[BACK]Return to openssl.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / openssl

Annotation of src/usr.bin/openssl/openssl.c, Revision 1.32

1.32    ! joshua      1: /* $OpenBSD: openssl.c,v 1.31 2022/11/11 17:07:39 joshua Exp $ */
1.1       jsing       2: /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
                      3:  * All rights reserved.
                      4:  *
                      5:  * This package is an SSL implementation written
                      6:  * by Eric Young (eay@cryptsoft.com).
                      7:  * The implementation was written so as to conform with Netscapes SSL.
                      8:  *
                      9:  * This library is free for commercial and non-commercial use as long as
                     10:  * the following conditions are aheared to.  The following conditions
                     11:  * apply to all code found in this distribution, be it the RC4, RSA,
                     12:  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
                     13:  * included with this distribution is covered by the same copyright terms
                     14:  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
                     15:  *
                     16:  * Copyright remains Eric Young's, and as such any Copyright notices in
                     17:  * the code are not to be removed.
                     18:  * If this package is used in a product, Eric Young should be given attribution
                     19:  * as the author of the parts of the library used.
                     20:  * This can be in the form of a textual message at program startup or
                     21:  * in documentation (online or textual) provided with the package.
                     22:  *
                     23:  * Redistribution and use in source and binary forms, with or without
                     24:  * modification, are permitted provided that the following conditions
                     25:  * are met:
                     26:  * 1. Redistributions of source code must retain the copyright
                     27:  *    notice, this list of conditions and the following disclaimer.
                     28:  * 2. Redistributions in binary form must reproduce the above copyright
                     29:  *    notice, this list of conditions and the following disclaimer in the
                     30:  *    documentation and/or other materials provided with the distribution.
                     31:  * 3. All advertising materials mentioning features or use of this software
                     32:  *    must display the following acknowledgement:
                     33:  *    "This product includes cryptographic software written by
                     34:  *     Eric Young (eay@cryptsoft.com)"
                     35:  *    The word 'cryptographic' can be left out if the rouines from the library
                     36:  *    being used are not cryptographic related :-).
                     37:  * 4. If you include any Windows specific code (or a derivative thereof) from
                     38:  *    the apps directory (application code) you must include an acknowledgement:
                     39:  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
                     40:  *
                     41:  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
                     42:  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     43:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
                     44:  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
                     45:  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
                     46:  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
                     47:  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     48:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
                     49:  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
                     50:  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
                     51:  * SUCH DAMAGE.
                     52:  *
                     53:  * The licence and distribution terms for any publically available version or
                     54:  * derivative of this code cannot be changed.  i.e. this code cannot simply be
                     55:  * copied and put under another distribution licence
                     56:  * [including the GNU Public Licence.]
                     57:  */
                     58: /* ====================================================================
                     59:  * Copyright (c) 1998-2006 The OpenSSL Project.  All rights reserved.
                     60:  *
                     61:  * Redistribution and use in source and binary forms, with or without
                     62:  * modification, are permitted provided that the following conditions
                     63:  * are met:
                     64:  *
                     65:  * 1. Redistributions of source code must retain the above copyright
                     66:  *    notice, this list of conditions and the following disclaimer.
                     67:  *
                     68:  * 2. Redistributions in binary form must reproduce the above copyright
                     69:  *    notice, this list of conditions and the following disclaimer in
                     70:  *    the documentation and/or other materials provided with the
                     71:  *    distribution.
                     72:  *
                     73:  * 3. All advertising materials mentioning features or use of this
                     74:  *    software must display the following acknowledgment:
                     75:  *    "This product includes software developed by the OpenSSL Project
                     76:  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
                     77:  *
                     78:  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
                     79:  *    endorse or promote products derived from this software without
                     80:  *    prior written permission. For written permission, please contact
                     81:  *    openssl-core@openssl.org.
                     82:  *
                     83:  * 5. Products derived from this software may not be called "OpenSSL"
                     84:  *    nor may "OpenSSL" appear in their names without prior written
                     85:  *    permission of the OpenSSL Project.
                     86:  *
                     87:  * 6. Redistributions of any form whatsoever must retain the following
                     88:  *    acknowledgment:
                     89:  *    "This product includes software developed by the OpenSSL Project
                     90:  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
                     91:  *
                     92:  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
                     93:  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     94:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
                     95:  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
                     96:  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
                     97:  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
                     98:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
                     99:  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                    100:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
                    101:  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
                    102:  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
                    103:  * OF THE POSSIBILITY OF SUCH DAMAGE.
                    104:  * ====================================================================
                    105:  *
                    106:  * This product includes cryptographic software written by Eric Young
                    107:  * (eay@cryptsoft.com).  This product includes software written by Tim
                    108:  * Hudson (tjh@cryptsoft.com).
                    109:  *
                    110:  */
                    111:
                    112: #include <err.h>
                    113: #include <signal.h>
                    114: #include <stdio.h>
                    115: #include <string.h>
                    116: #include <stdlib.h>
1.14      deraadt   117: #include <unistd.h>
1.1       jsing     118:
                    119: #include "apps.h"
                    120:
                    121: #include <openssl/bio.h>
                    122: #include <openssl/conf.h>
                    123: #include <openssl/crypto.h>
                    124: #include <openssl/err.h>
                    125: #include <openssl/lhash.h>
                    126: #include <openssl/pem.h>
                    127: #include <openssl/ssl.h>
                    128: #include <openssl/x509.h>
                    129:
                    130: #include "progs.h"
                    131: #include "s_apps.h"
1.5       jsing     132:
                    133: #define FUNC_TYPE_GENERAL       1
                    134: #define FUNC_TYPE_MD            2
                    135: #define FUNC_TYPE_CIPHER        3
                    136: #define FUNC_TYPE_PKEY          4
                    137: #define FUNC_TYPE_MD_ALG        5
                    138: #define FUNC_TYPE_CIPHER_ALG    6
                    139:
                    140: typedef struct {
                    141:         int type;
                    142:         const char *name;
                    143:         int (*func)(int argc, char **argv);
                    144: } FUNCTION;
                    145:
                    146: DECLARE_LHASH_OF(FUNCTION);
1.4       deraadt   147:
                    148: FUNCTION functions[] = {
                    149:
                    150:        /* General functions. */
                    151:        { FUNC_TYPE_GENERAL, "asn1parse", asn1parse_main },
                    152:        { FUNC_TYPE_GENERAL, "ca", ca_main },
                    153:        { FUNC_TYPE_GENERAL, "certhash", certhash_main },
                    154:        { FUNC_TYPE_GENERAL, "ciphers", ciphers_main },
1.30      jsing     155: #ifndef OPENSSL_NO_CMS
                    156:        { FUNC_TYPE_GENERAL, "cms", cms_main },
                    157: #endif
1.4       deraadt   158:        { FUNC_TYPE_GENERAL, "crl2pkcs7", crl2pkcs7_main },
                    159:        { FUNC_TYPE_GENERAL, "crl", crl_main },
                    160:        { FUNC_TYPE_GENERAL, "dgst", dgst_main },
                    161:        { FUNC_TYPE_GENERAL, "enc", enc_main },
                    162:        { FUNC_TYPE_GENERAL, "errstr", errstr_main },
                    163:        { FUNC_TYPE_GENERAL, "genpkey", genpkey_main },
                    164:        { FUNC_TYPE_GENERAL, "nseq", nseq_main },
                    165: #ifndef OPENSSL_NO_OCSP
                    166:        { FUNC_TYPE_GENERAL, "ocsp", ocsp_main },
                    167: #endif
                    168:        { FUNC_TYPE_GENERAL, "passwd", passwd_main },
                    169:        { FUNC_TYPE_GENERAL, "pkcs7", pkcs7_main },
                    170:        { FUNC_TYPE_GENERAL, "pkcs8", pkcs8_main },
                    171: #if !defined(OPENSSL_NO_DES) && !defined(OPENSSL_NO_SHA1)
                    172:        { FUNC_TYPE_GENERAL, "pkcs12", pkcs12_main },
                    173: #endif
                    174:        { FUNC_TYPE_GENERAL, "pkey", pkey_main },
                    175:        { FUNC_TYPE_GENERAL, "pkeyparam", pkeyparam_main },
                    176:        { FUNC_TYPE_GENERAL, "pkeyutl", pkeyutl_main },
                    177:        { FUNC_TYPE_GENERAL, "prime", prime_main },
                    178:        { FUNC_TYPE_GENERAL, "rand", rand_main },
                    179:        { FUNC_TYPE_GENERAL, "req", req_main },
                    180:        { FUNC_TYPE_GENERAL, "s_client", s_client_main },
                    181:        { FUNC_TYPE_GENERAL, "s_server", s_server_main },
                    182:        { FUNC_TYPE_GENERAL, "s_time", s_time_main },
                    183:        { FUNC_TYPE_GENERAL, "sess_id", sess_id_main },
                    184:        { FUNC_TYPE_GENERAL, "smime", smime_main },
                    185: #ifndef OPENSSL_NO_SPEED
                    186:        { FUNC_TYPE_GENERAL, "speed", speed_main },
                    187: #endif
                    188:        { FUNC_TYPE_GENERAL, "spkac", spkac_main },
                    189:        { FUNC_TYPE_GENERAL, "ts", ts_main },
                    190:        { FUNC_TYPE_GENERAL, "verify", verify_main },
                    191:        { FUNC_TYPE_GENERAL, "version", version_main },
                    192:        { FUNC_TYPE_GENERAL, "x509", x509_main },
                    193:
                    194: #ifndef OPENSSL_NO_DH
                    195:        { FUNC_TYPE_GENERAL, "dh", dh_main },
                    196:        { FUNC_TYPE_GENERAL, "dhparam", dhparam_main },
                    197:        { FUNC_TYPE_GENERAL, "gendh", gendh_main },
                    198: #endif
                    199: #ifndef OPENSSL_NO_DSA
                    200:        { FUNC_TYPE_GENERAL, "dsa", dsa_main },
                    201:        { FUNC_TYPE_GENERAL, "dsaparam", dsaparam_main },
                    202:        { FUNC_TYPE_GENERAL, "gendsa", gendsa_main },
                    203: #endif
                    204: #ifndef OPENSSL_NO_EC
                    205:        { FUNC_TYPE_GENERAL, "ec", ec_main },
                    206:        { FUNC_TYPE_GENERAL, "ecparam", ecparam_main },
                    207: #endif
                    208: #ifndef OPENSSL_NO_RSA
                    209:        { FUNC_TYPE_GENERAL, "genrsa", genrsa_main },
                    210:        { FUNC_TYPE_GENERAL, "rsa", rsa_main },
                    211:        { FUNC_TYPE_GENERAL, "rsautl", rsautl_main },
                    212: #endif
                    213:
                    214:        /* Message Digests. */
                    215: #ifndef OPENSSL_NO_GOST
                    216:        { FUNC_TYPE_MD, "gost-mac", dgst_main },
                    217:        { FUNC_TYPE_MD, "md_gost94", dgst_main },
                    218:        { FUNC_TYPE_MD, "streebog256", dgst_main },
                    219:        { FUNC_TYPE_MD, "streebog512", dgst_main },
1.12      doug      220: #endif
                    221: #ifndef OPENSSL_NO_MD4
                    222:        { FUNC_TYPE_MD, "md4", dgst_main },
1.4       deraadt   223: #endif
                    224: #ifndef OPENSSL_NO_MD5
                    225:        { FUNC_TYPE_MD, "md5", dgst_main },
                    226: #endif
                    227: #ifndef OPENSSL_NO_RIPEMD160
                    228:        { FUNC_TYPE_MD, "ripemd160", dgst_main },
                    229: #endif
                    230: #ifndef OPENSSL_NO_SHA1
                    231:        { FUNC_TYPE_MD, "sha1", dgst_main },
                    232: #endif
                    233: #ifndef OPENSSL_NO_SHA224
                    234:        { FUNC_TYPE_MD, "sha224", dgst_main },
                    235: #endif
                    236: #ifndef OPENSSL_NO_SHA256
                    237:        { FUNC_TYPE_MD, "sha256", dgst_main },
                    238: #endif
                    239: #ifndef OPENSSL_NO_SHA384
                    240:        { FUNC_TYPE_MD, "sha384", dgst_main },
                    241: #endif
                    242: #ifndef OPENSSL_NO_SHA512
                    243:        { FUNC_TYPE_MD, "sha512", dgst_main },
1.28      tb        244: #endif
                    245: #ifndef OPENSSL_NO_SM3
                    246:        { FUNC_TYPE_MD, "sm3", dgst_main },
                    247:        { FUNC_TYPE_MD, "sm3WithRSAEncryption", dgst_main },
1.4       deraadt   248: #endif
                    249: #ifndef OPENSSL_NO_WHIRLPOOL
                    250:        { FUNC_TYPE_MD, "whirlpool", dgst_main },
                    251: #endif
                    252:
                    253:        /* Ciphers. */
                    254:        { FUNC_TYPE_CIPHER, "base64", enc_main },
                    255: #ifndef OPENSSL_NO_AES
                    256:        { FUNC_TYPE_CIPHER, "aes-128-cbc", enc_main },
                    257:        { FUNC_TYPE_CIPHER, "aes-128-ecb", enc_main },
                    258:        { FUNC_TYPE_CIPHER, "aes-192-cbc", enc_main },
                    259:        { FUNC_TYPE_CIPHER, "aes-192-ecb", enc_main },
                    260:        { FUNC_TYPE_CIPHER, "aes-256-cbc", enc_main },
                    261:        { FUNC_TYPE_CIPHER, "aes-256-ecb", enc_main },
                    262: #endif
                    263: #ifndef OPENSSL_NO_BF
                    264:        { FUNC_TYPE_CIPHER, "bf", enc_main },
                    265:        { FUNC_TYPE_CIPHER, "bf-cbc", enc_main },
                    266:        { FUNC_TYPE_CIPHER, "bf-ecb", enc_main },
                    267:        { FUNC_TYPE_CIPHER, "bf-cfb", enc_main },
                    268:        { FUNC_TYPE_CIPHER, "bf-ofb", enc_main },
                    269: #endif
                    270: #ifndef OPENSSL_NO_CAMELLIA
                    271:        { FUNC_TYPE_CIPHER, "camellia-128-cbc", enc_main },
                    272:        { FUNC_TYPE_CIPHER, "camellia-128-ecb", enc_main },
                    273:        { FUNC_TYPE_CIPHER, "camellia-192-cbc", enc_main },
                    274:        { FUNC_TYPE_CIPHER, "camellia-192-ecb", enc_main },
                    275:        { FUNC_TYPE_CIPHER, "camellia-256-cbc", enc_main },
                    276:        { FUNC_TYPE_CIPHER, "camellia-256-ecb", enc_main },
                    277: #endif
                    278: #ifndef OPENSSL_NO_CAST
                    279:        { FUNC_TYPE_CIPHER, "cast", enc_main },
                    280:        { FUNC_TYPE_CIPHER, "cast5-cbc", enc_main },
                    281:        { FUNC_TYPE_CIPHER, "cast5-ecb", enc_main },
                    282:        { FUNC_TYPE_CIPHER, "cast5-cfb", enc_main },
                    283:        { FUNC_TYPE_CIPHER, "cast5-ofb", enc_main },
                    284:        { FUNC_TYPE_CIPHER, "cast-cbc", enc_main },
                    285: #endif
                    286: #ifndef OPENSSL_NO_CHACHA
                    287:        { FUNC_TYPE_CIPHER, "chacha", enc_main },
                    288: #endif
                    289: #ifndef OPENSSL_NO_DES
                    290:        { FUNC_TYPE_CIPHER, "des", enc_main },
                    291:        { FUNC_TYPE_CIPHER, "des3", enc_main },
                    292:        { FUNC_TYPE_CIPHER, "desx", enc_main },
                    293:        { FUNC_TYPE_CIPHER, "des-ecb", enc_main },
                    294:        { FUNC_TYPE_CIPHER, "des-ede", enc_main },
                    295:        { FUNC_TYPE_CIPHER, "des-ede3", enc_main },
                    296:        { FUNC_TYPE_CIPHER, "des-cbc", enc_main },
                    297:        { FUNC_TYPE_CIPHER, "des-ede-cbc", enc_main },
                    298:        { FUNC_TYPE_CIPHER, "des-ede3-cbc", enc_main },
                    299:        { FUNC_TYPE_CIPHER, "des-cfb", enc_main },
                    300:        { FUNC_TYPE_CIPHER, "des-ede-cfb", enc_main },
                    301:        { FUNC_TYPE_CIPHER, "des-ede3-cfb", enc_main },
                    302:        { FUNC_TYPE_CIPHER, "des-ofb", enc_main },
                    303:        { FUNC_TYPE_CIPHER, "des-ede-ofb", enc_main },
                    304:        { FUNC_TYPE_CIPHER, "des-ede3-ofb", enc_main },
                    305: #endif
                    306: #ifndef OPENSSL_NO_IDEA
                    307:        { FUNC_TYPE_CIPHER, "idea", enc_main },
                    308:        { FUNC_TYPE_CIPHER, "idea-cbc", enc_main },
                    309:        { FUNC_TYPE_CIPHER, "idea-ecb", enc_main },
                    310:        { FUNC_TYPE_CIPHER, "idea-cfb", enc_main },
                    311:        { FUNC_TYPE_CIPHER, "idea-ofb", enc_main },
                    312: #endif
                    313: #ifndef OPENSSL_NO_RC2
                    314:        { FUNC_TYPE_CIPHER, "rc2", enc_main },
                    315:        { FUNC_TYPE_CIPHER, "rc2-cbc", enc_main },
                    316:        { FUNC_TYPE_CIPHER, "rc2-ecb", enc_main },
                    317:        { FUNC_TYPE_CIPHER, "rc2-cfb", enc_main },
                    318:        { FUNC_TYPE_CIPHER, "rc2-ofb", enc_main },
                    319:        { FUNC_TYPE_CIPHER, "rc2-64-cbc", enc_main },
                    320:        { FUNC_TYPE_CIPHER, "rc2-40-cbc", enc_main },
                    321: #endif
                    322: #ifndef OPENSSL_NO_RC4
                    323:        { FUNC_TYPE_CIPHER, "rc4", enc_main },
                    324:        { FUNC_TYPE_CIPHER, "rc4-40", enc_main },
1.29      tb        325: #endif
                    326: #ifndef OPENSSL_NO_SM4
                    327:        { FUNC_TYPE_CIPHER, "sm4", enc_main },
                    328:        { FUNC_TYPE_CIPHER, "sm4-ecb", enc_main },
                    329:        { FUNC_TYPE_CIPHER, "sm4-cbc", enc_main },
                    330:        { FUNC_TYPE_CIPHER, "sm4-ofb", enc_main },
                    331:        { FUNC_TYPE_CIPHER, "sm4-cfb", enc_main },
1.4       deraadt   332: #endif
                    333: #ifdef ZLIB
                    334:        { FUNC_TYPE_CIPHER, "zlib", enc_main },
                    335: #endif
                    336:
                    337:        { 0, NULL, NULL }
                    338: };
1.1       jsing     339:
                    340: static void openssl_startup(void);
                    341: static void openssl_shutdown(void);
                    342:
                    343: /* The LHASH callbacks ("hash" & "cmp") have been replaced by functions with the
                    344:  * base prototypes (we cast each variable inside the function to the required
                    345:  * type of "FUNCTION*"). This removes the necessity for macro-generated wrapper
                    346:  * functions. */
                    347:
                    348: static LHASH_OF(FUNCTION) *prog_init(void);
                    349: static int do_cmd(LHASH_OF(FUNCTION) *prog, int argc, char *argv[]);
1.31      joshua    350: static void print_help(void);
1.1       jsing     351: static void list_pkey(BIO * out);
                    352: static void list_cipher(BIO * out);
                    353: static void list_md(BIO * out);
                    354: char *default_config_file = NULL;
                    355:
                    356: CONF *config = NULL;
                    357: BIO *bio_err = NULL;
                    358:
                    359: static void
                    360: openssl_startup(void)
                    361: {
                    362:        signal(SIGPIPE, SIG_IGN);
                    363:
                    364:        OpenSSL_add_all_algorithms();
                    365:        SSL_library_init();
                    366:        SSL_load_error_strings();
                    367:
1.10      bcook     368:        setup_ui();
1.1       jsing     369: }
                    370:
                    371: static void
                    372: openssl_shutdown(void)
                    373: {
                    374:        CONF_modules_unload(1);
1.10      bcook     375:        destroy_ui();
1.1       jsing     376:        OBJ_cleanup();
                    377:        EVP_cleanup();
                    378:        CRYPTO_cleanup_all_ex_data();
                    379:        ERR_remove_thread_state(NULL);
                    380:        ERR_free_strings();
                    381: }
                    382:
                    383: int
                    384: main(int argc, char **argv)
                    385: {
                    386:        ARGS arg;
                    387:        char *to_free = NULL;
1.31      joshua    388:        int i, ret = 0;
1.1       jsing     389:        char *p;
                    390:        LHASH_OF(FUNCTION) * prog = NULL;
                    391:        long errline;
                    392:
                    393:        arg.data = NULL;
                    394:        arg.count = 0;
1.14      deraadt   395:
1.25      deraadt   396:        if (pledge("stdio cpath wpath rpath inet dns proc flock tty", NULL) == -1) {
1.15      deraadt   397:                fprintf(stderr, "openssl: pledge: %s\n", strerror(errno));
1.14      deraadt   398:                exit(1);
                    399:        }
1.1       jsing     400:
                    401:        bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
                    402:        if (bio_err == NULL) {
                    403:                fprintf(stderr, "openssl: failed to initialise bio_err\n");
1.3       bcook     404:                exit(1);
                    405:        }
                    406:
                    407:        if (BIO_sock_init() != 1) {
                    408:                BIO_printf(bio_err, "BIO_sock_init failed\n");
1.1       jsing     409:                exit(1);
                    410:        }
                    411:
                    412:        openssl_startup();
                    413:
                    414:        /* Lets load up our environment a little */
                    415:        p = getenv("OPENSSL_CONF");
                    416:        if (p == NULL) {
                    417:                p = to_free = make_config_name();
                    418:                if (p == NULL) {
                    419:                        BIO_printf(bio_err, "error making config file name\n");
                    420:                        goto end;
                    421:                }
                    422:        }
                    423:
                    424:        default_config_file = p;
                    425:
                    426:        config = NCONF_new(NULL);
                    427:        i = NCONF_load(config, p, &errline);
                    428:        if (i == 0) {
                    429:                if (ERR_GET_REASON(ERR_peek_last_error()) ==
                    430:                    CONF_R_NO_SUCH_FILE) {
                    431:                        BIO_printf(bio_err,
                    432:                            "WARNING: can't open config file: %s\n", p);
                    433:                        ERR_clear_error();
                    434:                        NCONF_free(config);
                    435:                        config = NULL;
                    436:                } else {
                    437:                        ERR_print_errors(bio_err);
                    438:                        NCONF_free(config);
                    439:                        exit(1);
                    440:                }
                    441:        }
                    442:
                    443:        if (!load_config(bio_err, NULL)) {
                    444:                BIO_printf(bio_err, "failed to load configuration\n");
                    445:                goto end;
                    446:        }
                    447:
                    448:        prog = prog_init();
                    449:
                    450:        /*
                    451:         * ok, now check that there are not arguments, if there are, run with
1.31      joshua    452:         * them, shifting the executable name off the front
1.1       jsing     453:         */
1.31      joshua    454:        argc--;
                    455:        argv++;
                    456:
                    457:        if (argc < 1) {
                    458:                print_help();
1.1       jsing     459:                goto end;
                    460:        }
                    461:
1.31      joshua    462:        ret = do_cmd(prog, argc, argv);
                    463:        if (ret < 0)
1.1       jsing     464:                ret = 0;
                    465:
1.26      jsing     466:  end:
1.1       jsing     467:        free(to_free);
                    468:
                    469:        if (config != NULL) {
                    470:                NCONF_free(config);
                    471:                config = NULL;
                    472:        }
                    473:        if (prog != NULL)
                    474:                lh_FUNCTION_free(prog);
                    475:        free(arg.data);
                    476:
                    477:        openssl_shutdown();
                    478:
                    479:        if (bio_err != NULL) {
                    480:                BIO_free(bio_err);
                    481:                bio_err = NULL;
                    482:        }
                    483:        return (ret);
                    484: }
                    485:
                    486: #define LIST_STANDARD_COMMANDS "list-standard-commands"
                    487: #define LIST_MESSAGE_DIGEST_COMMANDS "list-message-digest-commands"
                    488: #define LIST_MESSAGE_DIGEST_ALGORITHMS "list-message-digest-algorithms"
                    489: #define LIST_CIPHER_COMMANDS "list-cipher-commands"
                    490: #define LIST_CIPHER_ALGORITHMS "list-cipher-algorithms"
                    491: #define LIST_PUBLIC_KEY_ALGORITHMS "list-public-key-algorithms"
                    492:
                    493:
                    494: static int
                    495: do_cmd(LHASH_OF(FUNCTION) * prog, int argc, char *argv[])
                    496: {
                    497:        FUNCTION f, *fp;
1.31      joshua    498:        int ret = 1;
1.1       jsing     499:
1.32    ! joshua    500:        if (argc <= 0 || argv[0] == NULL)
        !           501:                return 0;
        !           502:
1.1       jsing     503:        f.name = argv[0];
                    504:        fp = lh_FUNCTION_retrieve(prog, &f);
                    505:        if (fp == NULL) {
                    506:                if (EVP_get_digestbyname(argv[0])) {
                    507:                        f.type = FUNC_TYPE_MD;
                    508:                        f.func = dgst_main;
                    509:                        fp = &f;
                    510:                } else if (EVP_get_cipherbyname(argv[0])) {
                    511:                        f.type = FUNC_TYPE_CIPHER;
                    512:                        f.func = enc_main;
                    513:                        fp = &f;
                    514:                }
                    515:        }
1.32    ! joshua    516:
        !           517:        if (fp != NULL)
        !           518:                return fp->func(argc, argv);
        !           519:
        !           520:        if (strcmp(argv[0], "help") == 0) {
        !           521:                print_help();
        !           522:                return 0;
        !           523:        }
        !           524:
        !           525:        if ((strncmp(argv[0], "no-", 3)) == 0) {
1.1       jsing     526:                BIO *bio_stdout = BIO_new_fp(stdout, BIO_NOCLOSE);
                    527:                f.name = argv[0] + 3;
                    528:                ret = (lh_FUNCTION_retrieve(prog, &f) != NULL);
                    529:                if (!ret)
                    530:                        BIO_printf(bio_stdout, "%s\n", argv[0]);
                    531:                else
                    532:                        BIO_printf(bio_stdout, "%s\n", argv[0] + 3);
                    533:                BIO_free_all(bio_stdout);
1.32    ! joshua    534:                return ret;
        !           535:        }
        !           536:
        !           537:        if ((strcmp(argv[0], LIST_STANDARD_COMMANDS) == 0) ||
1.1       jsing     538:            (strcmp(argv[0], LIST_MESSAGE_DIGEST_COMMANDS) == 0) ||
                    539:            (strcmp(argv[0], LIST_MESSAGE_DIGEST_ALGORITHMS) == 0) ||
                    540:            (strcmp(argv[0], LIST_CIPHER_COMMANDS) == 0) ||
                    541:            (strcmp(argv[0], LIST_CIPHER_ALGORITHMS) == 0) ||
                    542:            (strcmp(argv[0], LIST_PUBLIC_KEY_ALGORITHMS) == 0)) {
                    543:                int list_type;
                    544:                BIO *bio_stdout;
                    545:
                    546:                if (strcmp(argv[0], LIST_STANDARD_COMMANDS) == 0)
                    547:                        list_type = FUNC_TYPE_GENERAL;
                    548:                else if (strcmp(argv[0], LIST_MESSAGE_DIGEST_COMMANDS) == 0)
                    549:                        list_type = FUNC_TYPE_MD;
                    550:                else if (strcmp(argv[0], LIST_MESSAGE_DIGEST_ALGORITHMS) == 0)
                    551:                        list_type = FUNC_TYPE_MD_ALG;
                    552:                else if (strcmp(argv[0], LIST_PUBLIC_KEY_ALGORITHMS) == 0)
                    553:                        list_type = FUNC_TYPE_PKEY;
                    554:                else if (strcmp(argv[0], LIST_CIPHER_ALGORITHMS) == 0)
                    555:                        list_type = FUNC_TYPE_CIPHER_ALG;
                    556:                else            /* strcmp(argv[0],LIST_CIPHER_COMMANDS) == 0 */
                    557:                        list_type = FUNC_TYPE_CIPHER;
                    558:                bio_stdout = BIO_new_fp(stdout, BIO_NOCLOSE);
                    559:
                    560:                if (list_type == FUNC_TYPE_PKEY)
                    561:                        list_pkey(bio_stdout);
                    562:                if (list_type == FUNC_TYPE_MD_ALG)
                    563:                        list_md(bio_stdout);
                    564:                if (list_type == FUNC_TYPE_CIPHER_ALG)
                    565:                        list_cipher(bio_stdout);
                    566:                else {
                    567:                        for (fp = functions; fp->name != NULL; fp++)
                    568:                                if (fp->type == list_type)
                    569:                                        BIO_printf(bio_stdout, "%s\n",
                    570:                                            fp->name);
                    571:                }
                    572:                BIO_free_all(bio_stdout);
1.32    ! joshua    573:                return 0;
1.31      joshua    574:        }
1.32    ! joshua    575:
        !           576:        BIO_printf(bio_err,
        !           577:            "openssl:Error: '%s' is an invalid command.\n",
        !           578:            argv[0]);
        !           579:        print_help();
        !           580:
        !           581:        return 1;
1.31      joshua    582: }
                    583:
                    584: static void
                    585: print_help(void)
                    586: {
                    587:        FUNCTION *fp;
                    588:        int i = 0;
                    589:        int tp = 0;
                    590:        int nl;
                    591:
                    592:        BIO_printf(bio_err, "\nStandard commands");
                    593:        for (fp = functions; fp->name != NULL; fp++) {
                    594:                nl = 0;
1.1       jsing     595: #ifdef OPENSSL_NO_CAMELLIA
1.31      joshua    596:                if (((i++) % 5) == 0)
1.1       jsing     597: #else
1.31      joshua    598:                if (((i++) % 4) == 0)
1.1       jsing     599: #endif
1.31      joshua    600:                {
                    601:                        BIO_printf(bio_err, "\n");
                    602:                        nl = 1;
                    603:                }
                    604:                if (fp->type != tp) {
                    605:                        tp = fp->type;
                    606:                        if (!nl)
1.1       jsing     607:                                BIO_printf(bio_err, "\n");
1.31      joshua    608:                        if (tp == FUNC_TYPE_MD) {
                    609:                                i = 1;
                    610:                                BIO_printf(bio_err,
                    611:                                    "\nMessage Digest commands (see the `dgst' command for more details)\n");
                    612:                        } else if (tp == FUNC_TYPE_CIPHER) {
                    613:                                i = 1;
                    614:                                BIO_printf(bio_err, "\nCipher commands (see the `enc' command for more details)\n");
1.1       jsing     615:                        }
1.31      joshua    616:                }
1.1       jsing     617: #ifdef OPENSSL_NO_CAMELLIA
1.31      joshua    618:                BIO_printf(bio_err, "%-15s", fp->name);
1.1       jsing     619: #else
1.31      joshua    620:                BIO_printf(bio_err, "%-18s", fp->name);
1.1       jsing     621: #endif
                    622:        }
1.31      joshua    623:
                    624:        BIO_printf(bio_err, "\n\n");
1.1       jsing     625: }
                    626:
                    627: static int
                    628: SortFnByName(const void *_f1, const void *_f2)
                    629: {
                    630:        const FUNCTION *f1 = _f1;
                    631:        const FUNCTION *f2 = _f2;
                    632:
                    633:        if (f1->type != f2->type)
                    634:                return f1->type - f2->type;
                    635:        return strcmp(f1->name, f2->name);
                    636: }
                    637:
                    638: static void
                    639: list_pkey(BIO * out)
                    640: {
                    641:        int i;
                    642:
                    643:        for (i = 0; i < EVP_PKEY_asn1_get_count(); i++) {
                    644:                const EVP_PKEY_ASN1_METHOD *ameth;
                    645:                int pkey_id, pkey_base_id, pkey_flags;
                    646:                const char *pinfo, *pem_str;
                    647:                ameth = EVP_PKEY_asn1_get0(i);
