sess_id.c 9.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300
  1. /* apps/sess_id.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include <stdlib.h>
  60. #include <string.h>
  61. #include "apps.h"
  62. #include <openssl/bio.h>
  63. #include <openssl/err.h>
  64. #include <openssl/x509.h>
  65. #include <openssl/pem.h>
  66. #include <openssl/ssl.h>
  67. #undef PROG
  68. #define PROG sess_id_main
  69. static const char *sess_id_usage[] = {
  70. "usage: sess_id args\n",
  71. "\n",
  72. " -inform arg - input format - default PEM (DER or PEM)\n",
  73. " -outform arg - output format - default PEM\n",
  74. " -in arg - input file - default stdin\n",
  75. " -out arg - output file - default stdout\n",
  76. " -text - print ssl session id details\n",
  77. " -cert - output certificate \n",
  78. " -noout - no CRL output\n",
  79. " -context arg - set the session ID context\n",
  80. NULL
  81. };
  82. static SSL_SESSION *load_sess_id(char *file, int format);
  83. int MAIN(int, char **);
  84. int MAIN(int argc, char **argv)
  85. {
  86. SSL_SESSION *x = NULL;
  87. X509 *peer = NULL;
  88. int ret = 1, i, num, badops = 0;
  89. BIO *out = NULL;
  90. int informat, outformat;
  91. char *infile = NULL, *outfile = NULL, *context = NULL;
  92. int cert = 0, noout = 0, text = 0;
  93. const char **pp;
  94. apps_startup();
  95. if (bio_err == NULL)
  96. if ((bio_err = BIO_new(BIO_s_file())) != NULL)
  97. BIO_set_fp(bio_err, stderr, BIO_NOCLOSE | BIO_FP_TEXT);
  98. informat = FORMAT_PEM;
  99. outformat = FORMAT_PEM;
  100. argc--;
  101. argv++;
  102. num = 0;
  103. while (argc >= 1) {
  104. if (strcmp(*argv, "-inform") == 0) {
  105. if (--argc < 1)
  106. goto bad;
  107. informat = str2fmt(*(++argv));
  108. } else if (strcmp(*argv, "-outform") == 0) {
  109. if (--argc < 1)
  110. goto bad;
  111. outformat = str2fmt(*(++argv));
  112. } else if (strcmp(*argv, "-in") == 0) {
  113. if (--argc < 1)
  114. goto bad;
  115. infile = *(++argv);
  116. } else if (strcmp(*argv, "-out") == 0) {
  117. if (--argc < 1)
  118. goto bad;
  119. outfile = *(++argv);
  120. } else if (strcmp(*argv, "-text") == 0)
  121. text = ++num;
  122. else if (strcmp(*argv, "-cert") == 0)
  123. cert = ++num;
  124. else if (strcmp(*argv, "-noout") == 0)
  125. noout = ++num;
  126. else if (strcmp(*argv, "-context") == 0) {
  127. if (--argc < 1)
  128. goto bad;
  129. context = *++argv;
  130. } else {
  131. BIO_printf(bio_err, "unknown option %s\n", *argv);
  132. badops = 1;
  133. break;
  134. }
  135. argc--;
  136. argv++;
  137. }
  138. if (badops) {
  139. bad:
  140. for (pp = sess_id_usage; (*pp != NULL); pp++)
  141. BIO_printf(bio_err, "%s", *pp);
  142. goto end;
  143. }
  144. ERR_load_crypto_strings();
  145. x = load_sess_id(infile, informat);
  146. if (x == NULL) {
  147. goto end;
  148. }
  149. peer = SSL_SESSION_get0_peer(x);
  150. if (context) {
  151. size_t ctx_len = strlen(context);
  152. if (ctx_len > SSL_MAX_SID_CTX_LENGTH) {
  153. BIO_printf(bio_err, "Context too long\n");
  154. goto end;
  155. }
  156. SSL_SESSION_set1_id_context(x, (unsigned char *)context, ctx_len);
  157. }
