2 /* Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com)
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
62 #include <openssl/e_os2.h>
63 #ifndef OPENSSL_NO_BIO
64 #include <openssl/bio.h>
66 #ifndef OPENSSL_NO_STACK
67 #include <openssl/stack.h>
69 #include <openssl/evp.h>
70 #include <openssl/x509.h>
71 #include <openssl/pem2.h>
77 #define PEM_BUFSIZE 1024
79 #define PEM_OBJ_UNDEF 0
80 #define PEM_OBJ_X509 1
81 #define PEM_OBJ_X509_REQ 2
83 #define PEM_OBJ_SSL_SESSION 4
84 #define PEM_OBJ_PRIV_KEY 10
85 #define PEM_OBJ_PRIV_RSA 11
86 #define PEM_OBJ_PRIV_DSA 12
87 #define PEM_OBJ_PRIV_DH 13
88 #define PEM_OBJ_PUB_RSA 14
89 #define PEM_OBJ_PUB_DSA 15
90 #define PEM_OBJ_PUB_DH 16
91 #define PEM_OBJ_DHPARAMS 17
92 #define PEM_OBJ_DSAPARAMS 18
93 #define PEM_OBJ_PRIV_RSA_PUBLIC 19
94 #define PEM_OBJ_PRIV_ECDSA 20
95 #define PEM_OBJ_PUB_ECDSA 21
96 #define PEM_OBJ_ECPARAMETERS 22
99 #define PEM_DEK_DES_CBC 40
100 #define PEM_DEK_IDEA_CBC 45
101 #define PEM_DEK_DES_EDE 50
102 #define PEM_DEK_DES_ECB 60
103 #define PEM_DEK_RSA 70
104 #define PEM_DEK_RSA_MD2 80
105 #define PEM_DEK_RSA_MD5 90
107 #define PEM_MD_MD2 NID_md2
108 #define PEM_MD_MD5 NID_md5
109 #define PEM_MD_SHA NID_sha
110 #define PEM_MD_MD2_RSA NID_md2WithRSAEncryption
111 #define PEM_MD_MD5_RSA NID_md5WithRSAEncryption
112 #define PEM_MD_SHA_RSA NID_sha1WithRSAEncryption
114 #define PEM_STRING_X509_OLD "X509 CERTIFICATE"
115 #define PEM_STRING_X509 "CERTIFICATE"
116 #define PEM_STRING_X509_PAIR "CERTIFICATE PAIR"
117 #define PEM_STRING_X509_TRUSTED "TRUSTED CERTIFICATE"
118 #define PEM_STRING_X509_REQ_OLD "NEW CERTIFICATE REQUEST"
119 #define PEM_STRING_X509_REQ "CERTIFICATE REQUEST"
120 #define PEM_STRING_X509_CRL "X509 CRL"
121 #define PEM_STRING_EVP_PKEY "ANY PRIVATE KEY"
122 #define PEM_STRING_PUBLIC "PUBLIC KEY"
123 #define PEM_STRING_RSA "RSA PRIVATE KEY"
124 #define PEM_STRING_RSA_PUBLIC "RSA PUBLIC KEY"
125 #define PEM_STRING_DSA "DSA PRIVATE KEY"
126 #define PEM_STRING_DSA_PUBLIC "DSA PUBLIC KEY"
127 #define PEM_STRING_PKCS7 "PKCS7"
128 #define PEM_STRING_PKCS8 "ENCRYPTED PRIVATE KEY"
129 #define PEM_STRING_PKCS8INF "PRIVATE KEY"
130 #define PEM_STRING_DHPARAMS "DH PARAMETERS"
131 #define PEM_STRING_SSL_SESSION "SSL SESSION PARAMETERS"
132 #define PEM_STRING_DSAPARAMS "DSA PARAMETERS"
133 #define PEM_STRING_ECDSA_PUBLIC "ECDSA PUBLIC KEY"
134 #define PEM_STRING_ECPARAMETERS "EC PARAMETERS"
135 #define PEM_STRING_ECPRIVATEKEY "EC PRIVATE KEY"
137 /* Note that this structure is initialised by PEM_SealInit and cleaned up
138 by PEM_SealFinal (at least for now) */
139 typedef struct PEM_Encode_Seal_st
141 EVP_ENCODE_CTX encode
;
143 EVP_CIPHER_CTX cipher
;
144 } PEM_ENCODE_SEAL_CTX
;
146 /* enc_type is one off */
147 #define PEM_TYPE_ENCRYPTED 10
148 #define PEM_TYPE_MIC_ONLY 20
149 #define PEM_TYPE_MIC_CLEAR 30
150 #define PEM_TYPE_CLEAR 40
152 typedef struct pem_recip_st
159 /* char iv[8]; unused and wrong size */
162 typedef struct pem_ctx_st
164 int type
; /* what type of object */
175 /* unused, and wrong size
176 unsigned char iv[8]; */
179 PEM_USER
*originator
;
182 PEM_USER
**recipient
;
184 #ifndef OPENSSL_NO_STACK
185 STACK
*x509_chain
; /* certificate chain */
