]> git.ipfire.org Git - thirdparty/openssl.git/blame - apps/dsaparam.c
Don't use "version" in "OpenSSL Version 1.1.0" etc
[thirdparty/openssl.git] / apps / dsaparam.c
CommitLineData
846e33c7 1/*
2234212c 2 * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
d02b48c6 3 *
846e33c7
RS
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
d02b48c6
RE
8 */
9
effaf4de
RS
10#include <openssl/opensslconf.h>
11#ifdef OPENSSL_NO_DSA
12NON_EMPTY_TRANSLATION_UNIT
13#else
5daec7ea 14
0f113f3e
MC
15# include <stdio.h>
16# include <stdlib.h>
17# include <time.h>
18# include <string.h>
19# include "apps.h"
20# include <openssl/bio.h>
21# include <openssl/err.h>
22# include <openssl/bn.h>
23# include <openssl/dsa.h>
24# include <openssl/x509.h>
25# include <openssl/pem.h>
26
6d23cf97 27static int dsa_cb(int p, int n, BN_GENCB *cb);
667ac4ec 28
7e1b7485
RS
29typedef enum OPTION_choice {
30 OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
31 OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_TEXT, OPT_C,
a2b22cd6 32 OPT_NOOUT, OPT_GENKEY, OPT_RAND, OPT_ENGINE
7e1b7485
RS
33} OPTION_CHOICE;
34
44c83ebd 35const OPTIONS dsaparam_options[] = {
7e1b7485
RS
36 {"help", OPT_HELP, '-', "Display this summary"},
37 {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
38 {"in", OPT_IN, '<', "Input file"},
39 {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
40 {"out", OPT_OUT, '>', "Output file"},
41 {"text", OPT_TEXT, '-', "Print as text"},
42 {"C", OPT_C, '-', "Output C code"},
43 {"noout", OPT_NOOUT, '-', "No output"},
44 {"genkey", OPT_GENKEY, '-', "Generate a DSA key"},
45 {"rand", OPT_RAND, 's', "Files to use for random number input"},
9c3bcfa0
RS
46# ifndef OPENSSL_NO_ENGINE
47 {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
7e1b7485
RS
48# endif
49 {NULL}
50};
667ac4ec 51
7e1b7485 52int dsaparam_main(int argc, char **argv)
0f113f3e 53{
dd1abd44 54 ENGINE *e = NULL;
0f113f3e 55 DSA *dsa = NULL;
0f113f3e 56 BIO *in = NULL, *out = NULL;
0f113f3e 57 BN_GENCB *cb = NULL;
700b4a4a 58 int numbits = -1, num = 0, genkey = 0, need_rand = 0;
3b061a00
RS
59 int informat = FORMAT_PEM, outformat = FORMAT_PEM, noout = 0, C = 0;
60 int ret = 1, i, text = 0, private = 0;
333b070e 61 char *infile = NULL, *outfile = NULL, *prog, *inrand = NULL;
7e1b7485
RS
62 OPTION_CHOICE o;
63
64 prog = opt_init(argc, argv, dsaparam_options);
65 while ((o = opt_next()) != OPT_EOF) {
66 switch (o) {
67 case OPT_EOF:
68 case OPT_ERR:
69 opthelp:
70 BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
71 goto end;
72 case OPT_HELP:
73 opt_help(dsaparam_options);
74 ret = 0;
75 goto end;
76 case OPT_INFORM:
77 if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
78 goto opthelp;
79 break;
80 case OPT_IN:
81 infile = opt_arg();
82 break;
83 case OPT_OUTFORM:
84 if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
85 goto opthelp;
86 break;
87 case OPT_OUT:
88 outfile = opt_arg();
89 break;
90 case OPT_ENGINE:
dd1abd44 91 e = setup_engine(opt_arg(), 0);
7e1b7485 92 break;
7e1b7485 93 case OPT_TEXT:
0f113f3e 94 text = 1;
7e1b7485
RS
95 break;
96 case OPT_C:
0f113f3e 97 C = 1;
7e1b7485
RS
98 break;
99 case OPT_GENKEY:
100 genkey = need_rand = 1;
101 break;
102 case OPT_RAND:
103 inrand = opt_arg();
0f113f3e 104 need_rand = 1;
7e1b7485
RS
105 break;
106 case OPT_NOOUT:
0f113f3e 107 noout = 1;
7e1b7485 108 break;
0f113f3e 109 }
0f113f3e 110 }
7e1b7485
RS
111 argc = opt_num_rest();
112 argv = opt_rest();
0f113f3e 113
7e1b7485 114 if (argc == 1) {
bd4850df 115 if (!opt_int(argv[0], &num) || num < 0)
7e1b7485
RS
116 goto end;
117 /* generate a key */
118 numbits = num;
119 need_rand = 1;
0f113f3e 120 }
3b061a00 121 private = genkey ? 1 : 0;
0f113f3e 122
bdd58d98 123 in = bio_open_default(infile, 'r', informat);
7e1b7485
RS
124 if (in == NULL)
125 goto end;
bdd58d98 126 out = bio_open_owner(outfile, outformat, private);
7e1b7485 127 if (out == NULL)
0f113f3e 128 goto end;
0f113f3e 129
0f113f3e 130 if (need_rand) {
7e1b7485 131 app_RAND_load_file(NULL, (inrand != NULL));
