1*de0e0e4dSAntonio Huete Jimenez /* $OpenBSD: dsa.c,v 1.16 2022/01/14 09:23:42 tb Exp $ */
2f5b1c8a1SJohn Marino /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3f5b1c8a1SJohn Marino * All rights reserved.
4f5b1c8a1SJohn Marino *
5f5b1c8a1SJohn Marino * This package is an SSL implementation written
6f5b1c8a1SJohn Marino * by Eric Young (eay@cryptsoft.com).
7f5b1c8a1SJohn Marino * The implementation was written so as to conform with Netscapes SSL.
8f5b1c8a1SJohn Marino *
9f5b1c8a1SJohn Marino * This library is free for commercial and non-commercial use as long as
10f5b1c8a1SJohn Marino * the following conditions are aheared to. The following conditions
11f5b1c8a1SJohn Marino * apply to all code found in this distribution, be it the RC4, RSA,
12f5b1c8a1SJohn Marino * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13f5b1c8a1SJohn Marino * included with this distribution is covered by the same copyright terms
14f5b1c8a1SJohn Marino * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15f5b1c8a1SJohn Marino *
16f5b1c8a1SJohn Marino * Copyright remains Eric Young's, and as such any Copyright notices in
17f5b1c8a1SJohn Marino * the code are not to be removed.
18f5b1c8a1SJohn Marino * If this package is used in a product, Eric Young should be given attribution
19f5b1c8a1SJohn Marino * as the author of the parts of the library used.
20f5b1c8a1SJohn Marino * This can be in the form of a textual message at program startup or
21f5b1c8a1SJohn Marino * in documentation (online or textual) provided with the package.
22f5b1c8a1SJohn Marino *
23f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
24f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
25f5b1c8a1SJohn Marino * are met:
26f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the copyright
27f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
28f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
29f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in the
30f5b1c8a1SJohn Marino * documentation and/or other materials provided with the distribution.
31f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this software
32f5b1c8a1SJohn Marino * must display the following acknowledgement:
33f5b1c8a1SJohn Marino * "This product includes cryptographic software written by
34f5b1c8a1SJohn Marino * Eric Young (eay@cryptsoft.com)"
35f5b1c8a1SJohn Marino * The word 'cryptographic' can be left out if the rouines from the library
36f5b1c8a1SJohn Marino * being used are not cryptographic related :-).
37f5b1c8a1SJohn Marino * 4. If you include any Windows specific code (or a derivative thereof) from
38f5b1c8a1SJohn Marino * the apps directory (application code) you must include an acknowledgement:
39f5b1c8a1SJohn Marino * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40f5b1c8a1SJohn Marino *
41f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42f5b1c8a1SJohn Marino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44f5b1c8a1SJohn Marino * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45f5b1c8a1SJohn Marino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46f5b1c8a1SJohn Marino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47f5b1c8a1SJohn Marino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49f5b1c8a1SJohn Marino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50f5b1c8a1SJohn Marino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51f5b1c8a1SJohn Marino * SUCH DAMAGE.
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * The licence and distribution terms for any publically available version or
54f5b1c8a1SJohn Marino * derivative of this code cannot be changed. i.e. this code cannot simply be
55f5b1c8a1SJohn Marino * copied and put under another distribution licence
56f5b1c8a1SJohn Marino * [including the GNU Public Licence.]