187 char *x509_chain
; /* certificate chain */
189 EVP_MD
*md
; /* signature type */
191 int md_enc
; /* is the md encrypted or not? */
192 int md_len
; /* length of md_data */
193 char *md_data
; /* message digest, could be pkey encrypted */
195 EVP_CIPHER
*dec
; /* date encryption cipher */
196 int key_len
; /* key length */
197 unsigned char *key
; /* key */
198 /* unused, and wrong size
199 unsigned char iv[8]; */
202 int data_enc
; /* is the data encrypted */
207 /* These macros make the PEM_read/PEM_write functions easier to maintain and
208 * write. Now they are all implemented with either:
209 * IMPLEMENT_PEM_rw(...) or IMPLEMENT_PEM_rw_cb(...)
212 #ifdef OPENSSL_NO_FP_API
214 #define IMPLEMENT_PEM_read_fp(name, type, str, asn1) /**/
215 #define IMPLEMENT_PEM_write_fp(name, type, str, asn1) /**/
216 #define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) /**/
220 #define IMPLEMENT_PEM_read_fp(name, type, str, asn1) \
221 type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u)\
223 return(((type *(*)(D2I_OF(type),char *,FILE *,type **,pem_password_cb *,void *))openssl_fcast(PEM_ASN1_read))(d2i_##asn1, str,fp,x,cb,u)); \
226 #define IMPLEMENT_PEM_write_fp(name, type, str, asn1) \
227 int PEM_write_##name(FILE *fp, type *x) \
229 return(((int (*)(I2D_OF(type),const char *,FILE *,type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write))(i2d_##asn1,str,fp,x,NULL,NULL,0,NULL,NULL)); \
232 #define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) \
233 int PEM_write_##name(FILE *fp, const type *x) \
235 return(((int (*)(I2D_OF_const(type),const char *,FILE *, const type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write))(i2d_##asn1,str,fp,x,NULL,NULL,0,NULL,NULL)); \
238 #define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) \
239 int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
240 unsigned char *kstr, int klen, pem_password_cb *cb, \
243 return(((int (*)(I2D_OF(type),const char *,FILE *,type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write))(i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u)); \
246 #define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) \
247 int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
248 unsigned char *kstr, int klen, pem_password_cb *cb, \
251 return(((int (*)(I2D_OF_const(type),const char *,FILE *,type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write))(i2d_##asn1,str,fp,x,enc,kstr,klen,cb,u)); \
256 #define IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
257 type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u)\
259 return(((type *(*)(D2I_OF(type),const char *,BIO *,type **,pem_password_cb *,void *))openssl_fcast(PEM_ASN1_read_bio))(d2i_##asn1, str,bp,x,cb,u)); \
262 #define IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
263 int PEM_write_bio_##name(BIO *bp, type *x) \
265 return(((int (*)(I2D_OF(type),const char *,BIO *,type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write_bio))(i2d_##asn1,str,bp,x,NULL,NULL,0,NULL,NULL)); \
268 #define IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
269 int PEM_write_bio_##name(BIO *bp, const type *x) \
