[thirdparty/openssl.git] / apps / dgst.c

/* apps/dgst.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "apps.h"
#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/objects.h>
#include <openssl/x509.h>
#include <openssl/pem.h>

#undef BUFSIZE
#define BUFSIZE	1024*8

#undef PROG
#define PROG	dgst_main

int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
	  EVP_PKEY *key, unsigned char *sigin, int siglen, const char *title,
	  const char *file);

int MAIN(int, char **);

int MAIN(int argc, char **argv)
	{
	ENGINE *e = NULL;
	unsigned char *buf=NULL;
	int i,err=0;
	const EVP_MD *md=NULL,*m;
	BIO *in=NULL,*inp;
	BIO *bmd=NULL;
	BIO *out = NULL;
	const char *name;
#define PROG_NAME_SIZE  39
	char pname[PROG_NAME_SIZE+1];
	int separator=0;
	int debug=0;
	int keyform=FORMAT_PEM;
	const char *outfile = NULL, *keyfile = NULL;
	const char *sigfile = NULL, *randfile = NULL;
	int out_bin = -1, want_pub = 0, do_verify = 0;
	EVP_PKEY *sigkey = NULL;
	unsigned char *sigbuf = NULL;
	int siglen = 0;
	char *engine=NULL;

	apps_startup();

	if ((buf=(unsigned char *)OPENSSL_malloc(BUFSIZE)) == NULL)
		{
		BIO_printf(bio_err,"out of memory\n");
		goto end;
		}
	if (bio_err == NULL)
		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);

	if (!load_config(bio_err, NULL))
		goto end;

	/* first check the program name */
	program_name(argv[0],pname,sizeof pname);

	md=EVP_get_digestbyname(pname);

	argc--;
	argv++;
	while (argc > 0)
		{
		if ((*argv)[0] != '-') break;
		if (strcmp(*argv,"-c") == 0)
			separator=1;
		else if (strcmp(*argv,"-rand") == 0)
			{
			if (--argc < 1) break;
			randfile=*(++argv);
			}
		else if (strcmp(*argv,"-out") == 0)
			{
			if (--argc < 1) break;
			outfile=*(++argv);
			}
		else if (strcmp(*argv,"-sign") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			}
		else if (strcmp(*argv,"-verify") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			want_pub = 1;
			do_verify = 1;
			}
		else if (strcmp(*argv,"-prverify") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			do_verify = 1;
			}
		else if (strcmp(*argv,"-signature") == 0)
			{
			if (--argc < 1) break;
			sigfile=*(++argv);
			}
		else if (strcmp(*argv,"-keyform") == 0)
			{
			if (--argc < 1) break;
			keyform=str2fmt(*(++argv));
			}
		else if (strcmp(*argv,"-engine") == 0)
			{
			if (--argc < 1) break;
			engine= *(++argv);
			}
		else if (strcmp(*argv,"-hex") == 0)
			out_bin = 0;
		else if (strcmp(*argv,"-binary") == 0)
			out_bin = 1;
		else if (strcmp(*argv,"-d") == 0)
			debug=1;
		else if ((m=EVP_get_digestbyname(&((*argv)[1]))) != NULL)
			md=m;
		else
			break;
		argc--;
		argv++;
		}

	if (md == NULL)
		md=EVP_md5();

	if(do_verify && !sigfile) {
		BIO_printf(bio_err, "No signature to verify: use the -signature option\n");
		err = 1; 
		goto end;
	}

	if ((argc > 0) && (argv[0][0] == '-')) /* bad option */
		{
		BIO_printf(bio_err,"unknown option '%s'\n",*argv);
		BIO_printf(bio_err,"options are\n");
		BIO_printf(bio_err,"-c              to output the digest with separating colons\n");
		BIO_printf(bio_err,"-d              to output debug info\n");
		BIO_printf(bio_err,"-hex            output as hex dump\n");
		BIO_printf(bio_err,"-binary         output in binary form\n");
		BIO_printf(bio_err,"-sign   file    sign digest using private key in file\n");
		BIO_printf(bio_err,"-verify file    verify a signature using public key in file\n");
		BIO_printf(bio_err,"-prverify file  verify a signature using private key in file\n");
		BIO_printf(bio_err,"-keyform arg    key file format (PEM or ENGINE)\n");
		BIO_printf(bio_err,"-signature file signature to verify\n");
		BIO_printf(bio_err,"-binary         output in binary form\n");
		BIO_printf(bio_err,"-engine e       use engine e, possibly a hardware device.\n");

