[thirdparty/openssl.git] / crypto / pem / pem_pkey.c

/*
 * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

/* We need to use some deprecated APIs */
#define OPENSSL_SUPPRESS_DEPRECATED

#include <stdio.h>
#include <openssl/buffer.h>
#include <openssl/objects.h>
#include <openssl/evp.h>
#include <openssl/x509.h>
#include <openssl/pkcs12.h>
#include <openssl/pem.h>
#include <openssl/engine.h>
#include <openssl/dh.h>
#include <openssl/decoder.h>
#include <openssl/ui.h>
#include "internal/cryptlib.h"
#include "internal/passphrase.h"
#include "crypto/asn1.h"
#include "crypto/x509.h"
#include "crypto/evp.h"
#include "pem_local.h"

int ossl_pem_check_suffix(const char *pem_str, const char *suffix);

static EVP_PKEY *pem_read_bio_key_decoder(BIO *bp, EVP_PKEY **x,
                                          pem_password_cb *cb, void *u,
                                          OSSL_LIB_CTX *libctx,
                                          const char *propq,
                                          int selection)
{
    EVP_PKEY *pkey = NULL;
    OSSL_DECODER_CTX *dctx = NULL;
    int pos, newpos;

    if ((pos = BIO_tell(bp)) < 0)
        /* We can depend on BIO_tell() thanks to the BIO_f_readbuffer() */
        return NULL;

    dctx = OSSL_DECODER_CTX_new_for_pkey(&pkey, "PEM", NULL, NULL,
                                         selection, libctx, propq);

    if (dctx == NULL)
        return NULL;

    if (cb == NULL)
        cb = PEM_def_callback;

    if (!OSSL_DECODER_CTX_set_pem_password_cb(dctx, cb, u))
        goto err;

    ERR_set_mark();
    while (!OSSL_DECODER_from_bio(dctx, bp) || pkey == NULL)
        if (BIO_eof(bp) != 0 || (newpos = BIO_tell(bp)) < 0 || newpos <= pos) {
            ERR_clear_last_mark();
            goto err;
        } else {
            if (ERR_GET_REASON(ERR_peek_error()) == ERR_R_UNSUPPORTED) {
                /* unsupported PEM data, try again */
                ERR_pop_to_mark();
                ERR_set_mark();
            } else {
                /* other error, bail out */
                ERR_clear_last_mark();
                goto err;
            }
            pos = newpos;
        }
    ERR_pop_to_mark();

    /* if we were asked for private key, the public key is optional */
    if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0)
        selection = selection & ~OSSL_KEYMGMT_SELECT_PUBLIC_KEY;

    if (!evp_keymgmt_util_has(pkey, selection)) {
        EVP_PKEY_free(pkey);
        pkey = NULL;
        ERR_raise(ERR_LIB_PEM, PEM_R_UNSUPPORTED_KEY_COMPONENTS);
        goto err;
    }

    if (x != NULL) {
        EVP_PKEY_free(*x);
        *x = pkey;
    }

 err:
    OSSL_DECODER_CTX_free(dctx);
    return pkey;
}

static EVP_PKEY *pem_read_bio_key_legacy(BIO *bp, EVP_PKEY **x,
                                         pem_password_cb *cb, void *u,
                                         OSSL_LIB_CTX *libctx,
                                         const char *propq,
                                         int selection)
{
    char *nm = NULL;
    const unsigned char *p = NULL;
    unsigned char *data = NULL;
    long len;
    int slen;
    EVP_PKEY *ret = NULL;

    ERR_set_mark();  /* not interested in PEM read errors */
    if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0) {
        if (!PEM_bytes_read_bio_secmem(&data, &len, &nm,
                                       PEM_STRING_EVP_PKEY,
                                       bp, cb, u)) {
            ERR_pop_to_mark();
            return NULL;
         }
    } else {
        const char *pem_string = PEM_STRING_PARAMETERS;

        if ((selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) != 0)
            pem_string = PEM_STRING_PUBLIC;
        if (!PEM_bytes_read_bio(&data, &len, &nm,
                                pem_string,
                                bp, cb, u)) {
            ERR_pop_to_mark();
            return NULL;
        }
    }
    ERR_clear_last_mark();
    p = data;

    if (strcmp(nm, PEM_STRING_PKCS8INF) == 0) {
        PKCS8_PRIV_KEY_INFO *p8inf;

        if ((p8inf = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, len)) == NULL)
            goto p8err;
        ret = evp_pkcs82pkey_legacy(p8inf, libctx, propq);
        if (x != NULL) {
            EVP_PKEY_free(*x);
            *x = ret;
        }
        PKCS8_PRIV_KEY_INFO_free(p8inf);
    } else if (strcmp(nm, PEM_STRING_PKCS8) == 0) {
        PKCS8_PRIV_KEY_INFO *p8inf;
        X509_SIG *p8;
        int klen;
        char psbuf[PEM_BUFSIZE];

