crypto/pem/pem.h

   1 /* crypto/pem/pem.h */
   2 /* Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58
  59 #ifndef HEADER_PEM_H
  60 # define HEADER_PEM_H
  61
  62 # include <openssl/e_os2.h>
  63 # ifndef OPENSSL_NO_BIO
  64 #  include <openssl/bio.h>
  65 # endif
  66 # ifndef OPENSSL_NO_STACK
  67 #  include <openssl/stack.h>
  68 # endif
  69 # include <openssl/evp.h>
  70 # include <openssl/x509.h>
  71 # include <openssl/pem2.h>
  72
  73 #ifdef  __cplusplus
  74 extern "C" {
  75 #endif
  76
  77 # define PEM_BUFSIZE             1024
  78
  79 # define PEM_OBJ_UNDEF           0
  80 # define PEM_OBJ_X509            1
  81 # define PEM_OBJ_X509_REQ        2
  82 # define PEM_OBJ_CRL             3
  83 # define PEM_OBJ_SSL_SESSION     4
  84 # define PEM_OBJ_PRIV_KEY        10
  85 # define PEM_OBJ_PRIV_RSA        11
  86 # define PEM_OBJ_PRIV_DSA        12
  87 # define PEM_OBJ_PRIV_DH         13
  88 # define PEM_OBJ_PUB_RSA         14
  89 # define PEM_OBJ_PUB_DSA         15
  90 # define PEM_OBJ_PUB_DH          16
  91 # define PEM_OBJ_DHPARAMS        17
  92 # define PEM_OBJ_DSAPARAMS       18
  93 # define PEM_OBJ_PRIV_RSA_PUBLIC 19
  94 # define PEM_OBJ_PRIV_ECDSA      20
  95 # define PEM_OBJ_PUB_ECDSA       21
  96 # define PEM_OBJ_ECPARAMETERS    22
  97
  98 # define PEM_ERROR               30
  99 # define PEM_DEK_DES_CBC         40
 100 # define PEM_DEK_IDEA_CBC        45
 101 # define PEM_DEK_DES_EDE         50
 102 # define PEM_DEK_DES_ECB         60
 103 # define PEM_DEK_RSA             70
 104 # define PEM_DEK_RSA_MD2         80
 105 # define PEM_DEK_RSA_MD5         90
 106
 107 # define PEM_MD_MD2              NID_md2
 108 # define PEM_MD_MD5              NID_md5
 109 # define PEM_MD_SHA              NID_sha
 110 # define PEM_MD_MD2_RSA          NID_md2WithRSAEncryption
 111 # define PEM_MD_MD5_RSA          NID_md5WithRSAEncryption
 112 # define PEM_MD_SHA_RSA          NID_sha1WithRSAEncryption
 113
 114 # define PEM_STRING_X509_OLD     "X509 CERTIFICATE"
 115 # define PEM_STRING_X509         "CERTIFICATE"
 116 # define PEM_STRING_X509_PAIR    "CERTIFICATE PAIR"
 117 # define PEM_STRING_X509_TRUSTED "TRUSTED CERTIFICATE"
 118 # define PEM_STRING_X509_REQ_OLD "NEW CERTIFICATE REQUEST"
 119 # define PEM_STRING_X509_REQ     "CERTIFICATE REQUEST"
 120 # define PEM_STRING_X509_CRL     "X509 CRL"
 121 # define PEM_STRING_EVP_PKEY     "ANY PRIVATE KEY"
 122 # define PEM_STRING_PUBLIC       "PUBLIC KEY"
 123 # define PEM_STRING_RSA          "RSA PRIVATE KEY"
 124 # define PEM_STRING_RSA_PUBLIC   "RSA PUBLIC KEY"
 125 # define PEM_STRING_DSA          "DSA PRIVATE KEY"
 126 # define PEM_STRING_DSA_PUBLIC   "DSA PUBLIC KEY"
 127 # define PEM_STRING_PKCS7        "PKCS7"
 128 # define PEM_STRING_PKCS7_SIGNED "PKCS #7 SIGNED DATA"