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <openssl/opensslconf.h> /* for OPENSSL_NO_DSA */
60f5b1c8a1SJohn Marino
61f5b1c8a1SJohn Marino #include <stdio.h>
62f5b1c8a1SJohn Marino #include <stdlib.h>
63f5b1c8a1SJohn Marino #include <time.h>
64f5b1c8a1SJohn Marino #include <string.h>
65f5b1c8a1SJohn Marino
66f5b1c8a1SJohn Marino #include "apps.h"
67f5b1c8a1SJohn Marino
68f5b1c8a1SJohn Marino #include <openssl/bio.h>
69f5b1c8a1SJohn Marino #include <openssl/bn.h>
70f5b1c8a1SJohn Marino #include <openssl/dsa.h>
71f5b1c8a1SJohn Marino #include <openssl/err.h>
72f5b1c8a1SJohn Marino #include <openssl/evp.h>
73f5b1c8a1SJohn Marino #include <openssl/pem.h>
74f5b1c8a1SJohn Marino #include <openssl/x509.h>
75f5b1c8a1SJohn Marino
76f5b1c8a1SJohn Marino static struct {
77f5b1c8a1SJohn Marino const EVP_CIPHER *enc;
78f5b1c8a1SJohn Marino char *infile;
79f5b1c8a1SJohn Marino int informat;
80f5b1c8a1SJohn Marino int modulus;
81f5b1c8a1SJohn Marino int noout;
82f5b1c8a1SJohn Marino char *outfile;
83f5b1c8a1SJohn Marino int outformat;
84f5b1c8a1SJohn Marino char *passargin;
85f5b1c8a1SJohn Marino char *passargout;
86f5b1c8a1SJohn Marino int pubin;
87f5b1c8a1SJohn Marino int pubout;
88f5b1c8a1SJohn Marino int pvk_encr;
89f5b1c8a1SJohn Marino int text;
90f5b1c8a1SJohn Marino } dsa_config;
91f5b1c8a1SJohn Marino
92f5b1c8a1SJohn Marino static int
dsa_opt_enc(int argc,char ** argv,int * argsused)93f5b1c8a1SJohn Marino dsa_opt_enc(int argc, char **argv, int *argsused)
94f5b1c8a1SJohn Marino {
95f5b1c8a1SJohn Marino char *name = argv[0];
96f5b1c8a1SJohn Marino
97f5b1c8a1SJohn Marino if (*name++ != '-')
98f5b1c8a1SJohn Marino return (1);
99f5b1c8a1SJohn Marino
100f5b1c8a1SJohn Marino if ((dsa_config.enc = EVP_get_cipherbyname(name)) != NULL) {
101f5b1c8a1SJohn Marino *argsused = 1;
102f5b1c8a1SJohn Marino return (0);
103f5b1c8a1SJohn Marino }
104f5b1c8a1SJohn Marino
105f5b1c8a1SJohn Marino return (1);
106f5b1c8a1SJohn Marino }
107f5b1c8a1SJohn Marino
108cca6fc52SDaniel Fojt static const struct option dsa_options[] = {
109f5b1c8a1SJohn Marino {
110f5b1c8a1SJohn Marino .name = "in",
111f5b1c8a1SJohn Marino .argname = "file",
112f5b1c8a1SJohn Marino .desc = "Input file (default stdin)",
113f5b1c8a1SJohn Marino .type = OPTION_ARG,
114f5b1c8a1SJohn Marino .opt.arg = &dsa_config.infile,
115f5b1c8a1SJohn Marino },
116f5b1c8a1SJohn Marino {
117f5b1c8a1SJohn Marino .name = "inform",
118f5b1c8a1SJohn Marino .argname = "format",
119f5b1c8a1SJohn Marino .desc = "Input format (PEM (default) or any other supported"
120f5b1c8a1SJohn Marino " format)",
121f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
122f5b1c8a1SJohn Marino .opt.value = &dsa_config.informat,
123f5b1c8a1SJohn Marino },
124f5b1c8a1SJohn Marino {
125cca6fc52SDaniel Fojt .name = "modulus",
