1 /* crypto/asn1/d2i_pr.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59 #include <stdio.h>
60 #include "cryptlib.h"
61 #include <openssl/bn.h>
62 #include <openssl/evp.h>
63 #include <openssl/objects.h>
64 #ifndef OPENSSL_NO_ENGINE
65 # include <openssl/engine.h>
66 #endif
67 #include <openssl/x509.h>
68 #include <openssl/asn1.h>
69 #include "asn1_locl.h"
70
d2i_PrivateKey(int type,EVP_PKEY ** a,const unsigned char ** pp,long length)71 EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
72 long length)
73 {
74 EVP_PKEY *ret;
75 const unsigned char *p = *pp;
76
77 if ((a == NULL) || (*a == NULL)) {
78 if ((ret = EVP_PKEY_new()) == NULL) {
79 ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_EVP_LIB);
80 return (NULL);
81 }
82 } else {
83 ret = *a;
84 #ifndef OPENSSL_NO_ENGINE
85 if (ret->engine) {
86 ENGINE_finish(ret->engine);
87 ret->engine = NULL;
88 }
89 #endif
90 }
91
92 if (!EVP_PKEY_set_type(ret, type)) {
93 ASN1err(ASN1_F_D2I_PRIVATEKEY, ASN1_R_UNKNOWN_PUBLIC_KEY_TYPE);
94 goto err;
95 }
96
97 if (!ret->ameth->old_priv_decode ||
98 !ret->ameth->old_priv_decode(ret, &p, length)) {
99 if (ret->ameth->priv_decode) {
100 EVP_PKEY *tmp;
101 PKCS8_PRIV_KEY_INFO *p8 = NULL;
102 p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
103 if (!p8)
104 goto err;
105 tmp = EVP_PKCS82PKEY(p8);
106 PKCS8_PRIV_KEY_INFO_free(p8);
107 if (tmp == NULL)
108 goto err;
109 EVP_PKEY_free(ret);
110 ret = tmp;
111 } else {
112 ASN1err(ASN1_F_D2I_PRIVATEKEY, ERR_R_ASN1_LIB);
113 goto err;
114 }
115 }
116 *pp = p;
117 if (a != NULL)
118 (*a) = ret;
119 return (ret);
120 err:
121 if ((ret != NULL) && ((a == NULL) || (*a != ret)))
122 EVP_PKEY_free(ret);
123 return (NULL);
124 }
125
126 /*
127 * This works like d2i_PrivateKey() except it automatically works out the
128 * type
129 */
130
d2i_AutoPrivateKey(EVP_PKEY ** a,const unsigned char ** pp,long length)131 EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
132 long length)
133 {
134 STACK_OF(ASN1_TYPE) *inkey;
135 const unsigned char *p;
136 int keytype;
137 p = *pp;
138 /*
139 * Dirty trick: read in the ASN1 data into a STACK_OF(ASN1_TYPE): by
140 * analyzing it we can determine the passed structure: this assumes the
141 * input is surrounded by an ASN1 SEQUENCE.
142 */
143 inkey = d2i_ASN1_SEQUENCE_ANY(NULL, &p, length);
144 p = *pp;
145 /*
146 * Since we only need to discern "traditional format" RSA and DSA keys we
147 * can just count the elements.
148 */
149 if (sk_ASN1_TYPE_num(inkey) == 6)
150 keytype = EVP_PKEY_DSA;
151 else if (sk_ASN1_TYPE_num(inkey) == 4)
152 keytype = EVP_PKEY_EC;
153 else if (sk_ASN1_TYPE_num(inkey) == 3) { /* This seems to be PKCS8, not
154 * traditional format */
155 PKCS8_PRIV_KEY_INFO *p8 = d2i_PKCS8_PRIV_KEY_INFO(NULL, &p, length);
156 EVP_PKEY *ret;
157
158 sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
159 if (!p8) {
160 ASN1err(ASN1_F_D2I_AUTOPRIVATEKEY,
161 ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE);
162 return NULL;
163 }
164 ret = EVP_PKCS82PKEY(p8);
165 PKCS8_PRIV_KEY_INFO_free(p8);
166 if (ret == NULL)
167 return NULL;
168 *pp = p;
169 if (a) {
170 *a = ret;
171 }
172 return ret;
173 } else
174 keytype = EVP_PKEY_RSA;
175 sk_ASN1_TYPE_pop_free(inkey, ASN1_TYPE_free);
176 return d2i_PrivateKey(keytype, a, pp, length);
177 }
178