1cca6fc52SDaniel Fojt /* $OpenBSD: sess_id.c,v 1.10 2019/07/14 03:30:46 guenther Exp $ */
2f5b1c8a1SJohn Marino /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3f5b1c8a1SJohn Marino * All rights reserved.
4f5b1c8a1SJohn Marino *
5f5b1c8a1SJohn Marino * This package is an SSL implementation written
6f5b1c8a1SJohn Marino * by Eric Young (eay@cryptsoft.com).
7f5b1c8a1SJohn Marino * The implementation was written so as to conform with Netscapes SSL.
8f5b1c8a1SJohn Marino *
9f5b1c8a1SJohn Marino * This library is free for commercial and non-commercial use as long as
10f5b1c8a1SJohn Marino * the following conditions are aheared to. The following conditions
11f5b1c8a1SJohn Marino * apply to all code found in this distribution, be it the RC4, RSA,
12f5b1c8a1SJohn Marino * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13f5b1c8a1SJohn Marino * included with this distribution is covered by the same copyright terms
14f5b1c8a1SJohn Marino * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15f5b1c8a1SJohn Marino *
16f5b1c8a1SJohn Marino * Copyright remains Eric Young's, and as such any Copyright notices in
17f5b1c8a1SJohn Marino * the code are not to be removed.
18f5b1c8a1SJohn Marino * If this package is used in a product, Eric Young should be given attribution
19f5b1c8a1SJohn Marino * as the author of the parts of the library used.
20f5b1c8a1SJohn Marino * This can be in the form of a textual message at program startup or
21f5b1c8a1SJohn Marino * in documentation (online or textual) provided with the package.
22f5b1c8a1SJohn Marino *
23f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
24f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
25f5b1c8a1SJohn Marino * are met:
26f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the copyright
27f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
28f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
29f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in the
30f5b1c8a1SJohn Marino * documentation and/or other materials provided with the distribution.
31f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this software
32f5b1c8a1SJohn Marino * must display the following acknowledgement:
33f5b1c8a1SJohn Marino * "This product includes cryptographic software written by
34f5b1c8a1SJohn Marino * Eric Young (eay@cryptsoft.com)"
35f5b1c8a1SJohn Marino * The word 'cryptographic' can be left out if the rouines from the library
36f5b1c8a1SJohn Marino * being used are not cryptographic related :-).
37f5b1c8a1SJohn Marino * 4. If you include any Windows specific code (or a derivative thereof) from
38f5b1c8a1SJohn Marino * the apps directory (application code) you must include an acknowledgement:
39f5b1c8a1SJohn Marino * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40f5b1c8a1SJohn Marino *
41f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42f5b1c8a1SJohn Marino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44f5b1c8a1SJohn Marino * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45f5b1c8a1SJohn Marino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46f5b1c8a1SJohn Marino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47f5b1c8a1SJohn Marino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49f5b1c8a1SJohn Marino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50f5b1c8a1SJohn Marino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51f5b1c8a1SJohn Marino * SUCH DAMAGE.
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * The licence and distribution terms for any publically available version or
54f5b1c8a1SJohn Marino * derivative of this code cannot be changed. i.e. this code cannot simply be
55f5b1c8a1SJohn Marino * copied and put under another distribution licence
56f5b1c8a1SJohn Marino * [including the GNU Public Licence.]