126cca6fc52SDaniel Fojt .desc = "Print the DSA public value",
127cca6fc52SDaniel Fojt .type = OPTION_FLAG,
128cca6fc52SDaniel Fojt .opt.flag = &dsa_config.modulus,
129cca6fc52SDaniel Fojt },
130cca6fc52SDaniel Fojt {
131f5b1c8a1SJohn Marino .name = "noout",
132f5b1c8a1SJohn Marino .desc = "No output",
133f5b1c8a1SJohn Marino .type = OPTION_FLAG,
134f5b1c8a1SJohn Marino .opt.flag = &dsa_config.noout,
135f5b1c8a1SJohn Marino },
136f5b1c8a1SJohn Marino {
137f5b1c8a1SJohn Marino .name = "out",
138f5b1c8a1SJohn Marino .argname = "file",
139f5b1c8a1SJohn Marino .desc = "Output file (default stdout)",
140f5b1c8a1SJohn Marino .type = OPTION_ARG,
141f5b1c8a1SJohn Marino .opt.arg = &dsa_config.outfile,
142f5b1c8a1SJohn Marino },
143f5b1c8a1SJohn Marino {
144f5b1c8a1SJohn Marino .name = "outform",
145f5b1c8a1SJohn Marino .argname = "format",
146f5b1c8a1SJohn Marino .desc = "Output format (DER, MSBLOB, PEM (default) or PVK)",
147f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
148f5b1c8a1SJohn Marino .opt.value = &dsa_config.outformat,
149f5b1c8a1SJohn Marino },
150f5b1c8a1SJohn Marino {
151f5b1c8a1SJohn Marino .name = "passin",
152f5b1c8a1SJohn Marino .argname = "source",
153f5b1c8a1SJohn Marino .desc = "Input file passphrase source",
154f5b1c8a1SJohn Marino .type = OPTION_ARG,
155f5b1c8a1SJohn Marino .opt.arg = &dsa_config.passargin,
156f5b1c8a1SJohn Marino },
157f5b1c8a1SJohn Marino {
158f5b1c8a1SJohn Marino .name = "passout",
159f5b1c8a1SJohn Marino .argname = "source",
160f5b1c8a1SJohn Marino .desc = "Output file passphrase source",
161f5b1c8a1SJohn Marino .type = OPTION_ARG,
162f5b1c8a1SJohn Marino .opt.arg = &dsa_config.passargout,
163f5b1c8a1SJohn Marino },
164f5b1c8a1SJohn Marino {
165f5b1c8a1SJohn Marino .name = "pubin",
166f5b1c8a1SJohn Marino .desc = "Read a public key from the input file instead of"
167f5b1c8a1SJohn Marino " private key",
168f5b1c8a1SJohn Marino .type = OPTION_FLAG,
169f5b1c8a1SJohn Marino .opt.flag = &dsa_config.pubin,
170f5b1c8a1SJohn Marino },
171f5b1c8a1SJohn Marino {
172f5b1c8a1SJohn Marino .name = "pubout",
173f5b1c8a1SJohn Marino .desc = "Output a public key instead of private key",
174f5b1c8a1SJohn Marino .type = OPTION_FLAG,
175f5b1c8a1SJohn Marino .opt.flag = &dsa_config.pubout,
176f5b1c8a1SJohn Marino },
177f5b1c8a1SJohn Marino {
178f5b1c8a1SJohn Marino .name = "pvk-none",
179f5b1c8a1SJohn Marino .desc = "PVK encryption level",
180f5b1c8a1SJohn Marino .type = OPTION_VALUE,
181f5b1c8a1SJohn Marino .value = 0,
182f5b1c8a1SJohn Marino .opt.value = &dsa_config.pvk_encr,
183f5b1c8a1SJohn Marino },
184f5b1c8a1SJohn Marino {
185f5b1c8a1SJohn Marino .name = "pvk-strong",
186f5b1c8a1SJohn Marino .desc = "PVK encryption level (default)",
187f5b1c8a1SJohn Marino .type = OPTION_VALUE,