        if ((p8 = d2i_X509_SIG(NULL, &p, len)) == NULL)
            goto p8err;
        if (cb != NULL)
            klen = cb(psbuf, PEM_BUFSIZE, 0, u);
        else
            klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
        if (klen < 0) {
            ERR_raise(ERR_LIB_PEM, PEM_R_BAD_PASSWORD_READ);
            X509_SIG_free(p8);
            goto err;
        }
        p8inf = PKCS8_decrypt(p8, psbuf, klen);
        X509_SIG_free(p8);
        OPENSSL_cleanse(psbuf, klen);
        if (p8inf == NULL)
            goto p8err;
        ret = evp_pkcs82pkey_legacy(p8inf, libctx, propq);
        if (x != NULL) {
            EVP_PKEY_free(*x);
            *x = ret;
        }
        PKCS8_PRIV_KEY_INFO_free(p8inf);
    } else if ((slen = ossl_pem_check_suffix(nm, "PRIVATE KEY")) > 0) {
        const EVP_PKEY_ASN1_METHOD *ameth;
        ameth = EVP_PKEY_asn1_find_str(NULL, nm, slen);
        if (ameth == NULL || ameth->old_priv_decode == NULL)
            goto p8err;
        ret = ossl_d2i_PrivateKey_legacy(ameth->pkey_id, x, &p, len, libctx,
                                         propq);
    } else if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) == 0
               && (selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) != 0) {
        /* Trying legacy PUBKEY decoding only if we do not want private key. */
        ret = ossl_d2i_PUBKEY_legacy(x, &p, len);
    } else if ((selection & EVP_PKEY_KEYPAIR) == 0
               && (slen = ossl_pem_check_suffix(nm, "PARAMETERS")) > 0) {
        /* Trying legacy params decoding only if we do not want a key. */
        ret = EVP_PKEY_new();
        if (ret == NULL)
            goto err;
        if (!EVP_PKEY_set_type_str(ret, nm, slen)
            || !ret->ameth->param_decode
            || !ret->ameth->param_decode(ret, &p, len)) {
            EVP_PKEY_free(ret);
            ret = NULL;
            goto err;
        }
        if (x) {
            EVP_PKEY_free(*x);
            *x = ret;
        }
    }

 p8err:
    if (ret == NULL && ERR_peek_last_error() == 0)
        /* ensure some error is reported but do not hide the real one */
        ERR_raise(ERR_LIB_PEM, ERR_R_ASN1_LIB);
 err:
    OPENSSL_secure_free(nm);
    OPENSSL_secure_clear_free(data, len);
    return ret;
}

static EVP_PKEY *pem_read_bio_key(BIO *bp, EVP_PKEY **x,
                                  pem_password_cb *cb, void *u,
                                  OSSL_LIB_CTX *libctx,
                                  const char *propq,
                                  int selection)
{
    EVP_PKEY *ret = NULL;
    BIO *new_bio = NULL;
    int pos;
    struct ossl_passphrase_data_st pwdata = { 0 };

    if ((pos = BIO_tell(bp)) < 0) {
        new_bio = BIO_new(BIO_f_readbuffer());
        if (new_bio == NULL)
            return NULL;
        bp = BIO_push(new_bio, bp);
        pos = BIO_tell(bp);
    }

    if (cb == NULL)
        cb = PEM_def_callback;

    if (!ossl_pw_set_pem_password_cb(&pwdata, cb, u)
        || !ossl_pw_enable_passphrase_caching(&pwdata))
        goto err;

    ERR_set_mark();
    ret = pem_read_bio_key_decoder(bp, x, ossl_pw_pem_password, &pwdata,
                                   libctx, propq, selection);
    if (ret == NULL
        && (BIO_seek(bp, pos) < 0
            || (ret = pem_read_bio_key_legacy(bp, x,
                                              ossl_pw_pem_password, &pwdata,
                                              libctx, propq,
                                              selection)) == NULL))
        ERR_clear_last_mark();
    else
        ERR_pop_to_mark();

 err:
    ossl_pw_clear_passphrase_data(&pwdata);
    if (new_bio != NULL) {
        BIO_pop(new_bio);
        BIO_free(new_bio);
    }
    return ret;
}

EVP_PKEY *PEM_read_bio_PUBKEY_ex(BIO *bp, EVP_PKEY **x,
                                 pem_password_cb *cb, void *u,
                                 OSSL_LIB_CTX *libctx, const char *propq)
{
    return pem_read_bio_key(bp, x, cb, u, libctx, propq,
                            EVP_PKEY_PUBLIC_KEY);
}

EVP_PKEY *PEM_read_bio_PUBKEY(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
                              void *u)
{
    return PEM_read_bio_PUBKEY_ex(bp, x, cb, u, NULL, NULL);
}

