[thirdparty/openssl.git] / apps / crl2p7.c

/* apps/crl2p7.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 *
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 *
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 *
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 *
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

/*
 * This was written by Gordon Chaffee <chaffee@plateau.cs.berkeley.edu> and
 * donated 'to the cause' along with lots and lots of other fixes to the
 * library.
 */

#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include "apps.h"
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/x509.h>
#include <openssl/pkcs7.h>
#include <openssl/pem.h>
#include <openssl/objects.h>

static int add_certs_from_file(STACK_OF(X509) *stack, char *certfile);
#undef PROG
#define PROG    crl2pkcs7_main

/*-
 * -inform arg  - input format - default PEM (DER or PEM)
 * -outform arg - output format - default PEM
 * -in arg      - input file - default stdin
 * -out arg     - output file - default stdout
 */

int MAIN(int, char **);

int MAIN(int argc, char **argv)
{
    int i, badops = 0;
    BIO *in = NULL, *out = NULL;
    int informat, outformat;
    char *infile, *outfile, *prog, *certfile;
    PKCS7 *p7 = NULL;
    PKCS7_SIGNED *p7s = NULL;
    X509_CRL *crl = NULL;
    STACK_OF(OPENSSL_STRING) *certflst = NULL;
    STACK_OF(X509_CRL) *crl_stack = NULL;
    STACK_OF(X509) *cert_stack = NULL;
    int ret = 1, nocrl = 0;

    apps_startup();

    if (bio_err == NULL)
        if ((bio_err = BIO_new(BIO_s_file())) != NULL)
            BIO_set_fp(bio_err, stderr, BIO_NOCLOSE | BIO_FP_TEXT);

    infile = NULL;
    outfile = NULL;
    informat = FORMAT_PEM;
    outformat = FORMAT_PEM;

    prog = argv[0];
    argc--;
    argv++;
    while (argc >= 1) {
        if (strcmp(*argv, "-inform") == 0) {
            if (--argc < 1)
                goto bad;
            informat = str2fmt(*(++argv));
        } else if (strcmp(*argv, "-outform") == 0) {
            if (--argc < 1)
                goto bad;
            outformat = str2fmt(*(++argv));
        } else if (strcmp(*argv, "-in") == 0) {
            if (--argc < 1)
                goto bad;
            infile = *(++argv);
        } else if (strcmp(*argv, "-nocrl") == 0) {
            nocrl = 1;
        } else if (strcmp(*argv, "-out") == 0) {
            if (--argc < 1)
                goto bad;
            outfile = *(++argv);
        } else if (strcmp(*argv, "-certfile") == 0) {
            if (--argc < 1)
                goto bad;
            if (!certflst)
                certflst = sk_OPENSSL_STRING_new_null();
            if (!certflst)
                goto end;
            if (!sk_OPENSSL_STRING_push(certflst, *(++argv))) {
                sk_OPENSSL_STRING_free(certflst);
                goto end;
            }
        } else {
            BIO_printf(bio_err, "unknown option %s\n", *argv);
            badops = 1;
            break;
        }
        argc--;
        argv++;
    }

    if (badops) {
 bad:
        BIO_printf(bio_err, "%s [options] <infile >outfile\n", prog);
        BIO_printf(bio_err, "where options are\n");
        BIO_printf(bio_err, " -inform arg    input format - DER or PEM\n");
        BIO_printf(bio_err, " -outform arg   output format - DER or PEM\n");
        BIO_printf(bio_err, " -in arg        input file\n");
        BIO_printf(bio_err, " -out arg       output file\n");
        BIO_printf(bio_err,
                   " -certfile arg  certificates file of chain to a trusted CA\n");
        BIO_printf(bio_err, "                (can be used more than once)\n");
        BIO_printf(bio_err,
                   " -nocrl         no crl to load, just certs from '-certfile'\n");
        ret = 1;
        goto end;
    }