 129 # define PEM_STRING_PKCS8        "ENCRYPTED PRIVATE KEY"
 130 # define PEM_STRING_PKCS8INF     "PRIVATE KEY"
 131 # define PEM_STRING_DHPARAMS     "DH PARAMETERS"
 132 # define PEM_STRING_DHXPARAMS    "X9.42 DH PARAMETERS"
 133 # define PEM_STRING_SSL_SESSION  "SSL SESSION PARAMETERS"
 134 # define PEM_STRING_DSAPARAMS    "DSA PARAMETERS"
 135 # define PEM_STRING_ECDSA_PUBLIC "ECDSA PUBLIC KEY"
 136 # define PEM_STRING_ECPARAMETERS "EC PARAMETERS"
 137 # define PEM_STRING_ECPRIVATEKEY "EC PRIVATE KEY"
 138 # define PEM_STRING_PARAMETERS   "PARAMETERS"
 139 # define PEM_STRING_CMS          "CMS"
 140
 141   /*
 142    * Note that this structure is initialised by PEM_SealInit and cleaned up
 143    * by PEM_SealFinal (at least for now)
 144    */
 145 typedef struct PEM_Encode_Seal_st {
 146     EVP_ENCODE_CTX encode;
 147     EVP_MD_CTX md;
 148     EVP_CIPHER_CTX cipher;
 149 } PEM_ENCODE_SEAL_CTX;
 150
 151 /* enc_type is one off */
 152 # define PEM_TYPE_ENCRYPTED      10
 153 # define PEM_TYPE_MIC_ONLY       20
 154 # define PEM_TYPE_MIC_CLEAR      30
 155 # define PEM_TYPE_CLEAR          40
 156
 157 typedef struct pem_recip_st {
 158     char *name;
 159     X509_NAME *dn;
 160     int cipher;
 161     int key_enc;
 162     /*      char iv[8]; unused and wrong size */
 163 } PEM_USER;
 164
 165 typedef struct pem_ctx_st {
 166     int type;                   /* what type of object */
 167     struct {
 168         int version;
 169         int mode;
 170     } proc_type;
 171
 172     char *domain;
 173
 174     struct {
 175         int cipher;
 176         /*-
 177            unused, and wrong size
 178            unsigned char iv[8]; */
 179     } DEK_info;
 180
 181     PEM_USER *originator;
 182
 183     int num_recipient;
 184     PEM_USER **recipient;
 185
 186         /*-
 187             XXX(ben): don#t think this is used!
 188                 STACK *x509_chain;      / * certificate chain */
 189     EVP_MD *md;                 /* signature type */
 190
 191     int md_enc;                 /* is the md encrypted or not? */
 192     int md_len;                 /* length of md_data */
 193     char *md_data;              /* message digest, could be pkey encrypted */
 194
 195     EVP_CIPHER *dec;            /* date encryption cipher */
 196     int key_len;                /* key length */
 197     unsigned char *key;         /* key */
 198         /*-
 199             unused, and wrong size
 200            unsigned char iv[8]; */
 201
 202     int data_enc;               /* is the data encrypted */
 203     int data_len;
 204     unsigned char *data;
 205 } PEM_CTX;
 206
 207 /*
 208  * These macros make the PEM_read/PEM_write functions easier to maintain and
 209  * write. Now they are all implemented with either: IMPLEMENT_PEM_rw(...) or
 210  * IMPLEMENT_PEM_rw_cb(...)