#ifndef OPENSSL_NO_STDIO
EVP_PKEY *PEM_read_PUBKEY_ex(FILE *fp, EVP_PKEY **x,
                             pem_password_cb *cb, void *u,
                             OSSL_LIB_CTX *libctx, const char *propq)
{
    BIO *b;
    EVP_PKEY *ret;

    if ((b = BIO_new(BIO_s_file())) == NULL) {
        ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
        return 0;
    }
    BIO_set_fp(b, fp, BIO_NOCLOSE);
    ret = PEM_read_bio_PUBKEY_ex(b, x, cb, u, libctx, propq);
    BIO_free(b);
    return ret;
}

EVP_PKEY *PEM_read_PUBKEY(FILE *fp, EVP_PKEY **x, pem_password_cb *cb, void *u)
{
    return PEM_read_PUBKEY_ex(fp, x, cb, u, NULL, NULL);
}
#endif

EVP_PKEY *PEM_read_bio_PrivateKey_ex(BIO *bp, EVP_PKEY **x,
                                     pem_password_cb *cb, void *u,
                                     OSSL_LIB_CTX *libctx, const char *propq)
{
    return pem_read_bio_key(bp, x, cb, u, libctx, propq,
                            /* we also want the public key, if available */
                            EVP_PKEY_KEYPAIR);
}

EVP_PKEY *PEM_read_bio_PrivateKey(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
                                  void *u)
{
    return PEM_read_bio_PrivateKey_ex(bp, x, cb, u, NULL, NULL);
}

PEM_write_cb_ex_fnsig(PrivateKey, EVP_PKEY, BIO, write_bio)
{
    IMPLEMENT_PEM_provided_write_body_vars(pkey, PrivateKey, propq);

    IMPLEMENT_PEM_provided_write_body_pass();
    IMPLEMENT_PEM_provided_write_body_main(pkey, bio);

 legacy:
    if (x != NULL && (x->ameth == NULL || x->ameth->priv_encode != NULL))
        return PEM_write_bio_PKCS8PrivateKey(out, x, enc,
                                             (const char *)kstr, klen, cb, u);
    return PEM_write_bio_PrivateKey_traditional(out, x, enc, kstr, klen, cb, u);
}

PEM_write_cb_fnsig(PrivateKey, EVP_PKEY, BIO, write_bio)
{
    return PEM_write_bio_PrivateKey_ex(out, x, enc, kstr, klen, cb, u,
                                       NULL, NULL);
}

/*
 * Note: there is no way to tell a provided pkey encoder to use "traditional"
 * encoding.  Therefore, if the pkey is provided, we try to take a copy 
 */
int PEM_write_bio_PrivateKey_traditional(BIO *bp, const EVP_PKEY *x,
                                         const EVP_CIPHER *enc,
                                         const unsigned char *kstr, int klen,
                                         pem_password_cb *cb, void *u)
{
    char pem_str[80];
    EVP_PKEY *copy = NULL;
    int ret;

    if (x == NULL)
        return 0;

    if (evp_pkey_is_assigned(x)
        && evp_pkey_is_provided(x)
        && evp_pkey_copy_downgraded(&copy, x))
        x = copy;

    if (x->ameth == NULL || x->ameth->old_priv_encode == NULL) {
        ERR_raise(ERR_LIB_PEM, PEM_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
        EVP_PKEY_free(copy);
        return 0;
    }
    BIO_snprintf(pem_str, 80, "%s PRIVATE KEY", x->ameth->pem_str);
    ret = PEM_ASN1_write_bio((i2d_of_void *)i2d_PrivateKey,
                             pem_str, bp, x, enc, kstr, klen, cb, u);

    EVP_PKEY_free(copy);
    return ret;
}

static int no_password_cb(char *buf, int num, int rwflag, void *userdata)
{
    return -1;
}

EVP_PKEY *PEM_read_bio_Parameters_ex(BIO *bp, EVP_PKEY **x,
                                     OSSL_LIB_CTX *libctx, const char *propq)
{
    /*
     * PEM_read_bio_Parameters(_ex) should never ask for a password. Any attempt
     * to get a password just fails.
     */
    return pem_read_bio_key(bp, x, no_password_cb, NULL, libctx, propq,
                            EVP_PKEY_KEY_PARAMETERS);
}

EVP_PKEY *PEM_read_bio_Parameters(BIO *bp, EVP_PKEY **x)
{
    return PEM_read_bio_Parameters_ex(bp, x, NULL, NULL);
}

PEM_write_fnsig(Parameters, EVP_PKEY, BIO, write_bio)
{
    char pem_str[80];
    IMPLEMENT_PEM_provided_write_body_vars(pkey, Parameters, NULL);

    IMPLEMENT_PEM_provided_write_body_main(pkey, bio);

 legacy:
    if (!x->ameth || !x->ameth->param_encode)
        return 0;