    ERR_load_crypto_strings();

    in = BIO_new(BIO_s_file());
    out = BIO_new(BIO_s_file());
    if ((in == NULL) || (out == NULL)) {
        ERR_print_errors(bio_err);
        goto end;
    }

    if (!nocrl) {
        if (infile == NULL)
            BIO_set_fp(in, stdin, BIO_NOCLOSE);
        else {
            if (BIO_read_filename(in, infile) <= 0) {
                perror(infile);
                goto end;
            }
        }

        if (informat == FORMAT_ASN1)
            crl = d2i_X509_CRL_bio(in, NULL);
        else if (informat == FORMAT_PEM)
            crl = PEM_read_bio_X509_CRL(in, NULL, NULL, NULL);
        else {
            BIO_printf(bio_err, "bad input format specified for input crl\n");
            goto end;
        }
        if (crl == NULL) {
            BIO_printf(bio_err, "unable to load CRL\n");
            ERR_print_errors(bio_err);
            goto end;
        }
    }

    if ((p7 = PKCS7_new()) == NULL)
        goto end;
    if ((p7s = PKCS7_SIGNED_new()) == NULL)
        goto end;
    p7->type = OBJ_nid2obj(NID_pkcs7_signed);
    p7->d.sign = p7s;
    p7s->contents->type = OBJ_nid2obj(NID_pkcs7_data);

    if (!ASN1_INTEGER_set(p7s->version, 1))
        goto end;
    if ((crl_stack = sk_X509_CRL_new_null()) == NULL)
        goto end;
    p7s->crl = crl_stack;
    if (crl != NULL) {
        sk_X509_CRL_push(crl_stack, crl);
        crl = NULL;             /* now part of p7 for OPENSSL_freeing */
    }

    if ((cert_stack = sk_X509_new_null()) == NULL)
        goto end;
    p7s->cert = cert_stack;

    if (certflst)
        for (i = 0; i < sk_OPENSSL_STRING_num(certflst); i++) {
            certfile = sk_OPENSSL_STRING_value(certflst, i);
            if (add_certs_from_file(cert_stack, certfile) < 0) {
                BIO_printf(bio_err, "error loading certificates\n");
                ERR_print_errors(bio_err);
                goto end;
            }
        }

    sk_OPENSSL_STRING_free(certflst);

    if (outfile == NULL) {
        BIO_set_fp(out, stdout, BIO_NOCLOSE);
#ifdef OPENSSL_SYS_VMS
        {
            BIO *tmpbio = BIO_new(BIO_f_linebuffer());
            out = BIO_push(tmpbio, out);
        }
#endif
    } else {
        if (BIO_write_filename(out, outfile) <= 0) {
            perror(outfile);
            goto end;
        }
    }

    if (outformat == FORMAT_ASN1)
        i = i2d_PKCS7_bio(out, p7);
    else if (outformat == FORMAT_PEM)
        i = PEM_write_bio_PKCS7(out, p7);
    else {
        BIO_printf(bio_err, "bad output format specified for outfile\n");
        goto end;
    }
    if (!i) {
        BIO_printf(bio_err, "unable to write pkcs7 object\n");
        ERR_print_errors(bio_err);
        goto end;
    }
    ret = 0;
 end:
    BIO_free(in);
    BIO_free_all(out);
    PKCS7_free(p7);
    if (crl != NULL)
        X509_CRL_free(crl);

    apps_shutdown();
    OPENSSL_EXIT(ret);
}

/*-
 *----------------------------------------------------------------------
 * int add_certs_from_file
 *
 *      Read a list of certificates to be checked from a file.
 *
 * Results:
 *      number of certs added if successful, -1 if not.
 *----------------------------------------------------------------------
 */
static int add_certs_from_file(STACK_OF(X509) *stack, char *certfile)
{
    BIO *in = NULL;
    int count = 0;
    int ret = -1;
    STACK_OF(X509_INFO) *sk = NULL;
    X509_INFO *xi;

    in = BIO_new(BIO_s_file());
    if ((in == NULL) || (BIO_read_filename(in, certfile) <= 0)) {
        BIO_printf(bio_err, "error opening the file, %s\n", certfile);
        goto end;
    }

    /* This loads from a file, a stack of x509/crl/pkey sets */
    sk = PEM_X509_INFO_read_bio(in, NULL, NULL, NULL);
    if (sk == NULL) {
        BIO_printf(bio_err, "error reading the file, %s\n", certfile);
        goto end;
    }

