Você não pode selecionar mais de 25 tópicos Os tópicos devem começar com uma letra ou um número, podem incluir traços ('-') e podem ter até 35 caracteres.
 
 
 
 
 
 

138 linhas
4.8 KiB

  1. /*
  2. * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project
  3. * 1999.
  4. */
  5. /* ====================================================================
  6. * Copyright (c) 1999 The OpenSSL Project. All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions
  10. * are met:
  11. *
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions and the following disclaimer.
  14. *
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in
  17. * the documentation and/or other materials provided with the
  18. * distribution.
  19. *
  20. * 3. All advertising materials mentioning features or use of this
  21. * software must display the following acknowledgment:
  22. * "This product includes software developed by the OpenSSL Project
  23. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24. *
  25. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26. * endorse or promote products derived from this software without
  27. * prior written permission. For written permission, please contact
  28. * licensing@OpenSSL.org.
  29. *
  30. * 5. Products derived from this software may not be called "OpenSSL"
  31. * nor may "OpenSSL" appear in their names without prior written
  32. * permission of the OpenSSL Project.
  33. *
  34. * 6. Redistributions of any form whatsoever must retain the following
  35. * acknowledgment:
  36. * "This product includes software developed by the OpenSSL Project
  37. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38. *
  39. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50. * OF THE POSSIBILITY OF SUCH DAMAGE.
  51. * ====================================================================
  52. *
  53. * This product includes cryptographic software written by Eric Young
  54. * (eay@cryptsoft.com). This product includes software written by Tim
  55. * Hudson (tjh@cryptsoft.com). */
  56. #include <string.h>
  57. #include <openssl/base64.h>
  58. #include <openssl/err.h>
  59. #include <openssl/mem.h>
  60. #include <openssl/x509.h>
  61. int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey)
  62. {
  63. if ((x == NULL) || (x->spkac == NULL))
  64. return (0);
  65. return (X509_PUBKEY_set(&(x->spkac->pubkey), pkey));
  66. }
  67. EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x)
  68. {
  69. if ((x == NULL) || (x->spkac == NULL))
  70. return (NULL);
  71. return (X509_PUBKEY_get(x->spkac->pubkey));
  72. }
  73. /* Load a Netscape SPKI from a base64 encoded string */
  74. NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str, int len)
  75. {
  76. unsigned char *spki_der;
  77. const unsigned char *p;
  78. size_t spki_len;
  79. NETSCAPE_SPKI *spki;
  80. if (len <= 0)
  81. len = strlen(str);
  82. if (!EVP_DecodedLength(&spki_len, len)) {
  83. OPENSSL_PUT_ERROR(X509, X509_R_BASE64_DECODE_ERROR);
  84. return NULL;
  85. }
  86. if (!(spki_der = OPENSSL_malloc(spki_len))) {
  87. OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
  88. return NULL;
  89. }
  90. if (!EVP_DecodeBase64
  91. (spki_der, &spki_len, spki_len, (const uint8_t *)str, len)) {
  92. OPENSSL_PUT_ERROR(X509, X509_R_BASE64_DECODE_ERROR);
  93. OPENSSL_free(spki_der);
  94. return NULL;
  95. }
  96. p = spki_der;
  97. spki = d2i_NETSCAPE_SPKI(NULL, &p, spki_len);
  98. OPENSSL_free(spki_der);
  99. return spki;
  100. }
  101. /* Generate a base64 encoded string from an SPKI */
  102. char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *spki)
  103. {
  104. unsigned char *der_spki, *p;
  105. char *b64_str;
  106. size_t b64_len;
  107. int der_len;
  108. der_len = i2d_NETSCAPE_SPKI(spki, NULL);
  109. if (!EVP_EncodedLength(&b64_len, der_len)) {
  110. OPENSSL_PUT_ERROR(X509, ERR_R_OVERFLOW);
  111. return NULL;
  112. }
  113. der_spki = OPENSSL_malloc(der_len);
  114. if (der_spki == NULL) {
  115. OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
  116. return NULL;
  117. }
  118. b64_str = OPENSSL_malloc(b64_len);
  119. if (b64_str == NULL) {
  120. OPENSSL_free(der_spki);
  121. OPENSSL_PUT_ERROR(X509, ERR_R_MALLOC_FAILURE);
  122. return NULL;
  123. }
  124. p = der_spki;
  125. i2d_NETSCAPE_SPKI(spki, &p);
  126. EVP_EncodeBlock((unsigned char *)b64_str, der_spki, der_len);
  127. OPENSSL_free(der_spki);
  128. return b64_str;
  129. }