1cca6fc52SDaniel Fojt /* $OpenBSD: pkcs8.c,v 1.14 2019/07/14 03:30:46 guenther Exp $ */
2f5b1c8a1SJohn Marino /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3f5b1c8a1SJohn Marino * project 1999-2004.
4f5b1c8a1SJohn Marino */
5f5b1c8a1SJohn Marino /* ====================================================================
6f5b1c8a1SJohn Marino * Copyright (c) 1999 The OpenSSL Project. All rights reserved.
7f5b1c8a1SJohn Marino *
8f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
9f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
10f5b1c8a1SJohn Marino * are met:
11f5b1c8a1SJohn Marino *
12f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the above copyright
13f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
14f5b1c8a1SJohn Marino *
15f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
16f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in
17f5b1c8a1SJohn Marino * the documentation and/or other materials provided with the
18f5b1c8a1SJohn Marino * distribution.
19f5b1c8a1SJohn Marino *
20f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this
21f5b1c8a1SJohn Marino * software must display the following acknowledgment:
22f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
23f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24f5b1c8a1SJohn Marino *
25f5b1c8a1SJohn Marino * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26f5b1c8a1SJohn Marino * endorse or promote products derived from this software without
27f5b1c8a1SJohn Marino * prior written permission. For written permission, please contact
28f5b1c8a1SJohn Marino * licensing@OpenSSL.org.
29f5b1c8a1SJohn Marino *
30f5b1c8a1SJohn Marino * 5. Products derived from this software may not be called "OpenSSL"
31f5b1c8a1SJohn Marino * nor may "OpenSSL" appear in their names without prior written
32f5b1c8a1SJohn Marino * permission of the OpenSSL Project.
33f5b1c8a1SJohn Marino *
34f5b1c8a1SJohn Marino * 6. Redistributions of any form whatsoever must retain the following
35f5b1c8a1SJohn Marino * acknowledgment:
36f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
37f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38f5b1c8a1SJohn Marino *
39f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40f5b1c8a1SJohn Marino * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42f5b1c8a1SJohn Marino * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43f5b1c8a1SJohn Marino * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44f5b1c8a1SJohn Marino * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45f5b1c8a1SJohn Marino * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46f5b1c8a1SJohn Marino * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48f5b1c8a1SJohn Marino * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49f5b1c8a1SJohn Marino * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50f5b1c8a1SJohn Marino * OF THE POSSIBILITY OF SUCH DAMAGE.
