1cca6fc52SDaniel Fojt /* $OpenBSD: pkcs7.c,v 1.11 2019/07/14 03:30:46 guenther Exp $ */
2f5b1c8a1SJohn Marino /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3f5b1c8a1SJohn Marino * All rights reserved.
4f5b1c8a1SJohn Marino *
5f5b1c8a1SJohn Marino * This package is an SSL implementation written
6f5b1c8a1SJohn Marino * by Eric Young (eay@cryptsoft.com).
7f5b1c8a1SJohn Marino * The implementation was written so as to conform with Netscapes SSL.
8f5b1c8a1SJohn Marino *
9f5b1c8a1SJohn Marino * This library is free for commercial and non-commercial use as long as
10f5b1c8a1SJohn Marino * the following conditions are aheared to. The following conditions
11f5b1c8a1SJohn Marino * apply to all code found in this distribution, be it the RC4, RSA,
12f5b1c8a1SJohn Marino * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13f5b1c8a1SJohn Marino * included with this distribution is covered by the same copyright terms
14f5b1c8a1SJohn Marino * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15f5b1c8a1SJohn Marino *
16f5b1c8a1SJohn Marino * Copyright remains Eric Young's, and as such any Copyright notices in
17f5b1c8a1SJohn Marino * the code are not to be removed.
18f5b1c8a1SJohn Marino * If this package is used in a product, Eric Young should be given attribution
19f5b1c8a1SJohn Marino * as the author of the parts of the library used.
20f5b1c8a1SJohn Marino * This can be in the form of a textual message at program startup or
21f5b1c8a1SJohn Marino * in documentation (online or textual) provided with the package.
22f5b1c8a1SJohn Marino *
23f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
24f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
25f5b1c8a1SJohn Marino * are met:
26f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the copyright
27f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
28f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
29f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in the
30f5b1c8a1SJohn Marino * documentation and/or other materials provided with the distribution.
31f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this software
32f5b1c8a1SJohn Marino * must display the following acknowledgement:
33f5b1c8a1SJohn Marino * "This product includes cryptographic software written by
34f5b1c8a1SJohn Marino * Eric Young (eay@cryptsoft.com)"
35f5b1c8a1SJohn Marino * The word 'cryptographic' can be left out if the rouines from the library
36f5b1c8a1SJohn Marino * being used are not cryptographic related :-).
37f5b1c8a1SJohn Marino * 4. If you include any Windows specific code (or a derivative thereof) from
38f5b1c8a1SJohn Marino * the apps directory (application code) you must include an acknowledgement:
39f5b1c8a1SJohn Marino * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40f5b1c8a1SJohn Marino *
41f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42f5b1c8a1SJohn Marino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44f5b1c8a1SJohn Marino * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45f5b1c8a1SJohn Marino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46f5b1c8a1SJohn Marino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47f5b1c8a1SJohn Marino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49f5b1c8a1SJohn Marino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50f5b1c8a1SJohn Marino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51f5b1c8a1SJohn Marino * SUCH DAMAGE.
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * The licence and distribution terms for any publically available version or
54f5b1c8a1SJohn Marino * derivative of this code cannot be changed. i.e. this code cannot simply be
55f5b1c8a1SJohn Marino * copied and put under another distribution licence
56f5b1c8a1SJohn Marino * [including the GNU Public Licence.]