		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm (default)\n",
			LN_md5,LN_md5);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_md4,LN_md4);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_md2,LN_md2);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_sha1,LN_sha1);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_sha,LN_sha);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_mdc2,LN_mdc2);
		BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
			LN_ripemd160,LN_ripemd160);
		err=1;
		goto end;
		}

        e = setup_engine(bio_err, engine, 0);

	in=BIO_new(BIO_s_file());
	bmd=BIO_new(BIO_f_md());
	if (debug)
		{
		BIO_set_callback(in,BIO_debug_callback);
		/* needed for windows 3.1 */
		BIO_set_callback_arg(in,bio_err);
		}

	if ((in == NULL) || (bmd == NULL))
		{
		ERR_print_errors(bio_err);
		goto end;
		}

	if(out_bin == -1) {
		if(keyfile) out_bin = 1;
		else out_bin = 0;
	}

	if(randfile)
		app_RAND_load_file(randfile, bio_err, 0);

	if(outfile) {
		if(out_bin)
			out = BIO_new_file(outfile, "wb");
		else    out = BIO_new_file(outfile, "w");
	} else {
		out = BIO_new_fp(stdout, BIO_NOCLOSE);
#ifdef OPENSSL_SYS_VMS
		{
		BIO *tmpbio = BIO_new(BIO_f_linebuffer());
		out = BIO_push(tmpbio, out);
		}
#endif
	}

	if(!out) {
		BIO_printf(bio_err, "Error opening output file %s\n", 
					outfile ? outfile : "(stdout)");
		ERR_print_errors(bio_err);
		goto end;
	}

	if(keyfile)
		{
		if (want_pub)
			sigkey = load_pubkey(bio_err, keyfile, keyform, 0, NULL,
				e, "key file");
		else
			sigkey = load_key(bio_err, keyfile, keyform, 0, NULL,
				e, "key file");
		if (!sigkey)
			{
			/* load_[pub]key() has already printed an appropriate
			   message */
			goto end;
			}
		}

	if(sigfile && sigkey) {
		BIO *sigbio;
		sigbio = BIO_new_file(sigfile, "rb");
		siglen = EVP_PKEY_size(sigkey);
		sigbuf = OPENSSL_malloc(siglen);
		if(!sigbio) {
			BIO_printf(bio_err, "Error opening signature file %s\n",
								sigfile);
			ERR_print_errors(bio_err);
			goto end;
		}
		siglen = BIO_read(sigbio, sigbuf, siglen);
		BIO_free(sigbio);
		if(siglen <= 0) {
			BIO_printf(bio_err, "Error reading signature file %s\n",
								sigfile);
			ERR_print_errors(bio_err);
			goto end;
		}
	}
		

	/* we use md as a filter, reading from 'in' */
	BIO_set_md(bmd,md);
	inp=BIO_push(bmd,in);

	if (argc == 0)
		{
		BIO_set_fp(in,stdin,BIO_NOCLOSE);
		err=do_fp(out, buf,inp,separator, out_bin, sigkey, sigbuf,
			  siglen,"","(stdin)");
		}
	else
		{
		name=OBJ_nid2sn(md->type);
		for (i=0; i<argc; i++)
			{
			char *tmp,*tofree=NULL;
			int r;

			if (BIO_read_filename(in,argv[i]) <= 0)
				{
				perror(argv[i]);
				err++;
				continue;
				}
			if(!out_bin)
				{
				tmp=tofree=OPENSSL_malloc(strlen(name)+strlen(argv[i])+5);
				sprintf(tmp,"%s(%s)= ",name,argv[i]);
				}
			else
				tmp="";
			r=do_fp(out,buf,inp,separator,out_bin,sigkey,sigbuf,
				siglen,tmp,argv[i]);
			if(r)
			    err=r;
			if(tofree)
				OPENSSL_free(tofree);
			(void)BIO_reset(bmd);
			}
		}
end:
	if (buf != NULL)
		{
		memset(buf,0,BUFSIZE);
		OPENSSL_free(buf);
		}
	if (in != NULL) BIO_free(in);
	BIO_free_all(out);
	EVP_PKEY_free(sigkey);
	if(sigbuf) OPENSSL_free(sigbuf);
	if (bmd != NULL) BIO_free(bmd);
	apps_shutdown();
	EXIT(err);
	}

