openssl.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565
  1. /* apps/openssl.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * openssl-core@openssl.org.
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * (eay@cryptsoft.com). This product includes software written by Tim
  108. * Hudson (tjh@cryptsoft.com).
  109. *
  110. */
  111. #include <stdio.h>
  112. #include <string.h>
  113. #include <stdlib.h>
  114. #define OPENSSL_C /* tells apps.h to use complete apps_startup() */
  115. #include "apps.h"
  116. #include <openssl/bio.h>
  117. #include <openssl/crypto.h>
  118. #include <openssl/lhash.h>
  119. #include <openssl/conf.h>
  120. #include <openssl/x509.h>
  121. #include <openssl/pem.h>
  122. #include <openssl/ssl.h>
  123. #ifndef OPENSSL_NO_ENGINE
  124. #include <openssl/engine.h>
  125. #endif
  126. #define USE_SOCKETS /* needed for the _O_BINARY defs in the MS world */
  127. #include "progs.h"
  128. #include "s_apps.h"
  129. #include <openssl/err.h>
  130. /* The LHASH callbacks ("hash" & "cmp") have been replaced by functions with the
  131. * base prototypes (we cast each variable inside the function to the required
  132. * type of "FUNCTION*"). This removes the necessity for macro-generated wrapper
  133. * functions. */
  134. /* static unsigned long MS_CALLBACK hash(FUNCTION *a); */
  135. static unsigned long MS_CALLBACK hash(const void *a_void);
  136. /* static int MS_CALLBACK cmp(FUNCTION *a,FUNCTION *b); */
  137. static int MS_CALLBACK cmp(const void *a_void,const void *b_void);
  138. static LHASH *prog_init(void );
  139. static int do_cmd(LHASH *prog,int argc,char *argv[]);
  140. static void list_pkey(BIO *out);
  141. char *default_config_file=NULL;
  142. /* Make sure there is only one when MONOLITH is defined */
  143. #ifdef MONOLITH
  144. CONF *config=NULL;
  145. BIO *bio_err=NULL;
  146. #endif
  147. static void lock_dbg_cb(int mode, int type, const char *file, int line)
  148. {
  149. static int modes[CRYPTO_NUM_LOCKS]; /* = {0, 0, ... } */
  150. const char *errstr = NULL;
  151. int rw;
  152. rw = mode & (CRYPTO_READ|CRYPTO_WRITE);
  153. if (!((rw == CRYPTO_READ) || (rw == CRYPTO_WRITE)))
  154. {
  155. errstr = "invalid mode";
  156. goto err;
  157. }
  158. if (type < 0 || type >= CRYPTO_NUM_LOCKS)
  159. {
  160. errstr = "type out of bounds";
  161. goto err;
  162. }
  163. if (mode & CRYPTO_LOCK)
  164. {
  165. if (modes[type])
  166. {
  167. errstr = "already locked";
  168. /* must not happen in a single-threaded program
  169. * (would deadlock) */
  170. goto err;
  171. }
  172. modes[type] = rw;
  173. }
  174. else if (mode & CRYPTO_UNLOCK)
  175. {
  176. if (!modes[type])
  177. {
  178. errstr = "not locked";
  179. goto err;
  180. }
  181. if (modes[type] != rw)
  182. {
  183. errstr = (rw == CRYPTO_READ) ?