51f5b1c8a1SJohn Marino * ====================================================================
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * This product includes cryptographic software written by Eric Young
54f5b1c8a1SJohn Marino * (eay@cryptsoft.com). This product includes software written by Tim
55f5b1c8a1SJohn Marino * Hudson (tjh@cryptsoft.com).
56f5b1c8a1SJohn Marino *
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <stdio.h>
60f5b1c8a1SJohn Marino #include <string.h>
61f5b1c8a1SJohn Marino
62f5b1c8a1SJohn Marino #include "apps.h"
63f5b1c8a1SJohn Marino #include "progs.h"
64f5b1c8a1SJohn Marino
65f5b1c8a1SJohn Marino #include <openssl/err.h>
66f5b1c8a1SJohn Marino #include <openssl/evp.h>
67f5b1c8a1SJohn Marino #include <openssl/pem.h>
68f5b1c8a1SJohn Marino #include <openssl/pkcs12.h>
69f5b1c8a1SJohn Marino
70f5b1c8a1SJohn Marino static struct {
71f5b1c8a1SJohn Marino const EVP_CIPHER *cipher;
72f5b1c8a1SJohn Marino char *infile;
73f5b1c8a1SJohn Marino int informat;
74f5b1c8a1SJohn Marino int iter;
75f5b1c8a1SJohn Marino int nocrypt;
76f5b1c8a1SJohn Marino char *outfile;
77f5b1c8a1SJohn Marino int outformat;
78f5b1c8a1SJohn Marino char *passargin;
79f5b1c8a1SJohn Marino char *passargout;
80f5b1c8a1SJohn Marino int pbe_nid;
81f5b1c8a1SJohn Marino int topk8;
82f5b1c8a1SJohn Marino } pkcs8_config;
83f5b1c8a1SJohn Marino
84f5b1c8a1SJohn Marino static int
pkcs8_opt_v1(char * arg)85f5b1c8a1SJohn Marino pkcs8_opt_v1(char *arg)
86f5b1c8a1SJohn Marino {
87f5b1c8a1SJohn Marino if ((pkcs8_config.pbe_nid = OBJ_txt2nid(arg)) == NID_undef) {
88f5b1c8a1SJohn Marino fprintf(stderr, "Unknown PBE algorithm '%s'\n", arg);
89f5b1c8a1SJohn Marino return (1);
90f5b1c8a1SJohn Marino }
91f5b1c8a1SJohn Marino
92f5b1c8a1SJohn Marino return (0);
93f5b1c8a1SJohn Marino }
94f5b1c8a1SJohn Marino
95f5b1c8a1SJohn Marino static int
pkcs8_opt_v2(char * arg)96f5b1c8a1SJohn Marino pkcs8_opt_v2(char *arg)
97f5b1c8a1SJohn Marino {
98f5b1c8a1SJohn Marino if ((pkcs8_config.cipher = EVP_get_cipherbyname(arg)) == NULL) {
99f5b1c8a1SJohn Marino fprintf(stderr, "Unknown cipher '%s'\n", arg);
100f5b1c8a1SJohn Marino return (1);
101f5b1c8a1SJohn Marino }
102f5b1c8a1SJohn Marino
103f5b1c8a1SJohn Marino return (0);
104f5b1c8a1SJohn Marino }
105f5b1c8a1SJohn Marino
106cca6fc52SDaniel Fojt static const struct option pkcs8_options[] = {
107f5b1c8a1SJohn Marino {
108f5b1c8a1SJohn Marino .name = "in",
109f5b1c8a1SJohn Marino .argname = "file",
110f5b1c8a1SJohn Marino .desc = "Input file (default stdin)",
111f5b1c8a1SJohn Marino .type = OPTION_ARG,
112f5b1c8a1SJohn Marino .opt.arg = &pkcs8_config.infile,
113f5b1c8a1SJohn Marino },
114f5b1c8a1SJohn Marino {
115f5b1c8a1SJohn Marino .name = "inform",
11672c33676SMaxim Ag .argname = "der | pem",
11772c33676SMaxim Ag .desc = "Input format (default PEM)",
118f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
