[thirdparty/openssl.git] / apps / dhparam.c

/* apps/dhparam.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */
/* ====================================================================
 * Copyright (c) 1998-2000 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    openssl-core@openssl.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <openssl/opensslconf.h>	/* for OPENSSL_NO_DH */
#ifndef OPENSSL_NO_DH
#include <stdio.h>
#include <stdlib.h>
#include <time.h>
#include <string.h>
#include "apps.h"
#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/bn.h>
#include <openssl/dh.h>
#include <openssl/x509.h>
#include <openssl/pem.h>

#ifndef OPENSSL_NO_DSA
#include <openssl/dsa.h>
#endif

#undef PROG
#define PROG	dhparam_main

#define DEFBITS	512

/*-
 * -inform arg	- input format - default PEM (DER or PEM)
 * -outform arg - output format - default PEM
 * -in arg	- input file - default stdin
 * -out arg	- output file - default stdout
 * -dsaparam  - read or generate DSA parameters, convert to DH
 * -check	- check the parameters are ok
 * -noout
 * -text
 * -C
 */

static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb);

int MAIN(int, char **);

int MAIN(int argc, char **argv)
	{
	DH *dh=NULL;
	int i,badops=0,text=0;
#ifndef OPENSSL_NO_DSA
	int dsaparam=0;
#endif
	BIO *in=NULL,*out=NULL;
	int informat,outformat,check=0,noout=0,C=0,ret=1;
	char *infile,*outfile,*prog;
	char *inrand=NULL;
#ifndef OPENSSL_NO_ENGINE
	char *engine=NULL;
#endif
	int num = 0, g = 0;

	apps_startup();

	if (bio_err == NULL)
		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);

	if (!load_config(bio_err, NULL))
		goto end;

	infile=NULL;
	outfile=NULL;
	informat=FORMAT_PEM;
	outformat=FORMAT_PEM;

	prog=argv[0];
	argc--;
	argv++;
	while (argc >= 1)
		{
		if 	(strcmp(*argv,"-inform") == 0)
			{
			if (--argc < 1) goto bad;
			informat=str2fmt(*(++argv));
			}
		else if (strcmp(*argv,"-outform") == 0)
			{
			if (--argc < 1) goto bad;
			outformat=str2fmt(*(++argv));
			}
		else if (strcmp(*argv,"-in") == 0)
			{
			if (--argc < 1) goto bad;
			infile= *(++argv);
			}
		else if (strcmp(*argv,"-out") == 0)
			{
			if (--argc < 1) goto bad;
			outfile= *(++argv);
			}
#ifndef OPENSSL_NO_ENGINE
		else if (strcmp(*argv,"-engine") == 0)
			{
			if (--argc < 1) goto bad;
			engine= *(++argv);
			}
#endif
		else if (strcmp(*argv,"-check") == 0)
			check=1;
		else if (strcmp(*argv,"-text") == 0)
			text=1;
#ifndef OPENSSL_NO_DSA
		else if (strcmp(*argv,"-dsaparam") == 0)
			dsaparam=1;
#endif
		else if (strcmp(*argv,"-C") == 0)
			C=1;
		else if (strcmp(*argv,"-noout") == 0)
			noout=1;
		else if (strcmp(*argv,"-2") == 0)
			g=2;
		else if (strcmp(*argv,"-5") == 0)
			g=5;
		else if (strcmp(*argv,"-rand") == 0)
			{
			if (--argc < 1) goto bad;
			inrand= *(++argv);
			}
		else if (((sscanf(*argv,"%d",&num) == 0) || (num <= 0)))
			goto bad;
		argv++;
		argc--;
		}

