2 * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/pkcs12.h>
15 #if !OPENSSL_API_1_1_0
16 ASN1_TYPE
*PKCS12_get_attr(const PKCS12_SAFEBAG
*bag
, int attr_nid
)
18 return PKCS12_get_attr_gen(bag
->attrib
, attr_nid
);
22 const ASN1_TYPE
*PKCS12_SAFEBAG_get0_attr(const PKCS12_SAFEBAG
*bag
,
25 return PKCS12_get_attr_gen(bag
->attrib
, attr_nid
);
28 ASN1_TYPE
*PKCS8_get_attr(PKCS8_PRIV_KEY_INFO
*p8
, int attr_nid
)
30 return PKCS12_get_attr_gen(PKCS8_pkey_get0_attrs(p8
), attr_nid
);
33 const PKCS8_PRIV_KEY_INFO
*PKCS12_SAFEBAG_get0_p8inf(const PKCS12_SAFEBAG
*bag
)
35 if (PKCS12_SAFEBAG_get_nid(bag
) != NID_keyBag
)
37 return bag
->value
.keybag
;
40 const X509_SIG
*PKCS12_SAFEBAG_get0_pkcs8(const PKCS12_SAFEBAG
*bag
)
42 if (OBJ_obj2nid(bag
->type
) != NID_pkcs8ShroudedKeyBag
)
44 return bag
->value
.shkeybag
;
47 const STACK_OF(PKCS12_SAFEBAG
) *
48 PKCS12_SAFEBAG_get0_safes(const PKCS12_SAFEBAG
*bag
)
50 if (OBJ_obj2nid(bag
->type
) != NID_safeContentsBag
)
52 return bag
->value
.safes
;
55 const ASN1_OBJECT
*PKCS12_SAFEBAG_get0_type(const PKCS12_SAFEBAG
*bag
)
60 int PKCS12_SAFEBAG_get_nid(const PKCS12_SAFEBAG
*bag
)
62 return OBJ_obj2nid(bag
->type
);
65 int PKCS12_SAFEBAG_get_bag_nid(const PKCS12_SAFEBAG
*bag
)
67 int btype
= PKCS12_SAFEBAG_get_nid(bag
);
69 if (btype
!= NID_certBag
&& btype
!= NID_crlBag
&& btype
!= NID_secretBag
)
71 return OBJ_obj2nid(bag
->value
.bag
->type
);
74 X509
*PKCS12_SAFEBAG_get1_cert(const PKCS12_SAFEBAG
*bag
)
76 if (PKCS12_SAFEBAG_get_nid(bag
) != NID_certBag
)
78 if (OBJ_obj2nid(bag
->value
.bag
->type
) != NID_x509Certificate
)
80 return ASN1_item_unpack(bag
->value
.bag
->value
.octet
,
81 ASN1_ITEM_rptr(X509
));
84 X509_CRL
*PKCS12_SAFEBAG_get1_crl(const PKCS12_SAFEBAG
*bag
)
86 if (PKCS12_SAFEBAG_get_nid(bag
) != NID_crlBag
)
88 if (OBJ_obj2nid(bag
->value
.bag
->type
) != NID_x509Crl
)
90 return ASN1_item_unpack(bag
->value
.bag
->value
.octet
,
91 ASN1_ITEM_rptr(X509_CRL
));
94 PKCS12_SAFEBAG
*PKCS12_SAFEBAG_create_cert(X509
*x509
)
96 return PKCS12_item_pack_safebag(x509
, ASN1_ITEM_rptr(X509
),
97 NID_x509Certificate
, NID_certBag
);
100 PKCS12_SAFEBAG
*PKCS12_SAFEBAG_create_crl(X509_CRL
*crl
)
102 return PKCS12_item_pack_safebag(crl
, ASN1_ITEM_rptr(X509_CRL
),
103 NID_x509Crl
, NID_crlBag
);
106 /* Turn PKCS8 object into a keybag */
108 PKCS12_SAFEBAG
*PKCS12_SAFEBAG_create0_p8inf(PKCS8_PRIV_KEY_INFO
*p8
)
110 PKCS12_SAFEBAG
*bag
= PKCS12_SAFEBAG_new();
113 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF
, ERR_R_MALLOC_FAILURE
);
116 bag
->type
= OBJ_nid2obj(NID_keyBag
);
117 bag
->value
.keybag
= p8
;
121 /* Turn PKCS8 object into a shrouded keybag */
123 PKCS12_SAFEBAG
*PKCS12_SAFEBAG_create0_pkcs8(X509_SIG
*p8
)
125 PKCS12_SAFEBAG
*bag
= PKCS12_SAFEBAG_new();
127 /* Set up the safe bag */
129 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8
, ERR_R_MALLOC_FAILURE
);
132 bag
->type
= OBJ_nid2obj(NID_pkcs8ShroudedKeyBag
);
133 bag
->value
.shkeybag
= p8
;
137 PKCS12_SAFEBAG
*PKCS12_SAFEBAG_create_pkcs8_encrypt(int pbe_nid
,
141 int saltlen
, int iter
,
142 PKCS8_PRIV_KEY_INFO
*p8inf
)
145 const EVP_CIPHER
*pbe_ciph
;
148 pbe_ciph
= EVP_get_cipherbynid(pbe_nid
);
152 p8
= PKCS8_encrypt(pbe_nid
, pbe_ciph
, pass
, passlen
, salt
, saltlen
, iter
,
157 bag
= PKCS12_SAFEBAG_create0_pkcs8(p8
);