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <stdio.h>
60f5b1c8a1SJohn Marino #include <stdlib.h>
61f5b1c8a1SJohn Marino #include <string.h>
62f5b1c8a1SJohn Marino #include <time.h>
63f5b1c8a1SJohn Marino
64f5b1c8a1SJohn Marino #include "apps.h"
65f5b1c8a1SJohn Marino
66f5b1c8a1SJohn Marino #include <openssl/err.h>
67f5b1c8a1SJohn Marino #include <openssl/evp.h>
68f5b1c8a1SJohn Marino #include <openssl/objects.h>
69f5b1c8a1SJohn Marino #include <openssl/pem.h>
70f5b1c8a1SJohn Marino #include <openssl/pkcs7.h>
71f5b1c8a1SJohn Marino #include <openssl/x509.h>
72f5b1c8a1SJohn Marino
73f5b1c8a1SJohn Marino static struct {
74f5b1c8a1SJohn Marino char *infile;
75f5b1c8a1SJohn Marino int informat;
76f5b1c8a1SJohn Marino int noout;
77f5b1c8a1SJohn Marino char *outfile;
78f5b1c8a1SJohn Marino int outformat;
79f5b1c8a1SJohn Marino int p7_print;
80f5b1c8a1SJohn Marino int print_certs;
81f5b1c8a1SJohn Marino int text;
82f5b1c8a1SJohn Marino } pkcs7_config;
83f5b1c8a1SJohn Marino
84cca6fc52SDaniel Fojt static const struct option pkcs7_options[] = {
85f5b1c8a1SJohn Marino {
86f5b1c8a1SJohn Marino .name = "in",
87f5b1c8a1SJohn Marino .argname = "file",
88f5b1c8a1SJohn Marino .desc = "Input file (default stdin)",
89f5b1c8a1SJohn Marino .type = OPTION_ARG,
90f5b1c8a1SJohn Marino .opt.arg = &pkcs7_config.infile,
91f5b1c8a1SJohn Marino },
92f5b1c8a1SJohn Marino {
93f5b1c8a1SJohn Marino .name = "inform",
94f5b1c8a1SJohn Marino .argname = "format",
95f5b1c8a1SJohn Marino .desc = "Input format (DER or PEM (default))",
96f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
97f5b1c8a1SJohn Marino .opt.value = &pkcs7_config.informat,
98f5b1c8a1SJohn Marino },
99f5b1c8a1SJohn Marino {
100f5b1c8a1SJohn Marino .name = "noout",
101f5b1c8a1SJohn Marino .desc = "Do not output encoded version of PKCS#7 structure",
102f5b1c8a1SJohn Marino .type = OPTION_FLAG,
103f5b1c8a1SJohn Marino .opt.flag = &pkcs7_config.noout,
104f5b1c8a1SJohn Marino },
105f5b1c8a1SJohn Marino {
106f5b1c8a1SJohn Marino .name = "out",
107f5b1c8a1SJohn Marino .argname = "file",
108f5b1c8a1SJohn Marino .desc = "Output file (default stdout)",
109f5b1c8a1SJohn Marino .type = OPTION_ARG,
110f5b1c8a1SJohn Marino .opt.arg = &pkcs7_config.outfile,
111f5b1c8a1SJohn Marino },
112f5b1c8a1SJohn Marino {
113f5b1c8a1SJohn Marino .name = "outform",
114f5b1c8a1SJohn Marino .argname = "format",
115f5b1c8a1SJohn Marino .desc = "Output format (DER or PEM (default))",
116f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
117f5b1c8a1SJohn Marino .opt.value = &pkcs7_config.outformat,
118f5b1c8a1SJohn Marino },
119f5b1c8a1SJohn Marino {
120f5b1c8a1SJohn Marino .name = "print",
121f5b1c8a1SJohn Marino .desc = "Output ASN.1 representation of PKCS#7 structure",
122f5b1c8a1SJohn Marino .type = OPTION_FLAG,
123f5b1c8a1SJohn Marino .opt.flag = &pkcs7_config.p7_print,
124f5b1c8a1SJohn Marino },
125f5b1c8a1SJohn Marino {
126f5b1c8a1SJohn Marino .name = "print_certs",
127f5b1c8a1SJohn Marino .desc = "Print out any certificates or CRLs contained in file",
128f5b1c8a1SJohn Marino .type = OPTION_FLAG,
129f5b1c8a1SJohn Marino .opt.flag = &pkcs7_config.print_certs,
130f5b1c8a1SJohn Marino },
131f5b1c8a1SJohn Marino {
132f5b1c8a1SJohn Marino .name = "text",
133f5b1c8a1SJohn Marino .desc = "Print out full certificate details",
134f5b1c8a1SJohn Marino .type = OPTION_FLAG,
