[thirdparty/openssl.git] / apps / passwd.c

/* apps/passwd.c */

#if defined OPENSSL_NO_MD5 || defined CHARSET_EBCDIC
# define NO_MD5CRYPT_1
#endif

#if !defined(OPENSSL_NO_DES) || !defined(NO_MD5CRYPT_1)

#include <assert.h>
#include <string.h>

#include "apps.h"

#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/rand.h>
#ifndef OPENSSL_NO_DES
# include <openssl/des.h>
#endif
#ifndef NO_MD5CRYPT_1
# include <openssl/md5.h>
#endif


#undef PROG
#define PROG passwd_main


static unsigned const char cov_2char[64]={
	/* from crypto/des/fcrypt.c */
	0x2E,0x2F,0x30,0x31,0x32,0x33,0x34,0x35,
	0x36,0x37,0x38,0x39,0x41,0x42,0x43,0x44,
	0x45,0x46,0x47,0x48,0x49,0x4A,0x4B,0x4C,
	0x4D,0x4E,0x4F,0x50,0x51,0x52,0x53,0x54,
	0x55,0x56,0x57,0x58,0x59,0x5A,0x61,0x62,
	0x63,0x64,0x65,0x66,0x67,0x68,0x69,0x6A,
	0x6B,0x6C,0x6D,0x6E,0x6F,0x70,0x71,0x72,
	0x73,0x74,0x75,0x76,0x77,0x78,0x79,0x7A
};

static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
	char *passwd, BIO *out, int quiet, int table, int reverse,
	size_t pw_maxlen, int usecrypt, int use1, int useapr1);

/* -crypt        - standard Unix password algorithm (default)
 * -1            - MD5-based password algorithm
 * -apr1         - MD5-based password algorithm, Apache variant
 * -salt string  - salt
 * -in file      - read passwords from file
 * -stdin        - read passwords from stdin
 * -noverify     - never verify when reading password from terminal
 * -quiet        - no warnings
 * -table        - format output as table
 * -reverse      - switch table columns
 */

int MAIN(int, char **);

int MAIN(int argc, char **argv)
	{
	int ret = 1;
	char *infile = NULL;
	int in_stdin = 0;
	int in_noverify = 0;
	char *salt = NULL, *passwd = NULL, **passwds = NULL;
	char *salt_malloc = NULL, *passwd_malloc = NULL;
	size_t passwd_malloc_size = 0;
	int pw_source_defined = 0;
	BIO *in = NULL, *out = NULL;
	int i, badopt, opt_done;
	int passed_salt = 0, quiet = 0, table = 0, reverse = 0;
	int usecrypt = 0, use1 = 0, useapr1 = 0;
	size_t pw_maxlen = 0;

	apps_startup();

	if (bio_err == NULL)
		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);

	if (!load_config(bio_err, NULL))
		goto err;
	out = BIO_new(BIO_s_file());
	if (out == NULL)
		goto err;
	BIO_set_fp(out, stdout, BIO_NOCLOSE | BIO_FP_TEXT);
#ifdef OPENSSL_SYS_VMS
	{
	BIO *tmpbio = BIO_new(BIO_f_linebuffer());
	out = BIO_push(tmpbio, out);
	}
#endif

	badopt = 0, opt_done = 0;
	i = 0;
	while (!badopt && !opt_done && argv[++i] != NULL)
		{
		if (strcmp(argv[i], "-crypt") == 0)
			usecrypt = 1;
		else if (strcmp(argv[i], "-1") == 0)
			use1 = 1;
		else if (strcmp(argv[i], "-apr1") == 0)
			useapr1 = 1;
		else if (strcmp(argv[i], "-salt") == 0)
			{
			if ((argv[i+1] != NULL) && (salt == NULL))
				{
				passed_salt = 1;
				salt = argv[++i];
				}
			else
				badopt = 1;
			}
		else if (strcmp(argv[i], "-in") == 0)
			{
			if ((argv[i+1] != NULL) && !pw_source_defined)
				{
				pw_source_defined = 1;
				infile = argv[++i];
				}
			else
				badopt = 1;
			}
		else if (strcmp(argv[i], "-stdin") == 0)
			{
			if (!pw_source_defined)
				{
				pw_source_defined = 1;
				in_stdin = 1;
				}
			else
				badopt = 1;
			}
		else if (strcmp(argv[i], "-noverify") == 0)
			in_noverify = 1;
		else if (strcmp(argv[i], "-quiet") == 0)
			quiet = 1;
		else if (strcmp(argv[i], "-table") == 0)
			table = 1;
		else if (strcmp(argv[i], "-reverse") == 0)
			reverse = 1;
		else if (argv[i][0] == '-')
			badopt = 1;
		else if (!pw_source_defined)
			/* non-option arguments, use as passwords */
			{
			pw_source_defined = 1;
			passwds = &argv[i];
			opt_done = 1;
			}
		else
			badopt = 1;
		}

	if (!usecrypt && !use1 && !useapr1) /* use default */
		usecrypt = 1;
	if (usecrypt + use1 + useapr1 > 1) /* conflict */
		badopt = 1;