    /* scan over it and pull out the CRL's */
    while (sk_X509_INFO_num(sk)) {
        xi = sk_X509_INFO_shift(sk);
        if (xi->x509 != NULL) {
            sk_X509_push(stack, xi->x509);
            xi->x509 = NULL;
            count++;
        }
        X509_INFO_free(xi);
    }

    ret = count;
 end:
    /* never need to OPENSSL_free x */
    BIO_free(in);
    if (sk != NULL)
        sk_X509_INFO_free(sk);
    return (ret);
}
Commit	Line	Data
d02b48c6	1	/* apps/crl2p7.c */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
0f113f3e	8	*
d02b48c6 RE	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
0f113f3e	15	*
d02b48c6 RE	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
0f113f3e	22	*
d02b48c6 RE	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
0f113f3e	37	* 4. If you include any Windows specific code (or a derivative thereof) from
d02b48c6 RE	38	* the apps directory (application code) you must include an acknowledgement:
d02b48c6 RE	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
0f113f3e	40	*
d02b48c6 RE	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
0f113f3e	52	*
d02b48c6 RE	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
0f113f3e MC	59	/*
	60	* This was written by Gordon Chaffee <chaffee@plateau.cs.berkeley.edu> and
	61	* donated 'to the cause' along with lots and lots of other fixes to the
	62	* library.
	63	*/
d02b48c6 RE	64
	65	#include <stdio.h>
	66	#include <string.h>
	67	#include <sys/types.h>
d02b48c6	68	#include "apps.h"
ec577822 BM	69	#include <openssl/err.h>
	70	#include <openssl/evp.h>
	71	#include <openssl/x509.h>
	72	#include <openssl/pkcs7.h>
	73	#include <openssl/pem.h>
	74	#include <openssl/objects.h>
d02b48c6	75
f73e07cf	76	static int add_certs_from_file(STACK_OF(X509) stack, char certfile);
d02b48c6	77	#undef PROG
0f113f3e	78	#define PROG crl2pkcs7_main
d02b48c6	79
1d97c843	80	/*-
0f113f3e	81	* -inform arg - input format - default PEM (DER or PEM)
d02b48c6	82	* -outform arg - output format - default PEM
0f113f3e MC	83	* -in arg - input file - default stdin
0f113f3e MC	84	* -out arg - output file - default stdout
d02b48c6 RE	85	*/
d02b48c6 RE	86
667ac4ec RE	87	int MAIN(int, char **);
667ac4ec RE	88
6b691a5c	89	int MAIN(int argc, char **argv)
0f113f3e MC	90	{
	91	int i, badops = 0;
	92	BIO in = NULL, out = NULL;
	93	int informat, outformat;
	94	char infile, outfile, prog, certfile;
	95	PKCS7 *p7 = NULL;
	96	PKCS7_SIGNED *p7s = NULL;
	97	X509_CRL *crl = NULL;
	98	STACK_OF(OPENSSL_STRING) *certflst = NULL;
	99	STACK_OF(X509_CRL) *crl_stack = NULL;
	100	STACK_OF(X509) *cert_stack = NULL;
	101	int ret = 1, nocrl = 0;
d02b48c6	102
0f113f3e	103	apps_startup();
d02b48c6	104
0f113f3e MC	105	if (bio_err == NULL)
	106	if ((bio_err = BIO_new(BIO_s_file())) != NULL)
	107	BIO_set_fp(bio_err, stderr, BIO_NOCLOSE \| BIO_FP_TEXT);
d02b48c6	108
0f113f3e MC	109	infile = NULL;
	110	outfile = NULL;
	111	informat = FORMAT_PEM;
	112	outformat = FORMAT_PEM;
d02b48c6	113
0f113f3e MC	114	prog = argv[0];
	115	argc--;
	116	argv++;
	117	while (argc >= 1) {
	118	if (strcmp(*argv, "-inform") == 0) {
	119	if (--argc < 1)