188f5b1c8a1SJohn Marino .value = 2,
189f5b1c8a1SJohn Marino .opt.value = &dsa_config.pvk_encr,
190f5b1c8a1SJohn Marino },
191f5b1c8a1SJohn Marino {
192f5b1c8a1SJohn Marino .name = "pvk-weak",
193f5b1c8a1SJohn Marino .desc = "PVK encryption level",
194f5b1c8a1SJohn Marino .type = OPTION_VALUE,
195f5b1c8a1SJohn Marino .value = 1,
196f5b1c8a1SJohn Marino .opt.value = &dsa_config.pvk_encr,
197f5b1c8a1SJohn Marino },
198f5b1c8a1SJohn Marino {
199f5b1c8a1SJohn Marino .name = "text",
200f5b1c8a1SJohn Marino .desc = "Print the key in text form",
201f5b1c8a1SJohn Marino .type = OPTION_FLAG,
202f5b1c8a1SJohn Marino .opt.flag = &dsa_config.text,
203f5b1c8a1SJohn Marino },
204f5b1c8a1SJohn Marino {
205f5b1c8a1SJohn Marino .name = NULL,
206f5b1c8a1SJohn Marino .type = OPTION_ARGV_FUNC,
207f5b1c8a1SJohn Marino .opt.argvfunc = dsa_opt_enc,
208f5b1c8a1SJohn Marino },
209f5b1c8a1SJohn Marino { NULL },
210f5b1c8a1SJohn Marino };
211f5b1c8a1SJohn Marino
212f5b1c8a1SJohn Marino static void
dsa_usage(void)213f5b1c8a1SJohn Marino dsa_usage(void)
214f5b1c8a1SJohn Marino {
21572c33676SMaxim Ag int n = 0;
21672c33676SMaxim Ag
217f5b1c8a1SJohn Marino fprintf(stderr,
218cca6fc52SDaniel Fojt "usage: dsa [-in file] [-inform format] [-modulus] [-noout]\n"
219f5b1c8a1SJohn Marino " [-out file] [-outform format] [-passin src] [-passout src]\n"
220f5b1c8a1SJohn Marino " [-pubin] [-pubout] [-pvk-none | -pvk-strong | -pvk-weak]\n"
221f5b1c8a1SJohn Marino " [-text] [-ciphername]\n\n");
222f5b1c8a1SJohn Marino options_usage(dsa_options);
223f5b1c8a1SJohn Marino fprintf(stderr, "\n");
224f5b1c8a1SJohn Marino
225f5b1c8a1SJohn Marino fprintf(stderr, "Valid ciphername values:\n\n");
22672c33676SMaxim Ag OBJ_NAME_do_all_sorted(OBJ_NAME_TYPE_CIPHER_METH, show_cipher, &n);
227f5b1c8a1SJohn Marino fprintf(stderr, "\n");
228f5b1c8a1SJohn Marino }
229f5b1c8a1SJohn Marino
230f5b1c8a1SJohn Marino int
dsa_main(int argc,char ** argv)231f5b1c8a1SJohn Marino dsa_main(int argc, char **argv)
232f5b1c8a1SJohn Marino {
233f5b1c8a1SJohn Marino int ret = 1;
234f5b1c8a1SJohn Marino DSA *dsa = NULL;
235f5b1c8a1SJohn Marino int i;
236f5b1c8a1SJohn Marino BIO *in = NULL, *out = NULL;
237f5b1c8a1SJohn Marino char *passin = NULL, *passout = NULL;
238f5b1c8a1SJohn Marino
239f5b1c8a1SJohn Marino if (single_execution) {
24072c33676SMaxim Ag if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
241f5b1c8a1SJohn Marino perror("pledge");
242f5b1c8a1SJohn Marino exit(1);
243f5b1c8a1SJohn Marino }
244f5b1c8a1SJohn Marino }
245f5b1c8a1SJohn Marino
246f5b1c8a1SJohn Marino memset(&dsa_config, 0, sizeof(dsa_config));
247f5b1c8a1SJohn Marino
248f5b1c8a1SJohn Marino dsa_config.pvk_encr = 2;
249f5b1c8a1SJohn Marino dsa_config.informat = FORMAT_PEM;
250f5b1c8a1SJohn Marino dsa_config.outformat = FORMAT_PEM;