	/* reject unsupported algorithms */
#ifdef OPENSSL_NO_DES
	if (usecrypt) badopt = 1;
#endif
#ifdef NO_MD5CRYPT_1
	if (use1 || useapr1) badopt = 1;
#endif

	if (badopt) 
		{
		BIO_printf(bio_err, "Usage: passwd [options] [passwords]\n");
		BIO_printf(bio_err, "where options are\n");
#ifndef OPENSSL_NO_DES
		BIO_printf(bio_err, "-crypt             standard Unix password algorithm (default)\n");
#endif
#ifndef NO_MD5CRYPT_1
		BIO_printf(bio_err, "-1                 MD5-based password algorithm\n");
		BIO_printf(bio_err, "-apr1              MD5-based password algorithm, Apache variant\n");
#endif
		BIO_printf(bio_err, "-salt string       use provided salt\n");
		BIO_printf(bio_err, "-in file           read passwords from file\n");
		BIO_printf(bio_err, "-stdin             read passwords from stdin\n");
		BIO_printf(bio_err, "-noverify          never verify when reading password from terminal\n");
		BIO_printf(bio_err, "-quiet             no warnings\n");
		BIO_printf(bio_err, "-table             format output as table\n");
		BIO_printf(bio_err, "-reverse           switch table columns\n");
		
		goto err;
		}

	if ((infile != NULL) || in_stdin)
		{
		in = BIO_new(BIO_s_file());
		if (in == NULL)
			goto err;
		if (infile != NULL)
			{
			assert(in_stdin == 0);
			if (BIO_read_filename(in, infile) <= 0)
				goto err;
			}
		else
			{
			assert(in_stdin);
			BIO_set_fp(in, stdin, BIO_NOCLOSE);
			}
		}
	
	if (usecrypt)
		pw_maxlen = 8;
	else if (use1 || useapr1)
		pw_maxlen = 256; /* arbitrary limit, should be enough for most passwords */

	if (passwds == NULL)
		{
		/* no passwords on the command line */

		passwd_malloc_size = pw_maxlen + 2;
		/* longer than necessary so that we can warn about truncation */
		passwd = passwd_malloc = OPENSSL_malloc(passwd_malloc_size);
		if (passwd_malloc == NULL)
			goto err;
		}

	if ((in == NULL) && (passwds == NULL))
		{
		/* build a null-terminated list */
		static char *passwds_static[2] = {NULL, NULL};
		
		passwds = passwds_static;
		if (in == NULL)
			if (EVP_read_pw_string(passwd_malloc, passwd_malloc_size, "Password: ", !(passed_salt || in_noverify)) != 0)
				goto err;
		passwds[0] = passwd_malloc;
		}

	if (in == NULL)
		{
		assert(passwds != NULL);
		assert(*passwds != NULL);
		
		do /* loop over list of passwords */
			{
			passwd = *passwds++;
			if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, out,
				quiet, table, reverse, pw_maxlen, usecrypt, use1, useapr1))
				goto err;
			}
		while (*passwds != NULL);
		}
	else
		/* in != NULL */
		{
		int done;

		assert (passwd != NULL);
		do
			{
			int r = BIO_gets(in, passwd, pw_maxlen + 1);
			if (r > 0)
				{
				char *c = (strchr(passwd, '\n')) ;
				if (c != NULL)
					*c = 0; /* truncate at newline */
				else
					{
					/* ignore rest of line */
					char trash[BUFSIZ];
					do
						r = BIO_gets(in, trash, sizeof trash);
					while ((r > 0) && (!strchr(trash, '\n')));
					}
				
				if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, out,
					quiet, table, reverse, pw_maxlen, usecrypt, use1, useapr1))
					goto err;
				}
			done = (r <= 0);
			}
		while (!done);
		}
	ret = 0;

err:
	ERR_print_errors(bio_err);
	if (salt_malloc)
		OPENSSL_free(salt_malloc);
	if (passwd_malloc)
		OPENSSL_free(passwd_malloc);
	if (in)
		BIO_free(in);
	if (out)
		BIO_free_all(out);
	apps_shutdown();
	OPENSSL_EXIT(ret);
	}


#ifndef NO_MD5CRYPT_1
/* MD5-based password algorithm (should probably be available as a library
 * function; then the static buffer would not be acceptable).
 * For magic string "1", this should be compatible to the MD5-based BSD
 * password algorithm.
 * For 'magic' string "apr1", this is compatible to the MD5-based Apache
 * password algorithm.
 * (Apparently, the Apache password algorithm is identical except that the
 * 'magic' string was changed -- the laziest application of the NIH principle
 * I've ever encountered.)
 */
static char *md5crypt(const char *passwd, const char *magic, const char *salt)
	{
	static char out_buf[6 + 9 + 24 + 2]; /* "$apr1$..salt..$.......md5hash..........\0" */
	unsigned char buf[MD5_DIGEST_LENGTH];
	char *salt_out;
	int n;
	unsigned int i;
	EVP_MD_CTX md,md2;
	size_t passwd_len, salt_len;

	passwd_len = strlen(passwd);
	out_buf[0] = '$';
	out_buf[1] = 0;
	assert(strlen(magic) <= 4); /* "1" or "apr1" */
	strncat(out_buf, magic, 4);
	strncat(out_buf, "$", 1);
	strncat(out_buf, salt, 8);
	assert(strlen(out_buf) <= 6 + 8); /* "$apr1$..salt.." */
	salt_out = out_buf + 2 + strlen(magic);
	salt_len = strlen(salt_out);
	assert(salt_len <= 8);
	
