123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290 |
- /*
- * Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the Apache License 2.0 (the "License"). You may not use
- * this file except in compliance with the License. You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
- /*
- * DSA low level APIs are deprecated for public use, but still ok for
- * internal use.
- */
- #include "internal/deprecated.h"
- #include <openssl/core_dispatch.h>
- #include <openssl/core_names.h>
- #include <openssl/err.h>
- #include <openssl/pem.h>
- #include <openssl/dsa.h>
- #include <openssl/types.h>
- #include <openssl/params.h>
- #include "prov/bio.h"
- #include "prov/implementations.h"
- #include "prov/provider_ctx.h"
- #include "encoder_local.h"
- static OSSL_FUNC_encoder_newctx_fn dsa_priv_newctx;
- static OSSL_FUNC_encoder_freectx_fn dsa_priv_freectx;
- static OSSL_FUNC_encoder_set_ctx_params_fn dsa_priv_set_ctx_params;
- static OSSL_FUNC_encoder_settable_ctx_params_fn dsa_priv_settable_ctx_params;
- static OSSL_FUNC_encoder_encode_data_fn dsa_priv_der_data;
- static OSSL_FUNC_encoder_encode_object_fn dsa_priv_der;
- static OSSL_FUNC_encoder_encode_data_fn dsa_pem_priv_data;
- static OSSL_FUNC_encoder_encode_object_fn dsa_pem_priv;
- static OSSL_FUNC_encoder_newctx_fn dsa_print_newctx;
- static OSSL_FUNC_encoder_freectx_fn dsa_print_freectx;
- static OSSL_FUNC_encoder_encode_data_fn dsa_priv_print_data;
- static OSSL_FUNC_encoder_encode_object_fn dsa_priv_print;
- /*
- * Context used for private key encoding.
- */
- struct dsa_priv_ctx_st {
- void *provctx;
- struct pkcs8_encrypt_ctx_st sc;
- };
- /* Private key : context */
- static void *dsa_priv_newctx(void *provctx)
- {
- struct dsa_priv_ctx_st *ctx = OPENSSL_zalloc(sizeof(*ctx));
- if (ctx != NULL) {
- ctx->provctx = provctx;
- /* -1 is the "whatever" indicator, i.e. the PKCS8 library default PBE */
- ctx->sc.pbe_nid = -1;
- }
- return ctx;
- }
- static void dsa_priv_freectx(void *vctx)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- EVP_CIPHER_free(ctx->sc.cipher);
- OPENSSL_free(ctx->sc.cipher_pass);
- OPENSSL_free(ctx);
- }
- static const OSSL_PARAM *dsa_priv_settable_ctx_params(ossl_unused void *provctx)
- {
- static const OSSL_PARAM settables[] = {
- OSSL_PARAM_utf8_string(OSSL_ENCODER_PARAM_CIPHER, NULL, 0),
- OSSL_PARAM_octet_string(OSSL_ENCODER_PARAM_PASS, NULL, 0),
- OSSL_PARAM_END,
- };
- return settables;
- }
- static int dsa_priv_set_ctx_params(void *vctx, const OSSL_PARAM params[])
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- const OSSL_PARAM *p;
- if ((p = OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_CIPHER))
- != NULL) {
- const OSSL_PARAM *propsp =
- OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_PROPERTIES);
- const char *props = NULL;
- if (p->data_type != OSSL_PARAM_UTF8_STRING)
- return 0;
- if (propsp != NULL && propsp->data_type != OSSL_PARAM_UTF8_STRING)
- return 0;
- props = (propsp != NULL ? propsp->data : NULL);
- EVP_CIPHER_free(ctx->sc.cipher);
- ctx->sc.cipher_intent = p->data != NULL;
- if (p->data != NULL
- && ((ctx->sc.cipher = EVP_CIPHER_fetch(NULL, p->data, props))
- == NULL))
- return 0;
- }
- if ((p = OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_PASS))
- != NULL) {
- OPENSSL_free(ctx->sc.cipher_pass);
- ctx->sc.cipher_pass = NULL;
- if (!OSSL_PARAM_get_octet_string(p, &ctx->sc.cipher_pass, 0,
- &ctx->sc.cipher_pass_length))
- return 0;
- }
- return 1;
- }
- /* Private key : DER */
- static int dsa_priv_der_data(void *vctx, const OSSL_PARAM params[],
- OSSL_CORE_BIO *out,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- OSSL_FUNC_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
- OSSL_FUNC_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
- OSSL_FUNC_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
- int ok = 0;
- if (dsa_import != NULL) {
- DSA *dsa;
- if ((dsa = dsa_new(ctx->provctx)) != NULL
- && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
- && dsa_priv_der(ctx, dsa, out, cb, cbarg))
- ok = 1;
- dsa_free(dsa);
- }
- return ok;