251f5b1c8a1SJohn Marino
252f5b1c8a1SJohn Marino if (options_parse(argc, argv, dsa_options, NULL, NULL) != 0) {
253f5b1c8a1SJohn Marino dsa_usage();
254f5b1c8a1SJohn Marino goto end;
255f5b1c8a1SJohn Marino }
256f5b1c8a1SJohn Marino
257f5b1c8a1SJohn Marino if (!app_passwd(bio_err, dsa_config.passargin, dsa_config.passargout,
258f5b1c8a1SJohn Marino &passin, &passout)) {
259f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error getting passwords\n");
260f5b1c8a1SJohn Marino goto end;
261f5b1c8a1SJohn Marino }
262f5b1c8a1SJohn Marino
263f5b1c8a1SJohn Marino in = BIO_new(BIO_s_file());
264f5b1c8a1SJohn Marino out = BIO_new(BIO_s_file());
265f5b1c8a1SJohn Marino if (in == NULL || out == NULL) {
266f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
267f5b1c8a1SJohn Marino goto end;
268f5b1c8a1SJohn Marino }
269f5b1c8a1SJohn Marino if (dsa_config.infile == NULL)
270f5b1c8a1SJohn Marino BIO_set_fp(in, stdin, BIO_NOCLOSE);
271f5b1c8a1SJohn Marino else {
272f5b1c8a1SJohn Marino if (BIO_read_filename(in, dsa_config.infile) <= 0) {
273f5b1c8a1SJohn Marino perror(dsa_config.infile);
274f5b1c8a1SJohn Marino goto end;
275f5b1c8a1SJohn Marino }
276f5b1c8a1SJohn Marino }
277f5b1c8a1SJohn Marino
278f5b1c8a1SJohn Marino BIO_printf(bio_err, "read DSA key\n");
279f5b1c8a1SJohn Marino
280f5b1c8a1SJohn Marino {
281f5b1c8a1SJohn Marino EVP_PKEY *pkey;
282f5b1c8a1SJohn Marino
283f5b1c8a1SJohn Marino if (dsa_config.pubin)
284f5b1c8a1SJohn Marino pkey = load_pubkey(bio_err, dsa_config.infile,
285f5b1c8a1SJohn Marino dsa_config.informat, 1, passin, "Public Key");
286f5b1c8a1SJohn Marino else
287f5b1c8a1SJohn Marino pkey = load_key(bio_err, dsa_config.infile,
288f5b1c8a1SJohn Marino dsa_config.informat, 1, passin, "Private Key");
289f5b1c8a1SJohn Marino
290f5b1c8a1SJohn Marino if (pkey) {
291f5b1c8a1SJohn Marino dsa = EVP_PKEY_get1_DSA(pkey);
292f5b1c8a1SJohn Marino EVP_PKEY_free(pkey);
293f5b1c8a1SJohn Marino }
294f5b1c8a1SJohn Marino }
295f5b1c8a1SJohn Marino if (dsa == NULL) {
296f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to load Key\n");
297f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
298f5b1c8a1SJohn Marino goto end;
299f5b1c8a1SJohn Marino }
300f5b1c8a1SJohn Marino if (dsa_config.outfile == NULL) {
301f5b1c8a1SJohn Marino BIO_set_fp(out, stdout, BIO_NOCLOSE);
302f5b1c8a1SJohn Marino } else {
303f5b1c8a1SJohn Marino if (BIO_write_filename(out, dsa_config.outfile) <= 0) {
304f5b1c8a1SJohn Marino perror(dsa_config.outfile);
305f5b1c8a1SJohn Marino goto end;
306f5b1c8a1SJohn Marino }
307f5b1c8a1SJohn Marino }
308f5b1c8a1SJohn Marino
309f5b1c8a1SJohn Marino if (dsa_config.text) {
310f5b1c8a1SJohn Marino if (!DSA_print(out, dsa, 0)) {
311f5b1c8a1SJohn Marino perror(dsa_config.outfile);
