genrsa.c 9.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341
  1. /* apps/genrsa.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <openssl/opensslconf.h>
  59. /* Until the key-gen callbacks are modified to use newer prototypes, we allow
  60. * deprecated functions for openssl-internal code */
  61. #ifdef OPENSSL_NO_DEPRECATED
  62. #undef OPENSSL_NO_DEPRECATED
  63. #endif
  64. #ifndef OPENSSL_NO_RSA
  65. #include <stdio.h>
  66. #include <string.h>
  67. #include <sys/types.h>
  68. #include <sys/stat.h>
  69. #include "apps.h"
  70. #include <openssl/bio.h>
  71. #include <openssl/err.h>
  72. #include <openssl/bn.h>
  73. #include <openssl/rsa.h>
  74. #include <openssl/evp.h>
  75. #include <openssl/x509.h>
  76. #include <openssl/pem.h>
  77. #include <openssl/rand.h>
  78. #define DEFBITS 512
  79. #undef PROG
  80. #define PROG genrsa_main
  81. static int MS_CALLBACK genrsa_cb(int p, int n, BN_GENCB *cb);
  82. int MAIN(int, char **);
  83. int MAIN(int argc, char **argv)
  84. {
  85. BN_GENCB cb;
  86. #ifndef OPENSSL_NO_ENGINE
  87. ENGINE *e = NULL;
  88. #endif
  89. int ret=1;
  90. int non_fips_allow = 0;
  91. int i,num=DEFBITS;
  92. long l;
  93. const EVP_CIPHER *enc=NULL;
  94. unsigned long f4=RSA_F4;
  95. char *outfile=NULL;
  96. char *passargout = NULL, *passout = NULL;
  97. #ifndef OPENSSL_NO_ENGINE
  98. char *engine=NULL;
  99. #endif
  100. char *inrand=NULL;
  101. BIO *out=NULL;
  102. BIGNUM *bn = BN_new();
  103. RSA *rsa = NULL;
  104. if(!bn) goto err;
  105. apps_startup();
  106. BN_GENCB_set(&cb, genrsa_cb, bio_err);
  107. if (bio_err == NULL)
  108. if ((bio_err=BIO_new(BIO_s_file())) != NULL)
  109. BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
  110. if (!load_config(bio_err, NULL))
  111. goto err;
  112. if ((out=BIO_new(BIO_s_file())) == NULL)
  113. {
  114. BIO_printf(bio_err,"unable to create BIO for output\n");
  115. goto err;
  116. }
  117. argv++;
  118. argc--;
  119. for (;;)
  120. {
  121. if (argc <= 0) break;
  122. if (strcmp(*argv,"-out") == 0)
  123. {
  124. if (--argc < 1) goto bad;
  125. outfile= *(++argv);
  126. }
  127. else if (strcmp(*argv,"-3") == 0)
  128. f4=3;
  129. else if (strcmp(*argv,"-F4") == 0 || strcmp(*argv,"-f4") == 0)
  130. f4=RSA_F4;
  131. #ifndef OPENSSL_NO_ENGINE
  132. else if (strcmp(*argv,"-engine") == 0)
  133. {
  134. if (--argc < 1) goto bad;
  135. engine= *(++argv);
  136. }
  137. #endif
  138. else if (strcmp(*argv,"-rand") == 0)
  139. {
  140. if (--argc < 1) goto bad;
  141. inrand= *(++argv);
  142. }
  143. #ifndef OPENSSL_NO_DES
  144. else if (strcmp(*argv,"-des") == 0)
  145. enc=EVP_des_cbc();
  146. else if (strcmp(*argv,"-des3") == 0)
  147. enc=EVP_des_ede3_cbc();
  148. #endif
  149. #ifndef OPENSSL_NO_IDEA
  150. else if (strcmp(*argv,"-idea") == 0)
  151. enc=EVP_idea_cbc();
  152. #endif
  153. #ifndef OPENSSL_NO_SEED
  154. else if (strcmp(*argv,"-seed") == 0)
  155. enc=EVP_seed_cbc();
  156. #endif
  157. #ifndef OPENSSL_NO_AES
  158. else if (strcmp(*argv,"-aes128") == 0)
  159. enc=EVP_aes_128_cbc();
  160. else if (strcmp(*argv,"-aes192") == 0)
  161. enc=EVP_aes_192_cbc();
  162. else if (strcmp(*argv,"-aes256") == 0)
  163. enc=EVP_aes_256_cbc();
  164. #endif
  165. #ifndef OPENSSL_NO_CAMELLIA
  166. else if (strcmp(*argv,"-camellia128") == 0)
  167. enc=EVP_camellia_128_cbc();
  168. else if (strcmp(*argv,"-camellia192") == 0)
  169. enc=EVP_camellia_192_cbc();
  170. else if (strcmp(*argv,"-camellia256") == 0)
  171. enc=EVP_camellia_256_cbc();
  172. #endif
  173. else if (strcmp(*argv,"-passout") == 0)
  174. {
  175. if (--argc < 1) goto bad;
  176. passargout= *(++argv);
  177. }
  178. else if (strcmp(*argv,"-non-fips-allow") == 0)
  179. non_fips_allow = 1;
  180. else
  181. break;
  182. argv++;
  183. argc--;
  184. }
  185. if ((argc >= 1) && ((sscanf(*argv,"%d",&num) == 0) || (num < 0)))
  186. {
  187. bad:
  188. BIO_printf(bio_err,"usage: genrsa [args] [numbits]\n");
  189. BIO_printf(bio_err," -des encrypt the generated key with DES in cbc mode\n");
