You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

282 lines
9.6 KiB

  1. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  2. * All rights reserved.
  3. *
  4. * This package is an SSL implementation written
  5. * by Eric Young (eay@cryptsoft.com).
  6. * The implementation was written so as to conform with Netscapes SSL.
  7. *
  8. * This library is free for commercial and non-commercial use as long as
  9. * the following conditions are aheared to. The following conditions
  10. * apply to all code found in this distribution, be it the RC4, RSA,
  11. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  12. * included with this distribution is covered by the same copyright terms
  13. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  14. *
  15. * Copyright remains Eric Young's, and as such any Copyright notices in
  16. * the code are not to be removed.
  17. * If this package is used in a product, Eric Young should be given attribution
  18. * as the author of the parts of the library used.
  19. * This can be in the form of a textual message at program startup or
  20. * in documentation (online or textual) provided with the package.
  21. *
  22. * Redistribution and use in source and binary forms, with or without
  23. * modification, are permitted provided that the following conditions
  24. * are met:
  25. * 1. Redistributions of source code must retain the copyright
  26. * notice, this list of conditions and the following disclaimer.
  27. * 2. Redistributions in binary form must reproduce the above copyright
  28. * notice, this list of conditions and the following disclaimer in the
  29. * documentation and/or other materials provided with the distribution.
  30. * 3. All advertising materials mentioning features or use of this software
  31. * must display the following acknowledgement:
  32. * "This product includes cryptographic software written by
  33. * Eric Young (eay@cryptsoft.com)"
  34. * The word 'cryptographic' can be left out if the rouines from the library
  35. * being used are not cryptographic related :-).
  36. * 4. If you include any Windows specific code (or a derivative thereof) from
  37. * the apps directory (application code) you must include an acknowledgement:
  38. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  41. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  43. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  44. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  45. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  46. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  48. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  49. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  50. * SUCH DAMAGE.
  51. *
  52. * The licence and distribution terms for any publically available version or
  53. * derivative of this code cannot be changed. i.e. this code cannot simply be
  54. * copied and put under another distribution licence
  55. * [including the GNU Public Licence.]
  56. */
  57. /* ====================================================================
  58. * Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
  59. *
  60. * Redistribution and use in source and binary forms, with or without
  61. * modification, are permitted provided that the following conditions
  62. * are met:
  63. *
  64. * 1. Redistributions of source code must retain the above copyright
  65. * notice, this list of conditions and the following disclaimer.
  66. *
  67. * 2. Redistributions in binary form must reproduce the above copyright
  68. * notice, this list of conditions and the following disclaimer in
  69. * the documentation and/or other materials provided with the
  70. * distribution.
  71. *
  72. * 3. All advertising materials mentioning features or use of this
  73. * software must display the following acknowledgment:
  74. * "This product includes software developed by the OpenSSL Project
  75. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  76. *
  77. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  78. * endorse or promote products derived from this software without
  79. * prior written permission. For written permission, please contact
  80. * openssl-core@openssl.org.
  81. *
  82. * 5. Products derived from this software may not be called "OpenSSL"
  83. * nor may "OpenSSL" appear in their names without prior written
  84. * permission of the OpenSSL Project.
  85. *
  86. * 6. Redistributions of any form whatsoever must retain the following
  87. * acknowledgment:
  88. * "This product includes software developed by the OpenSSL Project
  89. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  90. *
  91. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  92. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  93. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  94. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  95. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  96. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  97. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  98. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  99. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  100. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  101. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  102. * OF THE POSSIBILITY OF SUCH DAMAGE.
  103. * ====================================================================
  104. *
  105. * This product includes cryptographic software written by Eric Young
  106. * (eay@cryptsoft.com). This product includes software written by Tim
  107. * Hudson (tjh@cryptsoft.com). */
  108. #include <stdio.h>
  109. #include <openssl/bio.h>
  110. #include <openssl/dh.h>
  111. #include <openssl/dsa.h>
  112. #include <openssl/evp.h>
  113. #include <openssl/pem.h>
  114. /*#include <openssl/pkcs7.h> */
  115. #include <openssl/rsa.h>
  116. #include <openssl/x509.h>
  117. static RSA *pkey_get_rsa(EVP_PKEY *key, RSA **rsa);
  118. static DSA *pkey_get_dsa(EVP_PKEY *key, DSA **dsa);
  119. static EC_KEY *pkey_get_eckey(EVP_PKEY *key, EC_KEY **eckey);
  120. IMPLEMENT_PEM_rw(X509_REQ, X509_REQ, PEM_STRING_X509_REQ, X509_REQ)
  121. IMPLEMENT_PEM_write(X509_REQ_NEW, X509_REQ, PEM_STRING_X509_REQ_OLD, X509_REQ)
  122. IMPLEMENT_PEM_rw(X509_CRL, X509_CRL, PEM_STRING_X509_CRL, X509_CRL)
  123. /* We treat RSA or DSA private keys as a special case.
  124. *
  125. * For private keys we read in an EVP_PKEY structure with
  126. * PEM_read_bio_PrivateKey() and extract the relevant private
  127. * key: this means can handle "traditional" and PKCS#8 formats
  128. * transparently.