    BIO_snprintf(pem_str, 80, "%s PARAMETERS", x->ameth->pem_str);
    return PEM_ASN1_write_bio((i2d_of_void *)x->ameth->param_encode,
                              pem_str, out, x, NULL, NULL, 0, 0, NULL);
}

#ifndef OPENSSL_NO_STDIO
EVP_PKEY *PEM_read_PrivateKey_ex(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
                                 void *u, OSSL_LIB_CTX *libctx,
                                 const char *propq)
{
    BIO *b;
    EVP_PKEY *ret;

    if ((b = BIO_new(BIO_s_file())) == NULL) {
        ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
        return 0;
    }
    BIO_set_fp(b, fp, BIO_NOCLOSE);
    ret = PEM_read_bio_PrivateKey_ex(b, x, cb, u, libctx, propq);
    BIO_free(b);
    return ret;
}

EVP_PKEY *PEM_read_PrivateKey(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
                              void *u)
{
    return PEM_read_PrivateKey_ex(fp, x, cb, u, NULL, NULL);
}

PEM_write_cb_ex_fnsig(PrivateKey, EVP_PKEY, FILE, write)
{
    BIO *b;
    int ret;

    if ((b = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
        ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
        return 0;
    }
    ret = PEM_write_bio_PrivateKey_ex(b, x, enc, kstr, klen, cb, u,
                                      libctx, propq);
    BIO_free(b);
    return ret;
}

