gencertbuf.pl 9.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285
  1. #!/usr/bin/perl
  2. # gencertbuf.pl
  3. # version 1.1
  4. # Updated 07/01/2014
  5. #
  6. # Copyright (C) 2006-2015 wolfSSL Inc.
  7. #
  8. use strict;
  9. use warnings;
  10. # ---- SCRIPT SETTINGS -------------------------------------------------------
  11. # output C header file to write cert/key buffers to
  12. my $outputFile = "./wolfssl/certs_test.h";
  13. # ecc keys and certs to be converted
  14. # Used with HAVE_ECC && USE_CERT_BUFFERS_256
  15. my @fileList_ecc = (
  16. [ "./certs/ecc-client-key.der", "ecc_clikey_der_256" ],
  17. [ "./certs/ecc-client-keyPub.der", "ecc_clikeypub_der_256" ],
  18. [ "./certs/client-ecc-cert.der", "cliecc_cert_der_256" ],
  19. [ "./certs/ecc-key.der", "ecc_key_der_256" ],
  20. [ "./certs/ecc-keyPub.der", "ecc_key_pub_der_256" ],
  21. [ "./certs/server-ecc-comp.der", "serv_ecc_comp_der_256" ],
  22. [ "./certs/server-ecc-rsa.der", "serv_ecc_rsa_der_256" ],
  23. [ "./certs/server-ecc.der", "serv_ecc_der_256" ],
  24. [ "./certs/ca-ecc-key.der", "ca_ecc_key_der_256" ],
  25. [ "./certs/ca-ecc-cert.der", "ca_ecc_cert_der_256" ],
  26. [ "./certs/ca-ecc384-key.der", "ca_ecc_key_der_384" ],
  27. [ "./certs/ca-ecc384-cert.der", "ca_ecc_cert_der_384" ]
  28. );
  29. # ed25519 keys and certs
  30. # Used with HAVE_ED25519 define.
  31. my @fileList_ed = (
  32. [ "./certs/ed25519/server-ed25519.der", "server_ed25519_cert" ],
  33. [ "./certs/ed25519/server-ed25519-key.der", "server_ed25519_key" ],
  34. [ "./certs/ed25519/ca-ed25519.der", "ca_ed25519_cert" ],
  35. [ "./certs/ed25519/client-ed25519.der", "client_ed25519_cert" ],
  36. [ "./certs/ed25519/client-ed25519-key.der", "client_ed25519_key" ]
  37. );
  38. # 1024-bit certs/keys to be converted
  39. # Used with USE_CERT_BUFFERS_1024 define.
  40. my @fileList_1024 = (
  41. [ "./certs/1024/client-key.der", "client_key_der_1024" ],
  42. [ "./certs/1024/client-keyPub.der", "client_keypub_der_1024" ],
  43. [ "./certs/1024/client-cert.der", "client_cert_der_1024" ],
  44. [ "./certs/1024/dh1024.der", "dh_key_der_1024" ],
  45. [ "./certs/1024/dsa1024.der", "dsa_key_der_1024" ],
  46. [ "./certs/1024/rsa1024.der", "rsa_key_der_1024" ],
  47. [ "./certs/1024/ca-key.der", "ca_key_der_1024"],
  48. [ "./certs/1024/ca-cert.der", "ca_cert_der_1024" ],
  49. [ "./certs/1024/server-key.der", "server_key_der_1024" ],
  50. [ "./certs/1024/server-cert.der", "server_cert_der_1024" ]
  51. );
  52. # 2048-bit certs/keys to be converted
  53. # Used with USE_CERT_BUFFERS_2048 define.
  54. my @fileList_2048 = (
  55. [ "./certs/client-key.der", "client_key_der_2048" ],
  56. [ "./certs/client-keyPub.der", "client_keypub_der_2048" ],
  57. [ "./certs/client-cert.der", "client_cert_der_2048" ],
  58. [ "./certs/dh2048.der", "dh_key_der_2048" ],
  59. [ "./certs/dh-pubkey-2048.der", "dh_pub_key_der_2048" ],
  60. [ "./certs/dsa-pubkey-2048.der", "dsa_pub_key_der_2048" ],
  61. [ "./certs/dsa2048.der", "dsa_key_der_2048" ],
  62. [ "./certs/rsa2048.der", "rsa_key_der_2048" ],
  63. [ "./certs/ca-key.der", "ca_key_der_2048" ],
  64. [ "./certs/ca-cert.der", "ca_cert_der_2048" ],
  65. [ "./certs/ca-cert-chain.der", "ca_cert_chain_der" ],
  66. [ "./certs/server-key.der", "server_key_der_2048" ],
  67. [ "./certs/server-cert.der", "server_cert_der_2048" ]
  68. );
  69. # 3072-bit certs/keys to be converted
  70. # Used with USE_CERT_BUFFERS_3072 define.