135f5b1c8a1SJohn Marino .opt.flag = &pkcs7_config.text,
136f5b1c8a1SJohn Marino },
137f5b1c8a1SJohn Marino { NULL },
138f5b1c8a1SJohn Marino };
139f5b1c8a1SJohn Marino
140f5b1c8a1SJohn Marino static void
pkcs7_usage()141f5b1c8a1SJohn Marino pkcs7_usage()
142f5b1c8a1SJohn Marino {
143f5b1c8a1SJohn Marino fprintf(stderr, "usage: pkcs7 [-in file] "
144f5b1c8a1SJohn Marino "[-inform DER | PEM] [-noout]\n"
145f5b1c8a1SJohn Marino " [-out file] [-outform DER | PEM] [-print_certs] [-text]\n\n");
146f5b1c8a1SJohn Marino options_usage(pkcs7_options);
147f5b1c8a1SJohn Marino }
148f5b1c8a1SJohn Marino
149f5b1c8a1SJohn Marino int
pkcs7_main(int argc,char ** argv)150f5b1c8a1SJohn Marino pkcs7_main(int argc, char **argv)
151f5b1c8a1SJohn Marino {
152f5b1c8a1SJohn Marino PKCS7 *p7 = NULL;
153f5b1c8a1SJohn Marino BIO *in = NULL, *out = NULL;
154f5b1c8a1SJohn Marino int ret = 1;
155f5b1c8a1SJohn Marino int i;
156f5b1c8a1SJohn Marino
157f5b1c8a1SJohn Marino if (single_execution) {
15872c33676SMaxim Ag if (pledge("stdio cpath wpath rpath", NULL) == -1) {
159f5b1c8a1SJohn Marino perror("pledge");
160f5b1c8a1SJohn Marino exit(1);
161f5b1c8a1SJohn Marino }
162f5b1c8a1SJohn Marino }
163f5b1c8a1SJohn Marino
164f5b1c8a1SJohn Marino memset(&pkcs7_config, 0, sizeof(pkcs7_config));
165f5b1c8a1SJohn Marino
166f5b1c8a1SJohn Marino pkcs7_config.informat = FORMAT_PEM;
167f5b1c8a1SJohn Marino pkcs7_config.outformat = FORMAT_PEM;
168f5b1c8a1SJohn Marino
169f5b1c8a1SJohn Marino if (options_parse(argc, argv, pkcs7_options, NULL, NULL) != 0) {
170f5b1c8a1SJohn Marino pkcs7_usage();
171f5b1c8a1SJohn Marino goto end;
172f5b1c8a1SJohn Marino }
173f5b1c8a1SJohn Marino
174f5b1c8a1SJohn Marino in = BIO_new(BIO_s_file());
175f5b1c8a1SJohn Marino out = BIO_new(BIO_s_file());
176f5b1c8a1SJohn Marino if ((in == NULL) || (out == NULL)) {
177f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
178f5b1c8a1SJohn Marino goto end;
179f5b1c8a1SJohn Marino }
180f5b1c8a1SJohn Marino if (pkcs7_config.infile == NULL)
181f5b1c8a1SJohn Marino BIO_set_fp(in, stdin, BIO_NOCLOSE);
182f5b1c8a1SJohn Marino else {
183f5b1c8a1SJohn Marino if (BIO_read_filename(in, pkcs7_config.infile) <= 0) {
184f5b1c8a1SJohn Marino perror(pkcs7_config.infile);
185f5b1c8a1SJohn Marino goto end;
186f5b1c8a1SJohn Marino }
187f5b1c8a1SJohn Marino }
188f5b1c8a1SJohn Marino
189f5b1c8a1SJohn Marino if (pkcs7_config.informat == FORMAT_ASN1)
190f5b1c8a1SJohn Marino p7 = d2i_PKCS7_bio(in, NULL);
191f5b1c8a1SJohn Marino else if (pkcs7_config.informat == FORMAT_PEM)
192f5b1c8a1SJohn Marino p7 = PEM_read_bio_PKCS7(in, NULL, NULL, NULL);
193f5b1c8a1SJohn Marino else {
194f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad input format specified for pkcs7 object\n");
195f5b1c8a1SJohn Marino goto end;
196f5b1c8a1SJohn Marino }
197f5b1c8a1SJohn Marino if (p7 == NULL) {
198f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to load PKCS7 object\n");
199f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
200f5b1c8a1SJohn Marino goto end;
201f5b1c8a1SJohn Marino }
202f5b1c8a1SJohn Marino if (pkcs7_config.outfile == NULL) {
203f5b1c8a1SJohn Marino BIO_set_fp(out, stdout, BIO_NOCLOSE);
204f5b1c8a1SJohn Marino } else {
205f5b1c8a1SJohn Marino if (BIO_write_filename(out, pkcs7_config.outfile) <= 0) {
206f5b1c8a1SJohn Marino perror(pkcs7_config.outfile);
207f5b1c8a1SJohn Marino goto end;
208f5b1c8a1SJohn Marino }
209f5b1c8a1SJohn Marino }
