gencertbuf.pl 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308
  1. #!/usr/bin/perl
  2. # gencertbuf.pl
  3. # version 1.1
  4. # Updated 07/01/2014
  5. #
  6. # Copyright (C) 2006-2015 wolfSSL Inc.
  7. #
  8. use strict;
  9. use warnings;
  10. # ---- SCRIPT SETTINGS -------------------------------------------------------
  11. # output C header file to write cert/key buffers to
  12. my $outputFile = "./wolfssl/certs_test.h";
  13. # ecc keys and certs to be converted
  14. # Used with HAVE_ECC && USE_CERT_BUFFERS_256
  15. my @fileList_ecc = (
  16. [ "./certs/ecc-client-key.der", "ecc_clikey_der_256" ],
  17. [ "./certs/ecc-client-keyPub.der", "ecc_clikeypub_der_256" ],
  18. [ "./certs/client-ecc-cert.der", "cliecc_cert_der_256" ],
  19. [ "./certs/ecc-key.der", "ecc_key_der_256" ],
  20. [ "./certs/ecc-keyPub.der", "ecc_key_pub_der_256" ],
  21. [ "./certs/server-ecc-comp.der", "serv_ecc_comp_der_256" ],
  22. [ "./certs/server-ecc-rsa.der", "serv_ecc_rsa_der_256" ],
  23. [ "./certs/server-ecc.der", "serv_ecc_der_256" ],
  24. [ "./certs/ca-ecc-key.der", "ca_ecc_key_der_256" ],
  25. [ "./certs/ca-ecc-cert.der", "ca_ecc_cert_der_256" ],
  26. [ "./certs/ca-ecc384-key.der", "ca_ecc_key_der_384" ],
  27. [ "./certs/ca-ecc384-cert.der", "ca_ecc_cert_der_384" ]
  28. );
  29. # ed25519 keys and certs
  30. # Used with HAVE_ED25519 define.
  31. my @fileList_ed = (
  32. [ "./certs/ed25519/server-ed25519.der", "server_ed25519_cert" ],
  33. [ "./certs/ed25519/server-ed25519-key.der", "server_ed25519_key" ],
  34. [ "./certs/ed25519/ca-ed25519.der", "ca_ed25519_cert" ],
  35. [ "./certs/ed25519/client-ed25519.der", "client_ed25519_cert" ],
  36. [ "./certs/ed25519/client-ed25519-key.der", "client_ed25519_key" ]
  37. );
  38. # 1024-bit certs/keys to be converted
  39. # Used with USE_CERT_BUFFERS_1024 define.
  40. my @fileList_1024 = (
  41. [ "./certs/1024/client-key.der", "client_key_der_1024" ],
  42. [ "./certs/1024/client-keyPub.der", "client_keypub_der_1024" ],
  43. [ "./certs/1024/client-cert.der", "client_cert_der_1024" ],
  44. [ "./certs/1024/dh1024.der", "dh_key_der_1024" ],
  45. [ "./certs/1024/dsa1024.der", "dsa_key_der_1024" ],
  46. [ "./certs/1024/rsa1024.der", "rsa_key_der_1024" ],
  47. [ "./certs/1024/ca-key.der", "ca_key_der_1024"],
  48. [ "./certs/1024/ca-cert.der", "ca_cert_der_1024" ],
  49. [ "./certs/1024/server-key.der", "server_key_der_1024" ],
  50. [ "./certs/1024/server-cert.der", "server_cert_der_1024" ]
  51. );
  52. # 2048-bit certs/keys to be converted
  53. # Used with USE_CERT_BUFFERS_2048 define.
  54. my @fileList_2048 = (
  55. [ "./certs/client-key.der", "client_key_der_2048" ],
  56. [ "./certs/client-keyPub.der", "client_keypub_der_2048" ],
  57. [ "./certs/client-cert.der", "client_cert_der_2048" ],
  58. [ "./certs/dh2048.der", "dh_key_der_2048" ],
  59. [ "./certs/dh-pubkey-2048.der", "dh_pub_key_der_2048" ],
  60. [ "./certs/dsa-pubkey-2048.der", "dsa_pub_key_der_2048" ],
  61. [ "./certs/dsa2048.der", "dsa_key_der_2048" ],
  62. [ "./certs/rsa2048.der", "rsa_key_der_2048" ],
  63. [ "./certs/ca-key.der", "ca_key_der_2048" ],
  64. [ "./certs/ca-cert.der", "ca_cert_der_2048" ],
  65. [ "./certs/ca-cert-chain.der", "ca_cert_chain_der" ],
  66. [ "./certs/server-key.der", "server_key_der_2048" ],
  67. [ "./certs/server-cert.der", "server_cert_der_2048" ]
  68. );
  69. # 3072-bit certs/keys to be converted
  70. # Used with USE_CERT_BUFFERS_3072 define.