 211  */
 212
 213 # ifdef OPENSSL_NO_FP_API
 214
 215 #  define IMPLEMENT_PEM_read_fp(name, type, str, asn1) /**/
 216 #  define IMPLEMENT_PEM_write_fp(name, type, str, asn1) /**/
 217 #  define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) /**/
 218 #  define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) /**/
 219 #  define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) /**/
 220 # else
 221
 222 #  define IMPLEMENT_PEM_read_fp(name, type, str, asn1) \
 223 type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u)\
 224 { \
 225 return PEM_ASN1_read((d2i_of_void *)d2i_##asn1, str,fp,(void **)x,cb,u); \
 226 }
 227
 228 #  define IMPLEMENT_PEM_write_fp(name, type, str, asn1) \
 229 int PEM_write_##name(FILE *fp, type *x) \
 230 { \
 231 return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,NULL,NULL,0,NULL,NULL); \
 232 }
 233
 234 #  define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) \
 235 int PEM_write_##name(FILE *fp, const type *x) \
 236 { \
 237 return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,(void *)x,NULL,NULL,0,NULL,NULL); \
 238 }
 239
 240 #  define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) \
 241 int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
 242              unsigned char *kstr, int klen, pem_password_cb *cb, \
 243                   void *u) \
 244         { \
 245         return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u); \
 246         }
 247
 248 #  define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) \
 249 int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
 250              unsigned char *kstr, int klen, pem_password_cb *cb, \
 251                   void *u) \
 252         { \
 253         return PEM_ASN1_write((i2d_of_void *)i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u); \
 254         }
 255
 256 # endif
 257
 258 # define IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
 259 type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u)\
 260 { \
 261 return PEM_ASN1_read_bio((d2i_of_void *)d2i_##asn1, str,bp,(void **)x,cb,u); \
 262 }
 263
 264 # define IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
 265 int PEM_write_bio_##name(BIO *bp, type *x) \
 266 { \
 267 return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,x,NULL,NULL,0,NULL,NULL); \
 268 }
 269
 270 # define IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
 271 int PEM_write_bio_##name(BIO *bp, const type *x) \
 272 { \
 273 return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,(void *)x,NULL,NULL,0,NULL,NULL); \
 274 }
 275
 276 # define IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
 277 int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
 278              unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
 279         { \
 280         return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,x,enc,kstr,klen,cb,u); \
 281         }
 282
 283 # define IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
 284 int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
 285              unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
 286         { \
 287         return PEM_ASN1_write_bio((i2d_of_void *)i2d_##asn1,str,bp,(void *)x,enc,kstr,klen,cb,u); \
 288         }
 289
 290 # define IMPLEMENT_PEM_write(name, type, str, asn1) \
 291         IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
 292         IMPLEMENT_PEM_write_fp(name, type, str, asn1)
 293
 294 # define IMPLEMENT_PEM_write_const(name, type, str, asn1) \
 295         IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
 296         IMPLEMENT_PEM_write_fp_const(name, type, str, asn1)
 297
 298 # define IMPLEMENT_PEM_write_cb(name, type, str, asn1) \
 299         IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
 300         IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1)
 301
 302 # define IMPLEMENT_PEM_write_cb_const(name, type, str, asn1) \