	if (badops)
		{
bad:
		BIO_printf(bio_err,"%s [options] [numbits]\n",prog);
		BIO_printf(bio_err,"where options are\n");
		BIO_printf(bio_err," -inform arg   input format - one of DER PEM\n");
		BIO_printf(bio_err," -outform arg  output format - one of DER PEM\n");
		BIO_printf(bio_err," -in arg       input file\n");
		BIO_printf(bio_err," -out arg      output file\n");
#ifndef OPENSSL_NO_DSA
		BIO_printf(bio_err," -dsaparam     read or generate DSA parameters, convert to DH\n");
#endif
		BIO_printf(bio_err," -check        check the DH parameters\n");
		BIO_printf(bio_err," -text         print a text form of the DH parameters\n");
		BIO_printf(bio_err," -C            Output C code\n");
		BIO_printf(bio_err," -2            generate parameters using  2 as the generator value\n");
		BIO_printf(bio_err," -5            generate parameters using  5 as the generator value\n");
		BIO_printf(bio_err," numbits       number of bits in to generate (default 512)\n");
#ifndef OPENSSL_NO_ENGINE
		BIO_printf(bio_err," -engine e     use engine e, possibly a hardware device.\n");
#endif
		BIO_printf(bio_err," -rand file%cfile%c...\n", LIST_SEPARATOR_CHAR, LIST_SEPARATOR_CHAR);
		BIO_printf(bio_err,"               - load the file (or the files in the directory) into\n");
		BIO_printf(bio_err,"               the random number generator\n");
		BIO_printf(bio_err," -noout        no output\n");
		goto end;
		}

	ERR_load_crypto_strings();

#ifndef OPENSSL_NO_ENGINE
        setup_engine(bio_err, engine, 0);
#endif

	if (g && !num)
		num = DEFBITS;

#ifndef OPENSSL_NO_DSA
	if (dsaparam)
		{
		if (g)
			{
			BIO_printf(bio_err, "generator may not be chosen for DSA parameters\n");
			goto end;
			}
		}
	else
#endif
		{
		/* DH parameters */
		if (num && !g)
			g = 2;
		}

	if(num) {

		BN_GENCB cb;
		BN_GENCB_set(&cb, dh_cb, bio_err);
		if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL)
			{
			BIO_printf(bio_err,"warning, not much extra random data, consider using the -rand option\n");
			}
		if (inrand != NULL)
			BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
				app_RAND_load_files(inrand));

#ifndef OPENSSL_NO_DSA
		if (dsaparam)
			{
			DSA *dsa = DSA_new();
			
			BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
			if(!dsa || !DSA_generate_parameters_ex(dsa, num,
						NULL, 0, NULL, NULL, &cb))
				{
				if(dsa) DSA_free(dsa);
				ERR_print_errors(bio_err);
				goto end;
				}

			dh = DSA_dup_DH(dsa);
			DSA_free(dsa);
			if (dh == NULL)
				{
				ERR_print_errors(bio_err);
				goto end;
				}
			}
		else
#endif
			{
			dh = DH_new();
			BIO_printf(bio_err,"Generating DH parameters, %d bit long safe prime, generator %d\n",num,g);
			BIO_printf(bio_err,"This is going to take a long time\n");
			if(!dh || !DH_generate_parameters_ex(dh, num, g, &cb))
				{
				ERR_print_errors(bio_err);
				goto end;
				}
			}

		app_RAND_write_file(NULL, bio_err);
	} else {

		in=BIO_new(BIO_s_file());
		if (in == NULL)
			{
			ERR_print_errors(bio_err);
			goto end;
			}
		if (infile == NULL)
			BIO_set_fp(in,stdin,BIO_NOCLOSE);
		else
			{
			if (BIO_read_filename(in,infile) <= 0)
				{
				perror(infile);
				goto end;
				}
			}

		if	(informat != FORMAT_ASN1 && informat != FORMAT_PEM)
			{
			BIO_printf(bio_err,"bad input format specified\n");
			goto end;
			}

#ifndef OPENSSL_NO_DSA
		if (dsaparam)
			{
			DSA *dsa;
			
			if (informat == FORMAT_ASN1)
				dsa=d2i_DSAparams_bio(in,NULL);
			else /* informat == FORMAT_PEM */
				dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
			
			if (dsa == NULL)
				{
				BIO_printf(bio_err,"unable to load DSA parameters\n");
				ERR_print_errors(bio_err);
				goto end;
				}
			
			dh = DSA_dup_DH(dsa);
			DSA_free(dsa);
			if (dh == NULL)
				{
				ERR_print_errors(bio_err);
				goto end;
				}
			}
		else
#endif
			{
			if (informat == FORMAT_ASN1)
				dh=d2i_DHparams_bio(in,NULL);
			else /* informat == FORMAT_PEM */
				dh=PEM_read_bio_DHparams(in,NULL,NULL,NULL);
			
			if (dh == NULL)
				{
				BIO_printf(bio_err,"unable to load DH parameters\n");
				ERR_print_errors(bio_err);
				goto end;
				}
			}
		