119f5b1c8a1SJohn Marino .opt.value = &pkcs8_config.informat,
120f5b1c8a1SJohn Marino },
121f5b1c8a1SJohn Marino {
122f5b1c8a1SJohn Marino .name = "nocrypt",
123f5b1c8a1SJohn Marino .desc = "Use or expect unencrypted private key",
124f5b1c8a1SJohn Marino .type = OPTION_FLAG,
125f5b1c8a1SJohn Marino .opt.flag = &pkcs8_config.nocrypt,
126f5b1c8a1SJohn Marino },
127f5b1c8a1SJohn Marino {
128f5b1c8a1SJohn Marino .name = "noiter",
129f5b1c8a1SJohn Marino .desc = "Use 1 as iteration count",
130f5b1c8a1SJohn Marino .type = OPTION_VALUE,
131f5b1c8a1SJohn Marino .value = 1,
132f5b1c8a1SJohn Marino .opt.value = &pkcs8_config.iter,
133f5b1c8a1SJohn Marino },
134f5b1c8a1SJohn Marino {
135f5b1c8a1SJohn Marino .name = "out",
136f5b1c8a1SJohn Marino .argname = "file",
137f5b1c8a1SJohn Marino .desc = "Output file (default stdout)",
138f5b1c8a1SJohn Marino .type = OPTION_ARG,
139f5b1c8a1SJohn Marino .opt.arg = &pkcs8_config.outfile,
140f5b1c8a1SJohn Marino },
141f5b1c8a1SJohn Marino {
142f5b1c8a1SJohn Marino .name = "outform",
14372c33676SMaxim Ag .argname = "der | pem",
14472c33676SMaxim Ag .desc = "Output format (default PEM)",
145f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
146f5b1c8a1SJohn Marino .opt.value = &pkcs8_config.outformat,
147f5b1c8a1SJohn Marino },
148f5b1c8a1SJohn Marino {
149f5b1c8a1SJohn Marino .name = "passin",
150f5b1c8a1SJohn Marino .argname = "source",
151f5b1c8a1SJohn Marino .desc = "Input file passphrase source",
152f5b1c8a1SJohn Marino .type = OPTION_ARG,
153f5b1c8a1SJohn Marino .opt.arg = &pkcs8_config.passargin,
154f5b1c8a1SJohn Marino },
155f5b1c8a1SJohn Marino {
156f5b1c8a1SJohn Marino .name = "passout",
157f5b1c8a1SJohn Marino .argname = "source",
158f5b1c8a1SJohn Marino .desc = "Output file passphrase source",
159f5b1c8a1SJohn Marino .type = OPTION_ARG,
160f5b1c8a1SJohn Marino .opt.arg = &pkcs8_config.passargout,
161f5b1c8a1SJohn Marino },
162f5b1c8a1SJohn Marino {
163f5b1c8a1SJohn Marino .name = "topk8",
164f5b1c8a1SJohn Marino .desc = "Read traditional format key and write PKCS#8 format"
165f5b1c8a1SJohn Marino " key",
166f5b1c8a1SJohn Marino .type = OPTION_FLAG,
167f5b1c8a1SJohn Marino .opt.flag = &pkcs8_config.topk8,
168f5b1c8a1SJohn Marino },
169f5b1c8a1SJohn Marino {
170f5b1c8a1SJohn Marino .name = "v1",
171f5b1c8a1SJohn Marino .argname = "algorithm",
172f5b1c8a1SJohn Marino .desc = "Use PKCS#5 v1.5 or PKCS#12 with given algorithm",
173f5b1c8a1SJohn Marino .type = OPTION_ARG_FUNC,
174f5b1c8a1SJohn Marino .opt.argfunc = pkcs8_opt_v1,
175f5b1c8a1SJohn Marino },
176f5b1c8a1SJohn Marino {
177f5b1c8a1SJohn Marino .name = "v2",
178f5b1c8a1SJohn Marino .argname = "cipher",
179f5b1c8a1SJohn Marino .desc = "Use PKCS#5 v2.0 with given cipher",
180f5b1c8a1SJohn Marino .type = OPTION_ARG_FUNC,
181f5b1c8a1SJohn Marino .opt.argfunc = pkcs8_opt_v2,
182f5b1c8a1SJohn Marino },
183f5b1c8a1SJohn Marino { NULL },
184f5b1c8a1SJohn Marino };
185f5b1c8a1SJohn Marino