 303         IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
 304         IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1)
 305
 306 # define IMPLEMENT_PEM_read(name, type, str, asn1) \
 307         IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
 308         IMPLEMENT_PEM_read_fp(name, type, str, asn1)
 309
 310 # define IMPLEMENT_PEM_rw(name, type, str, asn1) \
 311         IMPLEMENT_PEM_read(name, type, str, asn1) \
 312         IMPLEMENT_PEM_write(name, type, str, asn1)
 313
 314 # define IMPLEMENT_PEM_rw_const(name, type, str, asn1) \
 315         IMPLEMENT_PEM_read(name, type, str, asn1) \
 316         IMPLEMENT_PEM_write_const(name, type, str, asn1)
 317
 318 # define IMPLEMENT_PEM_rw_cb(name, type, str, asn1) \
 319         IMPLEMENT_PEM_read(name, type, str, asn1) \
 320         IMPLEMENT_PEM_write_cb(name, type, str, asn1)
 321
 322 /* These are the same except they are for the declarations */
 323
 324 # if defined(OPENSSL_NO_FP_API)
 325
 326 #  define DECLARE_PEM_read_fp(name, type) /**/
 327 #  define DECLARE_PEM_write_fp(name, type) /**/
 328 #  define DECLARE_PEM_write_cb_fp(name, type) /**/
 329 # else
 330
 331 #  define DECLARE_PEM_read_fp(name, type) \
 332         type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u);
 333
 334 #  define DECLARE_PEM_write_fp(name, type) \
 335         int PEM_write_##name(FILE *fp, type *x);
 336
 337 #  define DECLARE_PEM_write_fp_const(name, type) \
 338         int PEM_write_##name(FILE *fp, const type *x);
 339
 340 #  define DECLARE_PEM_write_cb_fp(name, type) \
 341         int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
 342              unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
 343
 344 # endif
 345
 346 # ifndef OPENSSL_NO_BIO
 347 #  define DECLARE_PEM_read_bio(name, type) \
 348         type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u);
 349
 350 #  define DECLARE_PEM_write_bio(name, type) \
 351         int PEM_write_bio_##name(BIO *bp, type *x);
 352
 353 #  define DECLARE_PEM_write_bio_const(name, type) \
 354         int PEM_write_bio_##name(BIO *bp, const type *x);
 355
 356 #  define DECLARE_PEM_write_cb_bio(name, type) \
 357         int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
 358              unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
 359
 360 # else
 361
 362 #  define DECLARE_PEM_read_bio(name, type) /**/
 363 #  define DECLARE_PEM_write_bio(name, type) /**/
 364 #  define DECLARE_PEM_write_bio_const(name, type) /**/
 365 #  define DECLARE_PEM_write_cb_bio(name, type) /**/
 366 # endif
 367 # define DECLARE_PEM_write(name, type) \
 368         DECLARE_PEM_write_bio(name, type) \
 369         DECLARE_PEM_write_fp(name, type)
 370 # define DECLARE_PEM_write_const(name, type) \
 371         DECLARE_PEM_write_bio_const(name, type) \
 372         DECLARE_PEM_write_fp_const(name, type)
 373 # define DECLARE_PEM_write_cb(name, type) \
 374         DECLARE_PEM_write_cb_bio(name, type) \
 375         DECLARE_PEM_write_cb_fp(name, type)
 376 # define DECLARE_PEM_read(name, type) \
 377         DECLARE_PEM_read_bio(name, type) \
 378         DECLARE_PEM_read_fp(name, type)
 379 # define DECLARE_PEM_rw(name, type) \
 380         DECLARE_PEM_read(name, type) \
 381         DECLARE_PEM_write(name, type)
 382 # define DECLARE_PEM_rw_const(name, type) \
 383         DECLARE_PEM_read(name, type) \
 384         DECLARE_PEM_write_const(name, type)
 385 # define DECLARE_PEM_rw_cb(name, type) \
 386         DECLARE_PEM_read(name, type) \
 387         DECLARE_PEM_write_cb(name, type)
 388 # if 1
 389 /* "userdata": new with OpenSSL 0.9.4 */
 390 typedef int pem_password_cb (char *buf, int size, int rwflag, void *userdata);
 391 # else
 392 /* OpenSSL 0.9.3, 0.9.3a */
 393 typedef int pem_password_cb (char *buf, int size, int rwflag);
 394 # endif
 395
 396 int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher);