		/* dh != NULL */
	}
	
	out=BIO_new(BIO_s_file());
	if (out == NULL)
		{
		ERR_print_errors(bio_err);
		goto end;
		}
	if (outfile == NULL)
		{
		BIO_set_fp(out,stdout,BIO_NOCLOSE);
#ifdef OPENSSL_SYS_VMS
		{
		BIO *tmpbio = BIO_new(BIO_f_linebuffer());
		out = BIO_push(tmpbio, out);
		}
#endif
		}
	else
		{
		if (BIO_write_filename(out,outfile) <= 0)
			{
			perror(outfile);
			goto end;
			}
		}


	if (text)
		{
		DHparams_print(out,dh);
		}
	
	if (check)
		{
		if (!DH_check(dh,&i))
			{
			ERR_print_errors(bio_err);
			goto end;
			}
		if (i & DH_CHECK_P_NOT_PRIME)
			printf("p value is not prime\n");
		if (i & DH_CHECK_P_NOT_SAFE_PRIME)
			printf("p value is not a safe prime\n");
		if (i & DH_UNABLE_TO_CHECK_GENERATOR)
			printf("unable to check the generator value\n");
		if (i & DH_NOT_SUITABLE_GENERATOR)
			printf("the g value is not a generator\n");
		if (i == 0)
			printf("DH parameters appear to be ok.\n");
		}
	if (C)
		{
		unsigned char *data;
		int len,l,bits;

		len=BN_num_bytes(dh->p);
		bits=BN_num_bits(dh->p);
		data=(unsigned char *)OPENSSL_malloc(len);
		if (data == NULL)
			{
			perror("OPENSSL_malloc");
			goto end;
			}
		printf("#ifndef HEADER_DH_H\n"
		       "#include <openssl/dh.h>\n"
		       "#endif\n");
		printf("DH *get_dh%d()\n\t{\n",bits);

		l=BN_bn2bin(dh->p,data);
		printf("\tstatic unsigned char dh%d_p[]={",bits);
		for (i=0; i<l; i++)
			{
			if ((i%12) == 0) printf("\n\t\t");
			printf("0x%02X,",data[i]);
			}
		printf("\n\t\t};\n");

		l=BN_bn2bin(dh->g,data);
		printf("\tstatic unsigned char dh%d_g[]={",bits);
		for (i=0; i<l; i++)
			{
			if ((i%12) == 0) printf("\n\t\t");
			printf("0x%02X,",data[i]);
			}
		printf("\n\t\t};\n");

		printf("\tDH *dh;\n\n");
		printf("\tif ((dh=DH_new()) == NULL) return(NULL);\n");
		printf("\tdh->p=BN_bin2bn(dh%d_p,sizeof(dh%d_p),NULL);\n",
			bits,bits);
		printf("\tdh->g=BN_bin2bn(dh%d_g,sizeof(dh%d_g),NULL);\n",
			bits,bits);
		printf("\tif ((dh->p == NULL) || (dh->g == NULL))\n");
		printf("\t\t{ DH_free(dh); return(NULL); }\n");
		if (dh->length)
			printf("\tdh->length = %ld;\n", dh->length);
		printf("\treturn(dh);\n\t}\n");
		OPENSSL_free(data);
		}


	if (!noout)
		{
		if 	(outformat == FORMAT_ASN1)
			i=i2d_DHparams_bio(out,dh);
		else if (outformat == FORMAT_PEM)
			i=PEM_write_bio_DHparams(out,dh);
		else	{
			BIO_printf(bio_err,"bad output format specified for outfile\n");
			goto end;
			}
		if (!i)
			{
			BIO_printf(bio_err,"unable to write DH parameters\n");
			ERR_print_errors(bio_err);
			goto end;
			}
		}
	ret=0;
end:
	if (in != NULL) BIO_free(in);
	if (out != NULL) BIO_free_all(out);
	if (dh != NULL) DH_free(dh);
	apps_shutdown();
	OPENSSL_EXIT(ret);
	}