	EVP_MD_CTX_init(&md);
	EVP_DigestInit_ex(&md,EVP_md5(), NULL);
	EVP_DigestUpdate(&md, passwd, passwd_len);
	EVP_DigestUpdate(&md, "$", 1);
	EVP_DigestUpdate(&md, magic, strlen(magic));
	EVP_DigestUpdate(&md, "$", 1);
	EVP_DigestUpdate(&md, salt_out, salt_len);
	
	EVP_MD_CTX_init(&md2);
	EVP_DigestInit_ex(&md2,EVP_md5(), NULL);
	EVP_DigestUpdate(&md2, passwd, passwd_len);
	EVP_DigestUpdate(&md2, salt_out, salt_len);
	EVP_DigestUpdate(&md2, passwd, passwd_len);
	EVP_DigestFinal_ex(&md2, buf, NULL);

	for (i = passwd_len; i > sizeof buf; i -= sizeof buf)
		EVP_DigestUpdate(&md, buf, sizeof buf);
	EVP_DigestUpdate(&md, buf, i);
	
	n = passwd_len;
	while (n)
		{
		EVP_DigestUpdate(&md, (n & 1) ? "\0" : passwd, 1);
		n >>= 1;
		}
	EVP_DigestFinal_ex(&md, buf, NULL);

	for (i = 0; i < 1000; i++)
		{
		EVP_DigestInit_ex(&md2,EVP_md5(), NULL);
		EVP_DigestUpdate(&md2, (i & 1) ? (unsigned const char *) passwd : buf,
		                       (i & 1) ? passwd_len : sizeof buf);
		if (i % 3)
			EVP_DigestUpdate(&md2, salt_out, salt_len);
		if (i % 7)
			EVP_DigestUpdate(&md2, passwd, passwd_len);
		EVP_DigestUpdate(&md2, (i & 1) ? buf : (unsigned const char *) passwd,
		                       (i & 1) ? sizeof buf : passwd_len);
		EVP_DigestFinal_ex(&md2, buf, NULL);
		}
	EVP_MD_CTX_cleanup(&md2);
	
	 {
		/* transform buf into output string */
	
		unsigned char buf_perm[sizeof buf];
		int dest, source;
		char *output;

		/* silly output permutation */
		for (dest = 0, source = 0; dest < 14; dest++, source = (source + 6) % 17)
			buf_perm[dest] = buf[source];
		buf_perm[14] = buf[5];
		buf_perm[15] = buf[11];
#ifndef PEDANTIC /* Unfortunately, this generates a "no effect" warning */
		assert(16 == sizeof buf_perm);
#endif
		
		output = salt_out + salt_len;
		assert(output == out_buf + strlen(out_buf));
		
		*output++ = '$';

		for (i = 0; i < 15; i += 3)
			{
			*output++ = cov_2char[buf_perm[i+2] & 0x3f];
			*output++ = cov_2char[((buf_perm[i+1] & 0xf) << 2) |
				                  (buf_perm[i+2] >> 6)];
			*output++ = cov_2char[((buf_perm[i] & 3) << 4) |
				                  (buf_perm[i+1] >> 4)];
			*output++ = cov_2char[buf_perm[i] >> 2];
			}
		assert(i == 15);
		*output++ = cov_2char[buf_perm[i] & 0x3f];
		*output++ = cov_2char[buf_perm[i] >> 6];
		*output = 0;
		assert(strlen(out_buf) < sizeof(out_buf));
	 }
	EVP_MD_CTX_cleanup(&md);

	return out_buf;
	}
#endif


static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
	char *passwd, BIO *out,	int quiet, int table, int reverse,
	size_t pw_maxlen, int usecrypt, int use1, int useapr1)
	{
	char *hash = NULL;

	assert(salt_p != NULL);
	assert(salt_malloc_p != NULL);

	/* first make sure we have a salt */
	if (!passed_salt)
		{
#ifndef OPENSSL_NO_DES
		if (usecrypt)
			{
			if (*salt_malloc_p == NULL)
				{
				*salt_p = *salt_malloc_p = OPENSSL_malloc(3);
				if (*salt_malloc_p == NULL)
					goto err;
				}
			if (RAND_pseudo_bytes((unsigned char *)*salt_p, 2) < 0)
				goto err;
			(*salt_p)[0] = cov_2char[(*salt_p)[0] & 0x3f]; /* 6 bits */
			(*salt_p)[1] = cov_2char[(*salt_p)[1] & 0x3f]; /* 6 bits */
			(*salt_p)[2] = 0;
#ifdef CHARSET_EBCDIC
			ascii2ebcdic(*salt_p, *salt_p, 2); /* des_crypt will convert
			                                    * back to ASCII */
#endif
			}
#endif /* !OPENSSL_NO_DES */

#ifndef NO_MD5CRYPT_1
		if (use1 || useapr1)
			{
			int i;
			
			if (*salt_malloc_p == NULL)
				{
				*salt_p = *salt_malloc_p = OPENSSL_malloc(9);
				if (*salt_malloc_p == NULL)
					goto err;
				}
			if (RAND_pseudo_bytes((unsigned char *)*salt_p, 8) < 0)
				goto err;
			
			for (i = 0; i < 8; i++)
				(*salt_p)[i] = cov_2char[(*salt_p)[i] & 0x3f]; /* 6 bits */
			(*salt_p)[8] = 0;
			}
#endif /* !NO_MD5CRYPT_1 */
		}
	
	assert(*salt_p != NULL);
	
