTIL_ArgStrip(nss);
michael@0:     if (*tmp == '\0') {
michael@0: 	PR_smprintf_free(nss);
michael@0: 	nss = NULL;
michael@0:     }
michael@0:     return nss;
michael@0: }
michael@0: 
michael@0: /*****************************************************************************
michael@0:  *
michael@0:  * Private calls for use by softoken and utilmod.c
michael@0:  */
michael@0: 
michael@0: #define SQLDB "sql:"
michael@0: #define EXTERNDB "extern:"
michael@0: #define LEGACY "dbm:"
michael@0: #define MULTIACCESS "multiaccess:"
michael@0: #define SECMOD_DB "secmod.db"
michael@0: const char *
michael@0: _NSSUTIL_EvaluateConfigDir(const char *configdir, 
michael@0: 			   NSSDBType *pdbType, char **appName)
michael@0: {
michael@0:     NSSDBType dbType;
michael@0:     *appName = NULL;
michael@0: /* force the default */
michael@0: #ifdef NSS_DISABLE_DBM
michael@0:     dbType = NSS_DB_TYPE_SQL;
michael@0: #else
michael@0:     dbType = NSS_DB_TYPE_LEGACY;
michael@0: #endif
michael@0:     if (PORT_Strncmp(configdir, MULTIACCESS, sizeof(MULTIACCESS)-1) == 0) {
michael@0: 	char *cdir;
michael@0: 	dbType = NSS_DB_TYPE_MULTIACCESS;
michael@0: 
michael@0: 	*appName = PORT_Strdup(configdir+sizeof(MULTIACCESS)-1);
michael@0: 	if (*appName == NULL) {
michael@0: 	    return configdir;
michael@0: 	}
michael@0: 	cdir = *appName;
michael@0: 	while (*cdir && *cdir != ':') {
michael@0: 	    cdir++;
michael@0: 	}
michael@0: 	if (*cdir == ':') {
michael@0: 	   *cdir = 0;
michael@0: 	   cdir++;
michael@0: 	}
michael@0: 	configdir = cdir;
michael@0:     } else if (PORT_Strncmp(configdir, SQLDB, sizeof(SQLDB)-1) == 0) {
michael@0: 	dbType = NSS_DB_TYPE_SQL;
michael@0: 	configdir = configdir + sizeof(SQLDB) -1;
michael@0:     } else if (PORT_Strncmp(configdir, EXTERNDB, sizeof(EXTERNDB)-1) == 0) {
michael@0: 	dbType = NSS_DB_TYPE_EXTERN;
michael@0: 	configdir = configdir + sizeof(EXTERNDB) -1;
michael@0:     } else if (PORT_Strncmp(configdir, LEGACY, sizeof(LEGACY)-1) == 0) {
michael@0: 	dbType = NSS_DB_TYPE_LEGACY;
michael@0: 	configdir = configdir + sizeof(LEGACY) -1;
michael@0:     } else {
michael@0: 	/* look up the default from the environment */
michael@0: 	char *defaultType = PR_GetEnv("NSS_DEFAULT_DB_TYPE");
michael@0: 	if (defaultType != NULL) {
michael@0: 	    if (PORT_Strncmp(defaultType, SQLDB, sizeof(SQLDB)-2) == 0) {
michael@0: 		dbType = NSS_DB_TYPE_SQL;
michael@0: 	    } else if (PORT_Strncmp(defaultType,EXTERNDB,sizeof(EXTERNDB)-2)==0) {
michael@0: 		dbType = NSS_DB_TYPE_EXTERN;
michael@0: 	    } else if (PORT_Strncmp(defaultType, LEGACY, sizeof(LEGACY)-2) == 0) {
michael@0: 		dbType = NSS_DB_TYPE_LEGACY;
michael@0: 	    }
michael@0: 	}
michael@0:     }
michael@0:     /* if the caller has already set a type, don't change it */
michael@0:     if (*pdbType == NSS_DB_TYPE_NONE) {
michael@0: 	*pdbType = dbType;
michael@0:     }
michael@0:     return configdir;
michael@0: }
michael@0: 
michael@0: char *
michael@0: _NSSUTIL_GetSecmodName(char *param, NSSDBType *dbType, char **appName,
michael@0: 		   char **filename, PRBool *rw)
michael@0: {
michael@0:     int next;
michael@0:     char *configdir = NULL;
michael@0:     char *secmodName = NULL;
michael@0:     char *value = NULL;
michael@0:     char *save_params = param;
michael@0:     const char *lconfigdir;
michael@0:     PRBool noModDB = PR_FALSE;
michael@0:     param = NSSUTIL_ArgStrip(param);
michael@0: 	
michael@0: 
michael@0:     while (*param) {
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(param,configdir,"configDir=",;)
michael@0: 	NSSUTIL_HANDLE_STRING_ARG(param,secmodName,"secmod=",;)
michael@0: 	NSSUTIL_HANDLE_FINAL_ARG(param)
michael@0:    }
michael@0: 
michael@0:    *rw = PR_TRUE;
michael@0:    if (NSSUTIL_ArgHasFlag("flags","readOnly",save_params)) {
michael@0: 	*rw = PR_FALSE;
michael@0:    }
michael@0: 
michael@0:    if (!secmodName || *secmodName == '\0') {
michael@0: 	if (secmodName) PORT_Free(secmodName);
michael@0: 	secmodName = PORT_Strdup(SECMOD_DB);
michael@0:    }
michael@0: 
michael@0:    *filename = secmodName;
michael@0:    lconfigdir = _NSSUTIL_EvaluateConfigDir(configdir, dbType, appName);
michael@0: 
michael@0:    if (NSSUTIL_ArgHasFlag("flags","noModDB",save_params)) {
michael@0: 	/* there isn't a module db, don't load the legacy support */
michael@0: 	noModDB = PR_TRUE;
michael@0: 	*dbType = NSS_DB_TYPE_SQL;
michael@0: 	PORT_Free(*filename);
michael@0: 	*filename = NULL;
michael@0:         *rw = PR_FALSE;
michael@0:    }
michael@0: 
michael@0:    /* only use the renamed secmod for legacy databases */
michael@0:    if ((*dbType != NSS_DB_TYPE_LEGACY) && 
michael@0: 	(*dbType != NSS_DB_TYPE_MULTIACCESS)) {
michael@0: 	secmodName="pkcs11.txt";
michael@0:    }
michael@0: 
michael@0:    if (noModDB) {
michael@0: 	value = NULL;
michael@0:    } else if (lconfigdir && lconfigdir[0] != '\0') {
michael@0: 	value = PR_smprintf("%s" NSSUTIL_PATH_SEPARATOR "%s",
michael@0: 			lconfigdir,secmodName);
michael@0:    } else {
michael@0: 	value = PR_smprintf("%s",secmodName);
michael@0:    }
michael@0:    if (configdir) PORT_Free(configdir);
michael@0:    return value;
michael@0: }
michael@0: 
michael@0: