[BACK]Return to pkey.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / openssl

Annotation of src/usr.bin/openssl/pkey.c, Revision 1.7

1.7     ! semarie     1: /* $OpenBSD: pkey.c,v 1.6 2015/10/10 22:28:51 doug Exp $ */
1.1       jsing       2: /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
                      3:  * project 2006
                      4:  */
                      5: /* ====================================================================
                      6:  * Copyright (c) 2006 The OpenSSL Project.  All rights reserved.
                      7:  *
                      8:  * Redistribution and use in source and binary forms, with or without
                      9:  * modification, are permitted provided that the following conditions
                     10:  * are met:
                     11:  *
                     12:  * 1. Redistributions of source code must retain the above copyright
                     13:  *    notice, this list of conditions and the following disclaimer.
                     14:  *
                     15:  * 2. Redistributions in binary form must reproduce the above copyright
                     16:  *    notice, this list of conditions and the following disclaimer in
                     17:  *    the documentation and/or other materials provided with the
                     18:  *    distribution.
                     19:  *
                     20:  * 3. All advertising materials mentioning features or use of this
                     21:  *    software must display the following acknowledgment:
                     22:  *    "This product includes software developed by the OpenSSL Project
                     23:  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
                     24:  *
                     25:  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
                     26:  *    endorse or promote products derived from this software without
                     27:  *    prior written permission. For written permission, please contact
                     28:  *    licensing@OpenSSL.org.
                     29:  *
                     30:  * 5. Products derived from this software may not be called "OpenSSL"
                     31:  *    nor may "OpenSSL" appear in their names without prior written
                     32:  *    permission of the OpenSSL Project.
                     33:  *
                     34:  * 6. Redistributions of any form whatsoever must retain the following
                     35:  *    acknowledgment:
                     36:  *    "This product includes software developed by the OpenSSL Project
                     37:  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
                     38:  *
                     39:  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
                     40:  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     41:  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
                     42:  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
                     43:  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
                     44:  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
                     45:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
                     46:  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     47:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
                     48:  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
                     49:  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
                     50:  * OF THE POSSIBILITY OF SUCH DAMAGE.
                     51:  * ====================================================================
                     52:  *
                     53:  * This product includes cryptographic software written by Eric Young
                     54:  * (eay@cryptsoft.com).  This product includes software written by Tim
                     55:  * Hudson (tjh@cryptsoft.com).
                     56:  *
                     57:  */
                     58:
                     59: #include <stdio.h>
                     60: #include <string.h>
                     61:
                     62: #include "apps.h"
                     63:
                     64: #include <openssl/err.h>
                     65: #include <openssl/evp.h>
                     66: #include <openssl/pem.h>
                     67:
                     68: int
                     69: pkey_main(int argc, char **argv)
                     70: {
                     71:        char **args, *infile = NULL, *outfile = NULL;
                     72:        char *passargin = NULL, *passargout = NULL;
                     73:        BIO *in = NULL, *out = NULL;
                     74:        const EVP_CIPHER *cipher = NULL;
                     75:        int informat, outformat;
                     76:        int pubin = 0, pubout = 0, pubtext = 0, text = 0, noout = 0;
                     77:        EVP_PKEY *pkey = NULL;
                     78:        char *passin = NULL, *passout = NULL;
                     79:        int badarg = 0;
                     80:        int ret = 1;
1.6       doug       81:
                     82:        if (single_execution) {
1.7     ! semarie    83:                if (pledge("stdio rpath wpath cpath tty", NULL) == -1)
1.6       doug       84:                        perror("pledge");
                     85:        }
1.1       jsing      86:
                     87:        informat = FORMAT_PEM;
                     88:        outformat = FORMAT_PEM;
                     89:
                     90:        args = argv + 1;
                     91:        while (!badarg && *args && *args[0] == '-') {
                     92:                if (!strcmp(*args, "-inform")) {
                     93:                        if (args[1]) {
                     94:                                args++;
                     95:                                informat = str2fmt(*args);
                     96:                        } else
                     97:                                badarg = 1;
                     98:                } else if (!strcmp(*args, "-outform")) {
                     99:                        if (args[1]) {
                    100:                                args++;
                    101:                                outformat = str2fmt(*args);
                    102:                        } else
                    103:                                badarg = 1;
                    104:                } else if (!strcmp(*args, "-passin")) {
                    105:                        if (!args[1])
                    106:                                goto bad;
                    107:                        passargin = *(++args);
                    108:                } else if (!strcmp(*args, "-passout")) {
                    109:                        if (!args[1])
                    110:                                goto bad;
                    111:                        passargout = *(++args);
                    112:                }
                    113:                else if (!strcmp(*args, "-in")) {
                    114:                        if (args[1]) {
                    115:                                args++;
                    116:                                infile = *args;
                    117:                        } else
                    118:                                badarg = 1;
                    119:                } else if (!strcmp(*args, "-out")) {
                    120:                        if (args[1]) {
                    121:                                args++;
                    122:                                outfile = *args;
                    123:                        } else
                    124:                                badarg = 1;
                    125:                } else if (strcmp(*args, "-pubin") == 0) {
                    126:                        pubin = 1;
                    127:                        pubout = 1;
                    128:                        pubtext = 1;
                    129:                } else if (strcmp(*args, "-pubout") == 0)
                    130:                        pubout = 1;
                    131:                else if (strcmp(*args, "-text_pub") == 0) {
                    132:                        pubtext = 1;
                    133:                        text = 1;
                    134:                } else if (strcmp(*args, "-text") == 0)
                    135:                        text = 1;
                    136:                else if (strcmp(*args, "-noout") == 0)
                    137:                        noout = 1;
                    138:                else {
                    139:                        cipher = EVP_get_cipherbyname(*args + 1);
                    140:                        if (!cipher) {
                    141:                                BIO_printf(bio_err, "Unknown cipher %s\n",
                    142:                                    *args + 1);
                    143:                                badarg = 1;
                    144:                        }
                    145:                }
                    146:                args++;
                    147:        }
                    148:
                    149:        if (badarg) {
                    150: bad:
                    151:                BIO_printf(bio_err, "Usage pkey [options]\n");
                    152:                BIO_printf(bio_err, "where options are\n");
                    153:                BIO_printf(bio_err, "-in file        input file\n");
                    154:                BIO_printf(bio_err, "-inform X       input format (DER or PEM)\n");
                    155:                BIO_printf(bio_err, "-passin arg     input file pass phrase source\n");
                    156:                BIO_printf(bio_err, "-outform X      output format (DER or PEM)\n");
                    157:                BIO_printf(bio_err, "-out file       output file\n");
                    158:                BIO_printf(bio_err, "-passout arg    output file pass phrase source\n");
                    159:                return 1;
                    160:        }
                    161:
                    162:        if (!app_passwd(bio_err, passargin, passargout, &passin, &passout)) {
                    163:                BIO_printf(bio_err, "Error getting passwords\n");
                    164:                goto end;
                    165:        }
                    166:        if (outfile) {
                    167:                if (!(out = BIO_new_file(outfile, "wb"))) {
                    168:                        BIO_printf(bio_err,
                    169:                            "Can't open output file %s\n", outfile);
                    170:                        goto end;
                    171:                }
                    172:        } else {
                    173:                out = BIO_new_fp(stdout, BIO_NOCLOSE);
                    174:        }
                    175:
                    176:        if (pubin)
                    177:                pkey = load_pubkey(bio_err, infile, informat, 1,
1.5       bcook     178:                    passin, "Public Key");
1.1       jsing     179:        else
1.5       bcook     180:                pkey = load_key(bio_err, infile, informat, 1, passin, "key");
1.1       jsing     181:        if (!pkey)
                    182:                goto end;
                    183:
                    184:        if (!noout) {
                    185:                if (outformat == FORMAT_PEM) {
                    186:                        if (pubout)
                    187:                                PEM_write_bio_PUBKEY(out, pkey);
                    188:                        else
                    189:                                PEM_write_bio_PrivateKey(out, pkey, cipher,
                    190:                                    NULL, 0, NULL, passout);
                    191:                } else if (outformat == FORMAT_ASN1) {
                    192:                        if (pubout)
                    193:                                i2d_PUBKEY_bio(out, pkey);
                    194:                        else
                    195:                                i2d_PrivateKey_bio(out, pkey);
                    196:                } else {
                    197:                        BIO_printf(bio_err, "Bad format specified for key\n");
                    198:                        goto end;
                    199:                }
                    200:
                    201:        }
                    202:        if (text) {
                    203:                if (pubtext)
                    204:                        EVP_PKEY_print_public(out, pkey, 0, NULL);
                    205:                else
                    206:                        EVP_PKEY_print_private(out, pkey, 0, NULL);
                    207:        }
                    208:        ret = 0;
                    209:
                    210: end:
                    211:        EVP_PKEY_free(pkey);
                    212:        BIO_free_all(out);
                    213:        BIO_free(in);
                    214:        free(passin);
                    215:        free(passout);
                    216:
                    217:        return ret;
                    218: }