  71. my @fileList_3072 = (
  72. [ "./certs/dh3072.der", "dh_key_der_3072" ],
  73. [ "./certs/dsa3072.der", "dsa_key_der_3072" ],
  74. [ "./certs/rsa3072.der", "rsa_key_der_3072" ],
  75. [ "./certs/3072/client-key.der", "client_key_der_3072" ],
  76. [ "./certs/3072/client-keyPub.der", "client_keypub_der_3072" ],
  77. [ "./certs/3072/client-cert.der", "client_cert_der_3072" ],
  78. );
  79. # 4096-bit certs/keys to be converted
  80. # Used with USE_CERT_BUFFERS_4096 define.
  81. my @fileList_4096 = (
  82. [ "./certs/4096/client-key.der", "client_key_der_4096" ],
  83. [ "./certs/4096/client-keyPub.der", "client_keypub_der_4096" ],
  84. [ "./certs/4096/client-cert.der", "client_cert_der_4096" ],
  85. [ "./certs/dh4096.der", "dh_key_der_4096" ],
  86. );
  87. #Falcon Post-Quantum Keys
  88. #Used with HAVE_LIBOQS
  89. my @fileList_falcon = (
  90. ["certs/falcon/bench_falcon_level1_key.der", "bench_falcon_level1_key" ],
  91. ["certs/falcon/bench_falcon_level5_key.der", "bench_falcon_level5_key" ],
  92. );
  93. # ----------------------------------------------------------------------------
  94. my $num_ecc = @fileList_ecc;
  95. my $num_ed = @fileList_ed;
  96. my $num_1024 = @fileList_1024;
  97. my $num_2048 = @fileList_2048;
  98. my $num_3072 = @fileList_3072;
  99. my $num_4096 = @fileList_4096;
  100. my $num_falcon = @fileList_falcon;
  101. # open our output file, "+>" creates and/or truncates
  102. open OUT_FILE, "+>", $outputFile or die $!;
  103. print OUT_FILE "/* certs_test.h */\n\n";
  104. print OUT_FILE "#ifndef WOLFSSL_CERTS_TEST_H\n";
  105. print OUT_FILE "#define WOLFSSL_CERTS_TEST_H\n\n";
  106. # convert and print 1024-bit cert/keys
  107. print OUT_FILE "#ifdef USE_CERT_BUFFERS_1024\n\n";
  108. for (my $i = 0; $i < $num_1024; $i++) {
  109. my $fname = $fileList_1024[$i][0];
  110. my $sname = $fileList_1024[$i][1];
  111. print OUT_FILE "/* $fname, 1024-bit */\n";
  112. print OUT_FILE "static const unsigned char $sname\[] =\n";
  113. print OUT_FILE "{\n";
  114. file_to_hex($fname);
  115. print OUT_FILE "};\n";
  116. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  117. }
  118. print OUT_FILE "#endif /* USE_CERT_BUFFERS_1024 */\n\n";
  119. # convert and print 2048-bit certs/keys
  120. print OUT_FILE "#ifdef USE_CERT_BUFFERS_2048\n\n";
  121. for (my $i = 0; $i < $num_2048; $i++) {
  122. my $fname = $fileList_2048[$i][0];
  123. my $sname = $fileList_2048[$i][1];
  124. print OUT_FILE "/* $fname, 2048-bit */\n";
  125. print OUT_FILE "static const unsigned char $sname\[] =\n";
  126. print OUT_FILE "{\n";
  127. file_to_hex($fname);
  128. print OUT_FILE "};\n";
  129. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  130. }
  131. print OUT_FILE "#endif /* USE_CERT_BUFFERS_2048 */\n\n";
  132. # convert and print 3072-bit certs/keys
  133. print OUT_FILE "#ifdef USE_CERT_BUFFERS_3072\n\n";
  134. for (my $i = 0; $i < $num_3072; $i++) {
  135. my $fname = $fileList_3072[$i][0];
  136. my $sname = $fileList_3072[$i][1];
  137. print OUT_FILE "/* $fname, 3072-bit */\n";
  138. print OUT_FILE "static const unsigned char $sname\[] =\n";
  139. print OUT_FILE "{\n";
  140. file_to_hex($fname);
  141. print OUT_FILE "};\n";
  142. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  143. }
  144. print OUT_FILE "#endif /* USE_CERT_BUFFERS_3072 */\n\n";
  145. # convert and print 4096-bit certs/keys
  146. print OUT_FILE "#ifdef USE_CERT_BUFFERS_4096\n\n";
  147. for (my $i = 0; $i < $num_4096; $i++) {
  148. my $fname = $fileList_4096[$i][0];
  149. my $sname = $fileList_4096[$i][1];
  150. print OUT_FILE "/* $fname, 4096-bit */\n";
  151. print OUT_FILE "static const unsigned char $sname\[] =\n";
  152. print OUT_FILE "{\n";
  153. file_to_hex($fname);
  154. print OUT_FILE "};\n";