	/* truncate password if necessary */
	if ((strlen(passwd) > pw_maxlen))
		{
		if (!quiet)
			/* XXX: really we should know how to print a size_t, not cast it */
			BIO_printf(bio_err, "Warning: truncating password to %u characters\n", (unsigned)pw_maxlen);
		passwd[pw_maxlen] = 0;
		}
	assert(strlen(passwd) <= pw_maxlen);
	
	/* now compute password hash */
#ifndef OPENSSL_NO_DES
	if (usecrypt)
		hash = DES_crypt(passwd, *salt_p);
#endif
#ifndef NO_MD5CRYPT_1
	if (use1 || useapr1)
		hash = md5crypt(passwd, (use1 ? "1" : "apr1"), *salt_p);
#endif
	assert(hash != NULL);

	if (table && !reverse)
		BIO_printf(out, "%s\t%s\n", passwd, hash);
	else if (table && reverse)
		BIO_printf(out, "%s\t%s\n", hash, passwd);
	else
		BIO_printf(out, "%s\n", hash);
	return 1;
	
err:
	return 0;
	}
#else

int MAIN(int argc, char **argv)
	{
	fputs("Program not available.\n", stderr)
	OPENSSL_EXIT(1);
	}
#endif
Commit	Line	Data
bb325c7d BM	1	/* apps/passwd.c */
bb325c7d BM	2
cf1b7d96	3	#if defined OPENSSL_NO_MD5 \|\| defined CHARSET_EBCDIC
1f4643a2	4	# define NO_MD5CRYPT_1
3ebf0be1 BM	5	#endif
3ebf0be1 BM	6
cf1b7d96	7	#if !defined(OPENSSL_NO_DES) \|\| !defined(NO_MD5CRYPT_1)
bb325c7d BM	8
	9	#include <assert.h>
	10	#include <string.h>
	11
	12	#include "apps.h"
	13
	14	#include <openssl/bio.h>
	15	#include <openssl/err.h>
	16	#include <openssl/evp.h>
	17	#include <openssl/rand.h>
cf1b7d96	18	#ifndef OPENSSL_NO_DES
125cc35b	19	# include <openssl/des.h>
bb325c7d	20	#endif
1f4643a2	21	#ifndef NO_MD5CRYPT_1
dbad1690	22	# include <openssl/md5.h>
e6e7b5f3 BM	23	#endif
e6e7b5f3 BM	24
bb325c7d BM	25
	26	#undef PROG
	27	#define PROG passwd_main
	28
	29
	30	static unsigned const char cov_2char[64]={
	31	/* from crypto/des/fcrypt.c */
	32	0x2E,0x2F,0x30,0x31,0x32,0x33,0x34,0x35,
	33	0x36,0x37,0x38,0x39,0x41,0x42,0x43,0x44,
	34	0x45,0x46,0x47,0x48,0x49,0x4A,0x4B,0x4C,
	35	0x4D,0x4E,0x4F,0x50,0x51,0x52,0x53,0x54,
	36	0x55,0x56,0x57,0x58,0x59,0x5A,0x61,0x62,
	37	0x63,0x64,0x65,0x66,0x67,0x68,0x69,0x6A,
	38	0x6B,0x6C,0x6D,0x6E,0x6F,0x70,0x71,0x72,
	39	0x73,0x74,0x75,0x76,0x77,0x78,0x79,0x7A
	40	};
	41
e6e7b5f3 BM	42	static int do_passwd(int passed_salt, char salt_p, char salt_malloc_p,
e6e7b5f3 BM	43	char passwd, BIO out, int quiet, int table, int reverse,
1f4643a2	44	size_t pw_maxlen, int usecrypt, int use1, int useapr1);
e6e7b5f3	45
cc244b37	46	/* -crypt - standard Unix password algorithm (default)
1f4643a2 BM	47	* -1 - MD5-based password algorithm
1f4643a2 BM	48	* -apr1 - MD5-based password algorithm, Apache variant
bb325c7d	49	* -salt string - salt
e6e7b5f3 BM	50	* -in file - read passwords from file
e6e7b5f3 BM	51	* -stdin - read passwords from stdin
db70a3fd	52	* -noverify - never verify when reading password from terminal
bb325c7d BM	53	* -quiet - no warnings
bb325c7d BM	54	* -table - format output as table
e6e7b5f3	55	* -reverse - switch table columns
bb325c7d BM	56	*/
bb325c7d BM	57
07fb39c3 RE	58	int MAIN(int, char **);
07fb39c3 RE	59
bb325c7d BM	60	int MAIN(int argc, char **argv)
	61	{
	62	int ret = 1;
e6e7b5f3 BM	63	char *infile = NULL;
e6e7b5f3 BM	64	int in_stdin = 0;
db70a3fd	65	int in_noverify = 0;
e6e7b5f3	66	char salt = NULL, passwd = NULL, **passwds = NULL;
bb325c7d	67	char salt_malloc = NULL, passwd_malloc = NULL;
7fc840cc	68	size_t passwd_malloc_size = 0;
e6e7b5f3 BM	69	int pw_source_defined = 0;
e6e7b5f3 BM	70	BIO in = NULL, out = NULL;
bb325c7d	71	int i, badopt, opt_done;
e6e7b5f3	72	int passed_salt = 0, quiet = 0, table = 0, reverse = 0;