186f5b1c8a1SJohn Marino static void
pkcs8_usage()187f5b1c8a1SJohn Marino pkcs8_usage()
188f5b1c8a1SJohn Marino {
18972c33676SMaxim Ag fprintf(stderr, "usage: pkcs8 [-in file] [inform der | pem] "
19072c33676SMaxim Ag "[-nocrypt] [-noiter]\n"
19172c33676SMaxim Ag " [-out file] [-outform der | pem] [-passin arg]\n"
19272c33676SMaxim Ag " [-passout arg] [-topk8] [-v1 alg] [-v2 alg]\n\n");
193f5b1c8a1SJohn Marino options_usage(pkcs8_options);
194f5b1c8a1SJohn Marino }
195f5b1c8a1SJohn Marino
196f5b1c8a1SJohn Marino int
pkcs8_main(int argc,char ** argv)197f5b1c8a1SJohn Marino pkcs8_main(int argc, char **argv)
198f5b1c8a1SJohn Marino {
199f5b1c8a1SJohn Marino BIO *in = NULL, *out = NULL;
200f5b1c8a1SJohn Marino X509_SIG *p8 = NULL;
201f5b1c8a1SJohn Marino PKCS8_PRIV_KEY_INFO *p8inf = NULL;
202f5b1c8a1SJohn Marino EVP_PKEY *pkey = NULL;
203f5b1c8a1SJohn Marino char pass[50], *passin = NULL, *passout = NULL, *p8pass = NULL;
204f5b1c8a1SJohn Marino int ret = 1;
205f5b1c8a1SJohn Marino
206f5b1c8a1SJohn Marino if (single_execution) {
20772c33676SMaxim Ag if (pledge("stdio cpath wpath rpath tty", NULL) == -1) {
208f5b1c8a1SJohn Marino perror("pledge");
209f5b1c8a1SJohn Marino exit(1);
210f5b1c8a1SJohn Marino }
211f5b1c8a1SJohn Marino }
212f5b1c8a1SJohn Marino
213f5b1c8a1SJohn Marino memset(&pkcs8_config, 0, sizeof(pkcs8_config));
214f5b1c8a1SJohn Marino
215f5b1c8a1SJohn Marino pkcs8_config.iter = PKCS12_DEFAULT_ITER;
216f5b1c8a1SJohn Marino pkcs8_config.informat = FORMAT_PEM;
217f5b1c8a1SJohn Marino pkcs8_config.outformat = FORMAT_PEM;
218f5b1c8a1SJohn Marino pkcs8_config.pbe_nid = -1;
219f5b1c8a1SJohn Marino
220f5b1c8a1SJohn Marino if (options_parse(argc, argv, pkcs8_options, NULL, NULL) != 0) {
221f5b1c8a1SJohn Marino pkcs8_usage();
222f5b1c8a1SJohn Marino return (1);
223f5b1c8a1SJohn Marino }
224f5b1c8a1SJohn Marino
225f5b1c8a1SJohn Marino if (!app_passwd(bio_err, pkcs8_config.passargin,
226f5b1c8a1SJohn Marino pkcs8_config.passargout, &passin, &passout)) {
227f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error getting passwords\n");
228f5b1c8a1SJohn Marino goto end;
229f5b1c8a1SJohn Marino }
230f5b1c8a1SJohn Marino if ((pkcs8_config.pbe_nid == -1) && !pkcs8_config.cipher)
231f5b1c8a1SJohn Marino pkcs8_config.pbe_nid = NID_pbeWithMD5AndDES_CBC;
232f5b1c8a1SJohn Marino
233f5b1c8a1SJohn Marino if (pkcs8_config.infile) {
234f5b1c8a1SJohn Marino if (!(in = BIO_new_file(pkcs8_config.infile, "rb"))) {
235f5b1c8a1SJohn Marino BIO_printf(bio_err,
236f5b1c8a1SJohn Marino "Can't open input file '%s'\n",
237f5b1c8a1SJohn Marino pkcs8_config.infile);
238f5b1c8a1SJohn Marino goto end;
239f5b1c8a1SJohn Marino }
240f5b1c8a1SJohn Marino } else
241f5b1c8a1SJohn Marino in = BIO_new_fp(stdin, BIO_NOCLOSE);
242f5b1c8a1SJohn Marino
243f5b1c8a1SJohn Marino if (pkcs8_config.outfile) {
244f5b1c8a1SJohn Marino if (!(out = BIO_new_file(pkcs8_config.outfile, "wb"))) {