PEM_write_cb_fnsig(PrivateKey, EVP_PKEY, FILE, write)
{
    return PEM_write_PrivateKey_ex(out, x, enc, kstr, klen, cb, u, NULL, NULL);
}
#endif
Commit	Line	Data
62867571	1	/*
da1c088f	2	* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
1241126a	3	*
16742672	4	* Licensed under the Apache License 2.0 (the "License"). You may not use
62867571 RS	5	* this file except in compliance with the License. You can obtain a copy
	6	* in the file LICENSE in the source distribution or at
	7	* https://www.openssl.org/source/license.html
1241126a DSH	8	*/
1241126a DSH	9
b4c4a2c6	10	/* We need to use some deprecated APIs */
a1447076 RL	11	#define OPENSSL_SUPPRESS_DEPRECATED
a1447076 RL	12
1241126a	13	#include <stdio.h>
1241126a DSH	14	#include <openssl/buffer.h>
	15	#include <openssl/objects.h>
	16	#include <openssl/evp.h>
1241126a DSH	17	#include <openssl/x509.h>
	18	#include <openssl/pkcs12.h>
	19	#include <openssl/pem.h>
3c27208f RS	20	#include <openssl/engine.h>
3c27208f RS	21	#include <openssl/dh.h>
b4c4a2c6	22	#include <openssl/decoder.h>
1427d33c	23	#include <openssl/ui.h>
66a7c9f3 TM	24	#include "internal/cryptlib.h"
66a7c9f3 TM	25	#include "internal/passphrase.h"
25f2138b	26	#include "crypto/asn1.h"
b2f1b365	27	#include "crypto/x509.h"
25f2138b	28	#include "crypto/evp.h"
f864a939	29	#include "pem_local.h"
1241126a	30
b78c0166	31	int ossl_pem_check_suffix(const char pem_str, const char suffix);
1241126a	32
7bc027d7 TM	33	static EVP_PKEY pem_read_bio_key_decoder(BIO bp, EVP_PKEY **x,
	34	pem_password_cb cb, void u,
	35	OSSL_LIB_CTX *libctx,
	36	const char *propq,
	37	int selection)
0f113f3e	38	{
b4c4a2c6 TM	39	EVP_PKEY *pkey = NULL;
b4c4a2c6 TM	40	OSSL_DECODER_CTX *dctx = NULL;
07f65429 TM	41	int pos, newpos;
	42
	43	if ((pos = BIO_tell(bp)) < 0)
	44	/* We can depend on BIO_tell() thanks to the BIO_f_readbuffer() */
	45	return NULL;
b4c4a2c6 TM	46
	47	dctx = OSSL_DECODER_CTX_new_for_pkey(&pkey, "PEM", NULL, NULL,
	48	selection, libctx, propq);
	49
	50	if (dctx == NULL)
6e5ccd58	51	return NULL;
6e5ccd58	52
6e5ccd58	53	if (cb == NULL)
00eae3f9	54	cb = PEM_def_callback;
1427d33c	55
b4c4a2c6	56	if (!OSSL_DECODER_CTX_set_pem_password_cb(dctx, cb, u))
1427d33c	57	goto err;
b4c4a2c6	58
fbbd4253	59	ERR_set_mark();
b4c4a2c6	60	while (!OSSL_DECODER_from_bio(dctx, bp) \|\| pkey == NULL)
fbbd4253 TM	61	if (BIO_eof(bp) != 0 \|\| (newpos = BIO_tell(bp)) < 0 \|\| newpos <= pos) {
fbbd4253 TM	62	ERR_clear_last_mark();
0f113f3e	63	goto err;
fbbd4253 TM	64	} else {
	65	if (ERR_GET_REASON(ERR_peek_error()) == ERR_R_UNSUPPORTED) {
	66	/* unsupported PEM data, try again */
	67	ERR_pop_to_mark();
	68	ERR_set_mark();
	69	} else {
	70	/* other error, bail out */
	71	ERR_clear_last_mark();
	72	goto err;
	73	}
07f65429	74	pos = newpos;
fbbd4253 TM	75	}
fbbd4253 TM	76	ERR_pop_to_mark();
1427d33c	77
adb408dc TM	78	/* if we were asked for private key, the public key is optional */
	79	if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0)
	80	selection = selection & ~OSSL_KEYMGMT_SELECT_PUBLIC_KEY;
	81
b4c4a2c6 TM	82	if (!evp_keymgmt_util_has(pkey, selection)) {
	83	EVP_PKEY_free(pkey);
	84	pkey = NULL;
	85	ERR_raise(ERR_LIB_PEM, PEM_R_UNSUPPORTED_KEY_COMPONENTS);
8d8fee64	86	goto err;
0f113f3e	87	}
1427d33c	88
b4c4a2c6 TM	89	if (x != NULL) {
	90	EVP_PKEY_free(*x);
	91	*x = pkey;
	92	}
1427d33c	93
0f113f3e	94	err:
b4c4a2c6 TM	95	OSSL_DECODER_CTX_free(dctx);
b4c4a2c6 TM	96	return pkey;
0f113f3e	97	}
1241126a	98
7bc027d7 TM	99	static EVP_PKEY pem_read_bio_key_legacy(BIO bp, EVP_PKEY **x,
	100	pem_password_cb cb, void u,
	101	OSSL_LIB_CTX *libctx,
	102	const char *propq,
	103	int selection)
	104	{
	105	char *nm = NULL;
	106	const unsigned char *p = NULL;
	107	unsigned char *data = NULL;
	108	long len;
	109	int slen;
	110	EVP_PKEY *ret = NULL;