/* dh_cb is identical to dsa_cb in apps/dsaparam.c */
static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb)
	{
	char c='*';

	if (p == 0) c='.';
	if (p == 1) c='+';
	if (p == 2) c='*';
	if (p == 3) c='\n';
	BIO_write(cb->arg,&c,1);
	(void)BIO_flush(cb->arg);
#ifdef LINT
	p=n;
#endif
	return 1;
	}

#endif
Commit	Line	Data
2a99e8b9	1	/* apps/dhparam.c */
09483c58 DSH	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
41918458 BM	58	/* ====================================================================
	59	* Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved.
	60	*
	61	* Redistribution and use in source and binary forms, with or without
	62	* modification, are permitted provided that the following conditions
	63	* are met:
	64	*
	65	* 1. Redistributions of source code must retain the above copyright
	66	* notice, this list of conditions and the following disclaimer.
	67	*
	68	* 2. Redistributions in binary form must reproduce the above copyright
	69	* notice, this list of conditions and the following disclaimer in
	70	* the documentation and/or other materials provided with the
	71	* distribution.
	72	*
	73	* 3. All advertising materials mentioning features or use of this
	74	* software must display the following acknowledgment:
	75	* "This product includes software developed by the OpenSSL Project
	76	* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
	77	*
	78	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	79	* endorse or promote products derived from this software without
	80	* prior written permission. For written permission, please contact
	81	* openssl-core@openssl.org.
	82	*
	83	* 5. Products derived from this software may not be called "OpenSSL"
	84	* nor may "OpenSSL" appear in their names without prior written
	85	* permission of the OpenSSL Project.
	86	*
	87	* 6. Redistributions of any form whatsoever must retain the following
	88	* acknowledgment:
	89	* "This product includes software developed by the OpenSSL Project
	90	* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
	91	*
	92	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	93	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	94	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	95	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	96	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	97	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	98	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	99	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	100	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	101	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	102	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	103	* OF THE POSSIBILITY OF SUCH DAMAGE.
	104	* ====================================================================
	105	*
	106	* This product includes cryptographic software written by Eric Young
	107	* (eay@cryptsoft.com). This product includes software written by Tim
	108	* Hudson (tjh@cryptsoft.com).
	109	*
	110	*/
09483c58	111
4913b88f	112	#include <openssl/opensslconf.h> /* for OPENSSL_NO_DH */