271 return(((int (*)(I2D_OF_const(type),const char *,BIO *,const type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write_bio))(i2d_##asn1,str,bp,x,NULL,NULL,0,NULL,NULL)); \
274 #define IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
275 int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
276 unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
278 return(((int (*)(I2D_OF(type),const char *,BIO *,type *,const EVP_CIPHER *,unsigned char *,int,pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write_bio))(i2d_##asn1,str,bp,x,enc,kstr,klen,cb,u)); \
281 #define IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
282 int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
283 unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
285 return(((int (*)(I2D_OF_const(type),const char *,BIO *,type *,const EVP_CIPHER *,unsigned char *,int,pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write_bio))(i2d_##asn1,str,bp,x,enc,kstr,klen,cb,u)); \
288 #define IMPLEMENT_PEM_write(name, type, str, asn1) \
289 IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
290 IMPLEMENT_PEM_write_fp(name, type, str, asn1)
292 #define IMPLEMENT_PEM_write_const(name, type, str, asn1) \
293 IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
294 IMPLEMENT_PEM_write_fp_const(name, type, str, asn1)
296 #define IMPLEMENT_PEM_write_cb(name, type, str, asn1) \
297 IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
298 IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1)
300 #define IMPLEMENT_PEM_write_cb_const(name, type, str, asn1) \
301 IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
302 IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1)
304 #define IMPLEMENT_PEM_read(name, type, str, asn1) \
305 IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
306 IMPLEMENT_PEM_read_fp(name, type, str, asn1)
308 #define IMPLEMENT_PEM_rw(name, type, str, asn1) \
309 IMPLEMENT_PEM_read(name, type, str, asn1) \
310 IMPLEMENT_PEM_write(name, type, str, asn1)
312 #define IMPLEMENT_PEM_rw_const(name, type, str, asn1) \
313 IMPLEMENT_PEM_read(name, type, str, asn1) \
314 IMPLEMENT_PEM_write_const(name, type, str, asn1)
316 #define IMPLEMENT_PEM_rw_cb(name, type, str, asn1) \
317 IMPLEMENT_PEM_read(name, type, str, asn1) \
318 IMPLEMENT_PEM_write_cb(name, type, str, asn1)
320 /* These are the same except they are for the declarations */
322 #if defined(OPENSSL_SYS_WIN16) || defined(OPENSSL_NO_FP_API)
324 #define DECLARE_PEM_read_fp(name, type) /**/
325 #define DECLARE_PEM_write_fp(name, type) /**/
326 #define DECLARE_PEM_write_cb_fp(name, type) /**/
330 #define DECLARE_PEM_read_fp(name, type) \
331 type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u);
333 #define DECLARE_PEM_write_fp(name, type) \
334 int PEM_write_##name(FILE *fp, type *x);
336 #define DECLARE_PEM_write_fp_const(name, type) \
337 int PEM_write_##name(FILE *fp, const type *x);
339 #define DECLARE_PEM_write_cb_fp(name, type) \
340 int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
341 unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
345 #ifndef OPENSSL_NO_BIO
346 #define DECLARE_PEM_read_bio(name, type) \
347 type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u);
349 #define DECLARE_PEM_write_bio(name, type) \