	120	goto bad;
	121	informat = str2fmt(*(++argv));
	122	} else if (strcmp(*argv, "-outform") == 0) {
	123	if (--argc < 1)
	124	goto bad;
	125	outformat = str2fmt(*(++argv));
	126	} else if (strcmp(*argv, "-in") == 0) {
	127	if (--argc < 1)
	128	goto bad;
	129	infile = *(++argv);
	130	} else if (strcmp(*argv, "-nocrl") == 0) {
	131	nocrl = 1;
	132	} else if (strcmp(*argv, "-out") == 0) {
	133	if (--argc < 1)
	134	goto bad;
	135	outfile = *(++argv);
	136	} else if (strcmp(*argv, "-certfile") == 0) {
	137	if (--argc < 1)
	138	goto bad;
	139	if (!certflst)
	140	certflst = sk_OPENSSL_STRING_new_null();
	141	if (!certflst)
	142	goto end;
	143	if (!sk_OPENSSL_STRING_push(certflst, *(++argv))) {
	144	sk_OPENSSL_STRING_free(certflst);
	145	goto end;
	146	}
	147	} else {
	148	BIO_printf(bio_err, "unknown option %s\n", *argv);
	149	badops = 1;
	150	break;
	151	}
	152	argc--;
	153	argv++;
	154	}
d02b48c6	155
0f113f3e MC	156	if (badops) {
	157	bad:
	158	BIO_printf(bio_err, "%s [options] <infile >outfile\n", prog);
	159	BIO_printf(bio_err, "where options are\n");
	160	BIO_printf(bio_err, " -inform arg input format - DER or PEM\n");
	161	BIO_printf(bio_err, " -outform arg output format - DER or PEM\n");
	162	BIO_printf(bio_err, " -in arg input file\n");
	163	BIO_printf(bio_err, " -out arg output file\n");
	164	BIO_printf(bio_err,
	165	" -certfile arg certificates file of chain to a trusted CA\n");
	166	BIO_printf(bio_err, " (can be used more than once)\n");
	167	BIO_printf(bio_err,
	168	" -nocrl no crl to load, just certs from '-certfile'\n");
	169	ret = 1;
	170	goto end;
	171	}
d02b48c6	172
0f113f3e	173	ERR_load_crypto_strings();
d02b48c6	174
0f113f3e MC	175	in = BIO_new(BIO_s_file());
	176	out = BIO_new(BIO_s_file());
	177	if ((in == NULL) \|\| (out == NULL)) {
	178	ERR_print_errors(bio_err);
	179	goto end;
	180	}
d02b48c6	181
0f113f3e MC	182	if (!nocrl) {
	183	if (infile == NULL)
	184	BIO_set_fp(in, stdin, BIO_NOCLOSE);
	185	else {
	186	if (BIO_read_filename(in, infile) <= 0) {
	187	perror(infile);
	188	goto end;
	189	}
	190	}
d02b48c6	191
0f113f3e MC	192	if (informat == FORMAT_ASN1)
	193	crl = d2i_X509_CRL_bio(in, NULL);
	194	else if (informat == FORMAT_PEM)
	195	crl = PEM_read_bio_X509_CRL(in, NULL, NULL, NULL);
	196	else {
	197	BIO_printf(bio_err, "bad input format specified for input crl\n");
	198	goto end;
	199	}
	200	if (crl == NULL) {
	201	BIO_printf(bio_err, "unable to load CRL\n");
	202	ERR_print_errors(bio_err);
	203	goto end;
	204	}
	205	}
d02b48c6	206
0f113f3e MC	207	if ((p7 = PKCS7_new()) == NULL)
	208	goto end;
	209	if ((p7s = PKCS7_SIGNED_new()) == NULL)
	210	goto end;
	211	p7->type = OBJ_nid2obj(NID_pkcs7_signed);
	212	p7->d.sign = p7s;
	213	p7s->contents->type = OBJ_nid2obj(NID_pkcs7_data);
d02b48c6	214
0f113f3e MC	215	if (!ASN1_INTEGER_set(p7s->version, 1))
	216	goto end;
	217	if ((crl_stack = sk_X509_CRL_new_null()) == NULL)
	218	goto end;
	219	p7s->crl = crl_stack;
	220	if (crl != NULL) {
	221	sk_X509_CRL_push(crl_stack, crl);
	222	crl = NULL; /* now part of p7 for OPENSSL_freeing */
	223	}
d02b48c6	224
0f113f3e MC	225	if ((cert_stack = sk_X509_new_null()) == NULL)