cf1b7d96	113	#ifndef OPENSSL_NO_DH
09483c58 DSH	114	#include <stdio.h>
	115	#include <stdlib.h>
	116	#include <time.h>
	117	#include <string.h>
	118	#include "apps.h"
	119	#include <openssl/bio.h>
	120	#include <openssl/err.h>
	121	#include <openssl/bn.h>
	122	#include <openssl/dh.h>
	123	#include <openssl/x509.h>
	124	#include <openssl/pem.h>
	125
cf1b7d96	126	#ifndef OPENSSL_NO_DSA
41918458 BM	127	#include <openssl/dsa.h>
	128	#endif
	129
09483c58 DSH	130	#undef PROG
	131	#define PROG dhparam_main
	132
	133	#define DEFBITS 512
	134
b558c8d5 TH	135	/*-
b558c8d5 TH	136	* -inform arg - input format - default PEM (DER or PEM)
09483c58 DSH	137	* -outform arg - output format - default PEM
	138	* -in arg - input file - default stdin
	139	* -out arg - output file - default stdout
41918458	140	* -dsaparam - read or generate DSA parameters, convert to DH
09483c58 DSH	141	* -check - check the parameters are ok
	142	* -noout
	143	* -text
	144	* -C
	145	*/
	146
2aaec9cc	147	static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb);
09483c58	148
667ac4ec RE	149	int MAIN(int, char **);
667ac4ec RE	150
09483c58 DSH	151	int MAIN(int argc, char **argv)
	152	{
	153	DH *dh=NULL;
	154	int i,badops=0,text=0;
cf1b7d96	155	#ifndef OPENSSL_NO_DSA
41918458 BM	156	int dsaparam=0;
41918458 BM	157	#endif
09483c58 DSH	158	BIO in=NULL,out=NULL;
	159	int informat,outformat,check=0,noout=0,C=0,ret=1;
	160	char infile,outfile,*prog;
0b13e9f0 RL	161	char *inrand=NULL;
	162	#ifndef OPENSSL_NO_ENGINE
	163	char *engine=NULL;
	164	#endif
09483c58 DSH	165	int num = 0, g = 0;
	166
	167	apps_startup();
	168
	169	if (bio_err == NULL)
	170	if ((bio_err=BIO_new(BIO_s_file())) != NULL)
	171	BIO_set_fp(bio_err,stderr,BIO_NOCLOSE\|BIO_FP_TEXT);
	172
3647bee2 DSH	173	if (!load_config(bio_err, NULL))
	174	goto end;
	175
09483c58 DSH	176	infile=NULL;
	177	outfile=NULL;
	178	informat=FORMAT_PEM;
	179	outformat=FORMAT_PEM;
	180
	181	prog=argv[0];
	182	argc--;
	183	argv++;
	184	while (argc >= 1)
	185	{
	186	if (strcmp(*argv,"-inform") == 0)
	187	{
	188	if (--argc < 1) goto bad;
	189	informat=str2fmt(*(++argv));
	190	}
	191	else if (strcmp(*argv,"-outform") == 0)
	192	{
	193	if (--argc < 1) goto bad;
	194	outformat=str2fmt(*(++argv));
	195	}
	196	else if (strcmp(*argv,"-in") == 0)
	197	{
	198	if (--argc < 1) goto bad;
	199	infile= *(++argv);
	200	}
	201	else if (strcmp(*argv,"-out") == 0)
	202	{
	203	if (--argc < 1) goto bad;
	204	outfile= *(++argv);
	205	}
0b13e9f0	206	#ifndef OPENSSL_NO_ENGINE
5270e702 RL	207	else if (strcmp(*argv,"-engine") == 0)
	208	{
	209	if (--argc < 1) goto bad;
	210	engine= *(++argv);
	211	}
0b13e9f0	212	#endif
09483c58 DSH	213	else if (strcmp(*argv,"-check") == 0)
	214	check=1;
	215	else if (strcmp(*argv,"-text") == 0)
	216	text=1;
cf1b7d96	217	#ifndef OPENSSL_NO_DSA
41918458 BM	218	else if (strcmp(*argv,"-dsaparam") == 0)
	219	dsaparam=1;
	220	#endif
09483c58 DSH	221	else if (strcmp(*argv,"-C") == 0)
	222	C=1;
	223	else if (strcmp(*argv,"-noout") == 0)
	224	noout=1;
	225	else if (strcmp(*argv,"-2") == 0)
	226	g=2;