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <stdio.h>
60f5b1c8a1SJohn Marino #include <stdlib.h>
61f5b1c8a1SJohn Marino #include <string.h>
62f5b1c8a1SJohn Marino
63f5b1c8a1SJohn Marino #include "apps.h"
64f5b1c8a1SJohn Marino #include "progs.h"
65f5b1c8a1SJohn Marino
66f5b1c8a1SJohn Marino #include <openssl/bio.h>
67f5b1c8a1SJohn Marino #include <openssl/err.h>
68f5b1c8a1SJohn Marino #include <openssl/pem.h>
69f5b1c8a1SJohn Marino #include <openssl/ssl.h>
70f5b1c8a1SJohn Marino #include <openssl/x509.h>
71f5b1c8a1SJohn Marino
72f5b1c8a1SJohn Marino static struct {
73f5b1c8a1SJohn Marino int cert;
74f5b1c8a1SJohn Marino char *context;
75f5b1c8a1SJohn Marino char *infile;
76f5b1c8a1SJohn Marino int informat;
77f5b1c8a1SJohn Marino int noout;
78f5b1c8a1SJohn Marino char *outfile;
79f5b1c8a1SJohn Marino int outformat;
80f5b1c8a1SJohn Marino int text;
81f5b1c8a1SJohn Marino } sess_id_config;
82f5b1c8a1SJohn Marino
83cca6fc52SDaniel Fojt static const struct option sess_id_options[] = {
84f5b1c8a1SJohn Marino {
85f5b1c8a1SJohn Marino .name = "cert",
86f5b1c8a1SJohn Marino .desc = "Output certificate if present in session",
87f5b1c8a1SJohn Marino .type = OPTION_FLAG,
88f5b1c8a1SJohn Marino .opt.flag = &sess_id_config.cert,
89f5b1c8a1SJohn Marino },
90f5b1c8a1SJohn Marino {
91f5b1c8a1SJohn Marino .name = "context",
92f5b1c8a1SJohn Marino .argname = "id",
93f5b1c8a1SJohn Marino .desc = "Set the session ID context for output",
94f5b1c8a1SJohn Marino .type = OPTION_ARG,
95f5b1c8a1SJohn Marino .opt.arg = &sess_id_config.context,
96f5b1c8a1SJohn Marino },
97f5b1c8a1SJohn Marino {
98f5b1c8a1SJohn Marino .name = "in",
99f5b1c8a1SJohn Marino .argname = "file",
100f5b1c8a1SJohn Marino .desc = "Input file (default stdin)",
101f5b1c8a1SJohn Marino .type = OPTION_ARG,
102f5b1c8a1SJohn Marino .opt.arg = &sess_id_config.infile,
103f5b1c8a1SJohn Marino },
104f5b1c8a1SJohn Marino {
105f5b1c8a1SJohn Marino .name = "inform",
106f5b1c8a1SJohn Marino .argname = "format",
107f5b1c8a1SJohn Marino .desc = "Input format (DER or PEM (default))",
108f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
109f5b1c8a1SJohn Marino .opt.value = &sess_id_config.informat,
110f5b1c8a1SJohn Marino },
111f5b1c8a1SJohn Marino {
112f5b1c8a1SJohn Marino .name = "noout",
113f5b1c8a1SJohn Marino .desc = "Do not output the encoded session info",
114f5b1c8a1SJohn Marino .type = OPTION_FLAG,
115f5b1c8a1SJohn Marino .opt.flag = &sess_id_config.noout,
116f5b1c8a1SJohn Marino },
117f5b1c8a1SJohn Marino {
118f5b1c8a1SJohn Marino .name = "out",
119f5b1c8a1SJohn Marino .argname = "file",
120f5b1c8a1SJohn Marino .desc = "Output file (default stdout)",
121f5b1c8a1SJohn Marino .type = OPTION_ARG,
122f5b1c8a1SJohn Marino .opt.arg = &sess_id_config.outfile,
123f5b1c8a1SJohn Marino },
124f5b1c8a1SJohn Marino {
125f5b1c8a1SJohn Marino .name = "outform",
126f5b1c8a1SJohn Marino .argname = "format",
127f5b1c8a1SJohn Marino .desc = "Output format (DER or PEM (default))",
128f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
129f5b1c8a1SJohn Marino .opt.value = &sess_id_config.outformat,
130f5b1c8a1SJohn Marino },
131f5b1c8a1SJohn Marino {
132f5b1c8a1SJohn Marino .name = "text",
133f5b1c8a1SJohn Marino .desc = "Print various public or private key components in"
134f5b1c8a1SJohn Marino " plain text",
135f5b1c8a1SJohn Marino .type = OPTION_FLAG,
136f5b1c8a1SJohn Marino .opt.flag = &sess_id_config.text,
137f5b1c8a1SJohn Marino },
138f5b1c8a1SJohn Marino { NULL }
139f5b1c8a1SJohn Marino };
140f5b1c8a1SJohn Marino