 397 int PEM_do_header(EVP_CIPHER_INFO *cipher, unsigned char *data, long *len,
 398                   pem_password_cb *callback, void *u);
 399
 400 # ifndef OPENSSL_NO_BIO
 401 int PEM_read_bio(BIO *bp, char **name, char **header,
 402                  unsigned char **data, long *len);
 403 int PEM_write_bio(BIO *bp, const char *name, const char *hdr,
 404                   const unsigned char *data, long len);
 405 int PEM_bytes_read_bio(unsigned char **pdata, long *plen, char **pnm,
 406                        const char *name, BIO *bp, pem_password_cb *cb,
 407                        void *u);
 408 void *PEM_ASN1_read_bio(d2i_of_void *d2i, const char *name, BIO *bp, void **x,
 409                         pem_password_cb *cb, void *u);
 410 int PEM_ASN1_write_bio(i2d_of_void *i2d, const char *name, BIO *bp, void *x,
 411                        const EVP_CIPHER *enc, unsigned char *kstr, int klen,
 412                        pem_password_cb *cb, void *u);
 413
 414 STACK_OF(X509_INFO) *PEM_X509_INFO_read_bio(BIO *bp, STACK_OF(X509_INFO) *sk,
 415                                             pem_password_cb *cb, void *u);
 416 int PEM_X509_INFO_write_bio(BIO *bp, X509_INFO *xi, EVP_CIPHER *enc,
 417                             unsigned char *kstr, int klen,
 418                             pem_password_cb *cd, void *u);
 419 # endif
 420
 421 int PEM_read(FILE *fp, char **name, char **header,
 422              unsigned char **data, long *len);
 423 int PEM_write(FILE *fp, const char *name, const char *hdr,
 424               const unsigned char *data, long len);
 425 void *PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
 426                     pem_password_cb *cb, void *u);
 427 int PEM_ASN1_write(i2d_of_void *i2d, const char *name, FILE *fp,
 428                    void *x, const EVP_CIPHER *enc, unsigned char *kstr,
 429                    int klen, pem_password_cb *callback, void *u);
 430 STACK_OF(X509_INFO) *PEM_X509_INFO_read(FILE *fp, STACK_OF(X509_INFO) *sk,
 431                                         pem_password_cb *cb, void *u);
 432
 433 int PEM_SealInit(PEM_ENCODE_SEAL_CTX *ctx, EVP_CIPHER *type,
 434                  EVP_MD *md_type, unsigned char **ek, int *ekl,
 435                  unsigned char *iv, EVP_PKEY **pubk, int npubk);
 436 void PEM_SealUpdate(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *out, int *outl,
 437                     unsigned char *in, int inl);
 438 int PEM_SealFinal(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *sig, int *sigl,
 439                   unsigned char *out, int *outl, EVP_PKEY *priv);
 440
 441 void PEM_SignInit(EVP_MD_CTX *ctx, EVP_MD *type);
 442 void PEM_SignUpdate(EVP_MD_CTX *ctx, unsigned char *d, unsigned int cnt);
 443 int PEM_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
 444                   unsigned int *siglen, EVP_PKEY *pkey);
 445
 446 int PEM_def_callback(char *buf, int num, int w, void *key);
 447 void PEM_proc_type(char *buf, int type);
 448 void PEM_dek_info(char *buf, const char *type, int len, char *str);
 449
 450 # include <openssl/symhacks.h>
 451
 452 DECLARE_PEM_rw(X509, X509)
 453 DECLARE_PEM_rw(X509_AUX, X509)
 454 DECLARE_PEM_rw(X509_CERT_PAIR, X509_CERT_PAIR)
 455 DECLARE_PEM_rw(X509_REQ, X509_REQ) DECLARE_PEM_write(X509_REQ_NEW, X509_REQ)
 456 DECLARE_PEM_rw(X509_CRL, X509_CRL)
 457 DECLARE_PEM_rw(PKCS7, PKCS7)
 458 DECLARE_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE)
 459 DECLARE_PEM_rw(PKCS8, X509_SIG)
 460 DECLARE_PEM_rw(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
 461 # ifndef OPENSSL_NO_RSA
 462 DECLARE_PEM_rw_cb(RSAPrivateKey, RSA)
 463 DECLARE_PEM_rw_const(RSAPublicKey, RSA) DECLARE_PEM_rw(RSA_PUBKEY, RSA)
 464 # endif
 465 # ifndef OPENSSL_NO_DSA
 466 DECLARE_PEM_rw_cb(DSAPrivateKey, DSA)
 467 DECLARE_PEM_rw(DSA_PUBKEY, DSA) DECLARE_PEM_rw_const(DSAparams, DSA)
 468 # endif
 469 # ifndef OPENSSL_NO_EC
 470 DECLARE_PEM_rw_const(ECPKParameters, EC_GROUP)