int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
	  EVP_PKEY *key, unsigned char *sigin, int siglen, const char *title,
	  const char *file)
	{
	int len;
	int i;

	for (;;)
		{
		i=BIO_read(bp,(char *)buf,BUFSIZE);
		if(i < 0)
			{
			BIO_printf(bio_err, "Read Error in %s\n",file);
			ERR_print_errors(bio_err);
			return 1;
			}
		if (i == 0) break;
		}
	if(sigin)
		{
		EVP_MD_CTX *ctx;
		BIO_get_md_ctx(bp, &ctx);
		i = EVP_VerifyFinal(ctx, sigin, (unsigned int)siglen, key); 
		if(i > 0)
			BIO_printf(out, "Verified OK\n");
		else if(i == 0)
			{
			BIO_printf(out, "Verification Failure\n");
			return 1;
			}
		else
			{
			BIO_printf(bio_err, "Error Verifying Data\n");
			ERR_print_errors(bio_err);
			return 1;
			}
		return 0;
		}
	if(key)
		{
		EVP_MD_CTX *ctx;
		BIO_get_md_ctx(bp, &ctx);
		if(!EVP_SignFinal(ctx, buf, (unsigned int *)&len, key)) 
			{
			BIO_printf(bio_err, "Error Signing Data\n");
			ERR_print_errors(bio_err);
			return 1;
			}
		}
	else
		len=BIO_gets(bp,(char *)buf,BUFSIZE);