                    648:                EVP_PKEY_asn1_get0_info(&pkey_id, &pkey_base_id, &pkey_flags,
                    649:                    &pinfo, &pem_str, ameth);
                    650:                if (pkey_flags & ASN1_PKEY_ALIAS) {
                    651:                        BIO_printf(out, "Name: %s\n",
                    652:                            OBJ_nid2ln(pkey_id));
                    653:                        BIO_printf(out, "\tType: Alias to %s\n",
                    654:                            OBJ_nid2ln(pkey_base_id));
                    655:                } else {
                    656:                        BIO_printf(out, "Name: %s\n", pinfo);
                    657:                        BIO_printf(out, "\tType: %s Algorithm\n",
                    658:                            pkey_flags & ASN1_PKEY_DYNAMIC ?
                    659:                            "External" : "Builtin");
                    660:                        BIO_printf(out, "\tOID: %s\n", OBJ_nid2ln(pkey_id));
                    661:                        if (pem_str == NULL)
                    662:                                pem_str = "(none)";
                    663:                        BIO_printf(out, "\tPEM string: %s\n", pem_str);
                    664:                }
                    665:
                    666:        }
                    667: }
                    668:
                    669: static void
                    670: list_cipher_fn(const EVP_CIPHER * c, const char *from, const char *to,
                    671:     void *arg)
                    672: {
                    673:        if (c)
                    674:                BIO_printf(arg, "%s\n", EVP_CIPHER_name(c));
                    675:        else {
                    676:                if (!from)
                    677:                        from = "<undefined>";
                    678:                if (!to)
                    679:                        to = "<undefined>";
                    680:                BIO_printf(arg, "%s => %s\n", from, to);
                    681:        }
                    682: }
                    683:
                    684: static void
                    685: list_cipher(BIO * out)
                    686: {
                    687:        EVP_CIPHER_do_all_sorted(list_cipher_fn, out);
                    688: }
                    689:
                    690: static void
                    691: list_md_fn(const EVP_MD * m, const char *from, const char *to, void *arg)
                    692: {
                    693:        if (m)
                    694:                BIO_printf(arg, "%s\n", EVP_MD_name(m));
                    695:        else {
                    696:                if (!from)
                    697:                        from = "<undefined>";
                    698:                if (!to)
                    699:                        to = "<undefined>";
                    700:                BIO_printf(arg, "%s => %s\n", from, to);
                    701:        }
                    702: }
                    703:
                    704: static void
                    705: list_md(BIO * out)
                    706: {
                    707:        EVP_MD_do_all_sorted(list_md_fn, out);
                    708: }
                    709:
                    710: static int
                    711: function_cmp(const FUNCTION * a, const FUNCTION * b)
                    712: {
                    713:        return strncmp(a->name, b->name, 8);
                    714: }
                    715:
                    716: static IMPLEMENT_LHASH_COMP_FN(function, FUNCTION)
                    717:
                    718: static unsigned long
                    719: function_hash(const FUNCTION * a)
                    720: {
                    721:        return lh_strhash(a->name);
                    722: }
                    723:
                    724: static IMPLEMENT_LHASH_HASH_FN(function, FUNCTION)
                    725:
                    726: static LHASH_OF(FUNCTION) *
                    727: prog_init(void)
                    728: {
                    729:        LHASH_OF(FUNCTION) * ret;
                    730:        FUNCTION *f;
                    731:        size_t i;
                    732:
                    733:        /* Purely so it looks nice when the user hits ? */
                    734:        for (i = 0, f = functions; f->name != NULL; ++f, ++i)
                    735:                ;
                    736:        qsort(functions, i, sizeof *functions, SortFnByName);
                    737:
                    738:        if ((ret = lh_FUNCTION_new()) == NULL)
                    739:                return (NULL);
                    740:
                    741:        for (f = functions; f->name != NULL; f++)
                    742:                (void) lh_FUNCTION_insert(ret, f);
                    743:        return (ret);
                    744: }