	111
	112	ERR_set_mark(); /* not interested in PEM read errors */
adb408dc	113	if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0) {
7bc027d7 TM	114	if (!PEM_bytes_read_bio_secmem(&data, &len, &nm,
	115	PEM_STRING_EVP_PKEY,
	116	bp, cb, u)) {
	117	ERR_pop_to_mark();
	118	return NULL;
	119	}
	120	} else {
	121	const char *pem_string = PEM_STRING_PARAMETERS;
	122
adb408dc	123	if ((selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) != 0)
7bc027d7 TM	124	pem_string = PEM_STRING_PUBLIC;
	125	if (!PEM_bytes_read_bio(&data, &len, &nm,
	126	pem_string,
	127	bp, cb, u)) {
	128	ERR_pop_to_mark();
	129	return NULL;
	130	}
	131	}
	132	ERR_clear_last_mark();
	133	p = data;
	134
	135	if (strcmp(nm, PEM_STRING_PKCS8INF) == 0) {
	136	PKCS8_PRIV_KEY_INFO *p8inf;
	137
	138	if ((p8inf = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, len)) == NULL)
	139	goto p8err;
	140	ret = evp_pkcs82pkey_legacy(p8inf, libctx, propq);
	141	if (x != NULL) {
	142	EVP_PKEY_free(*x);
	143	*x = ret;
	144	}
	145	PKCS8_PRIV_KEY_INFO_free(p8inf);
	146	} else if (strcmp(nm, PEM_STRING_PKCS8) == 0) {
	147	PKCS8_PRIV_KEY_INFO *p8inf;
	148	X509_SIG *p8;
	149	int klen;
	150	char psbuf[PEM_BUFSIZE];
	151
	152	if ((p8 = d2i_X509_SIG(NULL, &p, len)) == NULL)
	153	goto p8err;
	154	if (cb != NULL)
	155	klen = cb(psbuf, PEM_BUFSIZE, 0, u);
	156	else
	157	klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
	158	if (klen < 0) {
	159	ERR_raise(ERR_LIB_PEM, PEM_R_BAD_PASSWORD_READ);
	160	X509_SIG_free(p8);
	161	goto err;
	162	}
	163	p8inf = PKCS8_decrypt(p8, psbuf, klen);
	164	X509_SIG_free(p8);
	165	OPENSSL_cleanse(psbuf, klen);
	166	if (p8inf == NULL)
	167	goto p8err;
	168	ret = evp_pkcs82pkey_legacy(p8inf, libctx, propq);
	169	if (x != NULL) {
	170	EVP_PKEY_free(*x);
	171	*x = ret;
	172	}
	173	PKCS8_PRIV_KEY_INFO_free(p8inf);
	174	} else if ((slen = ossl_pem_check_suffix(nm, "PRIVATE KEY")) > 0) {
	175	const EVP_PKEY_ASN1_METHOD *ameth;
	176	ameth = EVP_PKEY_asn1_find_str(NULL, nm, slen);
	177	if (ameth == NULL \|\| ameth->old_priv_decode == NULL)
	178	goto p8err;
b2f1b365 MC	179	ret = ossl_d2i_PrivateKey_legacy(ameth->pkey_id, x, &p, len, libctx,
b2f1b365 MC	180	propq);
adb408dc TM	181	} else if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) == 0
	182	&& (selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) != 0) {
	183	/* Trying legacy PUBKEY decoding only if we do not want private key. */
b2f1b365	184	ret = ossl_d2i_PUBKEY_legacy(x, &p, len);
adb408dc TM	185	} else if ((selection & EVP_PKEY_KEYPAIR) == 0
	186	&& (slen = ossl_pem_check_suffix(nm, "PARAMETERS")) > 0) {
	187	/* Trying legacy params decoding only if we do not want a key. */
7bc027d7 TM	188	ret = EVP_PKEY_new();
	189	if (ret == NULL)
	190	goto err;
	191	if (!EVP_PKEY_set_type_str(ret, nm, slen)
	192	\|\| !ret->ameth->param_decode
	193	\|\| !ret->ameth->param_decode(ret, &p, len)) {
	194	EVP_PKEY_free(ret);
	195	ret = NULL;
	196	goto err;
	197	}
	198	if (x) {
	199	EVP_PKEY_free(*x);
	200	*x = ret;
	201	}
	202	}
	203
	204	p8err:
8a709c5e TM	205	if (ret == NULL && ERR_peek_last_error() == 0)
8a709c5e TM	206	/* ensure some error is reported but do not hide the real one */
7bc027d7 TM	207	ERR_raise(ERR_LIB_PEM, ERR_R_ASN1_LIB);
	208	err:
	209	OPENSSL_secure_free(nm);
	210	OPENSSL_secure_clear_free(data, len);
	211	return ret;
	212	}
	213
	214	static EVP_PKEY pem_read_bio_key(BIO bp, EVP_PKEY **x,
	215	pem_password_cb cb, void u,
	216	OSSL_LIB_CTX *libctx,
	217	const char *propq,
	218	int selection)
	219	{
66a7c9f3	220	EVP_PKEY *ret = NULL;
7bc027d7 TM	221	BIO *new_bio = NULL;
7bc027d7 TM	222	int pos;
66a7c9f3	223	struct ossl_passphrase_data_st pwdata = { 0 };
7bc027d7 TM	224
	225	if ((pos = BIO_tell(bp)) < 0) {
	226	new_bio = BIO_new(BIO_f_readbuffer());
