|
Packit Service |
084de1 |
/*
|
|
Packit Service |
084de1 |
* Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
Packit Service |
084de1 |
*
|
|
Packit Service |
084de1 |
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
Packit Service |
084de1 |
* this file except in compliance with the License. You can obtain a copy
|
|
Packit Service |
084de1 |
* in the file LICENSE in the source distribution or at
|
|
Packit Service |
084de1 |
* https://www.openssl.org/source/license.html
|
|
Packit Service |
084de1 |
*/
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
#include <stdio.h>
|
|
Packit Service |
084de1 |
#include "internal/cryptlib.h"
|
|
Packit Service |
084de1 |
#include <openssl/bn.h>
|
|
Packit Service |
084de1 |
#include <openssl/evp.h>
|
|
Packit Service |
084de1 |
#include <openssl/objects.h>
|
|
Packit Service |
084de1 |
#include <openssl/engine.h>
|
|
Packit Service |
084de1 |
#include <openssl/x509.h>
|
|
Packit Service |
084de1 |
#include <openssl/asn1.h>
|
|
Packit Service |
084de1 |
#include "crypto/asn1.h"
|
|
Packit Service |
084de1 |
#include "crypto/evp.h"
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
|
|
Packit Service |
084de1 |
long length)
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
EVP_PKEY *ret;
|
|
Packit Service |
084de1 |
const unsigned char *p = *pp;
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
if ((a == NULL) || (*a == NULL)) {
|
|
Packit Service |
084de1 |
if ((ret = EVP_PKEY_new()) == NULL) {
|
|
Packit Service |
084de1 |
ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_EVP_LIB);
|
|
Packit Service |
084de1 |
return NULL;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
} else {
|
|
Packit Service |
084de1 |
ret = *a;
|
|
Packit Service |
084de1 |
#ifndef OPENSSL_NO_ENGINE
|
|
Packit Service |
084de1 |
ENGINE_finish(ret->engine);
|
|
Packit Service |
084de1 |
ret->engine = NULL;
|
|
Packit Service |
084de1 |
#endif
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
if (!EVP_PKEY_set_type(ret, type)) {
|
|
Packit Service |
084de1 |
ASN1err(ASN1_F_D2I_PRIVATEKEY, ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE);
|
|
Packit Service |
084de1 |
goto err;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
if (!ret->ameth->old_priv_decode ||
|
|
Packit Service |
084de1 |
!ret->ameth->old_priv_decode(ret, &p, length)) {
|
|
Packit Service |
084de1 |
if (ret->ameth->priv_decode) {
|
|
Packit Service |
084de1 |
EVP_PKEY *tmp;
|
|
Packit Service |
084de1 |
PKCS8_PRIV_KEY_INFO *p8 = NULL;
|
|
Packit Service |
084de1 |
p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
|
|
Packit Service |
084de1 |
if (!p8)
|
|
Packit Service |
084de1 |
goto err;
|
|
Packit Service |
084de1 |
tmp = EVP_PKCS82PKEY(p8);
|
|
Packit Service |
084de1 |
PKCS8_PRIV_KEY_INFO_free(p8);
|
|
Packit Service |
084de1 |
if (tmp == NULL)
|
|
Packit Service |
084de1 |
goto err;
|
|
Packit Service |
084de1 |
EVP_PKEY_free(ret);
|
|
Packit Service |
084de1 |
ret = tmp;
|
|
Packit Service |
084de1 |
} else {
|
|
Packit Service |
084de1 |
ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_ASN1_LIB);
|
|
Packit Service |
084de1 |
goto err;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
*pp = p;
|
|
Packit Service |
084de1 |
if (a != NULL)
|
|
Packit Service |
084de1 |
(*a) = ret;
|
|
Packit Service |
084de1 |
return ret;
|
|
Packit Service |
084de1 |
err:
|
|
Packit Service |
084de1 |
if (a == NULL || *a != ret)
|
|
Packit Service |
084de1 |
EVP_PKEY_free(ret);
|
|
Packit Service |
084de1 |
return NULL;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
/*
|
|
Packit Service |
084de1 |
* This works like d2i_PrivateKey() except it automatically works out the
|
|
Packit Service |
084de1 |
* type
|
|
Packit Service |
084de1 |
*/
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
|
|
Packit Service |
084de1 |
long length)
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
STACK_OF(ASN1_TYPE) *inkey;
|
|
Packit Service |
084de1 |
const unsigned char *p;
|
|
Packit Service |
084de1 |
int keytype;
|
|
Packit Service |
084de1 |
p = *pp;
|
|
Packit Service |
084de1 |
/*
|
|
Packit Service |
084de1 |
* Dirty trick: read in the ASN1 data into a STACK_OF(ASN1_TYPE): by
|
|
Packit Service |
084de1 |
* analyzing it we can determine the passed structure: this assumes the
|
|
Packit Service |
084de1 |
* input is surrounded by an ASN1 SEQUENCE.
|
|
Packit Service |
084de1 |
*/
|
|
Packit Service |
084de1 |
inkey = d2i_ASN1_SEQUENCE_ANY(NULL, &p, length);
|
|
Packit Service |
084de1 |
p = *pp;
|
|
Packit Service |
084de1 |
/*
|
|
Packit Service |
084de1 |
* Since we only need to discern "traditional format" RSA and DSA keys we
|
|
Packit Service |
084de1 |
* can just count the elements.
|
|
Packit Service |
084de1 |
*/
|
|
Packit Service |
084de1 |
if (sk_ASN1_TYPE_num(inkey) == 6)
|
|
Packit Service |
084de1 |
keytype = EVP_PKEY_DSA;
|
|
Packit Service |
084de1 |
else if (sk_ASN1_TYPE_num(inkey) == 4)
|
|
Packit Service |
084de1 |
keytype = EVP_PKEY_EC;
|
|
Packit Service |
084de1 |
else if (sk_ASN1_TYPE_num(inkey) == 3) { /* This seems to be PKCS8, not
|
|
Packit Service |
084de1 |
* traditional format */
|
|
Packit Service |
084de1 |
PKCS8_PRIV_KEY_INFO *p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
|
|
Packit Service |
084de1 |
EVP_PKEY *ret;
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
|
|
Packit Service |
084de1 |
if (!p8) {
|
|
Packit Service |
084de1 |
ASN1err(ASN1_F_D2I_AUTOPRIVATEKEY,
|
|
Packit Service |
084de1 |
ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
|
|
Packit Service |
084de1 |
return NULL;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
ret = EVP_PKCS82PKEY(p8);
|
|
Packit Service |
084de1 |
PKCS8_PRIV_KEY_INFO_free(p8);
|
|
Packit Service |
084de1 |
if (ret == NULL)
|
|
Packit Service |
084de1 |
return NULL;
|
|
Packit Service |
084de1 |
*pp = p;
|
|
Packit Service |
084de1 |
if (a) {
|
|
Packit Service |
084de1 |
*a = ret;
|
|
Packit Service |
084de1 |
}
|
|
Packit Service |
084de1 |
return ret;
|
|
Packit Service |
084de1 |
} else
|
|
Packit Service |
084de1 |
keytype = EVP_PKEY_RSA;
|
|
Packit Service |
084de1 |
sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
|
|
Packit Service |
084de1 |
return d2i_PrivateKey(keytype, a, pp, length);
|
|
Packit Service |
084de1 |
}
|