210f5b1c8a1SJohn Marino
211f5b1c8a1SJohn Marino if (pkcs7_config.p7_print)
212f5b1c8a1SJohn Marino PKCS7_print_ctx(out, p7, 0, NULL);
213f5b1c8a1SJohn Marino
214f5b1c8a1SJohn Marino if (pkcs7_config.print_certs) {
215f5b1c8a1SJohn Marino STACK_OF(X509) * certs = NULL;
216f5b1c8a1SJohn Marino STACK_OF(X509_CRL) * crls = NULL;
217f5b1c8a1SJohn Marino
218f5b1c8a1SJohn Marino i = OBJ_obj2nid(p7->type);
219f5b1c8a1SJohn Marino switch (i) {
220f5b1c8a1SJohn Marino case NID_pkcs7_signed:
221f5b1c8a1SJohn Marino certs = p7->d.sign->cert;
222f5b1c8a1SJohn Marino crls = p7->d.sign->crl;
223f5b1c8a1SJohn Marino break;
224f5b1c8a1SJohn Marino case NID_pkcs7_signedAndEnveloped:
225f5b1c8a1SJohn Marino certs = p7->d.signed_and_enveloped->cert;
226f5b1c8a1SJohn Marino crls = p7->d.signed_and_enveloped->crl;
227f5b1c8a1SJohn Marino break;
228f5b1c8a1SJohn Marino default:
229f5b1c8a1SJohn Marino break;
230f5b1c8a1SJohn Marino }
231f5b1c8a1SJohn Marino
232f5b1c8a1SJohn Marino if (certs != NULL) {
233f5b1c8a1SJohn Marino X509 *x;
234f5b1c8a1SJohn Marino
235f5b1c8a1SJohn Marino for (i = 0; i < sk_X509_num(certs); i++) {
236f5b1c8a1SJohn Marino x = sk_X509_value(certs, i);
237f5b1c8a1SJohn Marino if (pkcs7_config.text)
238f5b1c8a1SJohn Marino X509_print(out, x);
239f5b1c8a1SJohn Marino else
240f5b1c8a1SJohn Marino dump_cert_text(out, x);
241f5b1c8a1SJohn Marino
242f5b1c8a1SJohn Marino if (!pkcs7_config.noout)
243f5b1c8a1SJohn Marino PEM_write_bio_X509(out, x);
244f5b1c8a1SJohn Marino BIO_puts(out, "\n");
245f5b1c8a1SJohn Marino }
246f5b1c8a1SJohn Marino }
247f5b1c8a1SJohn Marino if (crls != NULL) {
248f5b1c8a1SJohn Marino X509_CRL *crl;
249f5b1c8a1SJohn Marino
250f5b1c8a1SJohn Marino for (i = 0; i < sk_X509_CRL_num(crls); i++) {
251f5b1c8a1SJohn Marino crl = sk_X509_CRL_value(crls, i);
252f5b1c8a1SJohn Marino
253f5b1c8a1SJohn Marino X509_CRL_print(out, crl);
254f5b1c8a1SJohn Marino
255f5b1c8a1SJohn Marino if (!pkcs7_config.noout)
256f5b1c8a1SJohn Marino PEM_write_bio_X509_CRL(out, crl);
257f5b1c8a1SJohn Marino BIO_puts(out, "\n");
258f5b1c8a1SJohn Marino }
259f5b1c8a1SJohn Marino }
260f5b1c8a1SJohn Marino ret = 0;
261f5b1c8a1SJohn Marino goto end;
262f5b1c8a1SJohn Marino }
263f5b1c8a1SJohn Marino if (!pkcs7_config.noout) {
264f5b1c8a1SJohn Marino if (pkcs7_config.outformat == FORMAT_ASN1)
265f5b1c8a1SJohn Marino i = i2d_PKCS7_bio(out, p7);
266f5b1c8a1SJohn Marino else if (pkcs7_config.outformat == FORMAT_PEM)
267f5b1c8a1SJohn Marino i = PEM_write_bio_PKCS7(out, p7);
268f5b1c8a1SJohn Marino else {
269f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad output format specified for outfile\n");
270f5b1c8a1SJohn Marino goto end;
271f5b1c8a1SJohn Marino }
272f5b1c8a1SJohn Marino
273f5b1c8a1SJohn Marino if (!i) {
274f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to write pkcs7 object\n");
275f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
276f5b1c8a1SJohn Marino goto end;
277f5b1c8a1SJohn Marino }
278f5b1c8a1SJohn Marino }
279f5b1c8a1SJohn Marino ret = 0;
280f5b1c8a1SJohn Marino end:
281f5b1c8a1SJohn Marino if (p7 != NULL)
282f5b1c8a1SJohn Marino PKCS7_free(p7);
283f5b1c8a1SJohn Marino if (in != NULL)
284f5b1c8a1SJohn Marino BIO_free(in);
285f5b1c8a1SJohn Marino if (out != NULL)
286f5b1c8a1SJohn Marino BIO_free_all(out);
287f5b1c8a1SJohn Marino
288f5b1c8a1SJohn Marino return (ret);
289f5b1c8a1SJohn Marino }
290