350 int PEM_write_bio_##name(BIO *bp, type *x);
352 #define DECLARE_PEM_write_bio_const(name, type) \
353 int PEM_write_bio_##name(BIO *bp, const type *x);
355 #define DECLARE_PEM_write_cb_bio(name, type) \
356 int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
357 unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
361 #define DECLARE_PEM_read_bio(name, type) /**/
362 #define DECLARE_PEM_write_bio(name, type) /**/
363 #define DECLARE_PEM_write_cb_bio(name, type) /**/
367 #define DECLARE_PEM_write(name, type) \
368 DECLARE_PEM_write_bio(name, type) \
369 DECLARE_PEM_write_fp(name, type)
371 #define DECLARE_PEM_write_const(name, type) \
372 DECLARE_PEM_write_bio_const(name, type) \
373 DECLARE_PEM_write_fp_const(name, type)
375 #define DECLARE_PEM_write_cb(name, type) \
376 DECLARE_PEM_write_cb_bio(name, type) \
377 DECLARE_PEM_write_cb_fp(name, type)
379 #define DECLARE_PEM_read(name, type) \
380 DECLARE_PEM_read_bio(name, type) \
381 DECLARE_PEM_read_fp(name, type)
383 #define DECLARE_PEM_rw(name, type) \
384 DECLARE_PEM_read(name, type) \
385 DECLARE_PEM_write(name, type)
387 #define DECLARE_PEM_rw_const(name, type) \
388 DECLARE_PEM_read(name, type) \
389 DECLARE_PEM_write_const(name, type)
391 #define DECLARE_PEM_rw_cb(name, type) \
392 DECLARE_PEM_read(name, type) \
393 DECLARE_PEM_write_cb(name, type)
397 #define PEM_write_SSL_SESSION(fp,x) \
398 PEM_ASN1_write((int (*)())i2d_SSL_SESSION, \
399 PEM_STRING_SSL_SESSION,fp, (char *)x, NULL,NULL,0,NULL,NULL)
400 #define PEM_write_X509(fp,x) \
401 PEM_ASN1_write((int (*)())i2d_X509,PEM_STRING_X509,fp, \
402 (char *)x, NULL,NULL,0,NULL,NULL)
403 #define PEM_write_X509_REQ(fp,x) PEM_ASN1_write( \
404 (int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,fp,(char *)x, \
405 NULL,NULL,0,NULL,NULL)
406 #define PEM_write_X509_CRL(fp,x) \
407 PEM_ASN1_write((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL, \
408 fp,(char *)x, NULL,NULL,0,NULL,NULL)
409 #define PEM_write_RSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
410 PEM_ASN1_write((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,fp,\
411 (char *)x,enc,kstr,klen,cb,u)
412 #define PEM_write_RSAPublicKey(fp,x) \
413 PEM_ASN1_write((int (*)())i2d_RSAPublicKey,\
414 PEM_STRING_RSA_PUBLIC,fp,(char *)x,NULL,NULL,0,NULL,NULL)
415 #define PEM_write_DSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
416 PEM_ASN1_write((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,fp,\
417 (char *)x,enc,kstr,klen,cb,u)
418 #define PEM_write_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
419 PEM_ASN1_write((int (*)())i2d_PrivateKey,\
420 (((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
421 bp,(char *)x,enc,kstr,klen,cb,u)
422 #define PEM_write_PKCS7(fp,x) \
423 PEM_ASN1_write((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,fp, \
424 (char *)x, NULL,NULL,0,NULL,NULL)
425 #define PEM_write_DHparams(fp,x) \
426 PEM_ASN1_write((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,fp,\
427 (char *)x,NULL,NULL,0,NULL,NULL)
429 #define PEM_write_NETSCAPE_CERT_SEQUENCE(fp,x) \
430 PEM_ASN1_write((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
431 PEM_STRING_X509,fp, \