  71. my @fileList_3072 = (
  72. [ "./certs/dh3072.der", "dh_key_der_3072" ],
  73. [ "./certs/dsa3072.der", "dsa_key_der_3072" ],
  74. [ "./certs/rsa3072.der", "rsa_key_der_3072" ],
  75. [ "./certs/3072/client-key.der", "client_key_der_3072" ],
  76. [ "./certs/3072/client-keyPub.der", "client_keypub_der_3072" ],
  77. [ "./certs/3072/client-cert.der", "client_cert_der_3072" ],
  78. );
  79. # 4096-bit certs/keys to be converted
  80. # Used with USE_CERT_BUFFERS_4096 define.
  81. my @fileList_4096 = (
  82. [ "./certs/4096/client-key.der", "client_key_der_4096" ],
  83. [ "./certs/4096/client-keyPub.der", "client_keypub_der_4096" ],
  84. [ "./certs/4096/client-cert.der", "client_cert_der_4096" ],
  85. [ "./certs/dh4096.der", "dh_key_der_4096" ],
  86. );
  87. # ----------------------------------------------------------------------------
  88. my $num_ecc = @fileList_ecc;
  89. my $num_ed = @fileList_ed;
  90. my $num_1024 = @fileList_1024;
  91. my $num_2048 = @fileList_2048;
  92. my $num_3072 = @fileList_3072;
  93. my $num_4096 = @fileList_4096;
  94. # open our output file, "+>" creates and/or truncates
  95. open OUT_FILE, "+>", $outputFile or die $!;
  96. print OUT_FILE "/* certs_test.h */\n\n";
  97. print OUT_FILE "#ifndef WOLFSSL_CERTS_TEST_H\n";
  98. print OUT_FILE "#define WOLFSSL_CERTS_TEST_H\n\n";
  99. # convert and print 1024-bit cert/keys
  100. print OUT_FILE "#ifdef USE_CERT_BUFFERS_1024\n\n";
  101. for (my $i = 0; $i < $num_1024; $i++) {
  102. my $fname = $fileList_1024[$i][0];
  103. my $sname = $fileList_1024[$i][1];
  104. print OUT_FILE "/* $fname, 1024-bit */\n";
  105. print OUT_FILE "static const unsigned char $sname\[] =\n";
  106. print OUT_FILE "{\n";
  107. file_to_hex($fname);
  108. print OUT_FILE "};\n";
  109. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  110. }
  111. print OUT_FILE "#endif /* USE_CERT_BUFFERS_1024 */\n\n";
  112. # convert and print 2048-bit certs/keys
  113. print OUT_FILE "#ifdef USE_CERT_BUFFERS_2048\n\n";
  114. for (my $i = 0; $i < $num_2048; $i++) {
  115. my $fname = $fileList_2048[$i][0];
  116. my $sname = $fileList_2048[$i][1];
  117. print OUT_FILE "/* $fname, 2048-bit */\n";
  118. print OUT_FILE "static const unsigned char $sname\[] =\n";
  119. print OUT_FILE "{\n";
  120. file_to_hex($fname);
  121. print OUT_FILE "};\n";
  122. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  123. }
  124. print OUT_FILE "#endif /* USE_CERT_BUFFERS_2048 */\n\n";
  125. # convert and print 3072-bit certs/keys
  126. print OUT_FILE "#ifdef USE_CERT_BUFFERS_3072\n\n";
  127. for (my $i = 0; $i < $num_3072; $i++) {
  128. my $fname = $fileList_3072[$i][0];
  129. my $sname = $fileList_3072[$i][1];
  130. print OUT_FILE "/* $fname, 3072-bit */\n";
  131. print OUT_FILE "static const unsigned char $sname\[] =\n";
  132. print OUT_FILE "{\n";
  133. file_to_hex($fname);
  134. print OUT_FILE "};\n";
  135. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  136. }
  137. print OUT_FILE "#endif /* USE_CERT_BUFFERS_3072 */\n\n";
  138. # convert and print 4096-bit certs/keys
  139. print OUT_FILE "#ifdef USE_CERT_BUFFERS_4096\n\n";
  140. for (my $i = 0; $i < $num_4096; $i++) {
  141. my $fname = $fileList_4096[$i][0];
  142. my $sname = $fileList_4096[$i][1];
  143. print OUT_FILE "/* $fname, 4096-bit */\n";