	227	if (new_bio == NULL)
	228	return NULL;
	229	bp = BIO_push(new_bio, bp);
	230	pos = BIO_tell(bp);
	231	}
	232
66a7c9f3 TM	233	if (cb == NULL)
	234	cb = PEM_def_callback;
	235
	236	if (!ossl_pw_set_pem_password_cb(&pwdata, cb, u)
	237	\|\| !ossl_pw_enable_passphrase_caching(&pwdata))
	238	goto err;
	239
7bc027d7	240	ERR_set_mark();
66a7c9f3 TM	241	ret = pem_read_bio_key_decoder(bp, x, ossl_pw_pem_password, &pwdata,
66a7c9f3 TM	242	libctx, propq, selection);
7bc027d7 TM	243	if (ret == NULL
7bc027d7 TM	244	&& (BIO_seek(bp, pos) < 0
66a7c9f3 TM	245	\|\| (ret = pem_read_bio_key_legacy(bp, x,
66a7c9f3 TM	246	ossl_pw_pem_password, &pwdata,
7bc027d7 TM	247	libctx, propq,
	248	selection)) == NULL))
	249	ERR_clear_last_mark();
	250	else
	251	ERR_pop_to_mark();
	252
66a7c9f3 TM	253	err:
66a7c9f3 TM	254	ossl_pw_clear_passphrase_data(&pwdata);
7bc027d7 TM	255	if (new_bio != NULL) {
	256	BIO_pop(new_bio);
	257	BIO_free(new_bio);
	258	}
	259	return ret;
	260	}
	261
6e5ccd58 RL	262	EVP_PKEY PEM_read_bio_PUBKEY_ex(BIO bp, EVP_PKEY **x,
6e5ccd58 RL	263	pem_password_cb cb, void u,
b4250010	264	OSSL_LIB_CTX libctx, const char propq)
6e5ccd58 RL	265	{
6e5ccd58 RL	266	return pem_read_bio_key(bp, x, cb, u, libctx, propq,
b4c4a2c6	267	EVP_PKEY_PUBLIC_KEY);
6e5ccd58 RL	268	}
	269
	270	EVP_PKEY PEM_read_bio_PUBKEY(BIO bp, EVP_PKEY *x, pem_password_cb cb,
	271	void *u)
	272	{
	273	return PEM_read_bio_PUBKEY_ex(bp, x, cb, u, NULL, NULL);
	274	}
	275
	276	#ifndef OPENSSL_NO_STDIO
	277	EVP_PKEY PEM_read_PUBKEY_ex(FILE fp, EVP_PKEY **x,
	278	pem_password_cb cb, void u,
b4250010	279	OSSL_LIB_CTX libctx, const char propq)
6e5ccd58 RL	280	{
	281	BIO *b;
	282	EVP_PKEY *ret;
	283
	284	if ((b = BIO_new(BIO_s_file())) == NULL) {
9311d0c4	285	ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
6e5ccd58 RL	286	return 0;
	287	}
	288	BIO_set_fp(b, fp, BIO_NOCLOSE);
	289	ret = PEM_read_bio_PUBKEY_ex(b, x, cb, u, libctx, propq);
	290	BIO_free(b);
	291	return ret;
	292	}
	293
	294	EVP_PKEY PEM_read_PUBKEY(FILE fp, EVP_PKEY *x, pem_password_cb cb, void *u)
	295	{
	296	return PEM_read_PUBKEY_ex(fp, x, cb, u, NULL, NULL);
	297	}
	298	#endif
	299
	300	EVP_PKEY PEM_read_bio_PrivateKey_ex(BIO bp, EVP_PKEY **x,
	301	pem_password_cb cb, void u,
b4250010	302	OSSL_LIB_CTX libctx, const char propq)
6e5ccd58 RL	303	{
6e5ccd58 RL	304	return pem_read_bio_key(bp, x, cb, u, libctx, propq,
adb408dc	305	/* we also want the public key, if available */
b4c4a2c6	306	EVP_PKEY_KEYPAIR);
6e5ccd58 RL	307	}
6e5ccd58 RL	308
1531241c MC	309	EVP_PKEY PEM_read_bio_PrivateKey(BIO bp, EVP_PKEY *x, pem_password_cb cb,
	310	void *u)
	311	{
	312	return PEM_read_bio_PrivateKey_ex(bp, x, cb, u, NULL, NULL);
	313	}
	314
9256e8a2	315	PEM_write_cb_ex_fnsig(PrivateKey, EVP_PKEY, BIO, write_bio)
0f113f3e	316	{
fe75766c	317	IMPLEMENT_PEM_provided_write_body_vars(pkey, PrivateKey, propq);
f864a939 RL	318
f864a939 RL	319	IMPLEMENT_PEM_provided_write_body_pass();
fe75766c	320	IMPLEMENT_PEM_provided_write_body_main(pkey, bio);
f864a939 RL	321
f864a939 RL	322	legacy:
373d9012	323	if (x != NULL && (x->ameth == NULL \|\| x->ameth->priv_encode != NULL))
f864a939	324	return PEM_write_bio_PKCS8PrivateKey(out, x, enc,
de0799b0	325	(const char *)kstr, klen, cb, u);
f864a939	326	return PEM_write_bio_PrivateKey_traditional(out, x, enc, kstr, klen, cb, u);
05dba815	327	}
e4263314	328
9256e8a2 RL	329	PEM_write_cb_fnsig(PrivateKey, EVP_PKEY, BIO, write_bio)
	330	{
	331	return PEM_write_bio_PrivateKey_ex(out, x, enc, kstr, klen, cb, u,
	332	NULL, NULL);
	333	}
	334
4ce1025a RL	335	/*
	336	* Note: there is no way to tell a provided pkey encoder to use "traditional"
	337	* encoding. Therefore, if the pkey is provided, we try to take a copy
4ce1025a	338	*/
de0799b0	339	int PEM_write_bio_PrivateKey_traditional(BIO bp, const EVP_PKEY x,