432 (char *)x, NULL,NULL,0,NULL,NULL)
434 #define PEM_read_SSL_SESSION(fp,x,cb,u) (SSL_SESSION *)PEM_ASN1_read( \
435 (char *(*)())d2i_SSL_SESSION,PEM_STRING_SSL_SESSION,fp,(char **)x,cb,u)
436 #define PEM_read_X509(fp,x,cb,u) (X509 *)PEM_ASN1_read( \
437 (char *(*)())d2i_X509,PEM_STRING_X509,fp,(char **)x,cb,u)
438 #define PEM_read_X509_REQ(fp,x,cb,u) (X509_REQ *)PEM_ASN1_read( \
439 (char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,fp,(char **)x,cb,u)
440 #define PEM_read_X509_CRL(fp,x,cb,u) (X509_CRL *)PEM_ASN1_read( \
441 (char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,fp,(char **)x,cb,u)
442 #define PEM_read_RSAPrivateKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
443 (char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,fp,(char **)x,cb,u)
444 #define PEM_read_RSAPublicKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
445 (char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,fp,(char **)x,cb,u)
446 #define PEM_read_DSAPrivateKey(fp,x,cb,u) (DSA *)PEM_ASN1_read( \
447 (char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,fp,(char **)x,cb,u)
448 #define PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read( \
449 (char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,fp,(char **)x,cb,u)
450 #define PEM_read_PKCS7(fp,x,cb,u) (PKCS7 *)PEM_ASN1_read( \
451 (char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,fp,(char **)x,cb,u)
452 #define PEM_read_DHparams(fp,x,cb,u) (DH *)PEM_ASN1_read( \
453 (char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,fp,(char **)x,cb,u)
455 #define PEM_read_NETSCAPE_CERT_SEQUENCE(fp,x,cb,u) \
456 (NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read( \
457 (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,fp,\
460 #define PEM_write_bio_X509(bp,x) \
461 PEM_ASN1_write_bio((int (*)())i2d_X509,PEM_STRING_X509,bp, \
462 (char *)x, NULL,NULL,0,NULL,NULL)
463 #define PEM_write_bio_X509_REQ(bp,x) PEM_ASN1_write_bio( \
464 (int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,bp,(char *)x, \
465 NULL,NULL,0,NULL,NULL)
466 #define PEM_write_bio_X509_CRL(bp,x) \
467 PEM_ASN1_write_bio((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL,\
468 bp,(char *)x, NULL,NULL,0,NULL,NULL)
469 #define PEM_write_bio_RSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
470 PEM_ASN1_write_bio((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,\
471 bp,(char *)x,enc,kstr,klen,cb,u)
472 #define PEM_write_bio_RSAPublicKey(bp,x) \
473 PEM_ASN1_write_bio((int (*)())i2d_RSAPublicKey, \
474 PEM_STRING_RSA_PUBLIC,\
475 bp,(char *)x,NULL,NULL,0,NULL,NULL)
476 #define PEM_write_bio_DSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
477 PEM_ASN1_write_bio((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,\
478 bp,(char *)x,enc,kstr,klen,cb,u)
479 #define PEM_write_bio_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
480 PEM_ASN1_write_bio((int (*)())i2d_PrivateKey,\
481 (((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
482 bp,(char *)x,enc,kstr,klen,cb,u)
483 #define PEM_write_bio_PKCS7(bp,x) \
484 PEM_ASN1_write_bio((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,bp, \
485 (char *)x, NULL,NULL,0,NULL,NULL)
486 #define PEM_write_bio_DHparams(bp,x) \