  184. "CRYPTO_r_unlock on write lock" :
  185. "CRYPTO_w_unlock on read lock";
  186. }
  187. modes[type] = 0;
  188. }
  189. else
  190. {
  191. errstr = "invalid mode";
  192. goto err;
  193. }
  194. err:
  195. if (errstr)
  196. {
  197. /* we cannot use bio_err here */
  198. fprintf(stderr, "openssl (lock_dbg_cb): %s (mode=%d, type=%d) at %s:%d\n",
  199. errstr, mode, type, file, line);
  200. }
  201. }
  202. int main(int Argc, char *Argv[])
  203. {
  204. ARGS arg;
  205. #define PROG_NAME_SIZE 39
  206. char pname[PROG_NAME_SIZE+1];
  207. FUNCTION f,*fp;
  208. MS_STATIC const char *prompt;
  209. MS_STATIC char buf[1024];
  210. char *to_free=NULL;
  211. int n,i,ret=0;
  212. int argc;
  213. char **argv,*p;
  214. LHASH *prog=NULL;
  215. long errline;
  216. arg.data=NULL;
  217. arg.count=0;
  218. if (bio_err == NULL)
  219. if ((bio_err=BIO_new(BIO_s_file())) != NULL)
  220. BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
  221. if (getenv("OPENSSL_DEBUG_MEMORY") != NULL) /* if not defined, use compiled-in library defaults */
  222. {
  223. if (!(0 == strcmp(getenv("OPENSSL_DEBUG_MEMORY"), "off")))
  224. {
  225. CRYPTO_malloc_debug_init();
  226. CRYPTO_set_mem_debug_options(V_CRYPTO_MDEBUG_ALL);
  227. }
  228. else
  229. {
  230. /* OPENSSL_DEBUG_MEMORY=off */
  231. CRYPTO_set_mem_debug_functions(0, 0, 0, 0, 0);
  232. }
  233. }
  234. CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
  235. #if 0
  236. if (getenv("OPENSSL_DEBUG_LOCKING") != NULL)
  237. #endif
  238. {
  239. CRYPTO_set_locking_callback(lock_dbg_cb);
  240. }
  241. apps_startup();
  242. /* Lets load up our environment a little */
  243. p=getenv("OPENSSL_CONF");
  244. if (p == NULL)
  245. p=getenv("SSLEAY_CONF");
  246. if (p == NULL)
  247. p=to_free=make_config_name();
  248. default_config_file=p;
  249. config=NCONF_new(NULL);
  250. i=NCONF_load(config,p,&errline);
  251. if (i == 0)
  252. {
  253. NCONF_free(config);
  254. config = NULL;
  255. ERR_clear_error();
  256. }
  257. prog=prog_init();
  258. /* first check the program name */
  259. program_name(Argv[0],pname,sizeof pname);
  260. f.name=pname;
  261. fp=(FUNCTION *)lh_retrieve(prog,&f);
  262. if (fp != NULL)
  263. {
  264. Argv[0]=pname;
  265. ret=fp->func(Argc,Argv);
  266. goto end;
  267. }
  268. /* ok, now check that there are not arguments, if there are,
  269. * run with them, shifting the ssleay off the front */
  270. if (Argc != 1)
  271. {
  272. Argc--;
  273. Argv++;
  274. ret=do_cmd(prog,Argc,Argv);
  275. if (ret < 0) ret=0;
  276. goto end;
  277. }
  278. /* ok, lets enter the old 'OpenSSL>' mode */
  279. for (;;)
  280. {
  281. ret=0;
  282. p=buf;
  283. n=sizeof buf;
  284. i=0;
  285. for (;;)
  286. {
  287. p[0]='\0';
  288. if (i++)
  289. prompt=">";
  290. else prompt="OpenSSL> ";
  291. fputs(prompt,stdout);
  292. fflush(stdout);
  293. fgets(p,n,stdin);
  294. if (p[0] == '\0') goto end;
  295. i=strlen(p);
  296. if (i <= 1) break;
  297. if (p[i-2] != '\\') break;
  298. i-=2;
  299. p+=i;
  300. n-=i;
  301. }
  302. if (!chopup_args(&arg,buf,&argc,&argv)) break;
  303. ret=do_cmd(prog,argc,argv);