 471 DECLARE_PEM_rw_cb(ECPrivateKey, EC_KEY) DECLARE_PEM_rw(EC_PUBKEY, EC_KEY)
 472 # endif
 473 # ifndef OPENSSL_NO_DH
 474 DECLARE_PEM_rw_const(DHparams, DH) DECLARE_PEM_write_const(DHxparams, DH)
 475 # endif
 476 DECLARE_PEM_rw_cb(PrivateKey, EVP_PKEY) DECLARE_PEM_rw(PUBKEY, EVP_PKEY)
 477
 478 int PEM_write_bio_PKCS8PrivateKey_nid(BIO *bp, EVP_PKEY *x, int nid,
 479                                       char *kstr, int klen,
 480                                       pem_password_cb *cb, void *u);
 481 int PEM_write_bio_PKCS8PrivateKey(BIO *, EVP_PKEY *, const EVP_CIPHER *,
 482                                   char *, int, pem_password_cb *, void *);
 483 int i2d_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
 484                             char *kstr, int klen,
 485                             pem_password_cb *cb, void *u);
 486 int i2d_PKCS8PrivateKey_nid_bio(BIO *bp, EVP_PKEY *x, int nid,
 487                                 char *kstr, int klen,
 488                                 pem_password_cb *cb, void *u);
 489 EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
 490                                   void *u);
 491
 492 int i2d_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
 493                            char *kstr, int klen,
 494                            pem_password_cb *cb, void *u);
 495 int i2d_PKCS8PrivateKey_nid_fp(FILE *fp, EVP_PKEY *x, int nid,
 496                                char *kstr, int klen,
 497                                pem_password_cb *cb, void *u);
 498 int PEM_write_PKCS8PrivateKey_nid(FILE *fp, EVP_PKEY *x, int nid,
 499                                   char *kstr, int klen,
 500                                   pem_password_cb *cb, void *u);
 501
 502 EVP_PKEY *d2i_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY **x, pem_password_cb *cb,
 503                                  void *u);
 504
 505 int PEM_write_PKCS8PrivateKey(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
 506                               char *kstr, int klen, pem_password_cb *cd,
 507                               void *u);
 508
 509 EVP_PKEY *PEM_read_bio_Parameters(BIO *bp, EVP_PKEY **x);
 510 int PEM_write_bio_Parameters(BIO *bp, EVP_PKEY *x);
 511
 512 EVP_PKEY *b2i_PrivateKey(const unsigned char **in, long length);
 513 EVP_PKEY *b2i_PublicKey(const unsigned char **in, long length);
 514 EVP_PKEY *b2i_PrivateKey_bio(BIO *in);
 515 EVP_PKEY *b2i_PublicKey_bio(BIO *in);
 516 int i2b_PrivateKey_bio(BIO *out, EVP_PKEY *pk);
 517 int i2b_PublicKey_bio(BIO *out, EVP_PKEY *pk);
 518 # ifndef OPENSSL_NO_RC4
 519 EVP_PKEY *b2i_PVK_bio(BIO *in, pem_password_cb *cb, void *u);
 520 int i2b_PVK_bio(BIO *out, EVP_PKEY *pk, int enclevel,
 521                 pem_password_cb *cb, void *u);
 522 # endif
 523
 524 /* BEGIN ERROR CODES */
 525 /*
 526  * The following lines are auto generated by the script mkerr.pl. Any changes
 527  * made after this point may be overwritten when the script is next run.
 528  */
 529 void ERR_load_PEM_strings(void);
 530
 531 /* Error codes for the PEM functions. */
 532
 533 /* Function codes. */
 534 # define PEM_F_B2I_DSS                                    127
 535 # define PEM_F_B2I_PVK_BIO                                128
 536 # define PEM_F_B2I_RSA                                    129
 537 # define PEM_F_CHECK_BITLEN_DSA                           130
 538 # define PEM_F_CHECK_BITLEN_RSA                           131
 539 # define PEM_F_D2I_PKCS8PRIVATEKEY_BIO                    120
 540 # define PEM_F_D2I_PKCS8PRIVATEKEY_FP                     121
 541 # define PEM_F_DO_B2I                                     132
 542 # define PEM_F_DO_B2I_BIO                                 133
 543 # define PEM_F_DO_BLOB_HEADER                             134
 544 # define PEM_F_DO_PK8PKEY                                 126
 545 # define PEM_F_DO_PK8PKEY_FP                              125