1f4643a2	73	int usecrypt = 0, use1 = 0, useapr1 = 0;
bb325c7d BM	74	size_t pw_maxlen = 0;
	75
	76	apps_startup();
	77
	78	if (bio_err == NULL)
	79	if ((bio_err=BIO_new(BIO_s_file())) != NULL)
	80	BIO_set_fp(bio_err,stderr,BIO_NOCLOSE\|BIO_FP_TEXT);
3647bee2 DSH	81
	82	if (!load_config(bio_err, NULL))
	83	goto err;
bb325c7d BM	84	out = BIO_new(BIO_s_file());
	85	if (out == NULL)
	86	goto err;
	87	BIO_set_fp(out, stdout, BIO_NOCLOSE \| BIO_FP_TEXT);
bc36ee62	88	#ifdef OPENSSL_SYS_VMS
645749ef RL	89	{
	90	BIO *tmpbio = BIO_new(BIO_f_linebuffer());
	91	out = BIO_push(tmpbio, out);
	92	}
	93	#endif
bb325c7d BM	94
	95	badopt = 0, opt_done = 0;
	96	i = 0;
	97	while (!badopt && !opt_done && argv[++i] != NULL)
	98	{
	99	if (strcmp(argv[i], "-crypt") == 0)
efb41629	100	usecrypt = 1;
1f4643a2 BM	101	else if (strcmp(argv[i], "-1") == 0)
1f4643a2 BM	102	use1 = 1;
e6e7b5f3 BM	103	else if (strcmp(argv[i], "-apr1") == 0)
e6e7b5f3 BM	104	useapr1 = 1;
bb325c7d BM	105	else if (strcmp(argv[i], "-salt") == 0)
	106	{
	107	if ((argv[i+1] != NULL) && (salt == NULL))
	108	{
	109	passed_salt = 1;
	110	salt = argv[++i];
	111	}
e6e7b5f3 BM	112	else
	113	badopt = 1;
	114	}
	115	else if (strcmp(argv[i], "-in") == 0)
	116	{
	117	if ((argv[i+1] != NULL) && !pw_source_defined)
	118	{
	119	pw_source_defined = 1;
	120	infile = argv[++i];
	121	}
	122	else
	123	badopt = 1;
	124	}
	125	else if (strcmp(argv[i], "-stdin") == 0)
	126	{
	127	if (!pw_source_defined)
	128	{
	129	pw_source_defined = 1;
	130	in_stdin = 1;
	131	}
	132	else
	133	badopt = 1;
bb325c7d	134	}
db70a3fd BM	135	else if (strcmp(argv[i], "-noverify") == 0)
db70a3fd BM	136	in_noverify = 1;
bb325c7d BM	137	else if (strcmp(argv[i], "-quiet") == 0)
	138	quiet = 1;
	139	else if (strcmp(argv[i], "-table") == 0)
	140	table = 1;
e6e7b5f3 BM	141	else if (strcmp(argv[i], "-reverse") == 0)
e6e7b5f3 BM	142	reverse = 1;
bb325c7d BM	143	else if (argv[i][0] == '-')
bb325c7d BM	144	badopt = 1;
e6e7b5f3 BM	145	else if (!pw_source_defined)
e6e7b5f3 BM	146	/* non-option arguments, use as passwords */
bb325c7d	147	{
e6e7b5f3	148	pw_source_defined = 1;
bb325c7d BM	149	passwds = &argv[i];
	150	opt_done = 1;
	151	}
e6e7b5f3 BM	152	else
e6e7b5f3 BM	153	badopt = 1;
bb325c7d BM	154	}
bb325c7d BM	155
1f4643a2	156	if (!usecrypt && !use1 && !useapr1) /* use default */
efb41629	157	usecrypt = 1;
1f4643a2	158	if (usecrypt + use1 + useapr1 > 1) /* conflict */
bb325c7d BM	159	badopt = 1;
bb325c7d BM	160
e6e7b5f3	161	/* reject unsupported algorithms */
cf1b7d96	162	#ifdef OPENSSL_NO_DES
e6e7b5f3 BM	163	if (usecrypt) badopt = 1;
e6e7b5f3 BM	164	#endif
1f4643a2 BM	165	#ifdef NO_MD5CRYPT_1
1f4643a2 BM	166	if (use1 \|\| useapr1) badopt = 1;
e6e7b5f3 BM	167	#endif
e6e7b5f3 BM	168
bb325c7d BM	169	if (badopt)
	170	{
	171	BIO_printf(bio_err, "Usage: passwd [options] [passwords]\n");
	172	BIO_printf(bio_err, "where options are\n");
cf1b7d96	173	#ifndef OPENSSL_NO_DES
bb325c7d	174	BIO_printf(bio_err, "-crypt standard Unix password algorithm (default)\n");
e6e7b5f3	175	#endif
1f4643a2 BM	176	#ifndef NO_MD5CRYPT_1
	177	BIO_printf(bio_err, "-1 MD5-based password algorithm\n");
	178	BIO_printf(bio_err, "-apr1 MD5-based password algorithm, Apache variant\n");
e6e7b5f3	179	#endif
bb325c7d	180	BIO_printf(bio_err, "-salt string use provided salt\n");
e6e7b5f3 BM	181	BIO_printf(bio_err, "-in file read passwords from file\n");
e6e7b5f3 BM	182	BIO_printf(bio_err, "-stdin read passwords from stdin\n");
db70a3fd	183	BIO_printf(bio_err, "-noverify never verify when reading password from terminal\n");