0f113f3e
MC
132 if (inrand != NULL)
133 BIO_printf(bio_err, "%ld semi-random bytes loaded\n",
134 app_RAND_load_files(inrand));
135 }
136
137 if (numbits > 0) {
138 cb = BN_GENCB_new();
96487cdd 139 if (cb == NULL) {
0f113f3e
MC
140 BIO_printf(bio_err, "Error allocating BN_GENCB object\n");
141 goto end;
142 }
143 BN_GENCB_set(cb, dsa_cb, bio_err);
144 assert(need_rand);
145 dsa = DSA_new();
96487cdd 146 if (dsa == NULL) {
0f113f3e
MC
147 BIO_printf(bio_err, "Error allocating DSA object\n");
148 goto end;
149 }
0f113f3e
MC
150 BIO_printf(bio_err, "Generating DSA parameters, %d bit long prime\n",
151 num);
152 BIO_printf(bio_err, "This could take some time\n");
0f113f3e 153 if (!DSA_generate_parameters_ex(dsa, num, NULL, 0, NULL, NULL, cb)) {
0f113f3e
MC
154 ERR_print_errors(bio_err);
155 BIO_printf(bio_err, "Error, DSA key generation failed\n");
156 goto end;
157 }
2234212c 158 } else if (informat == FORMAT_ASN1) {
0f113f3e 159 dsa = d2i_DSAparams_bio(in, NULL);
2234212c 160 } else {
0f113f3e 161 dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL);
2234212c 162 }
0f113f3e
MC
163 if (dsa == NULL) {
164 BIO_printf(bio_err, "unable to load DSA parameters\n");
165 ERR_print_errors(bio_err);
166 goto end;
167 }
168
169 if (text) {
170 DSAparams_print(out, dsa);
171 }
172
173 if (C) {
2ac6115d 174 const BIGNUM *p = NULL, *q = NULL, *g = NULL;
ae6c553e 175 unsigned char *data;
6e9fa57c
MC
176 int len, bits_p;
177
178 DSA_get0_pqg(dsa, &p, &q, &g);
179 len = BN_num_bytes(p);
180 bits_p = BN_num_bits(p);
181
ae6c553e 182 data = app_malloc(len + 20, "BN space");
0f113f3e 183
7e1b7485 184 BIO_printf(bio_out, "DSA *get_dsa%d()\n{\n", bits_p);
6e9fa57c
MC
185 print_bignum_var(bio_out, p, "dsap", len, data);
186 print_bignum_var(bio_out, q, "dsaq", len, data);
187 print_bignum_var(bio_out, g, "dsag", len, data);
7e1b7485
RS
188 BIO_printf(bio_out, " DSA *dsa = DSA_new();\n"
189 "\n");
190 BIO_printf(bio_out, " if (dsa == NULL)\n"
191 " return NULL;\n");
192 BIO_printf(bio_out, " dsa->p = BN_bin2bn(dsap_%d, sizeof (dsap_%d), NULL);\n",
0f113f3e 193 bits_p, bits_p);
7e1b7485 194 BIO_printf(bio_out, " dsa->q = BN_bin2bn(dsaq_%d, sizeof (dsaq_%d), NULL);\n",
0f113f3e 195 bits_p, bits_p);
7e1b7485 196 BIO_printf(bio_out, " dsa->g = BN_bin2bn(dsag_%d, sizeof (dsag_%d), NULL);\n",
0f113f3e 197 bits_p, bits_p);
7e1b7485
RS
198 BIO_printf(bio_out, " if (!dsa->p || !dsa->q || !dsa->g) {\n"
199 " DSA_free(dsa);\n"
200 " return NULL;\n"
201 " }\n"
202 " return(dsa);\n}\n");
a855d1a1 203 OPENSSL_free(data);
0f113f3e
MC
204 }
205
206 if (!noout) {
207 if (outformat == FORMAT_ASN1)
208 i = i2d_DSAparams_bio(out, dsa);
7e1b7485 209 else
0f113f3e 210 i = PEM_write_bio_DSAparams(out, dsa);
0f113f3e
MC
211 if (!i) {
212 BIO_printf(bio_err, "unable to write DSA parameters\n");
213 ERR_print_errors(bio_err);
214 goto end;
215 }
216 }
217 if (genkey) {
218 DSA *dsakey;
219
220 assert(need_rand);
221 if ((dsakey = DSAparams_dup(dsa)) == NULL)
222 goto end;
0f113f3e
MC
223 if (!DSA_generate_key(dsakey)) {
224 ERR_print_errors(bio_err);
225 DSA_free(dsakey);
226 goto end;
227 }
3b061a00 228 assert(private);
0f113f3e
MC
229 if (outformat == FORMAT_ASN1)
230 i = i2d_DSAPrivateKey_bio(out, dsakey);
7e1b7485 231 else
0f113f3e
MC
232 i = PEM_write_bio_DSAPrivateKey(out, dsakey, NULL, NULL, 0, NULL,
233 NULL);
0f113f3e
MC
234 DSA_free(dsakey);
235 }
236 if (need_rand)
7e1b7485 237 app_RAND_write_file(NULL);
0f113f3e
MC
238 ret = 0;
239 end:
23a1d5e9 240 BN_GENCB_free(cb);
ca3a82c3
RS
241 BIO_free(in);
242 BIO_free_all(out);
d6407083 243 DSA_free(dsa);
dd1abd44 244 release_engine(e);
7e1b7485 245 return (ret);
0f113f3e 246}
d02b48c6 247
6d23cf97 248static int dsa_cb(int p, int n, BN_GENCB *cb)
0f113f3e
MC
249{
250 char c = '*';
251
252 if (p == 0)
253 c = '.';
254 if (p == 1)
255 c = '+';
256 if (p == 2)
257 c = '*';
258 if (p == 3)
259 c = '\n';
260 BIO_write(BN_GENCB_get_arg(cb), &c, 1);
261 (void)BIO_flush(BN_GENCB_get_arg(cb));
0f113f3e
MC
262 return 1;
263}
f5d7a031 264#endif