[thirdparty/openssl.git] / apps / crl2p7.c

/* apps/crl2p7.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

/* This was written by Gordon Chaffee <chaffee@plateau.cs.berkeley.edu>
 * and donated 'to the cause' along with lots and lots of other fixes to
 * the library. */

#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <sys/stat.h>
#include "apps.h"
#include "err.h"
#include "evp.h"
#include "x509.h"
#include "pkcs7.h"
#include "pem.h"
#include "objects.h"

#ifndef NOPROTO
static int add_certs_from_file(STACK *stack, char *certfile);
#else
static int add_certs_from_file();
#endif

#undef PROG
#define PROG	crl2pkcs7_main

/* -inform arg	- input format - default PEM (one of DER, TXT or PEM)
 * -outform arg - output format - default PEM
 * -in arg	- input file - default stdin
 * -out arg	- output file - default stdout
 */

int MAIN(argc, argv)
int argc;
char **argv;
	{
	int i,badops=0;
	BIO *in=NULL,*out=NULL;
	int informat,outformat;
	char *infile,*outfile,*prog,*certfile;
	PKCS7 *p7 = NULL;
	PKCS7_SIGNED *p7s = NULL;
	X509_CRL *crl=NULL;
	STACK *certflst=NULL;
	STACK *crl_stack=NULL;
	STACK *cert_stack=NULL;
	int ret=1,nocrl=0;

	apps_startup();

	if (bio_err == NULL)
		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);

	infile=NULL;
	outfile=NULL;
	informat=FORMAT_PEM;
	outformat=FORMAT_PEM;

	prog=argv[0];
	argc--;
	argv++;
	while (argc >= 1)
		{
		if 	(strcmp(*argv,"-inform") == 0)
			{
			if (--argc < 1) goto bad;
			informat=str2fmt(*(++argv));
			}
		else if (strcmp(*argv,"-outform") == 0)
			{
			if (--argc < 1) goto bad;
			outformat=str2fmt(*(++argv));
			}
		else if (strcmp(*argv,"-in") == 0)
			{
			if (--argc < 1) goto bad;
			infile= *(++argv);
			}
		else if (strcmp(*argv,"-nocrl") == 0)
			{
			nocrl=1;
			}
		else if (strcmp(*argv,"-out") == 0)
			{
			if (--argc < 1) goto bad;
			outfile= *(++argv);
			}
		else if (strcmp(*argv,"-certfile") == 0)
			{
			if (--argc < 1) goto bad;
			if(!certflst) certflst = sk_new(NULL);
			sk_push(certflst,*(++argv));
			}
		else
			{
			BIO_printf(bio_err,"unknown option %s\n",*argv);
			badops=1;
			break;
			}
		argc--;
		argv++;
		}

	if (badops)
		{
bad:
		BIO_printf(bio_err,"%s [options] <infile >outfile\n",prog);
		BIO_printf(bio_err,"where options are\n");
		BIO_printf(bio_err," -inform arg    input format - one of DER TXT PEM\n");
		BIO_printf(bio_err," -outform arg   output format - one of DER TXT PEM\n");
		BIO_printf(bio_err," -in arg        input file\n");
		BIO_printf(bio_err," -out arg       output file\n");
		BIO_printf(bio_err," -certfile arg  certificates file of chain to a trusted CA\n");
		BIO_printf(bio_err,"                (can be used more than once)\n");
		BIO_printf(bio_err," -nocrl         no crl to load, just certs from '-certfile'\n");
		EXIT(1);
		}

	ERR_load_crypto_strings();

	in=BIO_new(BIO_s_file());
	out=BIO_new(BIO_s_file());
	if ((in == NULL) || (out == NULL))
		{
		ERR_print_errors(bio_err);
		goto end;
		}

	if (!nocrl)
		{
		if (infile == NULL)
			BIO_set_fp(in,stdin,BIO_NOCLOSE);
		else
			{
			if (BIO_read_filename(in,infile) <= 0)
				{
				perror(infile);
				goto end;
				}
			}

		if 	(informat == FORMAT_ASN1)
			crl=d2i_X509_CRL_bio(in,NULL);
		else if (informat == FORMAT_PEM)
			crl=PEM_read_bio_X509_CRL(in,NULL,NULL);
		else	{
			BIO_printf(bio_err,"bad input format specified for input crl\n");
			goto end;
			}
		if (crl == NULL)
			{
			BIO_printf(bio_err,"unable to load CRL\n");
			ERR_print_errors(bio_err);
			goto end;
			}
		}
	
	if ((p7=PKCS7_new()) == NULL) goto end;
	if ((p7s=PKCS7_SIGNED_new()) == NULL) goto end;
	p7->type=OBJ_nid2obj(NID_pkcs7_signed);
	p7->d.sign=p7s;
	p7s->contents->type=OBJ_nid2obj(NID_pkcs7_data);