  304. if (ret < 0)
  305. {
  306. ret=0;
  307. goto end;
  308. }
  309. if (ret != 0)
  310. BIO_printf(bio_err,"error in %s\n",argv[0]);
  311. (void)BIO_flush(bio_err);
  312. }
  313. BIO_printf(bio_err,"bad exit\n");
  314. ret=1;
  315. end:
  316. if (to_free)
  317. OPENSSL_free(to_free);
  318. if (config != NULL)
  319. {
  320. NCONF_free(config);
  321. config=NULL;
  322. }
  323. if (prog != NULL) lh_free(prog);
  324. if (arg.data != NULL) OPENSSL_free(arg.data);
  325. apps_shutdown();
  326. CRYPTO_mem_leaks(bio_err);
  327. if (bio_err != NULL)
  328. {
  329. BIO_free(bio_err);
  330. bio_err=NULL;
  331. }
  332. OPENSSL_EXIT(ret);
  333. }
  334. #define LIST_STANDARD_COMMANDS "list-standard-commands"
  335. #define LIST_MESSAGE_DIGEST_COMMANDS "list-message-digest-commands"
  336. #define LIST_CIPHER_COMMANDS "list-cipher-commands"
  337. #define LIST_PUBLIC_KEY_ALGORITHMS "list-public-key-algorithms"
  338. static int do_cmd(LHASH *prog, int argc, char *argv[])
  339. {
  340. FUNCTION f,*fp;
  341. int i,ret=1,tp,nl;
  342. if ((argc <= 0) || (argv[0] == NULL))
  343. { ret=0; goto end; }
  344. f.name=argv[0];
  345. fp=(FUNCTION *)lh_retrieve(prog,&f);
  346. if (fp != NULL)
  347. {
  348. ret=fp->func(argc,argv);
  349. }
  350. else if ((strncmp(argv[0],"no-",3)) == 0)
  351. {
  352. BIO *bio_stdout = BIO_new_fp(stdout,BIO_NOCLOSE);
  353. #ifdef OPENSSL_SYS_VMS
  354. {
  355. BIO *tmpbio = BIO_new(BIO_f_linebuffer());
  356. bio_stdout = BIO_push(tmpbio, bio_stdout);
  357. }
  358. #endif
  359. f.name=argv[0]+3;
  360. ret = (lh_retrieve(prog,&f) != NULL);
  361. if (!ret)
  362. BIO_printf(bio_stdout, "%s\n", argv[0]);
  363. else
  364. BIO_printf(bio_stdout, "%s\n", argv[0]+3);
  365. BIO_free_all(bio_stdout);
  366. goto end;
  367. }
  368. else if ((strcmp(argv[0],"quit") == 0) ||
  369. (strcmp(argv[0],"q") == 0) ||
  370. (strcmp(argv[0],"exit") == 0) ||
  371. (strcmp(argv[0],"bye") == 0))
  372. {
  373. ret= -1;
  374. goto end;
  375. }
  376. else if ((strcmp(argv[0],LIST_STANDARD_COMMANDS) == 0) ||
  377. (strcmp(argv[0],LIST_MESSAGE_DIGEST_COMMANDS) == 0) ||
  378. (strcmp(argv[0],LIST_CIPHER_COMMANDS) == 0) ||
  379. (strcmp(argv[0],LIST_PUBLIC_KEY_ALGORITHMS) == 0))
  380. {
  381. int list_type;
  382. BIO *bio_stdout;
  383. if (strcmp(argv[0],LIST_STANDARD_COMMANDS) == 0)
  384. list_type = FUNC_TYPE_GENERAL;
  385. else if (strcmp(argv[0],LIST_MESSAGE_DIGEST_COMMANDS) == 0)
  386. list_type = FUNC_TYPE_MD;
  387. else if (strcmp(argv[0],LIST_PUBLIC_KEY_ALGORITHMS) == 0)
  388. list_type = FUNC_TYPE_PKEY;
  389. else /* strcmp(argv[0],LIST_CIPHER_COMMANDS) == 0 */
  390. list_type = FUNC_TYPE_CIPHER;
  391. bio_stdout = BIO_new_fp(stdout,BIO_NOCLOSE);
  392. #ifdef OPENSSL_SYS_VMS
  393. {
  394. BIO *tmpbio = BIO_new(BIO_f_linebuffer());
  395. bio_stdout = BIO_push(tmpbio, bio_stdout);
  396. }
  397. #endif
  398. if (!load_config(bio_err, NULL))
  399. goto end;
  400. if (list_type == FUNC_TYPE_PKEY)
  401. list_pkey(bio_stdout);
  402. else
  403. {
  404. for (fp=functions; fp->name != NULL; fp++)
  405. if (fp->type == list_type)
  406. BIO_printf(bio_stdout, "%s\n",