	227	else if (strcmp(*argv,"-5") == 0)
	228	g=5;
	229	else if (strcmp(*argv,"-rand") == 0)
	230	{
	231	if (--argc < 1) goto bad;
	232	inrand= *(++argv);
	233	}
	234	else if (((sscanf(*argv,"%d",&num) == 0) \|\| (num <= 0)))
	235	goto bad;
	236	argv++;
	237	argc--;
	238	}
	239
	240	if (badops)
	241	{
	242	bad:
	243	BIO_printf(bio_err,"%s [options] [numbits]\n",prog);
	244	BIO_printf(bio_err,"where options are\n");
	245	BIO_printf(bio_err," -inform arg input format - one of DER PEM\n");
	246	BIO_printf(bio_err," -outform arg output format - one of DER PEM\n");
	247	BIO_printf(bio_err," -in arg input file\n");
	248	BIO_printf(bio_err," -out arg output file\n");
cf1b7d96	249	#ifndef OPENSSL_NO_DSA
41918458 BM	250	BIO_printf(bio_err," -dsaparam read or generate DSA parameters, convert to DH\n");
41918458 BM	251	#endif
09483c58 DSH	252	BIO_printf(bio_err," -check check the DH parameters\n");
	253	BIO_printf(bio_err," -text print a text form of the DH parameters\n");
	254	BIO_printf(bio_err," -C Output C code\n");
	255	BIO_printf(bio_err," -2 generate parameters using 2 as the generator value\n");
	256	BIO_printf(bio_err," -5 generate parameters using 5 as the generator value\n");
	257	BIO_printf(bio_err," numbits number of bits in to generate (default 512)\n");
0b13e9f0	258	#ifndef OPENSSL_NO_ENGINE
5270e702	259	BIO_printf(bio_err," -engine e use engine e, possibly a hardware device.\n");
0b13e9f0	260	#endif
afbd0746	261	BIO_printf(bio_err," -rand file%cfile%c...\n", LIST_SEPARATOR_CHAR, LIST_SEPARATOR_CHAR);
f365611c	262	BIO_printf(bio_err," - load the file (or the files in the directory) into\n");
09483c58 DSH	263	BIO_printf(bio_err," the random number generator\n");
	264	BIO_printf(bio_err," -noout no output\n");
	265	goto end;
	266	}
	267
	268	ERR_load_crypto_strings();
	269
0b13e9f0	270	#ifndef OPENSSL_NO_ENGINE
d8869758	271	setup_engine(bio_err, engine, 0);
0b13e9f0	272	#endif
5270e702	273
41918458 BM	274	if (g && !num)
	275	num = DEFBITS;
	276
cf1b7d96	277	#ifndef OPENSSL_NO_DSA
41918458 BM	278	if (dsaparam)
	279	{
	280	if (g)
	281	{
	282	BIO_printf(bio_err, "generator may not be chosen for DSA parameters\n");
	283	goto end;
	284	}
	285	}
	286	else
	287	#endif
	288	{
	289	/* DH parameters */
	290	if (num && !g)
	291	g = 2;
	292	}
09483c58 DSH	293
	294	if(num) {
	295
2aaec9cc GT	296	BN_GENCB cb;
2aaec9cc GT	297	BN_GENCB_set(&cb, dh_cb, bio_err);
f365611c	298	if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL)
09483c58 DSH	299	{
	300	BIO_printf(bio_err,"warning, not much extra random data, consider using the -rand option\n");
	301	}
	302	if (inrand != NULL)
	303	BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
	304	app_RAND_load_files(inrand));
	305
cf1b7d96	306	#ifndef OPENSSL_NO_DSA
41918458 BM	307	if (dsaparam)
41918458 BM	308	{
2aaec9cc	309	DSA *dsa = DSA_new();
41918458 BM	310
41918458 BM	311	BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
2aaec9cc GT	312	if(!dsa \|\| !DSA_generate_parameters_ex(dsa, num,
2aaec9cc GT	313	NULL, 0, NULL, NULL, &cb))
41918458	314	{
2aaec9cc	315	if(dsa) DSA_free(dsa);