	if (!ASN1_INTEGER_set(p7s->version,1)) goto end;
	if ((crl_stack=sk_new(NULL)) == NULL) goto end;
	p7s->crl=crl_stack;
	if (crl != NULL)
		{
		sk_push(crl_stack,(char *)crl);
		crl=NULL; /* now part of p7 for Freeing */
		}

	if ((cert_stack=sk_new(NULL)) == NULL) goto end;
	p7s->cert=cert_stack;

	if(certflst) for(i = 0; i < sk_num(certflst); i++) {
		certfile = sk_value(certflst, i);
		if (add_certs_from_file(cert_stack,certfile) < 0)
			{
			BIO_printf(bio_err, "error loading certificates\n");
			ERR_print_errors(bio_err);
			goto end;
			}
	}

	sk_free(certflst);

	if (outfile == NULL)
		BIO_set_fp(out,stdout,BIO_NOCLOSE);
	else
		{
		if (BIO_write_filename(out,outfile) <= 0)
			{
			perror(outfile);
			goto end;
			}
		}

	if 	(outformat == FORMAT_ASN1)
		i=i2d_PKCS7_bio(out,p7);
	else if (outformat == FORMAT_PEM)
		i=PEM_write_bio_PKCS7(out,p7);
	else	{
		BIO_printf(bio_err,"bad output format specified for outfile\n");
		goto end;
		}
	if (!i)
		{
		BIO_printf(bio_err,"unable to write pkcs7 object\n");
		ERR_print_errors(bio_err);
		goto end;
		}
	ret=0;
end:
	if (in != NULL) BIO_free(in);
	if (out != NULL) BIO_free(out);
	if (p7 != NULL) PKCS7_free(p7);
	if (crl != NULL) X509_CRL_free(crl);

	EXIT(ret);
	}

/*
 *----------------------------------------------------------------------
 * int add_certs_from_file
 *
 *	Read a list of certificates to be checked from a file.
 *
 * Results:
 *	number of certs added if successful, -1 if not.
 *----------------------------------------------------------------------
 */
static int add_certs_from_file(stack,certfile)
STACK *stack;
char *certfile;
	{
	struct stat st;
	BIO *in=NULL;
	int count=0;
	int ret= -1;
	STACK *sk=NULL;
	X509_INFO *xi;

	if ((stat(certfile,&st) != 0))
		{
		BIO_printf(bio_err,"unable to load the file, %s\n",certfile);
		goto end;
		}

	in=BIO_new(BIO_s_file());
	if ((in == NULL) || (BIO_read_filename(in,certfile) <= 0))
		{
		BIO_printf(bio_err,"error opening the file, %s\n",certfile);
		goto end;
		}

	/* This loads from a file, a stack of x509/crl/pkey sets */
	sk=PEM_X509_INFO_read_bio(in,NULL,NULL);
	if (sk == NULL) {
		BIO_printf(bio_err,"error reading the file, %s\n",certfile);
		goto end;
	}

	/* scan over it and pull out the CRL's */
	while (sk_num(sk))
		{
		xi=(X509_INFO *)sk_shift(sk);
		if (xi->x509 != NULL)
			{
			sk_push(stack,(char *)xi->x509);
			xi->x509=NULL;
			count++;
			}
		X509_INFO_free(xi);
		}