  407. fp->name);
  408. }
  409. BIO_free_all(bio_stdout);
  410. ret=0;
  411. goto end;
  412. }
  413. else
  414. {
  415. BIO_printf(bio_err,"openssl:Error: '%s' is an invalid command.\n",
  416. argv[0]);
  417. BIO_printf(bio_err, "\nStandard commands");
  418. i=0;
  419. tp=0;
  420. for (fp=functions; fp->name != NULL; fp++)
  421. {
  422. nl=0;
  423. if (((i++) % 5) == 0)
  424. {
  425. BIO_printf(bio_err,"\n");
  426. nl=1;
  427. }
  428. if (fp->type != tp)
  429. {
  430. tp=fp->type;
  431. if (!nl) BIO_printf(bio_err,"\n");
  432. if (tp == FUNC_TYPE_MD)
  433. {
  434. i=1;
  435. BIO_printf(bio_err,
  436. "\nMessage Digest commands (see the `dgst' command for more details)\n");
  437. }
  438. else if (tp == FUNC_TYPE_CIPHER)
  439. {
  440. i=1;
  441. BIO_printf(bio_err,"\nCipher commands (see the `enc' command for more details)\n");
  442. }
  443. }
  444. BIO_printf(bio_err,"%-15s",fp->name);
  445. }
  446. BIO_printf(bio_err,"\n\n");
  447. ret=0;
  448. }
  449. end:
  450. return(ret);
  451. }
  452. static int SortFnByName(const void *_f1,const void *_f2)
  453. {
  454. const FUNCTION *f1=_f1;
  455. const FUNCTION *f2=_f2;
  456. if(f1->type != f2->type)
  457. return f1->type-f2->type;
  458. return strcmp(f1->name,f2->name);
  459. }
  460. static void list_pkey(BIO *out)
  461. {
  462. int i;
  463. for (i = 0; i < EVP_PKEY_asn1_get_count(); i++)
  464. {
  465. const EVP_PKEY_ASN1_METHOD *ameth;
  466. int pkey_id, pkey_base_id, pkey_flags;
  467. const char *pinfo, *pem_str;
  468. ameth = EVP_PKEY_asn1_get0(i);
  469. EVP_PKEY_asn1_get0_info(&pkey_id, &pkey_base_id, &pkey_flags,
  470. &pinfo, &pem_str, ameth);
  471. if (pkey_flags & ASN1_PKEY_ALIAS)
  472. {
  473. BIO_printf(out, "Name: %s\n",
  474. OBJ_nid2ln(pkey_id));
  475. BIO_printf(out, "\tType: Alias to %s\n",
  476. OBJ_nid2ln(pkey_base_id));
  477. }
  478. else
  479. {
  480. BIO_printf(out, "Name: %s\n", pinfo);
  481. BIO_printf(out, "\tType: %s Algorithm\n",
  482. pkey_flags & ASN1_PKEY_DYNAMIC ?
  483. "External" : "Builtin");
  484. BIO_printf(out, "\tOID: %s\n", OBJ_nid2ln(pkey_id));
  485. if (pem_str == NULL)
  486. pem_str = "(none)";
  487. BIO_printf(out, "\tPEM string: %s\n", pem_str);
  488. }
  489. }
  490. }
  491. static LHASH *prog_init(void)
  492. {
  493. LHASH *ret;
  494. FUNCTION *f;
  495. size_t i;
  496. /* Purely so it looks nice when the user hits ? */
  497. for(i=0,f=functions ; f->name != NULL ; ++f,++i)
  498. ;
  499. qsort(functions,i,sizeof *functions,SortFnByName);
  500. if ((ret=lh_new(hash, cmp)) == NULL)
  501. return(NULL);
  502. for (f=functions; f->name != NULL; f++)
  503. lh_insert(ret,f);
  504. return(ret);
  505. }
  506. /* static int MS_CALLBACK cmp(FUNCTION *a, FUNCTION *b) */
  507. static int MS_CALLBACK cmp(const void *a_void, const void *b_void)
  508. {
  509. return(strncmp(((const FUNCTION *)a_void)->name,
  510. ((const FUNCTION *)b_void)->name,8));
  511. }
  512. /* static unsigned long MS_CALLBACK hash(FUNCTION *a) */
  513. static unsigned long MS_CALLBACK hash(const void *a_void)
  514. {
  515. return(lh_strhash(((const FUNCTION *)a_void)->name));
  516. }