312f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
313f5b1c8a1SJohn Marino goto end;
314f5b1c8a1SJohn Marino }
315f5b1c8a1SJohn Marino }
316f5b1c8a1SJohn Marino if (dsa_config.modulus) {
317f5b1c8a1SJohn Marino fprintf(stdout, "Public Key=");
318*de0e0e4dSAntonio Huete Jimenez BN_print(out, DSA_get0_pub_key(dsa));
319f5b1c8a1SJohn Marino fprintf(stdout, "\n");
320f5b1c8a1SJohn Marino }
321f5b1c8a1SJohn Marino if (dsa_config.noout)
322f5b1c8a1SJohn Marino goto end;
323f5b1c8a1SJohn Marino BIO_printf(bio_err, "writing DSA key\n");
324f5b1c8a1SJohn Marino if (dsa_config.outformat == FORMAT_ASN1) {
325f5b1c8a1SJohn Marino if (dsa_config.pubin || dsa_config.pubout)
326f5b1c8a1SJohn Marino i = i2d_DSA_PUBKEY_bio(out, dsa);
327f5b1c8a1SJohn Marino else
328f5b1c8a1SJohn Marino i = i2d_DSAPrivateKey_bio(out, dsa);
329f5b1c8a1SJohn Marino } else if (dsa_config.outformat == FORMAT_PEM) {
330f5b1c8a1SJohn Marino if (dsa_config.pubin || dsa_config.pubout)
331f5b1c8a1SJohn Marino i = PEM_write_bio_DSA_PUBKEY(out, dsa);
332f5b1c8a1SJohn Marino else
333f5b1c8a1SJohn Marino i = PEM_write_bio_DSAPrivateKey(out, dsa, dsa_config.enc,
334f5b1c8a1SJohn Marino NULL, 0, NULL, passout);
335f5b1c8a1SJohn Marino #if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_NO_RC4)
336f5b1c8a1SJohn Marino } else if (dsa_config.outformat == FORMAT_MSBLOB ||
337f5b1c8a1SJohn Marino dsa_config.outformat == FORMAT_PVK) {
338f5b1c8a1SJohn Marino EVP_PKEY *pk;
339f5b1c8a1SJohn Marino pk = EVP_PKEY_new();
340f5b1c8a1SJohn Marino EVP_PKEY_set1_DSA(pk, dsa);
341f5b1c8a1SJohn Marino if (dsa_config.outformat == FORMAT_PVK)
342f5b1c8a1SJohn Marino i = i2b_PVK_bio(out, pk, dsa_config.pvk_encr, 0,
343f5b1c8a1SJohn Marino passout);
344f5b1c8a1SJohn Marino else if (dsa_config.pubin || dsa_config.pubout)
345f5b1c8a1SJohn Marino i = i2b_PublicKey_bio(out, pk);
346f5b1c8a1SJohn Marino else
347f5b1c8a1SJohn Marino i = i2b_PrivateKey_bio(out, pk);
348f5b1c8a1SJohn Marino EVP_PKEY_free(pk);
349f5b1c8a1SJohn Marino #endif
350f5b1c8a1SJohn Marino } else {
351f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad output format specified for outfile\n");
352f5b1c8a1SJohn Marino goto end;
353f5b1c8a1SJohn Marino }
354f5b1c8a1SJohn Marino if (i <= 0) {
355f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to write private key\n");
356f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
357f5b1c8a1SJohn Marino } else
358f5b1c8a1SJohn Marino ret = 0;
359f5b1c8a1SJohn Marino end:
360f5b1c8a1SJohn Marino BIO_free(in);
361f5b1c8a1SJohn Marino BIO_free_all(out);
362f5b1c8a1SJohn Marino DSA_free(dsa);
363f5b1c8a1SJohn Marino free(passin);
364f5b1c8a1SJohn Marino free(passout);
365f5b1c8a1SJohn Marino
366f5b1c8a1SJohn Marino return (ret);
367f5b1c8a1SJohn Marino }
368