05dba815	340	const EVP_CIPHER *enc,
de0799b0	341	const unsigned char *kstr, int klen,
05dba815 DSH	342	pem_password_cb cb, void u)
	343	{
	344	char pem_str[80];
4ce1025a RL	345	EVP_PKEY *copy = NULL;
	346	int ret;
	347
373d9012 MB	348	if (x == NULL)
	349	return 0;
	350
4ce1025a RL	351	if (evp_pkey_is_assigned(x)
	352	&& evp_pkey_is_provided(x)
	353	&& evp_pkey_copy_downgraded(&copy, x))
	354	x = copy;
87d91d22 RL	355
	356	if (x->ameth == NULL \|\| x->ameth->old_priv_encode == NULL) {
	357	ERR_raise(ERR_LIB_PEM, PEM_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
608aca8e	358	EVP_PKEY_free(copy);
87d91d22 RL	359	return 0;
87d91d22 RL	360	}
0f113f3e	361	BIO_snprintf(pem_str, 80, "%s PRIVATE KEY", x->ameth->pem_str);
4ce1025a RL	362	ret = PEM_ASN1_write_bio((i2d_of_void *)i2d_PrivateKey,
	363	pem_str, bp, x, enc, kstr, klen, cb, u);
	364
	365	EVP_PKEY_free(copy);
	366	return ret;
0f113f3e	367	}
e4263314	368
0d0791ee MC	369	static int no_password_cb(char buf, int num, int rwflag, void userdata)
	370	{
	371	return -1;
	372	}
	373
6e5ccd58	374	EVP_PKEY PEM_read_bio_Parameters_ex(BIO bp, EVP_PKEY **x,
b4250010	375	OSSL_LIB_CTX libctx, const char propq)
0f113f3e	376	{
0d0791ee MC	377	/*
	378	* PEM_read_bio_Parameters(_ex) should never ask for a password. Any attempt
	379	* to get a password just fails.
	380	*/
	381	return pem_read_bio_key(bp, x, no_password_cb, NULL, libctx, propq,
b4c4a2c6	382	EVP_PKEY_KEY_PARAMETERS);
6e5ccd58	383	}
1427d33c	384
6e5ccd58 RL	385	EVP_PKEY PEM_read_bio_Parameters(BIO bp, EVP_PKEY **x)
	386	{
	387	return PEM_read_bio_Parameters_ex(bp, x, NULL, NULL);
0f113f3e	388	}
db98bbc1	389
f864a939	390	PEM_write_fnsig(Parameters, EVP_PKEY, BIO, write_bio)
0f113f3e MC	391	{
0f113f3e MC	392	char pem_str[80];
fe75766c	393	IMPLEMENT_PEM_provided_write_body_vars(pkey, Parameters, NULL);
f864a939	394
fe75766c	395	IMPLEMENT_PEM_provided_write_body_main(pkey, bio);
f864a939 RL	396
f864a939 RL	397	legacy:
0f113f3e MC	398	if (!x->ameth \|\| !x->ameth->param_encode)
0f113f3e MC	399	return 0;
db98bbc1	400
0f113f3e MC	401	BIO_snprintf(pem_str, 80, "%s PARAMETERS", x->ameth->pem_str);
0f113f3e MC	402	return PEM_ASN1_write_bio((i2d_of_void *)x->ameth->param_encode,
f864a939	403	pem_str, out, x, NULL, NULL, 0, 0, NULL);
0f113f3e	404	}
e4263314	405
4b618848	406	#ifndef OPENSSL_NO_STDIO
1531241c	407	EVP_PKEY PEM_read_PrivateKey_ex(FILE fp, EVP_PKEY *x, pem_password_cb cb,
b4250010	408	void u, OSSL_LIB_CTX libctx,
1531241c	409	const char *propq)
0f113f3e MC	410	{
	411	BIO *b;
	412	EVP_PKEY *ret;
1241126a	413
0f113f3e	414	if ((b = BIO_new(BIO_s_file())) == NULL) {
9311d0c4	415	ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
26a7d938	416	return 0;
0f113f3e MC	417	}
0f113f3e MC	418	BIO_set_fp(b, fp, BIO_NOCLOSE);
1531241c	419	ret = PEM_read_bio_PrivateKey_ex(b, x, cb, u, libctx, propq);
0f113f3e	420	BIO_free(b);
26a7d938	421	return ret;
0f113f3e	422	}
e4263314	423
1531241c MC	424	EVP_PKEY PEM_read_PrivateKey(FILE fp, EVP_PKEY *x, pem_password_cb cb,
	425	void *u)
	426	{
	427	return PEM_read_PrivateKey_ex(fp, x, cb, u, NULL, NULL);
	428	}
	429
9256e8a2	430	PEM_write_cb_ex_fnsig(PrivateKey, EVP_PKEY, FILE, write)
0f113f3e MC	431	{
	432	BIO *b;
	433	int ret;
e4263314	434
9256e8a2	435	if ((b = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
9311d0c4	436	ERR_raise(ERR_LIB_PEM, ERR_R_BUF_LIB);
0f113f3e MC	437	return 0;
0f113f3e MC	438	}
9256e8a2 RL	439	ret = PEM_write_bio_PrivateKey_ex(b, x, enc, kstr, klen, cb, u,
9256e8a2 RL	440	libctx, propq);
0f113f3e MC	441	BIO_free(b);
	442	return ret;
	443	}
e4263314	444
9256e8a2 RL	445	PEM_write_cb_fnsig(PrivateKey, EVP_PKEY, FILE, write)
	446	{
	447	return PEM_write_PrivateKey_ex(out, x, enc, kstr, klen, cb, u, NULL, NULL);
	448	}
1241126a	449	#endif