bb325c7d BM	184	BIO_printf(bio_err, "-quiet no warnings\n");
bb325c7d BM	185	BIO_printf(bio_err, "-table format output as table\n");
e6e7b5f3	186	BIO_printf(bio_err, "-reverse switch table columns\n");
bb325c7d BM	187
	188	goto err;
	189	}
	190
e6e7b5f3 BM	191	if ((infile != NULL) \|\| in_stdin)
	192	{
	193	in = BIO_new(BIO_s_file());
	194	if (in == NULL)
	195	goto err;
	196	if (infile != NULL)
	197	{
	198	assert(in_stdin == 0);
	199	if (BIO_read_filename(in, infile) <= 0)
	200	goto err;
	201	}
	202	else
	203	{
	204	assert(in_stdin);
	205	BIO_set_fp(in, stdin, BIO_NOCLOSE);
	206	}
	207	}
	208
efb41629	209	if (usecrypt)
bb325c7d	210	pw_maxlen = 8;
1f4643a2	211	else if (use1 \|\| useapr1)
e6e7b5f3	212	pw_maxlen = 256; /* arbitrary limit, should be enough for most passwords */
bb325c7d BM	213
bb325c7d BM	214	if (passwds == NULL)
e6e7b5f3 BM	215	{
e6e7b5f3 BM	216	/* no passwords on the command line */
7fc840cc BM	217
7fc840cc BM	218	passwd_malloc_size = pw_maxlen + 2;
4adcfa05	219	/* longer than necessary so that we can warn about truncation */
26a3a48d	220	passwd = passwd_malloc = OPENSSL_malloc(passwd_malloc_size);
e6e7b5f3 BM	221	if (passwd_malloc == NULL)
	222	goto err;
	223	}
	224
	225	if ((in == NULL) && (passwds == NULL))
bb325c7d BM	226	{
	227	/* build a null-terminated list */
	228	static char *passwds_static[2] = {NULL, NULL};
e6e7b5f3	229
bb325c7d	230	passwds = passwds_static;
e6e7b5f3	231	if (in == NULL)
db70a3fd	232	if (EVP_read_pw_string(passwd_malloc, passwd_malloc_size, "Password: ", !(passed_salt \|\| in_noverify)) != 0)
e6e7b5f3	233	goto err;
bb325c7d BM	234	passwds[0] = passwd_malloc;
	235	}
	236
e6e7b5f3 BM	237	if (in == NULL)
	238	{
	239	assert(passwds != NULL);
	240	assert(*passwds != NULL);
	241
	242	do /* loop over list of passwords */
	243	{
	244	passwd = *passwds++;
	245	if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, out,
1f4643a2	246	quiet, table, reverse, pw_maxlen, usecrypt, use1, useapr1))
e6e7b5f3 BM	247	goto err;
	248	}
	249	while (*passwds != NULL);
	250	}
	251	else
	252	/* in != NULL */
bb325c7d	253	{
e6e7b5f3 BM	254	int done;
	255
	256	assert (passwd != NULL);
	257	do
bb325c7d	258	{
e6e7b5f3 BM	259	int r = BIO_gets(in, passwd, pw_maxlen + 1);
e6e7b5f3 BM	260	if (r > 0)
bb325c7d	261	{
e6e7b5f3 BM	262	char *c = (strchr(passwd, '\n')) ;
	263	if (c != NULL)
	264	c = 0; / truncate at newline */
	265	else
bb325c7d	266	{
e6e7b5f3 BM	267	/* ignore rest of line */
	268	char trash[BUFSIZ];
	269	do
	270	r = BIO_gets(in, trash, sizeof trash);
	271	while ((r > 0) && (!strchr(trash, '\n')));
bb325c7d	272	}
e6e7b5f3 BM	273
e6e7b5f3 BM	274	if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, out,
1f4643a2	275	quiet, table, reverse, pw_maxlen, usecrypt, use1, useapr1))
bb325c7d	276	goto err;
bb325c7d	277	}
e6e7b5f3	278	done = (r <= 0);
bb325c7d	279	}
e6e7b5f3	280	while (!done);
bb325c7d	281	}
cad4b840	282	ret = 0;
e6e7b5f3	283
bb325c7d BM	284	err:
	285	ERR_print_errors(bio_err);
	286	if (salt_malloc)
26a3a48d	287	OPENSSL_free(salt_malloc);
bb325c7d	288	if (passwd_malloc)
26a3a48d	289	OPENSSL_free(passwd_malloc);
e6e7b5f3 BM	290	if (in)
e6e7b5f3 BM	291	BIO_free(in);
bb325c7d	292	if (out)
645749ef	293	BIO_free_all(out);
c04f8cf4	294	apps_shutdown();
1c3e4a36	295	OPENSSL_EXIT(ret);
bb325c7d	296	}
e6e7b5f3 BM	297
e6e7b5f3 BM	298
1f4643a2 BM	299	#ifndef NO_MD5CRYPT_1
	300	/* MD5-based password algorithm (should probably be available as a library
	301	* function; then the static buffer would not be acceptable).