41918458 BM	316	ERR_print_errors(bio_err);
	317	goto end;
	318	}
	319
	320	dh = DSA_dup_DH(dsa);
	321	DSA_free(dsa);
	322	if (dh == NULL)
	323	{
	324	ERR_print_errors(bio_err);
	325	goto end;
	326	}
	327	}
	328	else
	329	#endif
	330	{
2aaec9cc	331	dh = DH_new();
41918458 BM	332	BIO_printf(bio_err,"Generating DH parameters, %d bit long safe prime, generator %d\n",num,g);
41918458 BM	333	BIO_printf(bio_err,"This is going to take a long time\n");
2aaec9cc	334	if(!dh \|\| !DH_generate_parameters_ex(dh, num, g, &cb))
41918458 BM	335	{
	336	ERR_print_errors(bio_err);
	337	goto end;
	338	}
	339	}
09483c58 DSH	340
	341	app_RAND_write_file(NULL, bio_err);
	342	} else {
	343
	344	in=BIO_new(BIO_s_file());
	345	if (in == NULL)
	346	{
	347	ERR_print_errors(bio_err);
	348	goto end;
	349	}
	350	if (infile == NULL)
	351	BIO_set_fp(in,stdin,BIO_NOCLOSE);
	352	else
	353	{
	354	if (BIO_read_filename(in,infile) <= 0)
	355	{
	356	perror(infile);
	357	goto end;
	358	}
	359	}
	360
41918458	361	if (informat != FORMAT_ASN1 && informat != FORMAT_PEM)
09483c58 DSH	362	{
	363	BIO_printf(bio_err,"bad input format specified\n");
	364	goto end;
	365	}
41918458	366
cf1b7d96	367	#ifndef OPENSSL_NO_DSA
41918458	368	if (dsaparam)
09483c58	369	{
41918458 BM	370	DSA *dsa;
	371
	372	if (informat == FORMAT_ASN1)
	373	dsa=d2i_DSAparams_bio(in,NULL);
	374	else /* informat == FORMAT_PEM */
	375	dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
	376
	377	if (dsa == NULL)
	378	{
	379	BIO_printf(bio_err,"unable to load DSA parameters\n");
	380	ERR_print_errors(bio_err);
	381	goto end;
	382	}
	383
	384	dh = DSA_dup_DH(dsa);
	385	DSA_free(dsa);
	386	if (dh == NULL)
	387	{
	388	ERR_print_errors(bio_err);
	389	goto end;
	390	}
09483c58	391	}
41918458 BM	392	else
	393	#endif
	394	{
	395	if (informat == FORMAT_ASN1)
	396	dh=d2i_DHparams_bio(in,NULL);
	397	else /* informat == FORMAT_PEM */
	398	dh=PEM_read_bio_DHparams(in,NULL,NULL,NULL);
	399
	400	if (dh == NULL)
	401	{
	402	BIO_printf(bio_err,"unable to load DH parameters\n");
	403	ERR_print_errors(bio_err);
	404	goto end;
	405	}
	406	}
	407
	408	/* dh != NULL */
09483c58	409	}
41918458	410
09483c58 DSH	411	out=BIO_new(BIO_s_file());
	412	if (out == NULL)
	413	{
	414	ERR_print_errors(bio_err);
	415	goto end;
	416	}
	417	if (outfile == NULL)
645749ef	418	{
09483c58	419	BIO_set_fp(out,stdout,BIO_NOCLOSE);
bc36ee62	420	#ifdef OPENSSL_SYS_VMS
645749ef RL	421	{
	422	BIO *tmpbio = BIO_new(BIO_f_linebuffer());
	423	out = BIO_push(tmpbio, out);
	424	}
	425	#endif
	426	}
09483c58 DSH	427	else
	428	{
	429	if (BIO_write_filename(out,outfile) <= 0)
	430	{
	431	perror(outfile);
	432	goto end;
	433	}
	434	}
	435
09483c58 DSH	436
	437	if (text)
	438	{
	439	DHparams_print(out,dh);
	440	}
	441
	442	if (check)
	443	{
	444	if (!DH_check(dh,&i))
	445	{
	446	ERR_print_errors(bio_err);
	447	goto end;
	448	}
	449	if (i & DH_CHECK_P_NOT_PRIME)
	450	printf("p value is not prime\n");
41918458 BM	451	if (i & DH_CHECK_P_NOT_SAFE_PRIME)
41918458 BM	452	printf("p value is not a safe prime\n");
09483c58 DSH	453	if (i & DH_UNABLE_TO_CHECK_GENERATOR)