	226	goto end;
	227	p7s->cert = cert_stack;
9fe84296	228
0f113f3e MC	229	if (certflst)
	230	for (i = 0; i < sk_OPENSSL_STRING_num(certflst); i++) {
	231	certfile = sk_OPENSSL_STRING_value(certflst, i);
	232	if (add_certs_from_file(cert_stack, certfile) < 0) {
	233	BIO_printf(bio_err, "error loading certificates\n");
	234	ERR_print_errors(bio_err);
	235	goto end;
	236	}
	237	}
d02b48c6	238
0f113f3e MC	239	sk_OPENSSL_STRING_free(certflst);
	240
	241	if (outfile == NULL) {
	242	BIO_set_fp(out, stdout, BIO_NOCLOSE);
bc36ee62	243	#ifdef OPENSSL_SYS_VMS
0f113f3e MC	244	{
	245	BIO *tmpbio = BIO_new(BIO_f_linebuffer());
	246	out = BIO_push(tmpbio, out);
	247	}
645749ef	248	#endif
0f113f3e MC	249	} else {
	250	if (BIO_write_filename(out, outfile) <= 0) {
	251	perror(outfile);
	252	goto end;
	253	}
	254	}
d02b48c6	255
0f113f3e MC	256	if (outformat == FORMAT_ASN1)
	257	i = i2d_PKCS7_bio(out, p7);
	258	else if (outformat == FORMAT_PEM)
	259	i = PEM_write_bio_PKCS7(out, p7);
	260	else {
	261	BIO_printf(bio_err, "bad output format specified for outfile\n");
	262	goto end;
	263	}
	264	if (!i) {
	265	BIO_printf(bio_err, "unable to write pkcs7 object\n");
	266	ERR_print_errors(bio_err);
	267	goto end;
	268	}
	269	ret = 0;
	270	end:
ca3a82c3 RS	271	BIO_free(in);
ca3a82c3 RS	272	BIO_free_all(out);
e0e920b1	273	PKCS7_free(p7);
0f113f3e MC	274	if (crl != NULL)
0f113f3e MC	275	X509_CRL_free(crl);
d02b48c6	276
0f113f3e MC	277	apps_shutdown();
	278	OPENSSL_EXIT(ret);
	279	}
d02b48c6	280
c80fd6b2	281	/*-
d02b48c6 RE	282	*----------------------------------------------------------------------
	283	* int add_certs_from_file
	284	*
0f113f3e	285	* Read a list of certificates to be checked from a file.
d02b48c6 RE	286	*
d02b48c6 RE	287	* Results:
0f113f3e	288	* number of certs added if successful, -1 if not.
d02b48c6 RE	289	*----------------------------------------------------------------------
d02b48c6 RE	290	*/
6b691a5c	291	static int add_certs_from_file(STACK_OF(X509) stack, char certfile)
0f113f3e MC	292	{
	293	BIO *in = NULL;
	294	int count = 0;
	295	int ret = -1;
	296	STACK_OF(X509_INFO) *sk = NULL;
	297	X509_INFO *xi;
d02b48c6	298
0f113f3e MC	299	in = BIO_new(BIO_s_file());
	300	if ((in == NULL) \|\| (BIO_read_filename(in, certfile) <= 0)) {
	301	BIO_printf(bio_err, "error opening the file, %s\n", certfile);
	302	goto end;
	303	}
d02b48c6	304
0f113f3e MC	305	/* This loads from a file, a stack of x509/crl/pkey sets */
	306	sk = PEM_X509_INFO_read_bio(in, NULL, NULL, NULL);
	307	if (sk == NULL) {
	308	BIO_printf(bio_err, "error reading the file, %s\n", certfile);
	309	goto end;
	310	}
d02b48c6	311
0f113f3e MC	312	/* scan over it and pull out the CRL's */
	313	while (sk_X509_INFO_num(sk)) {
	314	xi = sk_X509_INFO_shift(sk);
	315	if (xi->x509 != NULL) {
	316	sk_X509_push(stack, xi->x509);
	317	xi->x509 = NULL;
	318	count++;
	319	}
	320	X509_INFO_free(xi);
	321	}
d02b48c6	322
0f113f3e MC	323	ret = count;
	324	end:
	325	/* never need to OPENSSL_free x */
ca3a82c3	326	BIO_free(in);
0f113f3e MC	327	if (sk != NULL)
	328	sk_X509_INFO_free(sk);
	329	return (ret);
	330	}