	if(binout) BIO_write(out, buf, len);
	else 
		{
		BIO_write(out,title,strlen(title));
		for (i=0; i<len; i++)
			{
			if (sep && (i != 0))
				BIO_printf(out, ":");
			BIO_printf(out, "%02x",buf[i]);
			}
		BIO_printf(out, "\n");
		}
	return 0;
	}
Commit	Line	Data
d02b48c6	1	/* apps/dgst.c */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	#include <stdio.h>
	60	#include <string.h>
	61	#include <stdlib.h>
	62	#include "apps.h"
ec577822 BM	63	#include <openssl/bio.h>
	64	#include <openssl/err.h>
	65	#include <openssl/evp.h>
	66	#include <openssl/objects.h>
	67	#include <openssl/x509.h>
	68	#include <openssl/pem.h>
d02b48c6 RE	69
	70	#undef BUFSIZE
	71	#define BUFSIZE 1024*8
	72
	73	#undef PROG
	74	#define PROG dgst_main
	75
d15711ef BL	76	int do_fp(BIO out, unsigned char buf, BIO *bp, int sep, int binout,
	77	EVP_PKEY key, unsigned char sigin, int siglen, const char *title,
	78	const char *file);
667ac4ec RE	79
	80	int MAIN(int, char **);
	81
6b691a5c	82	int MAIN(int argc, char **argv)
d02b48c6	83	{
5270e702	84	ENGINE *e = NULL;
d02b48c6 RE	85	unsigned char *buf=NULL;
d02b48c6 RE	86	int i,err=0;
e778802f	87	const EVP_MD md=NULL,m;
d02b48c6 RE	88	BIO in=NULL,inp;
d02b48c6 RE	89	BIO *bmd=NULL;
7df1c720	90	BIO *out = NULL;
e778802f	91	const char *name;
dfee50ec RL	92	#define PROG_NAME_SIZE 39
dfee50ec RL	93	char pname[PROG_NAME_SIZE+1];
d02b48c6 RE	94	int separator=0;
d02b48c6 RE	95	int debug=0;
32d862ed	96	int keyform=FORMAT_PEM;
7df1c720 DSH	97	const char outfile = NULL, keyfile = NULL;
7df1c720 DSH	98	const char sigfile = NULL, randfile = NULL;
92125ffa	99	int out_bin = -1, want_pub = 0, do_verify = 0;
7df1c720 DSH	100	EVP_PKEY *sigkey = NULL;
7df1c720 DSH	101	unsigned char *sigbuf = NULL;
688fbf54	102	int siglen = 0;
5270e702	103	char *engine=NULL;
d02b48c6 RE	104
	105	apps_startup();
	106
26a3a48d	107	if ((buf=(unsigned char *)OPENSSL_malloc(BUFSIZE)) == NULL)
d02b48c6 RE	108	{
	109	BIO_printf(bio_err,"out of memory\n");
	110	goto end;
	111	}
	112	if (bio_err == NULL)
	113	if ((bio_err=BIO_new(BIO_s_file())) != NULL)
58964a49	114	BIO_set_fp(bio_err,stderr,BIO_NOCLOSE\|BIO_FP_TEXT);
d02b48c6	115
3647bee2 DSH	116	if (!load_config(bio_err, NULL))
	117	goto end;
	118
d02b48c6	119	/* first check the program name */
54a656ef	120	program_name(argv[0],pname,sizeof pname);
d02b48c6 RE	121
	122	md=EVP_get_digestbyname(pname);
	123
	124	argc--;
	125	argv++;
54a29df0	126	while (argc > 0)
d02b48c6 RE	127	{
	128	if ((*argv)[0] != '-') break;
	129	if (strcmp(*argv,"-c") == 0)
	130	separator=1;
7df1c720 DSH	131	else if (strcmp(*argv,"-rand") == 0)
	132	{
	133	if (--argc < 1) break;
	134	randfile=*(++argv);
	135	}
	136	else if (strcmp(*argv,"-out") == 0)
	137	{
	138	if (--argc < 1) break;
	139	outfile=*(++argv);
	140	}
	141	else if (strcmp(*argv,"-sign") == 0)
	142	{
	143	if (--argc < 1) break;
	144	keyfile=*(++argv);
	145	}
	146	else if (strcmp(*argv,"-verify") == 0)
	147	{
	148	if (--argc < 1) break;
	149	keyfile=*(++argv);
	150	want_pub = 1;
	151	do_verify = 1;
	152	}
	153	else if (strcmp(*argv,"-prverify") == 0)
	154	{
	155	if (--argc < 1) break;
	156	keyfile=*(++argv);
	157	do_verify = 1;
	158	}
	159	else if (strcmp(*argv,"-signature") == 0)
	160	{
	161	if (--argc < 1) break;
	162	sigfile=*(++argv);
	163	}
32d862ed RL	164	else if (strcmp(*argv,"-keyform") == 0)
	165	{
	166	if (--argc < 1) break;
	167	keyform=str2fmt(*(++argv));
	168	}
5270e702 RL	169	else if (strcmp(*argv,"-engine") == 0)
	170	{
	171	if (--argc < 1) break;
	172	engine= *(++argv);
	173	}
7df1c720 DSH	174	else if (strcmp(*argv,"-hex") == 0)
	175	out_bin = 0;
	176	else if (strcmp(*argv,"-binary") == 0)
	177	out_bin = 1;
d02b48c6 RE	178	else if (strcmp(*argv,"-d") == 0)
	179	debug=1;