  155. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  156. }
  157. print OUT_FILE "#endif /* USE_CERT_BUFFERS_4096 */\n\n";
  158. # convert and print falcon keys
  159. print OUT_FILE "#ifdef HAVE_LIBOQS\n\n";
  160. for (my $i = 0; $i < $num_falcon; $i++) {
  161. my $fname = $fileList_falcon[$i][0];
  162. my $sname = $fileList_falcon[$i][1];
  163. print OUT_FILE "/* $fname */\n";
  164. print OUT_FILE "static const unsigned char $sname\[] =\n";
  165. print OUT_FILE "{\n";
  166. file_to_hex($fname);
  167. print OUT_FILE "};\n";
  168. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  169. }
  170. print OUT_FILE "#endif /* HAVE_LIBOQS */\n\n";
  171. # convert and print 256-bit cert/keys
  172. print OUT_FILE "#if defined(HAVE_ECC) && defined(USE_CERT_BUFFERS_256)\n\n";
  173. for (my $i = 0; $i < $num_ecc; $i++) {
  174. my $fname = $fileList_ecc[$i][0];
  175. my $sname = $fileList_ecc[$i][1];
  176. print OUT_FILE "/* $fname, ECC */\n";
  177. print OUT_FILE "static const unsigned char $sname\[] =\n";
  178. print OUT_FILE "{\n";
  179. file_to_hex($fname);
  180. print OUT_FILE "};\n";
  181. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  182. }
  183. print OUT_FILE "#endif /* HAVE_ECC && USE_CERT_BUFFERS_256 */\n\n";
  184. print OUT_FILE "/* dh1024 p */
  185. static const unsigned char dh_p[] =
  186. {
  187. 0xE6, 0x96, 0x9D, 0x3D, 0x49, 0x5B, 0xE3, 0x2C, 0x7C, 0xF1, 0x80, 0xC3,
  188. 0xBD, 0xD4, 0x79, 0x8E, 0x91, 0xB7, 0x81, 0x82, 0x51, 0xBB, 0x05, 0x5E,
  189. 0x2A, 0x20, 0x64, 0x90, 0x4A, 0x79, 0xA7, 0x70, 0xFA, 0x15, 0xA2, 0x59,
  190. 0xCB, 0xD5, 0x23, 0xA6, 0xA6, 0xEF, 0x09, 0xC4, 0x30, 0x48, 0xD5, 0xA2,
  191. 0x2F, 0x97, 0x1F, 0x3C, 0x20, 0x12, 0x9B, 0x48, 0x00, 0x0E, 0x6E, 0xDD,
  192. 0x06, 0x1C, 0xBC, 0x05, 0x3E, 0x37, 0x1D, 0x79, 0x4E, 0x53, 0x27, 0xDF,
  193. 0x61, 0x1E, 0xBB, 0xBE, 0x1B, 0xAC, 0x9B, 0x5C, 0x60, 0x44, 0xCF, 0x02,
  194. 0x3D, 0x76, 0xE0, 0x5E, 0xEA, 0x9B, 0xAD, 0x99, 0x1B, 0x13, 0xA6, 0x3C,
  195. 0x97, 0x4E, 0x9E, 0xF1, 0x83, 0x9E, 0xB5, 0xDB, 0x12, 0x51, 0x36, 0xF7,
  196. 0x26, 0x2E, 0x56, 0xA8, 0x87, 0x15, 0x38, 0xDF, 0xD8, 0x23, 0xC6, 0x50,
  197. 0x50, 0x85, 0xE2, 0x1F, 0x0D, 0xD5, 0xC8, 0x6B,
  198. };
  199. /* dh1024 g */
  200. static const unsigned char dh_g[] =
  201. {
  202. 0x02,
  203. };\n\n";
  204. # convert and print ed25519 cert/keys
  205. print OUT_FILE "#if defined(HAVE_ED25519)\n\n";
  206. for (my $i = 0; $i < $num_ed; $i++) {
  207. my $fname = $fileList_ed[$i][0];
  208. my $sname = $fileList_ed[$i][1];
  209. print OUT_FILE "/* $fname, ED25519 */\n";
  210. print OUT_FILE "static const unsigned char $sname\[] =\n";
  211. print OUT_FILE "{\n";
  212. file_to_hex($fname);
  213. print OUT_FILE "};\n";
  214. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  215. }
  216. print OUT_FILE "#endif /* HAVE_ED25519 */\n\n";
  217. print OUT_FILE "#endif /* WOLFSSL_CERTS_TEST_H */\n\n";
  218. # close certs_test.h file
  219. close OUT_FILE or die $!;
  220. # print file as hex, comma-separated, as needed by C buffer
  221. sub file_to_hex {
  222. my $fileName = $_[0];
  223. open my $fp, "<", $fileName or die $!;
  224. binmode($fp);
  225. my $fileLen = -s $fileName;
  226. my $byte;
  227. for (my $i = 0, my $j = 1; $i < $fileLen; $i++, $j++)
  228. {
  229. if ($j == 1) {
  230. print OUT_FILE " ";
  231. }
  232. if ($j != 1) {
  233. print OUT_FILE " ";
  234. }
  235. read($fp, $byte, 1) or die "Error reading $fileName";
  236. my $output = sprintf("0x%02X", ord($byte));
  237. print OUT_FILE $output;
  238. if ($i != ($fileLen - 1)) {
  239. print OUT_FILE ",";
  240. }
  241. if ($j == 10) {
  242. $j = 0;
  243. print OUT_FILE "\n";
  244. }
  245. }
  246. print OUT_FILE "\n";
  247. close($fp);
  248. }