141f5b1c8a1SJohn Marino static void
sess_id_usage(void)142f5b1c8a1SJohn Marino sess_id_usage(void)
143f5b1c8a1SJohn Marino {
144f5b1c8a1SJohn Marino fprintf(stderr,
145f5b1c8a1SJohn Marino "usage: sess_id [-cert] [-context id] [-in file] [-inform fmt] "
146f5b1c8a1SJohn Marino "[-noout]\n"
147f5b1c8a1SJohn Marino " [-out file] [-outform fmt] [-text]\n\n");
148f5b1c8a1SJohn Marino options_usage(sess_id_options);
149f5b1c8a1SJohn Marino }
150f5b1c8a1SJohn Marino
151f5b1c8a1SJohn Marino static SSL_SESSION *load_sess_id(char *file, int format);
152f5b1c8a1SJohn Marino
153f5b1c8a1SJohn Marino int
sess_id_main(int argc,char ** argv)154f5b1c8a1SJohn Marino sess_id_main(int argc, char **argv)
155f5b1c8a1SJohn Marino {
156f5b1c8a1SJohn Marino SSL_SESSION *x = NULL;
157f5b1c8a1SJohn Marino X509 *peer = NULL;
158f5b1c8a1SJohn Marino int ret = 1, i;
159f5b1c8a1SJohn Marino BIO *out = NULL;
160f5b1c8a1SJohn Marino
161f5b1c8a1SJohn Marino if (single_execution) {
16272c33676SMaxim Ag if (pledge("stdio cpath wpath rpath", NULL) == -1) {
163f5b1c8a1SJohn Marino perror("pledge");
164f5b1c8a1SJohn Marino exit(1);
165f5b1c8a1SJohn Marino }
166f5b1c8a1SJohn Marino }
167f5b1c8a1SJohn Marino
168f5b1c8a1SJohn Marino memset(&sess_id_config, 0, sizeof(sess_id_config));
169f5b1c8a1SJohn Marino
170f5b1c8a1SJohn Marino sess_id_config.informat = FORMAT_PEM;
171f5b1c8a1SJohn Marino sess_id_config.outformat = FORMAT_PEM;
172f5b1c8a1SJohn Marino
173f5b1c8a1SJohn Marino if (options_parse(argc, argv, sess_id_options, NULL, NULL) != 0) {
174f5b1c8a1SJohn Marino sess_id_usage();
175f5b1c8a1SJohn Marino return (1);
176f5b1c8a1SJohn Marino }
177f5b1c8a1SJohn Marino
178f5b1c8a1SJohn Marino x = load_sess_id(sess_id_config.infile, sess_id_config.informat);
179f5b1c8a1SJohn Marino if (x == NULL) {
180f5b1c8a1SJohn Marino goto end;
181f5b1c8a1SJohn Marino }
182f5b1c8a1SJohn Marino peer = SSL_SESSION_get0_peer(x);
183f5b1c8a1SJohn Marino
184f5b1c8a1SJohn Marino if (sess_id_config.context) {
185f5b1c8a1SJohn Marino size_t ctx_len = strlen(sess_id_config.context);
186f5b1c8a1SJohn Marino if (ctx_len > SSL_MAX_SID_CTX_LENGTH) {
187f5b1c8a1SJohn Marino BIO_printf(bio_err, "Context too long\n");
188f5b1c8a1SJohn Marino goto end;
189f5b1c8a1SJohn Marino }
190f5b1c8a1SJohn Marino SSL_SESSION_set1_id_context(x,
191f5b1c8a1SJohn Marino (unsigned char *)sess_id_config.context, ctx_len);
192f5b1c8a1SJohn Marino }
193f5b1c8a1SJohn Marino
194f5b1c8a1SJohn Marino if (!sess_id_config.noout || sess_id_config.text) {
195f5b1c8a1SJohn Marino out = BIO_new(BIO_s_file());
196f5b1c8a1SJohn Marino if (out == NULL) {
197f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
198f5b1c8a1SJohn Marino goto end;
199f5b1c8a1SJohn Marino }
200f5b1c8a1SJohn Marino if (sess_id_config.outfile == NULL) {
201f5b1c8a1SJohn Marino BIO_set_fp(out, stdout, BIO_NOCLOSE);
202f5b1c8a1SJohn Marino } else {
203f5b1c8a1SJohn Marino if (BIO_write_filename(out, sess_id_config.outfile)
204f5b1c8a1SJohn Marino <= 0) {
205f5b1c8a1SJohn Marino perror(sess_id_config.outfile);
206f5b1c8a1SJohn Marino goto end;
207f5b1c8a1SJohn Marino }
208f5b1c8a1SJohn Marino }
209f5b1c8a1SJohn Marino }
210f5b1c8a1SJohn Marino if (sess_id_config.text) {
211f5b1c8a1SJohn Marino SSL_SESSION_print(out, x);
212f5b1c8a1SJohn Marino
213f5b1c8a1SJohn Marino if (sess_id_config.cert) {
214f5b1c8a1SJohn Marino if (peer == NULL)
215f5b1c8a1SJohn Marino BIO_puts(out, "No certificate present\n");
216f5b1c8a1SJohn Marino else
217f5b1c8a1SJohn Marino X509_print(out, peer);