	ret=count;
end:
 	/* never need to Free x */
	if (in != NULL) BIO_free(in);
	if (sk != NULL) sk_free(sk);
	return(ret);
	}
Commit	Line	Data
d02b48c6	1	/* apps/crl2p7.c */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	/* This was written by Gordon Chaffee <chaffee@plateau.cs.berkeley.edu>
	60	* and donated 'to the cause' along with lots and lots of other fixes to
	61	* the library. */
	62
	63	#include <stdio.h>
	64	#include <string.h>
	65	#include <sys/types.h>
	66	#include <sys/stat.h>
67	#include "apps.h"
68	#include "err.h"
69	#include "evp.h"
70	#include "x509.h"
71	#include "pkcs7.h"
72	#include "pem.h"
73	#include "objects.h"
74
75	#ifndef NOPROTO
76	static int add_certs_from_file(STACK stack, char certfile);
77	#else
78	static int add_certs_from_file();
79	#endif
80
81	#undef PROG
82	#define PROG crl2pkcs7_main
83
84	/* -inform arg - input format - default PEM (one of DER, TXT or PEM)
85	* -outform arg - output format - default PEM
86	* -in arg - input file - default stdin
87	* -out arg - output file - default stdout
88	*/
89
90	int MAIN(argc, argv)
91	int argc;
92	char **argv;
93	{
94	int i,badops=0;
95	BIO in=NULL,out=NULL;
96	int informat,outformat;
97	char infile,outfile,prog,certfile;
98	PKCS7 *p7 = NULL;
99	PKCS7_SIGNED *p7s = NULL;
100	X509_CRL *crl=NULL;
9fe84296	101	STACK *certflst=NULL;
d02b48c6 RE	102	STACK *crl_stack=NULL;
	103	STACK *cert_stack=NULL;
	104	int ret=1,nocrl=0;
	105
	106	apps_startup();
	107
	108	if (bio_err == NULL)
	109	if ((bio_err=BIO_new(BIO_s_file())) != NULL)
58964a49	110	BIO_set_fp(bio_err,stderr,BIO_NOCLOSE\|BIO_FP_TEXT);
d02b48c6 RE	111
	112	infile=NULL;
	113	outfile=NULL;
	114	informat=FORMAT_PEM;
	115	outformat=FORMAT_PEM;
d02b48c6 RE	116
	117	prog=argv[0];
	118	argc--;
	119	argv++;
	120	while (argc >= 1)
	121	{
	122	if (strcmp(*argv,"-inform") == 0)
	123	{
	124	if (--argc < 1) goto bad;
	125	informat=str2fmt(*(++argv));
	126	}
	127	else if (strcmp(*argv,"-outform") == 0)
	128	{
	129	if (--argc < 1) goto bad;
	130	outformat=str2fmt(*(++argv));
	131	}
	132	else if (strcmp(*argv,"-in") == 0)
	133	{
	134	if (--argc < 1) goto bad;
	135	infile= *(++argv);
	136	}
	137	else if (strcmp(*argv,"-nocrl") == 0)
	138	{
	139	nocrl=1;
	140	}
	141	else if (strcmp(*argv,"-out") == 0)
	142	{
	143	if (--argc < 1) goto bad;
	144	outfile= *(++argv);
	145	}
	146	else if (strcmp(*argv,"-certfile") == 0)
	147	{
	148	if (--argc < 1) goto bad;
9fe84296 DSH	149	if(!certflst) certflst = sk_new(NULL);
9fe84296 DSH	150	sk_push(certflst,*(++argv));
d02b48c6 RE	151	}
	152	else
	153	{
	154	BIO_printf(bio_err,"unknown option %s\n",*argv);
	155	badops=1;
	156	break;
	157	}
	158	argc--;
	159	argv++;
	160	}
	161
	162	if (badops)
	163	{
	164	bad:
	165	BIO_printf(bio_err,"%s [options] <infile >outfile\n",prog);
	166	BIO_printf(bio_err,"where options are\n");
	167	BIO_printf(bio_err," -inform arg input format - one of DER TXT PEM\n");
	168	BIO_printf(bio_err," -outform arg output format - one of DER TXT PEM\n");
9fe84296	169	BIO_printf(bio_err," -in arg input file\n");
d02b48c6 RE	170	BIO_printf(bio_err," -out arg output file\n");
d02b48c6 RE	171	BIO_printf(bio_err," -certfile arg certificates file of chain to a trusted CA\n");
9fe84296	172	BIO_printf(bio_err," (can be used more than once)\n");
d02b48c6 RE	173	BIO_printf(bio_err," -nocrl no crl to load, just certs from '-certfile'\n");
	174	EXIT(1);
	175	}
	176
	177	ERR_load_crypto_strings();
	178
	179	in=BIO_new(BIO_s_file());
	180	out=BIO_new(BIO_s_file());
	181	if ((in == NULL) \|\| (out == NULL))
	182	{
	183	ERR_print_errors(bio_err);
	184	goto end;
	185	}
	186
	187	if (!nocrl)
	188	{
	189	if (infile == NULL)
	190	BIO_set_fp(in,stdin,BIO_NOCLOSE);
	191	else
	192	{
	193	if (BIO_read_filename(in,infile) <= 0)
	194	{
	195	perror(infile);
	196	goto end;