245f5b1c8a1SJohn Marino BIO_printf(bio_err, "Can't open output file '%s'\n",
246f5b1c8a1SJohn Marino pkcs8_config.outfile);
247f5b1c8a1SJohn Marino goto end;
248f5b1c8a1SJohn Marino }
249f5b1c8a1SJohn Marino } else {
250f5b1c8a1SJohn Marino out = BIO_new_fp(stdout, BIO_NOCLOSE);
251f5b1c8a1SJohn Marino }
252f5b1c8a1SJohn Marino if (pkcs8_config.topk8) {
253f5b1c8a1SJohn Marino pkey = load_key(bio_err, pkcs8_config.infile,
254f5b1c8a1SJohn Marino pkcs8_config.informat, 1, passin, "key");
255f5b1c8a1SJohn Marino if (!pkey)
256f5b1c8a1SJohn Marino goto end;
25772c33676SMaxim Ag if (!(p8inf = EVP_PKEY2PKCS8(pkey))) {
258f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error converting key\n");
259f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
260f5b1c8a1SJohn Marino goto end;
261f5b1c8a1SJohn Marino }
262f5b1c8a1SJohn Marino if (pkcs8_config.nocrypt) {
263f5b1c8a1SJohn Marino if (pkcs8_config.outformat == FORMAT_PEM)
264f5b1c8a1SJohn Marino PEM_write_bio_PKCS8_PRIV_KEY_INFO(out, p8inf);
265f5b1c8a1SJohn Marino else if (pkcs8_config.outformat == FORMAT_ASN1)
266f5b1c8a1SJohn Marino i2d_PKCS8_PRIV_KEY_INFO_bio(out, p8inf);
267f5b1c8a1SJohn Marino else {
268f5b1c8a1SJohn Marino BIO_printf(bio_err,
269f5b1c8a1SJohn Marino "Bad format specified for key\n");
270f5b1c8a1SJohn Marino goto end;
271f5b1c8a1SJohn Marino }
272f5b1c8a1SJohn Marino } else {
273f5b1c8a1SJohn Marino if (passout)
274f5b1c8a1SJohn Marino p8pass = passout;
275f5b1c8a1SJohn Marino else {
276f5b1c8a1SJohn Marino p8pass = pass;
277f5b1c8a1SJohn Marino if (EVP_read_pw_string(pass, sizeof pass,
278f5b1c8a1SJohn Marino "Enter Encryption Password:", 1))
279f5b1c8a1SJohn Marino goto end;
280f5b1c8a1SJohn Marino }
281f5b1c8a1SJohn Marino if (!(p8 = PKCS8_encrypt(pkcs8_config.pbe_nid,
282f5b1c8a1SJohn Marino pkcs8_config.cipher, p8pass, strlen(p8pass),
283f5b1c8a1SJohn Marino NULL, 0, pkcs8_config.iter, p8inf))) {
284f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error encrypting key\n");
285f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
286f5b1c8a1SJohn Marino goto end;
287f5b1c8a1SJohn Marino }
288f5b1c8a1SJohn Marino if (pkcs8_config.outformat == FORMAT_PEM)
289f5b1c8a1SJohn Marino PEM_write_bio_PKCS8(out, p8);
290f5b1c8a1SJohn Marino else if (pkcs8_config.outformat == FORMAT_ASN1)
291f5b1c8a1SJohn Marino i2d_PKCS8_bio(out, p8);
292f5b1c8a1SJohn Marino else {
293f5b1c8a1SJohn Marino BIO_printf(bio_err,
294f5b1c8a1SJohn Marino "Bad format specified for key\n");
295f5b1c8a1SJohn Marino goto end;
296f5b1c8a1SJohn Marino }
297f5b1c8a1SJohn Marino }
298f5b1c8a1SJohn Marino
299f5b1c8a1SJohn Marino ret = 0;
300f5b1c8a1SJohn Marino goto end;
301f5b1c8a1SJohn Marino }
302f5b1c8a1SJohn Marino if (pkcs8_config.nocrypt) {
303f5b1c8a1SJohn Marino if (pkcs8_config.informat == FORMAT_PEM)
304f5b1c8a1SJohn Marino p8inf = PEM_read_bio_PKCS8_PRIV_KEY_INFO(in, NULL,
305f5b1c8a1SJohn Marino NULL, NULL);