  129. */
  130. static RSA *pkey_get_rsa(EVP_PKEY *key, RSA **rsa)
  131. {
  132. RSA *rtmp;
  133. if(!key) return NULL;
  134. rtmp = EVP_PKEY_get1_RSA(key);
  135. EVP_PKEY_free(key);
  136. if(!rtmp) return NULL;
  137. if(rsa) {
  138. RSA_free(*rsa);
  139. *rsa = rtmp;
  140. }
  141. return rtmp;
  142. }
  143. RSA *PEM_read_bio_RSAPrivateKey(BIO *bp, RSA **rsa, pem_password_cb *cb,
  144. void *u)
  145. {
  146. EVP_PKEY *pktmp;
  147. pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
  148. return pkey_get_rsa(pktmp, rsa);
  149. }
  150. #ifndef OPENSSL_NO_FP_API
  151. RSA *PEM_read_RSAPrivateKey(FILE *fp, RSA **rsa, pem_password_cb *cb,
  152. void *u)
  153. {
  154. EVP_PKEY *pktmp;
  155. pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
  156. return pkey_get_rsa(pktmp, rsa);
  157. }
  158. #endif
  159. IMPLEMENT_PEM_write_cb_const(RSAPrivateKey, RSA, PEM_STRING_RSA, RSAPrivateKey)
  160. IMPLEMENT_PEM_rw_const(RSAPublicKey, RSA, PEM_STRING_RSA_PUBLIC, RSAPublicKey)
  161. IMPLEMENT_PEM_rw(RSA_PUBKEY, RSA, PEM_STRING_PUBLIC, RSA_PUBKEY)
  162. #ifndef OPENSSL_NO_DSA
  163. static DSA *pkey_get_dsa(EVP_PKEY *key, DSA **dsa)
  164. {
  165. DSA *dtmp;
  166. if(!key) return NULL;
  167. dtmp = EVP_PKEY_get1_DSA(key);
  168. EVP_PKEY_free(key);
  169. if(!dtmp) return NULL;
  170. if(dsa) {
  171. DSA_free(*dsa);
  172. *dsa = dtmp;
  173. }
  174. return dtmp;
  175. }
  176. DSA *PEM_read_bio_DSAPrivateKey(BIO *bp, DSA **dsa, pem_password_cb *cb,
  177. void *u)
  178. {
  179. EVP_PKEY *pktmp;
  180. pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
  181. return pkey_get_dsa(pktmp, dsa); /* will free pktmp */
  182. }
  183. IMPLEMENT_PEM_write_cb_const(DSAPrivateKey, DSA, PEM_STRING_DSA, DSAPrivateKey)
  184. IMPLEMENT_PEM_rw(DSA_PUBKEY, DSA, PEM_STRING_PUBLIC, DSA_PUBKEY)
  185. #ifndef OPENSSL_NO_FP_API
  186. DSA *PEM_read_DSAPrivateKey(FILE *fp, DSA **dsa, pem_password_cb *cb,
  187. void *u)
  188. {
  189. EVP_PKEY *pktmp;
  190. pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
  191. return pkey_get_dsa(pktmp, dsa); /* will free pktmp */
  192. }
  193. #endif
  194. IMPLEMENT_PEM_rw_const(DSAparams, DSA, PEM_STRING_DSAPARAMS, DSAparams)
  195. #endif
  196. static EC_KEY *pkey_get_eckey(EVP_PKEY *key, EC_KEY **eckey)
  197. {
  198. EC_KEY *dtmp;
  199. if(!key) return NULL;
  200. dtmp = EVP_PKEY_get1_EC_KEY(key);
  201. EVP_PKEY_free(key);
  202. if(!dtmp) return NULL;
  203. if(eckey)
  204. {
  205. EC_KEY_free(*eckey);
  206. *eckey = dtmp;
  207. }
  208. return dtmp;
  209. }
  210. EC_KEY *PEM_read_bio_ECPrivateKey(BIO *bp, EC_KEY **key, pem_password_cb *cb,
  211. void *u)
  212. {
  213. EVP_PKEY *pktmp;
  214. pktmp = PEM_read_bio_PrivateKey(bp, NULL, cb, u);
  215. return pkey_get_eckey(pktmp, key); /* will free pktmp */
  216. }
  217. /* TODO(fork): remove this code? */
  218. /* IMPLEMENT_PEM_rw_const(ECPKParameters, EC_GROUP, PEM_STRING_ECPARAMETERS, ECPKParameters) */
  219. IMPLEMENT_PEM_write_cb(ECPrivateKey, EC_KEY, PEM_STRING_ECPRIVATEKEY, ECPrivateKey)
  220. IMPLEMENT_PEM_rw(EC_PUBKEY, EC_KEY, PEM_STRING_PUBLIC, EC_PUBKEY)
  221. #ifndef OPENSSL_NO_FP_API
  222. EC_KEY *PEM_read_ECPrivateKey(FILE *fp, EC_KEY **eckey, pem_password_cb *cb,
  223. void *u)
  224. {
  225. EVP_PKEY *pktmp;
  226. pktmp = PEM_read_PrivateKey(fp, NULL, cb, u);
  227. return pkey_get_eckey(pktmp, eckey); /* will free pktmp */
  228. }
  229. #endif
  230. IMPLEMENT_PEM_write_const(DHparams, DH, PEM_STRING_DHPARAMS, DHparams)
  231. /* TODO(fork): remove this code? */
  232. /* IMPLEMENT_PEM_write_const(DHxparams, DH, PEM_STRING_DHXPARAMS, DHxparams) */
  233. IMPLEMENT_PEM_rw(PUBKEY, EVP_PKEY, PEM_STRING_PUBLIC, PUBKEY)