	180	else if ((m=EVP_get_digestbyname(&((*argv)[1]))) != NULL)
	181	md=m;
	182	else
	183	break;
	184	argc--;
	185	argv++;
	186	}
	187
	188	if (md == NULL)
	189	md=EVP_md5();
	190
7df1c720 DSH	191	if(do_verify && !sigfile) {
	192	BIO_printf(bio_err, "No signature to verify: use the -signature option\n");
	193	err = 1;
	194	goto end;
	195	}
	196
d02b48c6 RE	197	if ((argc > 0) && (argv[0][0] == '-')) /* bad option */
	198	{
	199	BIO_printf(bio_err,"unknown option '%s'\n",*argv);
	200	BIO_printf(bio_err,"options are\n");
7df1c720 DSH	201	BIO_printf(bio_err,"-c to output the digest with separating colons\n");
	202	BIO_printf(bio_err,"-d to output debug info\n");
	203	BIO_printf(bio_err,"-hex output as hex dump\n");
	204	BIO_printf(bio_err,"-binary output in binary form\n");
	205	BIO_printf(bio_err,"-sign file sign digest using private key in file\n");
	206	BIO_printf(bio_err,"-verify file verify a signature using public key in file\n");
	207	BIO_printf(bio_err,"-prverify file verify a signature using private key in file\n");
32d862ed	208	BIO_printf(bio_err,"-keyform arg key file format (PEM or ENGINE)\n");
7df1c720 DSH	209	BIO_printf(bio_err,"-signature file signature to verify\n");
7df1c720 DSH	210	BIO_printf(bio_err,"-binary output in binary form\n");
5270e702	211	BIO_printf(bio_err,"-engine e use engine e, possibly a hardware device.\n");
7df1c720	212
58964a49	213	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm (default)\n",
d02b48c6	214	LN_md5,LN_md5);
3009458e RL	215	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
3009458e RL	216	LN_md4,LN_md4);
58964a49	217	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
d02b48c6	218	LN_md2,LN_md2);
58964a49	219	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
d02b48c6	220	LN_sha1,LN_sha1);
58964a49	221	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
d02b48c6	222	LN_sha,LN_sha);
58964a49	223	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
d02b48c6	224	LN_mdc2,LN_mdc2);
dfeab068 RE	225	BIO_printf(bio_err,"-%3s to use the %s message digest algorithm\n",
dfeab068 RE	226	LN_ripemd160,LN_ripemd160);
d02b48c6 RE	227	err=1;
	228	goto end;
	229	}
7df1c720	230
531d630b	231	e = setup_engine(bio_err, engine, 0);
5270e702	232
d02b48c6 RE	233	in=BIO_new(BIO_s_file());
	234	bmd=BIO_new(BIO_f_md());
	235	if (debug)
	236	{
	237	BIO_set_callback(in,BIO_debug_callback);
	238	/* needed for windows 3.1 */
	239	BIO_set_callback_arg(in,bio_err);
	240	}
	241
	242	if ((in == NULL) \|\| (bmd == NULL))
	243	{
	244	ERR_print_errors(bio_err);
	245	goto end;
	246	}
	247
7df1c720 DSH	248	if(out_bin == -1) {
	249	if(keyfile) out_bin = 1;
	250	else out_bin = 0;
	251	}
	252
	253	if(randfile)
	254	app_RAND_load_file(randfile, bio_err, 0);
	255
	256	if(outfile) {
	257	if(out_bin)
	258	out = BIO_new_file(outfile, "wb");
	259	else out = BIO_new_file(outfile, "w");
645749ef RL	260	} else {
645749ef RL	261	out = BIO_new_fp(stdout, BIO_NOCLOSE);
bc36ee62	262	#ifdef OPENSSL_SYS_VMS
645749ef RL	263	{
	264	BIO *tmpbio = BIO_new(BIO_f_linebuffer());
	265	out = BIO_push(tmpbio, out);
	266	}
	267	#endif
	268	}
7df1c720 DSH	269
	270	if(!out) {
	271	BIO_printf(bio_err, "Error opening output file %s\n",
	272	outfile ? outfile : "(stdout)");
	273	ERR_print_errors(bio_err);
	274	goto end;
	275	}
	276
32d862ed RL	277	if(keyfile)
32d862ed RL	278	{
30b4c272	279	if (want_pub)
da9b9724	280	sigkey = load_pubkey(bio_err, keyfile, keyform, 0, NULL,
30b4c272	281	e, "key file");
32d862ed	282	else
da9b9724	283	sigkey = load_key(bio_err, keyfile, keyform, 0, NULL,
30b4c272 RL	284	e, "key file");
30b4c272 RL	285	if (!sigkey)
32d862ed	286	{
30b4c272 RL	287	/* load_[pub]key() has already printed an appropriate
30b4c272 RL	288	message */