	302	* For magic string "1", this should be compatible to the MD5-based BSD
	303	* password algorithm.
	304	* For 'magic' string "apr1", this is compatible to the MD5-based Apache
	305	* password algorithm.
	306	* (Apparently, the Apache password algorithm is identical except that the
	307	* 'magic' string was changed -- the laziest application of the NIH principle
	308	* I've ever encountered.)
	309	*/
	310	static char md5crypt(const char passwd, const char magic, const char salt)
e6e7b5f3 BM	311	{
	312	static char out_buf[6 + 9 + 24 + 2]; /* "$apr1$..salt..$.......md5hash..........\0" */
	313	unsigned char buf[MD5_DIGEST_LENGTH];
	314	char *salt_out;
27545970 GT	315	int n;
27545970 GT	316	unsigned int i;
dbad1690	317	EVP_MD_CTX md,md2;
e6e7b5f3 BM	318	size_t passwd_len, salt_len;
	319
	320	passwd_len = strlen(passwd);
1f4643a2 BM	321	out_buf[0] = '$';
	322	out_buf[1] = 0;
	323	assert(strlen(magic) <= 4); /* "1" or "apr1" */
	324	strncat(out_buf, magic, 4);
	325	strncat(out_buf, "$", 1);
e6e7b5f3 BM	326	strncat(out_buf, salt, 8);
e6e7b5f3 BM	327	assert(strlen(out_buf) <= 6 + 8); /* "$apr1$..salt.." */
57108f0a	328	salt_out = out_buf + 2 + strlen(magic);
e6e7b5f3 BM	329	salt_len = strlen(salt_out);
	330	assert(salt_len <= 8);
	331
dbad1690	332	EVP_MD_CTX_init(&md);
20d2186c	333	EVP_DigestInit_ex(&md,EVP_md5(), NULL);
323f289c DSH	334	EVP_DigestUpdate(&md, passwd, passwd_len);
	335	EVP_DigestUpdate(&md, "$", 1);
	336	EVP_DigestUpdate(&md, magic, strlen(magic));
	337	EVP_DigestUpdate(&md, "$", 1);
	338	EVP_DigestUpdate(&md, salt_out, salt_len);
e6e7b5f3	339
dbad1690	340	EVP_MD_CTX_init(&md2);
20d2186c	341	EVP_DigestInit_ex(&md2,EVP_md5(), NULL);
dbad1690 BL	342	EVP_DigestUpdate(&md2, passwd, passwd_len);
	343	EVP_DigestUpdate(&md2, salt_out, salt_len);
	344	EVP_DigestUpdate(&md2, passwd, passwd_len);
20d2186c	345	EVP_DigestFinal_ex(&md2, buf, NULL);
e6e7b5f3	346
e6e7b5f3	347	for (i = passwd_len; i > sizeof buf; i -= sizeof buf)
323f289c DSH	348	EVP_DigestUpdate(&md, buf, sizeof buf);
323f289c DSH	349	EVP_DigestUpdate(&md, buf, i);
e6e7b5f3 BM	350
	351	n = passwd_len;
	352	while (n)
	353	{
323f289c	354	EVP_DigestUpdate(&md, (n & 1) ? "\0" : passwd, 1);
e6e7b5f3 BM	355	n >>= 1;
e6e7b5f3 BM	356	}
20d2186c	357	EVP_DigestFinal_ex(&md, buf, NULL);
e6e7b5f3 BM	358
	359	for (i = 0; i < 1000; i++)
	360	{
20d2186c	361	EVP_DigestInit_ex(&md2,EVP_md5(), NULL);
7d727231	362	EVP_DigestUpdate(&md2, (i & 1) ? (unsigned const char *) passwd : buf,
323f289c	363	(i & 1) ? passwd_len : sizeof buf);
e6e7b5f3	364	if (i % 3)
323f289c	365	EVP_DigestUpdate(&md2, salt_out, salt_len);
e6e7b5f3	366	if (i % 7)
323f289c	367	EVP_DigestUpdate(&md2, passwd, passwd_len);
7d727231	368	EVP_DigestUpdate(&md2, (i & 1) ? buf : (unsigned const char *) passwd,
323f289c	369	(i & 1) ? sizeof buf : passwd_len);
20d2186c	370	EVP_DigestFinal_ex(&md2, buf, NULL);
e6e7b5f3	371	}
dbad1690	372	EVP_MD_CTX_cleanup(&md2);
e6e7b5f3 BM	373
	374	{
	375	/* transform buf into output string */
	376
	377	unsigned char buf_perm[sizeof buf];
	378	int dest, source;
	379	char *output;
	380
	381	/* silly output permutation */
	382	for (dest = 0, source = 0; dest < 14; dest++, source = (source + 6) % 17)
	383	buf_perm[dest] = buf[source];
	384	buf_perm[14] = buf[5];
	385	buf_perm[15] = buf[11];
bd445703	386	#ifndef PEDANTIC /* Unfortunately, this generates a "no effect" warning */
e6e7b5f3	387	assert(16 == sizeof buf_perm);
bd445703	388	#endif
e6e7b5f3 BM	389
	390	output = salt_out + salt_len;