  190. BIO_printf(bio_err," -des3 encrypt the generated key with DES in ede cbc mode (168 bit key)\n");
  191. #ifndef OPENSSL_NO_IDEA
  192. BIO_printf(bio_err," -idea encrypt the generated key with IDEA in cbc mode\n");
  193. #endif
  194. #ifndef OPENSSL_NO_SEED
  195. BIO_printf(bio_err," -seed\n");
  196. BIO_printf(bio_err," encrypt PEM output with cbc seed\n");
  197. #endif
  198. #ifndef OPENSSL_NO_AES
  199. BIO_printf(bio_err," -aes128, -aes192, -aes256\n");
  200. BIO_printf(bio_err," encrypt PEM output with cbc aes\n");
  201. #endif
  202. #ifndef OPENSSL_NO_CAMELLIA
  203. BIO_printf(bio_err," -camellia128, -camellia192, -camellia256\n");
  204. BIO_printf(bio_err," encrypt PEM output with cbc camellia\n");
  205. #endif
  206. BIO_printf(bio_err," -out file output the key to 'file\n");
  207. BIO_printf(bio_err," -passout arg output file pass phrase source\n");
  208. BIO_printf(bio_err," -f4 use F4 (0x10001) for the E value\n");
  209. BIO_printf(bio_err," -3 use 3 for the E value\n");
  210. #ifndef OPENSSL_NO_ENGINE
  211. BIO_printf(bio_err," -engine e use engine e, possibly a hardware device.\n");
  212. #endif
  213. BIO_printf(bio_err," -rand file%cfile%c...\n", LIST_SEPARATOR_CHAR, LIST_SEPARATOR_CHAR);
  214. BIO_printf(bio_err," load the file (or the files in the directory) into\n");
  215. BIO_printf(bio_err," the random number generator\n");
  216. goto err;
  217. }
  218. ERR_load_crypto_strings();
  219. if(!app_passwd(bio_err, NULL, passargout, NULL, &passout)) {
  220. BIO_printf(bio_err, "Error getting password\n");
  221. goto err;
  222. }
  223. #ifndef OPENSSL_NO_ENGINE
  224. e = setup_engine(bio_err, engine, 0);
  225. #endif
  226. if (outfile == NULL)
  227. {
  228. BIO_set_fp(out,stdout,BIO_NOCLOSE);
  229. #ifdef OPENSSL_SYS_VMS
  230. {
  231. BIO *tmpbio = BIO_new(BIO_f_linebuffer());
  232. out = BIO_push(tmpbio, out);
  233. }
  234. #endif
  235. }
  236. else
  237. {
  238. if (BIO_write_filename(out,outfile) <= 0)
  239. {
  240. perror(outfile);
  241. goto err;
  242. }
  243. }
  244. if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL
  245. && !RAND_status())
  246. {
  247. BIO_printf(bio_err,"warning, not much extra random data, consider using the -rand option\n");
  248. }
  249. if (inrand != NULL)
  250. BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
  251. app_RAND_load_files(inrand));
  252. BIO_printf(bio_err,"Generating RSA private key, %d bit long modulus\n",
  253. num);
  254. #ifdef OPENSSL_NO_ENGINE
  255. rsa = RSA_new();
  256. #else
  257. rsa = RSA_new_method(e);
  258. #endif
  259. if (!rsa)
  260. goto err;
  261. if (non_fips_allow)
  262. rsa->flags |= RSA_FLAG_NON_FIPS_ALLOW;
  263. if(!BN_set_word(bn, f4) || !RSA_generate_key_ex(rsa, num, bn, &cb))
  264. goto err;
  265. app_RAND_write_file(NULL, bio_err);
  266. /* We need to do the following for when the base number size is <
  267. * long, esp windows 3.1 :-(. */
  268. l=0L;
  269. for (i=0; i<rsa->e->top; i++)
  270. {
  271. #ifndef SIXTY_FOUR_BIT
  272. l<<=BN_BITS4;
  273. l<<=BN_BITS4;
  274. #endif
  275. l+=rsa->e->d[i];
  276. }
  277. BIO_printf(bio_err,"e is %ld (0x%lX)\n",l,l);
  278. {
  279. PW_CB_DATA cb_data;
  280. cb_data.password = passout;
  281. cb_data.prompt_info = outfile;
  282. if (!PEM_write_bio_RSAPrivateKey(out,rsa,enc,NULL,0,
  283. (pem_password_cb *)password_callback,&cb_data))
  284. goto err;
  285. }
  286. ret=0;
  287. err:
  288. if (bn) BN_free(bn);
  289. if (rsa) RSA_free(rsa);
  290. if (out) BIO_free_all(out);
  291. if(passout) OPENSSL_free(passout);
  292. if (ret != 0)
  293. ERR_print_errors(bio_err);
  294. apps_shutdown();
  295. OPENSSL_EXIT(ret);
  296. }
  297. static int MS_CALLBACK genrsa_cb(int p, int n, BN_GENCB *cb)
  298. {
  299. char c='*';
  300. if (p == 0) c='.';
  301. if (p == 1) c='+';
  302. if (p == 2) c='*';
  303. if (p == 3) c='\n';
  304. BIO_write(cb->arg,&c,1);
  305. (void)BIO_flush(cb->arg);
  306. #ifdef LINT
  307. p=n;
  308. #endif
  309. return 1;
  310. }
  311. #else /* !OPENSSL_NO_RSA */
  312. # if PEDANTIC
  313. static void *dummy=&dummy;
  314. # endif
  315. #endif