7df1c720	289	goto end;
32d862ed	290	}
7df1c720	291	}
7df1c720 DSH	292
	293	if(sigfile && sigkey) {
	294	BIO *sigbio;
	295	sigbio = BIO_new_file(sigfile, "rb");
	296	siglen = EVP_PKEY_size(sigkey);
	297	sigbuf = OPENSSL_malloc(siglen);
	298	if(!sigbio) {
	299	BIO_printf(bio_err, "Error opening signature file %s\n",
	300	sigfile);
	301	ERR_print_errors(bio_err);
	302	goto end;
	303	}
	304	siglen = BIO_read(sigbio, sigbuf, siglen);
	305	BIO_free(sigbio);
688fbf54	306	if(siglen <= 0) {
7df1c720 DSH	307	BIO_printf(bio_err, "Error reading signature file %s\n",
	308	sigfile);
	309	ERR_print_errors(bio_err);
	310	goto end;
	311	}
	312	}
	313
	314
	315
d02b48c6 RE	316	/* we use md as a filter, reading from 'in' */
	317	BIO_set_md(bmd,md);
	318	inp=BIO_push(bmd,in);
	319
	320	if (argc == 0)
	321	{
	322	BIO_set_fp(in,stdin,BIO_NOCLOSE);
d15711ef BL	323	err=do_fp(out, buf,inp,separator, out_bin, sigkey, sigbuf,
d15711ef BL	324	siglen,"","(stdin)");
d02b48c6 RE	325	}
	326	else
	327	{
	328	name=OBJ_nid2sn(md->type);
	329	for (i=0; i<argc; i++)
	330	{
d15711ef BL	331	char tmp,tofree=NULL;
	332	int r;
	333
d02b48c6 RE	334	if (BIO_read_filename(in,argv[i]) <= 0)
	335	{
	336	perror(argv[i]);
	337	err++;
	338	continue;
	339	}
d15711ef BL	340	if(!out_bin)
	341	{
	342	tmp=tofree=OPENSSL_malloc(strlen(name)+strlen(argv[i])+5);
	343	sprintf(tmp,"%s(%s)= ",name,argv[i]);
	344	}
	345	else
	346	tmp="";
	347	r=do_fp(out,buf,inp,separator,out_bin,sigkey,sigbuf,
	348	siglen,tmp,argv[i]);
	349	if(r)
	350	err=r;
	351	if(tofree)
	352	OPENSSL_free(tofree);
d58d092b	353	(void)BIO_reset(bmd);
d02b48c6 RE	354	}
	355	}
	356	end:
	357	if (buf != NULL)
	358	{
	359	memset(buf,0,BUFSIZE);
26a3a48d	360	OPENSSL_free(buf);
d02b48c6 RE	361	}
d02b48c6 RE	362	if (in != NULL) BIO_free(in);
645749ef	363	BIO_free_all(out);
7df1c720 DSH	364	EVP_PKEY_free(sigkey);
7df1c720 DSH	365	if(sigbuf) OPENSSL_free(sigbuf);
d02b48c6	366	if (bmd != NULL) BIO_free(bmd);
c04f8cf4	367	apps_shutdown();
d02b48c6 RE	368	EXIT(err);
	369	}
	370
d15711ef BL	371	int do_fp(BIO out, unsigned char buf, BIO *bp, int sep, int binout,
	372	EVP_PKEY key, unsigned char sigin, int siglen, const char *title,
	373	const char *file)
d02b48c6 RE	374	{
	375	int len;
	376	int i;
	377
	378	for (;;)
	379	{
	380	i=BIO_read(bp,(char *)buf,BUFSIZE);
d15711ef BL	381	if(i < 0)
	382	{
	383	BIO_printf(bio_err, "Read Error in %s\n",file);
	384	ERR_print_errors(bio_err);
	385	return 1;
	386	}
	387	if (i == 0) break;
d02b48c6	388	}
7df1c720 DSH	389	if(sigin)
	390	{
	391	EVP_MD_CTX *ctx;
	392	BIO_get_md_ctx(bp, &ctx);
688fbf54	393	i = EVP_VerifyFinal(ctx, sigin, (unsigned int)siglen, key);
d15711ef BL	394	if(i > 0)
	395	BIO_printf(out, "Verified OK\n");
	396	else if(i == 0)
	397	{
	398	BIO_printf(out, "Verification Failure\n");
	399	return 1;
	400	}
7df1c720 DSH	401	else
	402	{
	403	BIO_printf(bio_err, "Error Verifying Data\n");
	404	ERR_print_errors(bio_err);
d15711ef	405	return 1;
7df1c720	406	}
d15711ef	407	return 0;
7df1c720 DSH	408	}
	409	if(key)
	410	{
	411	EVP_MD_CTX *ctx;
	412	BIO_get_md_ctx(bp, &ctx);
	413	if(!EVP_SignFinal(ctx, buf, (unsigned int *)&len, key))
	414	{
	415	BIO_printf(bio_err, "Error Signing Data\n");
	416	ERR_print_errors(bio_err);
d15711ef	417	return 1;
7df1c720 DSH	418	}
	419	}
	420	else
	421	len=BIO_gets(bp,(char *)buf,BUFSIZE);
d02b48c6	422
7df1c720 DSH	423	if(binout) BIO_write(out, buf, len);
7df1c720 DSH	424	else
d02b48c6	425	{
d15711ef	426	BIO_write(out,title,strlen(title));
7df1c720 DSH	427	for (i=0; i<len; i++)
	428	{
	429	if (sep && (i != 0))
	430	BIO_printf(out, ":");
	431	BIO_printf(out, "%02x",buf[i]);
	432	}
	433	BIO_printf(out, "\n");
d02b48c6	434	}
d15711ef	435	return 0;
d02b48c6 RE	436	}
d02b48c6 RE	437