	391	assert(output == out_buf + strlen(out_buf));
	392
	393	*output++ = '$';
	394
	395	for (i = 0; i < 15; i += 3)
	396	{
	397	*output++ = cov_2char[buf_perm[i+2] & 0x3f];
	398	*output++ = cov_2char[((buf_perm[i+1] & 0xf) << 2) \|
	399	(buf_perm[i+2] >> 6)];
	400	*output++ = cov_2char[((buf_perm[i] & 3) << 4) \|
	401	(buf_perm[i+1] >> 4)];
	402	*output++ = cov_2char[buf_perm[i] >> 2];
	403	}
	404	assert(i == 15);
	405	*output++ = cov_2char[buf_perm[i] & 0x3f];
	406	*output++ = cov_2char[buf_perm[i] >> 6];
	407	*output = 0;
	408	assert(strlen(out_buf) < sizeof(out_buf));
	409	}
dbad1690	410	EVP_MD_CTX_cleanup(&md);
e6e7b5f3 BM	411
	412	return out_buf;
	413	}
bb325c7d	414	#endif
e6e7b5f3 BM	415
	416
	417	static int do_passwd(int passed_salt, char salt_p, char salt_malloc_p,
	418	char passwd, BIO out, int quiet, int table, int reverse,
1f4643a2	419	size_t pw_maxlen, int usecrypt, int use1, int useapr1)
e6e7b5f3 BM	420	{
	421	char *hash = NULL;
	422
	423	assert(salt_p != NULL);
	424	assert(salt_malloc_p != NULL);
	425
	426	/* first make sure we have a salt */
	427	if (!passed_salt)
	428	{
cf1b7d96	429	#ifndef OPENSSL_NO_DES
e6e7b5f3 BM	430	if (usecrypt)
	431	{
	432	if (*salt_malloc_p == NULL)
	433	{
26a3a48d	434	salt_p = salt_malloc_p = OPENSSL_malloc(3);
e6e7b5f3 BM	435	if (*salt_malloc_p == NULL)
	436	goto err;
	437	}
	438	if (RAND_pseudo_bytes((unsigned char )salt_p, 2) < 0)
	439	goto err;
	440	(salt_p)[0] = cov_2char[(salt_p)[0] & 0x3f]; /* 6 bits */
	441	(salt_p)[1] = cov_2char[(salt_p)[1] & 0x3f]; /* 6 bits */
	442	(*salt_p)[2] = 0;
	443	#ifdef CHARSET_EBCDIC
	444	ascii2ebcdic(salt_p, salt_p, 2); /* des_crypt will convert
	445	* back to ASCII */
	446	#endif
	447	}
cf1b7d96	448	#endif /* !OPENSSL_NO_DES */
e6e7b5f3	449
1f4643a2 BM	450	#ifndef NO_MD5CRYPT_1
1f4643a2 BM	451	if (use1 \|\| useapr1)
e6e7b5f3 BM	452	{
	453	int i;
	454
	455	if (*salt_malloc_p == NULL)
	456	{
26a3a48d	457	salt_p = salt_malloc_p = OPENSSL_malloc(9);
e6e7b5f3 BM	458	if (*salt_malloc_p == NULL)
	459	goto err;
	460	}
	461	if (RAND_pseudo_bytes((unsigned char )salt_p, 8) < 0)
	462	goto err;
	463
	464	for (i = 0; i < 8; i++)
	465	(salt_p)[i] = cov_2char[(salt_p)[i] & 0x3f]; /* 6 bits */
	466	(*salt_p)[8] = 0;
	467	}
1f4643a2	468	#endif /* !NO_MD5CRYPT_1 */
e6e7b5f3 BM	469	}
	470
	471	assert(*salt_p != NULL);
	472
	473	/* truncate password if necessary */
	474	if ((strlen(passwd) > pw_maxlen))
	475	{
	476	if (!quiet)
f18dd687 BL	477	/* XXX: really we should know how to print a size_t, not cast it */
f18dd687 BL	478	BIO_printf(bio_err, "Warning: truncating password to %u characters\n", (unsigned)pw_maxlen);
e6e7b5f3 BM	479	passwd[pw_maxlen] = 0;
	480	}
	481	assert(strlen(passwd) <= pw_maxlen);
	482
	483	/* now compute password hash */
cf1b7d96	484	#ifndef OPENSSL_NO_DES
e6e7b5f3	485	if (usecrypt)
125cc35b	486	hash = DES_crypt(passwd, *salt_p);
e6e7b5f3	487	#endif
1f4643a2 BM	488	#ifndef NO_MD5CRYPT_1
	489	if (use1 \|\| useapr1)
	490	hash = md5crypt(passwd, (use1 ? "1" : "apr1"), *salt_p);
e6e7b5f3 BM	491	#endif
	492	assert(hash != NULL);
	493
	494	if (table && !reverse)
	495	BIO_printf(out, "%s\t%s\n", passwd, hash);
	496	else if (table && reverse)
	497	BIO_printf(out, "%s\t%s\n", hash, passwd);
	498	else
	499	BIO_printf(out, "%s\n", hash);
	500	return 1;
	501
	502	err:
	503	return 0;
	504	}
3ebf0be1	505	#else
e6e7b5f3	506
3ebf0be1 BM	507	int MAIN(int argc, char **argv)
	508	{
	509	fputs("Program not available.\n", stderr)
1c3e4a36	510	OPENSSL_EXIT(1);
3ebf0be1 BM	511	}
3ebf0be1 BM	512	#endif