	454	printf("unable to check the generator value\n");
	455	if (i & DH_NOT_SUITABLE_GENERATOR)
	456	printf("the g value is not a generator\n");
	457	if (i == 0)
	458	printf("DH parameters appear to be ok.\n");
	459	}
	460	if (C)
	461	{
	462	unsigned char *data;
	463	int len,l,bits;
	464
	465	len=BN_num_bytes(dh->p);
	466	bits=BN_num_bits(dh->p);
26a3a48d	467	data=(unsigned char *)OPENSSL_malloc(len);
09483c58 DSH	468	if (data == NULL)
09483c58 DSH	469	{
26a3a48d	470	perror("OPENSSL_malloc");
09483c58 DSH	471	goto end;
09483c58 DSH	472	}
0dd39898 BM	473	printf("#ifndef HEADER_DH_H\n"
	474	"#include <openssl/dh.h>\n"
	475	"#endif\n");
	476	printf("DH *get_dh%d()\n\t{\n",bits);
	477
09483c58	478	l=BN_bn2bin(dh->p,data);
0dd39898	479	printf("\tstatic unsigned char dh%d_p[]={",bits);
09483c58 DSH	480	for (i=0; i<l; i++)
09483c58 DSH	481	{
0dd39898	482	if ((i%12) == 0) printf("\n\t\t");
09483c58 DSH	483	printf("0x%02X,",data[i]);
09483c58 DSH	484	}
0dd39898	485	printf("\n\t\t};\n");
09483c58 DSH	486
09483c58 DSH	487	l=BN_bn2bin(dh->g,data);
0dd39898	488	printf("\tstatic unsigned char dh%d_g[]={",bits);
09483c58 DSH	489	for (i=0; i<l; i++)
09483c58 DSH	490	{
0dd39898	491	if ((i%12) == 0) printf("\n\t\t");
09483c58 DSH	492	printf("0x%02X,",data[i]);
09483c58 DSH	493	}
0dd39898	494	printf("\n\t\t};\n");
09483c58	495
09483c58 DSH	496	printf("\tDH *dh;\n\n");
	497	printf("\tif ((dh=DH_new()) == NULL) return(NULL);\n");
	498	printf("\tdh->p=BN_bin2bn(dh%d_p,sizeof(dh%d_p),NULL);\n",
	499	bits,bits);
	500	printf("\tdh->g=BN_bin2bn(dh%d_g,sizeof(dh%d_g),NULL);\n",
	501	bits,bits);
	502	printf("\tif ((dh->p == NULL) \|\| (dh->g == NULL))\n");
bb2276ab	503	printf("\t\t{ DH_free(dh); return(NULL); }\n");
41918458	504	if (dh->length)
0dc09233	505	printf("\tdh->length = %ld;\n", dh->length);
09483c58	506	printf("\treturn(dh);\n\t}\n");
26a3a48d	507	OPENSSL_free(data);
09483c58 DSH	508	}
	509
	510
	511	if (!noout)
	512	{
	513	if (outformat == FORMAT_ASN1)
	514	i=i2d_DHparams_bio(out,dh);
	515	else if (outformat == FORMAT_PEM)
	516	i=PEM_write_bio_DHparams(out,dh);
	517	else {
	518	BIO_printf(bio_err,"bad output format specified for outfile\n");
	519	goto end;
	520	}
	521	if (!i)
	522	{
657e60fa	523	BIO_printf(bio_err,"unable to write DH parameters\n");
09483c58 DSH	524	ERR_print_errors(bio_err);
	525	goto end;
	526	}
	527	}
	528	ret=0;
	529	end:
	530	if (in != NULL) BIO_free(in);
645749ef	531	if (out != NULL) BIO_free_all(out);
09483c58	532	if (dh != NULL) DH_free(dh);
c04f8cf4	533	apps_shutdown();
1c3e4a36	534	OPENSSL_EXIT(ret);
09483c58 DSH	535	}
09483c58 DSH	536
41918458	537	/* dh_cb is identical to dsa_cb in apps/dsaparam.c */
2aaec9cc	538	static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb)
09483c58 DSH	539	{
	540	char c='*';
	541
	542	if (p == 0) c='.';
	543	if (p == 1) c='+';
	544	if (p == 2) c='*';
	545	if (p == 3) c='\n';
2aaec9cc GT	546	BIO_write(cb->arg,&c,1);
2aaec9cc GT	547	(void)BIO_flush(cb->arg);
09483c58 DSH	548	#ifdef LINT
	549	p=n;
	550	#endif
2aaec9cc	551	return 1;
09483c58 DSH	552	}
	553
	554	#endif