]>
Commit | Line | Data |
---|---|---|
0f113f3e | 1 | /* |
6738bf14 | 2 | * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved. |
3e4585c8 | 3 | * |
846e33c7 RS |
4 | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy | |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
3e4585c8 | 8 | */ |
846e33c7 | 9 | |
3e4585c8 DSH |
10 | #include <stdio.h> |
11 | #include <string.h> | |
12 | #include "apps.h" | |
dab2cd68 | 13 | #include "progs.h" |
3e4585c8 DSH |
14 | #include <openssl/pem.h> |
15 | #include <openssl/err.h> | |
16 | #include <openssl/evp.h> | |
17 | ||
7e1b7485 RS |
18 | typedef enum OPTION_choice { |
19 | OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, | |
b0004708 PY |
20 | OPT_IN, OPT_OUT, OPT_TEXT, OPT_NOOUT, |
21 | OPT_ENGINE, OPT_CHECK | |
7e1b7485 RS |
22 | } OPTION_CHOICE; |
23 | ||
44c83ebd | 24 | const OPTIONS pkeyparam_options[] = { |
7e1b7485 RS |
25 | {"help", OPT_HELP, '-', "Display this summary"}, |
26 | {"in", OPT_IN, '<', "Input file"}, | |
27 | {"out", OPT_OUT, '>', "Output file"}, | |
28 | {"text", OPT_TEXT, '-', "Print parameters as text"}, | |
29 | {"noout", OPT_NOOUT, '-', "Don't output encoded parameters"}, | |
30 | #ifndef OPENSSL_NO_ENGINE | |
31 | {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"}, | |
32 | #endif | |
b0004708 | 33 | {"check", OPT_CHECK, '-', "Check key param consistency"}, |
7e1b7485 RS |
34 | {NULL} |
35 | }; | |
3e4585c8 | 36 | |
7e1b7485 | 37 | int pkeyparam_main(int argc, char **argv) |
0f113f3e | 38 | { |
dd1abd44 | 39 | ENGINE *e = NULL; |
0f113f3e | 40 | BIO *in = NULL, *out = NULL; |
0f113f3e | 41 | EVP_PKEY *pkey = NULL; |
b0004708 | 42 | int text = 0, noout = 0, ret = 1, check = 0; |
7e1b7485 | 43 | OPTION_CHOICE o; |
333b070e | 44 | char *infile = NULL, *outfile = NULL, *prog; |
7e1b7485 RS |
45 | |
46 | prog = opt_init(argc, argv, pkeyparam_options); | |
47 | while ((o = opt_next()) != OPT_EOF) { | |
48 | switch (o) { | |
49 | case OPT_EOF: | |
50 | case OPT_ERR: | |
03358517 | 51 | opthelp: |
7e1b7485 RS |
52 | BIO_printf(bio_err, "%s: Use -help for summary.\n", prog); |
53 | goto end; | |
54 | case OPT_HELP: | |
55 | opt_help(pkeyparam_options); | |
56 | ret = 0; | |
57 | goto end; | |
58 | case OPT_IN: | |
59 | infile = opt_arg(); | |
60 | break; | |
61 | case OPT_OUT: | |
62 | outfile = opt_arg(); | |
63 | break; | |
64 | case OPT_ENGINE: | |
dd1abd44 | 65 | e = setup_engine(opt_arg(), 0); |
7e1b7485 RS |
66 | break; |
67 | case OPT_TEXT: | |
0f113f3e | 68 | text = 1; |
7e1b7485 RS |
69 | break; |
70 | case OPT_NOOUT: | |
0f113f3e | 71 | noout = 1; |
7e1b7485 | 72 | break; |
b0004708 PY |
73 | case OPT_CHECK: |
74 | check = 1; | |
75 | break; | |
7e1b7485 | 76 | } |
0f113f3e | 77 | } |
7e1b7485 | 78 | argc = opt_num_rest(); |
03358517 KR |
79 | if (argc != 0) |
80 | goto opthelp; | |
3e4585c8 | 81 | |
bdd58d98 | 82 | in = bio_open_default(infile, 'r', FORMAT_PEM); |
7e1b7485 RS |
83 | if (in == NULL) |
84 | goto end; | |
bdd58d98 | 85 | out = bio_open_default(outfile, 'w', FORMAT_PEM); |
7e1b7485 RS |
86 | if (out == NULL) |
87 | goto end; | |
0f113f3e | 88 | pkey = PEM_read_bio_Parameters(in, NULL); |
2234212c | 89 | if (pkey == NULL) { |
0f113f3e MC |
90 | BIO_printf(bio_err, "Error reading parameters\n"); |
91 | ERR_print_errors(bio_err); | |
92 | goto end; | |
93 | } | |
3e4585c8 | 94 | |
b0004708 PY |
95 | if (check) { |
96 | int r; | |
97 | EVP_PKEY_CTX *ctx; | |
98 | ||
99 | ctx = EVP_PKEY_CTX_new(pkey, e); | |
100 | if (ctx == NULL) { | |
101 | ERR_print_errors(bio_err); | |
102 | goto end; | |
103 | } | |
104 | ||
105 | r = EVP_PKEY_param_check(ctx); | |
106 | ||
107 | if (r == 1) { | |
108 | BIO_printf(out, "Parameters are valid\n"); | |
109 | } else { | |
110 | /* | |
111 | * Note: at least for RSA keys if this function returns | |
112 | * -1, there will be no error reasons. | |
113 | */ | |
114 | unsigned long err; | |
115 | ||
116 | BIO_printf(out, "Parameters are invalid\n"); | |
117 | ||
118 | while ((err = ERR_peek_error()) != 0) { | |
119 | BIO_printf(out, "Detailed error: %s\n", | |
120 | ERR_reason_error_string(err)); | |
121 | ERR_get_error(); /* remove err from error stack */ | |
122 | } | |
123 | } | |
124 | EVP_PKEY_CTX_free(ctx); | |
125 | } | |
126 | ||
0f113f3e MC |
127 | if (!noout) |
128 | PEM_write_bio_Parameters(out, pkey); | |
3e4585c8 | 129 | |
0f113f3e MC |
130 | if (text) |
131 | EVP_PKEY_print_params(out, pkey, 0, NULL); | |
3e4585c8 | 132 | |
0f113f3e | 133 | ret = 0; |
3e4585c8 | 134 | |
0f113f3e MC |
135 | end: |
136 | EVP_PKEY_free(pkey); | |
dd1abd44 | 137 | release_engine(e); |
0f113f3e MC |
138 | BIO_free_all(out); |
139 | BIO_free(in); | |
3e4585c8 | 140 | |
0f113f3e MC |
141 | return ret; |
142 | } |