218f5b1c8a1SJohn Marino }
219f5b1c8a1SJohn Marino }
220f5b1c8a1SJohn Marino if (!sess_id_config.noout && !sess_id_config.cert) {
221f5b1c8a1SJohn Marino if (sess_id_config.outformat == FORMAT_ASN1)
222f5b1c8a1SJohn Marino i = i2d_SSL_SESSION_bio(out, x);
223f5b1c8a1SJohn Marino else if (sess_id_config.outformat == FORMAT_PEM)
224f5b1c8a1SJohn Marino i = PEM_write_bio_SSL_SESSION(out, x);
225f5b1c8a1SJohn Marino else {
226f5b1c8a1SJohn Marino BIO_printf(bio_err,
227f5b1c8a1SJohn Marino "bad output format specified for outfile\n");
228f5b1c8a1SJohn Marino goto end;
229f5b1c8a1SJohn Marino }
230f5b1c8a1SJohn Marino if (!i) {
231f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to write SSL_SESSION\n");
232f5b1c8a1SJohn Marino goto end;
233f5b1c8a1SJohn Marino }
234f5b1c8a1SJohn Marino } else if (!sess_id_config.noout && (peer != NULL)) {
235f5b1c8a1SJohn Marino /* just print the certificate */
236f5b1c8a1SJohn Marino if (sess_id_config.outformat == FORMAT_ASN1)
237f5b1c8a1SJohn Marino i = (int) i2d_X509_bio(out, peer);
238f5b1c8a1SJohn Marino else if (sess_id_config.outformat == FORMAT_PEM)
239f5b1c8a1SJohn Marino i = PEM_write_bio_X509(out, peer);
240f5b1c8a1SJohn Marino else {
241f5b1c8a1SJohn Marino BIO_printf(bio_err,
242f5b1c8a1SJohn Marino "bad output format specified for outfile\n");
243f5b1c8a1SJohn Marino goto end;
244f5b1c8a1SJohn Marino }
245f5b1c8a1SJohn Marino if (!i) {
246f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to write X509\n");
247f5b1c8a1SJohn Marino goto end;
248f5b1c8a1SJohn Marino }
249f5b1c8a1SJohn Marino }
250f5b1c8a1SJohn Marino ret = 0;
251f5b1c8a1SJohn Marino
252f5b1c8a1SJohn Marino end:
253f5b1c8a1SJohn Marino BIO_free_all(out);
254f5b1c8a1SJohn Marino SSL_SESSION_free(x);
255f5b1c8a1SJohn Marino
256f5b1c8a1SJohn Marino return (ret);
257f5b1c8a1SJohn Marino }
258f5b1c8a1SJohn Marino
259f5b1c8a1SJohn Marino static SSL_SESSION *
load_sess_id(char * infile,int format)260f5b1c8a1SJohn Marino load_sess_id(char *infile, int format)
261f5b1c8a1SJohn Marino {
262f5b1c8a1SJohn Marino SSL_SESSION *x = NULL;
263f5b1c8a1SJohn Marino BIO *in = NULL;
264f5b1c8a1SJohn Marino
265f5b1c8a1SJohn Marino in = BIO_new(BIO_s_file());
266f5b1c8a1SJohn Marino if (in == NULL) {
267f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
268f5b1c8a1SJohn Marino goto end;
269f5b1c8a1SJohn Marino }
270f5b1c8a1SJohn Marino if (infile == NULL)
271f5b1c8a1SJohn Marino BIO_set_fp(in, stdin, BIO_NOCLOSE);
272f5b1c8a1SJohn Marino else {
273f5b1c8a1SJohn Marino if (BIO_read_filename(in, infile) <= 0) {
274f5b1c8a1SJohn Marino perror(infile);
275f5b1c8a1SJohn Marino goto end;
276f5b1c8a1SJohn Marino }
277f5b1c8a1SJohn Marino }
278f5b1c8a1SJohn Marino if (format == FORMAT_ASN1)
279f5b1c8a1SJohn Marino x = d2i_SSL_SESSION_bio(in, NULL);
280f5b1c8a1SJohn Marino else if (format == FORMAT_PEM)
281f5b1c8a1SJohn Marino x = PEM_read_bio_SSL_SESSION(in, NULL, NULL, NULL);
282f5b1c8a1SJohn Marino else {
283f5b1c8a1SJohn Marino BIO_printf(bio_err,
284f5b1c8a1SJohn Marino "bad input format specified for input crl\n");
285f5b1c8a1SJohn Marino goto end;
286f5b1c8a1SJohn Marino }
287f5b1c8a1SJohn Marino if (x == NULL) {
288f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to load SSL_SESSION\n");
289f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
290f5b1c8a1SJohn Marino goto end;
291f5b1c8a1SJohn Marino }
292f5b1c8a1SJohn Marino end:
293f5b1c8a1SJohn Marino BIO_free(in);
294f5b1c8a1SJohn Marino return (x);
295f5b1c8a1SJohn Marino }
296