 546 # define PEM_F_DO_PVK_BODY                                135
 547 # define PEM_F_DO_PVK_HEADER                              136
 548 # define PEM_F_I2B_PVK                                    137
 549 # define PEM_F_I2B_PVK_BIO                                138
 550 # define PEM_F_LOAD_IV                                    101
 551 # define PEM_F_PEM_ASN1_READ                              102
 552 # define PEM_F_PEM_ASN1_READ_BIO                          103
 553 # define PEM_F_PEM_ASN1_WRITE                             104
 554 # define PEM_F_PEM_ASN1_WRITE_BIO                         105
 555 # define PEM_F_PEM_DEF_CALLBACK                           100
 556 # define PEM_F_PEM_DO_HEADER                              106
 557 # define PEM_F_PEM_F_PEM_WRITE_PKCS8PRIVATEKEY            118
 558 # define PEM_F_PEM_GET_EVP_CIPHER_INFO                    107
 559 # define PEM_F_PEM_PK8PKEY                                119
 560 # define PEM_F_PEM_READ                                   108
 561 # define PEM_F_PEM_READ_BIO                               109
 562 # define PEM_F_PEM_READ_BIO_DHPARAMS                      141
 563 # define PEM_F_PEM_READ_BIO_PARAMETERS                    140
 564 # define PEM_F_PEM_READ_BIO_PRIVATEKEY                    123
 565 # define PEM_F_PEM_READ_DHPARAMS                          142
 566 # define PEM_F_PEM_READ_PRIVATEKEY                        124
 567 # define PEM_F_PEM_SEALFINAL                              110
 568 # define PEM_F_PEM_SEALINIT                               111
 569 # define PEM_F_PEM_SIGNFINAL                              112
 570 # define PEM_F_PEM_WRITE                                  113
 571 # define PEM_F_PEM_WRITE_BIO                              114
 572 # define PEM_F_PEM_WRITE_PRIVATEKEY                       139
 573 # define PEM_F_PEM_X509_INFO_READ                         115
 574 # define PEM_F_PEM_X509_INFO_READ_BIO                     116
 575 # define PEM_F_PEM_X509_INFO_WRITE_BIO                    117
 576
 577 /* Reason codes. */
 578 # define PEM_R_BAD_BASE64_DECODE                          100
 579 # define PEM_R_BAD_DECRYPT                                101
 580 # define PEM_R_BAD_END_LINE                               102
 581 # define PEM_R_BAD_IV_CHARS                               103
 582 # define PEM_R_BAD_MAGIC_NUMBER                           116
 583 # define PEM_R_BAD_PASSWORD_READ                          104
 584 # define PEM_R_BAD_VERSION_NUMBER                         117
 585 # define PEM_R_BIO_WRITE_FAILURE                          118
 586 # define PEM_R_CIPHER_IS_NULL                             127
 587 # define PEM_R_ERROR_CONVERTING_PRIVATE_KEY               115
 588 # define PEM_R_EXPECTING_PRIVATE_KEY_BLOB                 119
 589 # define PEM_R_EXPECTING_PUBLIC_KEY_BLOB                  120
 590 # define PEM_R_INCONSISTENT_HEADER                        121
 591 # define PEM_R_KEYBLOB_HEADER_PARSE_ERROR                 122
 592 # define PEM_R_KEYBLOB_TOO_SHORT                          123
 593 # define PEM_R_NOT_DEK_INFO                               105
 594 # define PEM_R_NOT_ENCRYPTED                              106
 595 # define PEM_R_NOT_PROC_TYPE                              107
 596 # define PEM_R_NO_START_LINE                              108
 597 # define PEM_R_PROBLEMS_GETTING_PASSWORD                  109
 598 # define PEM_R_PUBLIC_KEY_NO_RSA                          110
 599 # define PEM_R_PVK_DATA_TOO_SHORT                         124
 600 # define PEM_R_PVK_TOO_SHORT                              125
 601 # define PEM_R_READ_KEY                                   111
 602 # define PEM_R_SHORT_HEADER                               112
 603 # define PEM_R_UNSUPPORTED_CIPHER                         113
 604 # define PEM_R_UNSUPPORTED_ENCRYPTION                     114
 605 # define PEM_R_UNSUPPORTED_KEY_COMPONENTS                 126
 606
 607 #ifdef  __cplusplus
 608 }
 609 #endif
 610 #endif