Home | History | Annotate | Line # | Download | only in apps 
      1 /*
      2  * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
      3  *
      4  * Licensed under the OpenSSL license (the "License").  You may not use
      5  * this file except in compliance with the License.  You can obtain a copy
      6  * in the file LICENSE in the source distribution or at
      7  * https://www.openssl.org/source/license.html
      8  */
      9 
     10 #include <stdio.h>
     11 #include <string.h>
     12 #include "apps.h"
     13 #include "progs.h"
     14 #include <openssl/pem.h>
     15 #include <openssl/err.h>
     16 #include <openssl/evp.h>
     17 
     18 typedef enum OPTION_choice {
     19     OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
     20     OPT_IN, OPT_OUT, OPT_TEXT, OPT_NOOUT,
     21     OPT_ENGINE, OPT_CHECK
     22 } OPTION_CHOICE;
     23 
     24 const OPTIONS pkeyparam_options[] = {
     25     {"help", OPT_HELP, '-', "Display this summary"},
     26     {"in", OPT_IN, '<', "Input file"},
     27     {"out", OPT_OUT, '>', "Output file"},
     28     {"text", OPT_TEXT, '-', "Print parameters as text"},
     29     {"noout", OPT_NOOUT, '-', "Don't output encoded parameters"},
     30 #ifndef OPENSSL_NO_ENGINE
     31     {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
     32 #endif
     33     {"check", OPT_CHECK, '-', "Check key param consistency"},
     34     {NULL}
     35 };
     36 
     37 int pkeyparam_main(int argc, char **argv)
     38 {
     39     ENGINE *e = NULL;
     40     BIO *in = NULL, *out = NULL;
     41     EVP_PKEY *pkey = NULL;
     42     int text = 0, noout = 0, ret = 1, check = 0;
     43     OPTION_CHOICE o;
     44     char *infile = NULL, *outfile = NULL, *prog;
     45 
     46     prog = opt_init(argc, argv, pkeyparam_options);
     47     while ((o = opt_next()) != OPT_EOF) {
     48         switch (o) {
     49         case OPT_EOF:
     50         case OPT_ERR:
     51  opthelp:
     52             BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
     53             goto end;
     54         case OPT_HELP:
     55             opt_help(pkeyparam_options);
     56             ret = 0;
     57             goto end;
     58         case OPT_IN:
     59             infile = opt_arg();
     60             break;
     61         case OPT_OUT:
     62             outfile = opt_arg();
     63             break;
     64         case OPT_ENGINE:
     65             e = setup_engine(opt_arg(), 0);
     66             break;
     67         case OPT_TEXT:
     68             text = 1;
     69             break;
     70         case OPT_NOOUT:
     71             noout = 1;
     72             break;
     73         case OPT_CHECK:
     74             check = 1;
     75             break;
     76         }
     77     }
     78     argc = opt_num_rest();
     79     if (argc != 0)
     80         goto opthelp;
     81 
     82     in = bio_open_default(infile, 'r', FORMAT_PEM);
     83     if (in == NULL)
     84         goto end;
     85     out = bio_open_default(outfile, 'w', FORMAT_PEM);
     86     if (out == NULL)
     87         goto end;
     88     pkey = PEM_read_bio_Parameters(in, NULL);
     89     if (pkey == NULL) {
     90         BIO_printf(bio_err, "Error reading parameters\n");
     91         ERR_print_errors(bio_err);
     92         goto end;
     93     }
     94 
     95     if (check) {
     96         int r;
     97         EVP_PKEY_CTX *ctx;
     98 
     99         ctx = EVP_PKEY_CTX_new(pkey, e);
    100         if (ctx == NULL) {
    101             ERR_print_errors(bio_err);
    102             goto end;
    103         }
    104 
    105         r = EVP_PKEY_param_check(ctx);
    106 
    107         if (r == 1) {
    108             BIO_printf(out, "Parameters are valid\n");
    109         } else {
    110             /*
    111              * Note: at least for RSA keys if this function returns
    112              * -1, there will be no error reasons.
    113              */
    114             unsigned long err;
    115 
    116             BIO_printf(out, "Parameters are invalid\n");
    117 
    118             while ((err = ERR_peek_error()) != 0) {
    119                 BIO_printf(out, "Detailed error: %s\n",
    120                            ERR_reason_error_string(err));
    121                 ERR_get_error(); /* remove err from error stack */
    122             }
    123         }
    124         EVP_PKEY_CTX_free(ctx);
    125     }
    126 
    127     if (!noout)
    128         PEM_write_bio_Parameters(out, pkey);
    129 
    130     if (text)
    131         EVP_PKEY_print_params(out, pkey, 0, NULL);
    132 
    133     ret = 0;
    134 
    135  end:
    136     EVP_PKEY_free(pkey);
    137     release_engine(e);
    138     BIO_free_all(out);
    139     BIO_free(in);
    140 
    141     return ret;
    142 }
    143