	197	}
	198	}
	199
	200	if (informat == FORMAT_ASN1)
	201	crl=d2i_X509_CRL_bio(in,NULL);
	202	else if (informat == FORMAT_PEM)
	203	crl=PEM_read_bio_X509_CRL(in,NULL,NULL);
	204	else {
	205	BIO_printf(bio_err,"bad input format specified for input crl\n");
	206	goto end;
	207	}
	208	if (crl == NULL)
	209	{
	210	BIO_printf(bio_err,"unable to load CRL\n");
	211	ERR_print_errors(bio_err);
	212	goto end;
	213	}
	214	}
	215
	216	if ((p7=PKCS7_new()) == NULL) goto end;
	217	if ((p7s=PKCS7_SIGNED_new()) == NULL) goto end;
	218	p7->type=OBJ_nid2obj(NID_pkcs7_signed);
	219	p7->d.sign=p7s;
	220	p7s->contents->type=OBJ_nid2obj(NID_pkcs7_data);
	221
	222	if (!ASN1_INTEGER_set(p7s->version,1)) goto end;
	223	if ((crl_stack=sk_new(NULL)) == NULL) goto end;
	224	p7s->crl=crl_stack;
	225	if (crl != NULL)
	226	{
	227	sk_push(crl_stack,(char *)crl);
	228	crl=NULL; /* now part of p7 for Freeing */
	229	}
	230
	231	if ((cert_stack=sk_new(NULL)) == NULL) goto end;
	232	p7s->cert=cert_stack;
	233
9fe84296 DSH	234	if(certflst) for(i = 0; i < sk_num(certflst); i++) {
9fe84296 DSH	235	certfile = sk_value(certflst, i);
d02b48c6 RE	236	if (add_certs_from_file(cert_stack,certfile) < 0)
d02b48c6 RE	237	{
9fe84296	238	BIO_printf(bio_err, "error loading certificates\n");
d02b48c6 RE	239	ERR_print_errors(bio_err);
	240	goto end;
	241	}
9fe84296 DSH	242	}
	243
	244	sk_free(certflst);
d02b48c6 RE	245
	246	if (outfile == NULL)
	247	BIO_set_fp(out,stdout,BIO_NOCLOSE);
	248	else
	249	{
	250	if (BIO_write_filename(out,outfile) <= 0)
	251	{
	252	perror(outfile);
	253	goto end;
	254	}
	255	}
	256
	257	if (outformat == FORMAT_ASN1)
	258	i=i2d_PKCS7_bio(out,p7);
	259	else if (outformat == FORMAT_PEM)
	260	i=PEM_write_bio_PKCS7(out,p7);
	261	else {
	262	BIO_printf(bio_err,"bad output format specified for outfile\n");
	263	goto end;
	264	}
	265	if (!i)
	266	{
	267	BIO_printf(bio_err,"unable to write pkcs7 object\n");
	268	ERR_print_errors(bio_err);
	269	goto end;
	270	}
	271	ret=0;
	272	end:
	273	if (in != NULL) BIO_free(in);
	274	if (out != NULL) BIO_free(out);
	275	if (p7 != NULL) PKCS7_free(p7);
	276	if (crl != NULL) X509_CRL_free(crl);
	277
	278	EXIT(ret);
	279	}
	280
	281	/*
	282	*----------------------------------------------------------------------
	283	* int add_certs_from_file
	284	*
	285	* Read a list of certificates to be checked from a file.
	286	*
	287	* Results:
	288	* number of certs added if successful, -1 if not.
	289	*----------------------------------------------------------------------
	290	*/
	291	static int add_certs_from_file(stack,certfile)
	292	STACK *stack;
	293	char *certfile;
	294	{
	295	struct stat st;
	296	BIO *in=NULL;
	297	int count=0;
	298	int ret= -1;
	299	STACK *sk=NULL;
	300	X509_INFO *xi;
	301
	302	if ((stat(certfile,&st) != 0))
	303	{
9fe84296	304	BIO_printf(bio_err,"unable to load the file, %s\n",certfile);
d02b48c6 RE	305	goto end;
	306	}
	307
	308	in=BIO_new(BIO_s_file());
	309	if ((in == NULL) \|\| (BIO_read_filename(in,certfile) <= 0))
	310	{
9fe84296	311	BIO_printf(bio_err,"error opening the file, %s\n",certfile);
d02b48c6 RE	312	goto end;
	313	}
	314
	315	/* This loads from a file, a stack of x509/crl/pkey sets */
	316	sk=PEM_X509_INFO_read_bio(in,NULL,NULL);
9fe84296 DSH	317	if (sk == NULL) {
	318	BIO_printf(bio_err,"error reading the file, %s\n",certfile);
	319	goto end;
	320	}
d02b48c6 RE	321
	322	/* scan over it and pull out the CRL's */
	323	while (sk_num(sk))
	324	{
	325	xi=(X509_INFO *)sk_shift(sk);
	326	if (xi->x509 != NULL)
	327	{
	328	sk_push(stack,(char *)xi->x509);
	329	xi->x509=NULL;
	330	count++;
	331	}
	332	X509_INFO_free(xi);
	333	}
	334
	335	ret=count;
	336	end:
	337	/* never need to Free x */
	338	if (in != NULL) BIO_free(in);
	339	if (sk != NULL) sk_free(sk);
	340	return(ret);
	341	}
	342