487 PEM_ASN1_write_bio((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,\
488 bp,(char *)x,NULL,NULL,0,NULL,NULL)
489 #define PEM_write_bio_DSAparams(bp,x) \
490 PEM_ASN1_write_bio((int (*)())i2d_DSAparams, \
491 PEM_STRING_DSAPARAMS,bp,(char *)x,NULL,NULL,0,NULL,NULL)
493 #define PEM_write_bio_NETSCAPE_CERT_SEQUENCE(bp,x) \
494 PEM_ASN1_write_bio((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
495 PEM_STRING_X509,bp, \
496 (char *)x, NULL,NULL,0,NULL,NULL)
498 #define PEM_read_bio_X509(bp,x,cb,u) (X509 *)PEM_ASN1_read_bio( \
499 (char *(*)())d2i_X509,PEM_STRING_X509,bp,(char **)x,cb,u)
500 #define PEM_read_bio_X509_REQ(bp,x,cb,u) (X509_REQ *)PEM_ASN1_read_bio( \
501 (char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,bp,(char **)x,cb,u)
502 #define PEM_read_bio_X509_CRL(bp,x,cb,u) (X509_CRL *)PEM_ASN1_read_bio( \
503 (char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,bp,(char **)x,cb,u)
504 #define PEM_read_bio_RSAPrivateKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
505 (char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,bp,(char **)x,cb,u)
506 #define PEM_read_bio_RSAPublicKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
507 (char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,bp,(char **)x,cb,u)
508 #define PEM_read_bio_DSAPrivateKey(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
509 (char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,bp,(char **)x,cb,u)
510 #define PEM_read_bio_PrivateKey(bp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read_bio( \
511 (char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,bp,(char **)x,cb,u)
513 #define PEM_read_bio_PKCS7(bp,x,cb,u) (PKCS7 *)PEM_ASN1_read_bio( \
514 (char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,bp,(char **)x,cb,u)
515 #define PEM_read_bio_DHparams(bp,x,cb,u) (DH *)PEM_ASN1_read_bio( \
516 (char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,bp,(char **)x,cb,u)
517 #define PEM_read_bio_DSAparams(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
518 (char *(*)())d2i_DSAparams,PEM_STRING_DSAPARAMS,bp,(char **)x,cb,u)
520 #define PEM_read_bio_NETSCAPE_CERT_SEQUENCE(bp,x,cb,u) \
521 (NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read_bio( \
522 (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,bp,\
528 /* "userdata": new with OpenSSL 0.9.4 */
529 typedef int pem_password_cb(char *buf
, int size
, int rwflag
, void *userdata
);
531 /* OpenSSL 0.9.3, 0.9.3a */
532 typedef int pem_password_cb(char *buf
, int size
, int rwflag
);
535 int PEM_get_EVP_CIPHER_INFO(char *header
, EVP_CIPHER_INFO
*cipher
);
536 int PEM_do_header (EVP_CIPHER_INFO
*cipher
, unsigned char *data
,long *len
,
537 pem_password_cb
*callback
,void *u
);
539 #ifndef OPENSSL_NO_BIO
540 int PEM_read_bio(BIO
*bp
, char **name
, char **header
,
541 unsigned char **data
,long *len
);
542 int PEM_write_bio(BIO
*bp
,const char *name
,char *hdr
,unsigned char *data
,
544 int PEM_bytes_read_bio(unsigned char **pdata
, long *plen
, char **pnm
, const char *name
, BIO
*bp
,
545 pem_password_cb
*cb
, void *u
);
546 void * PEM_ASN1_read_bio(d2i_of_void
*d2i
, const char *name
, BIO
*bp
,
547 void **x