  158. #ifdef undef
  159. /* just testing for memory leaks :-) */
  160. {
  161. SSL_SESSION *s;
  162. char buf[1024 * 10], *p;
  163. int i;
  164. s = SSL_SESSION_new();
  165. p = &buf;
  166. i = i2d_SSL_SESSION(x, &p);
  167. p = &buf;
  168. d2i_SSL_SESSION(&s, &p, (long)i);
  169. p = &buf;
  170. d2i_SSL_SESSION(&s, &p, (long)i);
  171. p = &buf;
  172. d2i_SSL_SESSION(&s, &p, (long)i);
  173. SSL_SESSION_free(s);
  174. }
  175. #endif
  176. if (!noout || text) {
  177. out = BIO_new(BIO_s_file());
  178. if (out == NULL) {
  179. ERR_print_errors(bio_err);
  180. goto end;
  181. }
  182. if (outfile == NULL) {
  183. BIO_set_fp(out, stdout, BIO_NOCLOSE);
  184. #ifdef OPENSSL_SYS_VMS
  185. {
  186. BIO *tmpbio = BIO_new(BIO_f_linebuffer());
  187. out = BIO_push(tmpbio, out);
  188. }
  189. #endif
  190. } else {
  191. if (BIO_write_filename(out, outfile) <= 0) {
  192. perror(outfile);
  193. goto end;
  194. }
  195. }
  196. }
  197. if (text) {
  198. SSL_SESSION_print(out, x);
  199. if (cert) {
  200. if (peer == NULL)
  201. BIO_puts(out, "No certificate present\n");
  202. else
  203. X509_print(out, peer);
  204. }
  205. }
  206. if (!noout && !cert) {
  207. if (outformat == FORMAT_ASN1)
  208. i = i2d_SSL_SESSION_bio(out, x);
  209. else if (outformat == FORMAT_PEM)
  210. i = PEM_write_bio_SSL_SESSION(out, x);
  211. else {
  212. BIO_printf(bio_err, "bad output format specified for outfile\n");
  213. goto end;
  214. }
  215. if (!i) {
  216. BIO_printf(bio_err, "unable to write SSL_SESSION\n");
  217. goto end;
  218. }
  219. } else if (!noout && (peer != NULL)) { /* just print the certificate */
  220. if (outformat == FORMAT_ASN1)
  221. i = (int)i2d_X509_bio(out, peer);
  222. else if (outformat == FORMAT_PEM)
  223. i = PEM_write_bio_X509(out, peer);
  224. else {
  225. BIO_printf(bio_err, "bad output format specified for outfile\n");
  226. goto end;
  227. }
  228. if (!i) {
  229. BIO_printf(bio_err, "unable to write X509\n");
  230. goto end;
  231. }
  232. }
  233. ret = 0;
  234. end:
  235. if (out != NULL)
  236. BIO_free_all(out);
  237. if (x != NULL)
  238. SSL_SESSION_free(x);
  239. apps_shutdown();
  240. OPENSSL_EXIT(ret);
  241. }
  242. static SSL_SESSION *load_sess_id(char *infile, int format)
  243. {
  244. SSL_SESSION *x = NULL;
  245. BIO *in = NULL;
  246. in = BIO_new(BIO_s_file());
  247. if (in == NULL) {
  248. ERR_print_errors(bio_err);
  249. goto end;
  250. }
  251. if (infile == NULL)
  252. BIO_set_fp(in, stdin, BIO_NOCLOSE);
  253. else {
  254. if (BIO_read_filename(in, infile) <= 0) {
  255. perror(infile);
  256. goto end;
  257. }
  258. }
  259. if (format == FORMAT_ASN1)
  260. x = d2i_SSL_SESSION_bio(in, NULL);
  261. else if (format == FORMAT_PEM)
  262. x = PEM_read_bio_SSL_SESSION(in, NULL, NULL, NULL);
  263. else {
  264. BIO_printf(bio_err, "bad input format specified for input crl\n");
  265. goto end;
  266. }
  267. if (x == NULL) {
  268. BIO_printf(bio_err, "unable to load SSL_SESSION\n");
  269. ERR_print_errors(bio_err);
  270. goto end;
  271. }
  272. end:
  273. if (in != NULL)
  274. BIO_free(in);
  275. return (x);
  276. }