- }
- static int dsa_priv_der(void *vctx, void *dsa, OSSL_CORE_BIO *cout,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- BIO *out = bio_new_from_core_bio(ctx->provctx, cout);
- int ret;
- if (out == NULL)
- return 0;
- ctx->sc.cb = cb;
- ctx->sc.cbarg = cbarg;
- ret = ossl_prov_write_priv_der_from_obj(out, dsa, EVP_PKEY_DSA,
- ossl_prov_prepare_dsa_params,
- ossl_prov_dsa_priv_to_der,
- &ctx->sc);
- BIO_free(out);
- return ret;
- }
- /* Private key : PEM */
- static int dsa_pem_priv_data(void *vctx, const OSSL_PARAM params[],
- OSSL_CORE_BIO *out,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- OSSL_FUNC_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
- OSSL_FUNC_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
- OSSL_FUNC_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
- int ok = 0;
- if (dsa_import != NULL) {
- DSA *dsa;
- if ((dsa = dsa_new(ctx->provctx)) != NULL
- && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
- && dsa_pem_priv(ctx, dsa, out, cb, cbarg))
- ok = 1;
- dsa_free(dsa);
- }
- return ok;
- }
- static int dsa_pem_priv(void *vctx, void *dsa, OSSL_CORE_BIO *cout,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- BIO *out = bio_new_from_core_bio(ctx->provctx, cout);
- int ret;
- if (out == NULL)
- return 0;
- ctx->sc.cb = cb;
- ctx->sc.cbarg = cbarg;
- ret = ossl_prov_write_priv_pem_from_obj(out, dsa, EVP_PKEY_DSA,
- ossl_prov_prepare_dsa_params,
- ossl_prov_dsa_priv_to_der,
- &ctx->sc);
- BIO_free(out);
- return ret;
- }
- /*
- * There's no specific print context, so we use the provider context
- */
- static void *dsa_print_newctx(void *provctx)
- {
- return provctx;
- }
- static void dsa_print_freectx(void *ctx)
- {
- }
- static int dsa_priv_print_data(void *vctx, const OSSL_PARAM params[],
- OSSL_CORE_BIO *out,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- struct dsa_priv_ctx_st *ctx = vctx;
- OSSL_FUNC_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
- OSSL_FUNC_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
- OSSL_FUNC_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
- int ok = 0;
- if (dsa_import != NULL) {
- DSA *dsa;
- if ((dsa = dsa_new(ctx->provctx)) != NULL
- && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
- && dsa_priv_print(ctx, dsa, out, cb, cbarg))
- ok = 1;
- dsa_free(dsa);
- }
- return ok;
- }
- static int dsa_priv_print(void *ctx, void *dsa, OSSL_CORE_BIO *cout,
- OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
- {
- BIO *out = bio_new_from_core_bio(ctx, cout);
- int ret;
- if (out == NULL)
- return 0;
- ret = ossl_prov_print_dsa(out, dsa, dsa_print_priv);
- BIO_free(out);
- return ret;
- }
- const OSSL_DISPATCH dsa_priv_der_encoder_functions[] = {
- { OSSL_FUNC_ENCODER_NEWCTX, (void (*)(void))dsa_priv_newctx },
- { OSSL_FUNC_ENCODER_FREECTX, (void (*)(void))dsa_priv_freectx },
- { OSSL_FUNC_ENCODER_SET_CTX_PARAMS,
- (void (*)(void))dsa_priv_set_ctx_params },
- { OSSL_FUNC_ENCODER_SETTABLE_CTX_PARAMS,
- (void (*)(void))dsa_priv_settable_ctx_params },
- { OSSL_FUNC_ENCODER_ENCODE_DATA, (void (*)(void))dsa_priv_der_data },
- { OSSL_FUNC_ENCODER_ENCODE_OBJECT, (void (*)(void))dsa_priv_der },
- { 0, NULL }
- };
- const OSSL_DISPATCH dsa_priv_pem_encoder_functions[] = {
- { OSSL_FUNC_ENCODER_NEWCTX, (void (*)(void))dsa_priv_newctx },
- { OSSL_FUNC_ENCODER_FREECTX, (void (*)(void))dsa_priv_freectx },
- { OSSL_FUNC_ENCODER_SET_CTX_PARAMS,
- (void (*)(void))dsa_priv_set_ctx_params },
- { OSSL_FUNC_ENCODER_SETTABLE_CTX_PARAMS,
- (void (*)(void))dsa_priv_settable_ctx_params },
- { OSSL_FUNC_ENCODER_ENCODE_DATA, (void (*)(void))dsa_pem_priv_data },
- { OSSL_FUNC_ENCODER_ENCODE_OBJECT, (void (*)(void))dsa_pem_priv },
- { 0, NULL }
- };
- const OSSL_DISPATCH dsa_priv_text_encoder_functions[] = {
- { OSSL_FUNC_ENCODER_NEWCTX, (void (*)(void))dsa_print_newctx },
- { OSSL_FUNC_ENCODER_FREECTX, (void (*)(void))dsa_print_freectx },
- { OSSL_FUNC_ENCODER_ENCODE_OBJECT, (void (*)(void))dsa_priv_print },
- { OSSL_FUNC_ENCODER_ENCODE_DATA,
- (void (*)(void))dsa_priv_print_data },
- { 0, NULL }
- };
|