306f5b1c8a1SJohn Marino else if (pkcs8_config.informat == FORMAT_ASN1)
307f5b1c8a1SJohn Marino p8inf = d2i_PKCS8_PRIV_KEY_INFO_bio(in, NULL);
308f5b1c8a1SJohn Marino else {
309f5b1c8a1SJohn Marino BIO_printf(bio_err, "Bad format specified for key\n");
310f5b1c8a1SJohn Marino goto end;
311f5b1c8a1SJohn Marino }
312f5b1c8a1SJohn Marino } else {
313f5b1c8a1SJohn Marino if (pkcs8_config.informat == FORMAT_PEM)
314f5b1c8a1SJohn Marino p8 = PEM_read_bio_PKCS8(in, NULL, NULL, NULL);
315f5b1c8a1SJohn Marino else if (pkcs8_config.informat == FORMAT_ASN1)
316f5b1c8a1SJohn Marino p8 = d2i_PKCS8_bio(in, NULL);
317f5b1c8a1SJohn Marino else {
318f5b1c8a1SJohn Marino BIO_printf(bio_err, "Bad format specified for key\n");
319f5b1c8a1SJohn Marino goto end;
320f5b1c8a1SJohn Marino }
321f5b1c8a1SJohn Marino
322f5b1c8a1SJohn Marino if (!p8) {
323f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error reading key\n");
324f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
325f5b1c8a1SJohn Marino goto end;
326f5b1c8a1SJohn Marino }
327f5b1c8a1SJohn Marino if (passin)
328f5b1c8a1SJohn Marino p8pass = passin;
329f5b1c8a1SJohn Marino else {
330f5b1c8a1SJohn Marino p8pass = pass;
331f5b1c8a1SJohn Marino EVP_read_pw_string(pass, sizeof pass,
332f5b1c8a1SJohn Marino "Enter Password:", 0);
333f5b1c8a1SJohn Marino }
334f5b1c8a1SJohn Marino p8inf = PKCS8_decrypt(p8, p8pass, strlen(p8pass));
335f5b1c8a1SJohn Marino }
336f5b1c8a1SJohn Marino
337f5b1c8a1SJohn Marino if (!p8inf) {
338f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error decrypting key\n");
339f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
340f5b1c8a1SJohn Marino goto end;
341f5b1c8a1SJohn Marino }
342f5b1c8a1SJohn Marino if (!(pkey = EVP_PKCS82PKEY(p8inf))) {
343f5b1c8a1SJohn Marino BIO_printf(bio_err, "Error converting key\n");
344f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
345f5b1c8a1SJohn Marino goto end;
346f5b1c8a1SJohn Marino }
347f5b1c8a1SJohn Marino if (pkcs8_config.outformat == FORMAT_PEM)
348f5b1c8a1SJohn Marino PEM_write_bio_PrivateKey(out, pkey, NULL, NULL, 0, NULL,
349f5b1c8a1SJohn Marino passout);
350f5b1c8a1SJohn Marino else if (pkcs8_config.outformat == FORMAT_ASN1)
351f5b1c8a1SJohn Marino i2d_PrivateKey_bio(out, pkey);
352f5b1c8a1SJohn Marino else {
353f5b1c8a1SJohn Marino BIO_printf(bio_err, "Bad format specified for key\n");
354f5b1c8a1SJohn Marino goto end;
355f5b1c8a1SJohn Marino }
356f5b1c8a1SJohn Marino ret = 0;
357f5b1c8a1SJohn Marino
358f5b1c8a1SJohn Marino end:
359f5b1c8a1SJohn Marino X509_SIG_free(p8);
360f5b1c8a1SJohn Marino PKCS8_PRIV_KEY_INFO_free(p8inf);
361f5b1c8a1SJohn Marino EVP_PKEY_free(pkey);
362f5b1c8a1SJohn Marino BIO_free_all(out);
363f5b1c8a1SJohn Marino BIO_free(in);
364f5b1c8a1SJohn Marino free(passin);
365f5b1c8a1SJohn Marino free(passout);
366f5b1c8a1SJohn Marino
367f5b1c8a1SJohn Marino return ret;
368f5b1c8a1SJohn Marino }
369