  144. print OUT_FILE "static const unsigned char $sname\[] =\n";
  145. print OUT_FILE "{\n";
  146. file_to_hex($fname);
  147. print OUT_FILE "};\n";
  148. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  149. }
  150. print OUT_FILE "#endif /* USE_CERT_BUFFERS_4096 */\n\n";
  151. # convert and print 256-bit cert/keys
  152. print OUT_FILE "#if defined(HAVE_ECC) && defined(USE_CERT_BUFFERS_256)\n\n";
  153. for (my $i = 0; $i < $num_ecc; $i++) {
  154. my $fname = $fileList_ecc[$i][0];
  155. my $sname = $fileList_ecc[$i][1];
  156. print OUT_FILE "/* $fname, ECC */\n";
  157. print OUT_FILE "static const unsigned char $sname\[] =\n";
  158. print OUT_FILE "{\n";
  159. file_to_hex($fname);
  160. print OUT_FILE "};\n";
  161. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  162. }
  163. print OUT_FILE "#endif /* HAVE_ECC && USE_CERT_BUFFERS_256 */\n\n";
  164. print OUT_FILE "/* dh1024 p */
  165. static const unsigned char dh_p[] =
  166. {
  167. 0xE6, 0x96, 0x9D, 0x3D, 0x49, 0x5B, 0xE3, 0x2C, 0x7C, 0xF1, 0x80, 0xC3,
  168. 0xBD, 0xD4, 0x79, 0x8E, 0x91, 0xB7, 0x81, 0x82, 0x51, 0xBB, 0x05, 0x5E,
  169. 0x2A, 0x20, 0x64, 0x90, 0x4A, 0x79, 0xA7, 0x70, 0xFA, 0x15, 0xA2, 0x59,
  170. 0xCB, 0xD5, 0x23, 0xA6, 0xA6, 0xEF, 0x09, 0xC4, 0x30, 0x48, 0xD5, 0xA2,
  171. 0x2F, 0x97, 0x1F, 0x3C, 0x20, 0x12, 0x9B, 0x48, 0x00, 0x0E, 0x6E, 0xDD,
  172. 0x06, 0x1C, 0xBC, 0x05, 0x3E, 0x37, 0x1D, 0x79, 0x4E, 0x53, 0x27, 0xDF,
  173. 0x61, 0x1E, 0xBB, 0xBE, 0x1B, 0xAC, 0x9B, 0x5C, 0x60, 0x44, 0xCF, 0x02,
  174. 0x3D, 0x76, 0xE0, 0x5E, 0xEA, 0x9B, 0xAD, 0x99, 0x1B, 0x13, 0xA6, 0x3C,
  175. 0x97, 0x4E, 0x9E, 0xF1, 0x83, 0x9E, 0xB5, 0xDB, 0x12, 0x51, 0x36, 0xF7,
  176. 0x26, 0x2E, 0x56, 0xA8, 0x87, 0x15, 0x38, 0xDF, 0xD8, 0x23, 0xC6, 0x50,
  177. 0x50, 0x85, 0xE2, 0x1F, 0x0D, 0xD5, 0xC8, 0x6B,
  178. };
  179. /* dh1024 g */
  180. static const unsigned char dh_g[] =
  181. {
  182. 0x02,
  183. };\n\n";
  184. # convert and print ed25519 cert/keys
  185. print OUT_FILE "#if defined(HAVE_ED25519)\n\n";
  186. for (my $i = 0; $i < $num_ed; $i++) {
  187. my $fname = $fileList_ed[$i][0];
  188. my $sname = $fileList_ed[$i][1];
  189. print OUT_FILE "/* $fname, ED25519 */\n";
  190. print OUT_FILE "static const unsigned char $sname\[] =\n";
  191. print OUT_FILE "{\n";
  192. file_to_hex($fname);
  193. print OUT_FILE "};\n";
  194. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  195. }
  196. print OUT_FILE "#endif /* HAVE_ED25519 */\n\n";
  197. print OUT_FILE "#endif /* WOLFSSL_CERTS_TEST_H */\n\n";
  198. # close certs_test.h file
  199. close OUT_FILE or die $!;
  200. # print file as hex, comma-separated, as needed by C buffer
  201. sub file_to_hex {
  202. my $fileName = $_[0];
  203. open my $fp, "<", $fileName or die $!;
  204. binmode($fp);
  205. my $fileLen = -s $fileName;
  206. my $byte;
  207. for (my $i = 0, my $j = 1; $i < $fileLen; $i++, $j++)
  208. {
  209. if ($j == 1) {
  210. print OUT_FILE " ";
  211. }
  212. if ($j != 1) {
  213. print OUT_FILE " ";
  214. }
  215. read($fp, $byte, 1) or die "Error reading $fileName";
  216. my $output = sprintf("0x%02X", ord($byte));
  217. print OUT_FILE $output;
  218. if ($i != ($fileLen - 1)) {
  219. print OUT_FILE ",";
  220. }
  221. if ($j == 10) {
  222. $j = 0;
  223. print OUT_FILE "\n";
  224. }
  225. }
  226. print OUT_FILE "\n";
  227. close($fp);
  228. }