, pem_password_cb
*cb
, void *u
);
548 #define PEM_ASN1_read_bio_of(type,d2i,name,bp,x,cb,u) \
549 ((type *(*)(D2I_OF(type),const char *,BIO *,type **,pem_password_cb *,void *))openssl_fcast(PEM_ASN1_read_bio))(d2i,name,bp,x,cb,u)
550 int PEM_ASN1_write_bio(i2d_of_void
*i2d
,const char *name
,BIO
*bp
,char *x
,
551 const EVP_CIPHER
*enc
,unsigned char *kstr
,int klen
,
552 pem_password_cb
*cb
, void *u
);
553 #define PEM_ASN1_write_bio_of(type,i2d,name,bp,x,enc,kstr,klen,cb,u) \
554 ((int (*)(I2D_OF(type),const char *,BIO *,type *, const EVP_CIPHER *,unsigned char *,int, pem_password_cb *,void *))openssl_fcast(PEM_ASN1_write_bio))(i2d,name,bp,x,enc,kstr,klen,cb,u)
556 STACK_OF(X509_INFO
) * PEM_X509_INFO_read_bio(BIO
*bp
, STACK_OF(X509_INFO
) *sk
, pem_password_cb
*cb
, void *u
);
557 int PEM_X509_INFO_write_bio(BIO
*bp
,X509_INFO
*xi
, EVP_CIPHER
*enc
,
558 unsigned char *kstr
, int klen
, pem_password_cb
*cd
, void *u
);
561 #ifndef OPENSSL_SYS_WIN16
562 int PEM_read(FILE *fp
, char **name
, char **header
,
563 unsigned char **data
,long *len
);
564 int PEM_write(FILE *fp
,char *name
,char *hdr
,unsigned char *data
,long len
);
565 void * PEM_ASN1_read(d2i_of_void
*d2i
, const char *name
, FILE *fp
, void **x
,
566 pem_password_cb
*cb
, void *u
);
567 int PEM_ASN1_write(i2d_of_void
*i2d
,const char *name
,FILE *fp
,
568 char *x
,const EVP_CIPHER
*enc
,unsigned char *kstr
,
569 int klen
,pem_password_cb
*callback
, void *u
);
570 STACK_OF(X509_INFO
) * PEM_X509_INFO_read(FILE *fp
, STACK_OF(X509_INFO
) *sk
,
571 pem_password_cb
*cb
, void *u
);
574 int PEM_SealInit(PEM_ENCODE_SEAL_CTX
*ctx
, EVP_CIPHER
*type
,
575 EVP_MD
*md_type
, unsigned char **ek
, int *ekl
,
576 unsigned char *iv
, EVP_PKEY
**pubk
, int npubk
);
577 void PEM_SealUpdate(PEM_ENCODE_SEAL_CTX
*ctx
, unsigned char *out
, int *outl
,
578 unsigned char *in
, int inl
);
579 int PEM_SealFinal(PEM_ENCODE_SEAL_CTX
*ctx
, unsigned char *sig
,int *sigl
,
580 unsigned char *out
, int *outl
, EVP_PKEY
*priv
);
582 void PEM_SignInit(EVP_MD_CTX
*ctx
, EVP_MD
*type
);
583 void PEM_SignUpdate(EVP_MD_CTX
*ctx
,unsigned char *d
,unsigned int cnt
);
584 int PEM_SignFinal(EVP_MD_CTX
*ctx
, unsigned char *sigret
,
585 unsigned int *siglen
, EVP_PKEY
*pkey
);
587 int PEM_def_callback(char *buf
, int num
, int w
, void *key
);
588 void PEM_proc_type(char *buf
, int type
);
589 void PEM_dek_info(char *buf
, const char *type
, int len
, char *str
);
591 #ifndef SSLEAY_MACROS
593 #include <openssl/symhacks.h>
595 DECLARE_PEM_rw(X509
, X509
)
597 DECLARE_PEM_rw(X509_AUX
, X509
)
599 DECLARE_PEM_rw(X509_CERT_PAIR
, X509_CERT_PAIR
)
601 DECLARE_PEM_rw(X509_REQ
, X509_REQ
)
602 DECLARE_PEM_write(X509_REQ_NEW
, X509_REQ
)
604 DECLARE_PEM_rw(X509_CRL
, X509_CRL
)
606 DECLARE_PEM_rw(PKCS7
, PKCS7
)
608 DECLARE_PEM_rw(NETSCAPE_CERT_SEQUENCE
, NETSCAPE_CERT_SEQUENCE
)
610 DECLARE_PEM_rw(PKCS8
, X509_SIG
)
612 DECLARE_PEM_rw(PKCS8_PRIV_KEY_INFO
, PKCS8_PRIV_KEY_INFO
)
614 #ifndef OPENSSL_NO_RSA
616 DECLARE_PEM_rw_cb(RSAPrivateKey
, RSA
)
618 DECLARE_PEM_rw_const(RSAPublicKey
, RSA
)
619 DECLARE_PEM_rw(RSA_PUBKEY
, RSA
)
623 #ifndef OPENSSL_NO_DSA
625 DECLARE_PEM_rw_cb(DSAPrivateKey
, DSA
)
627 DECLARE_PEM_rw(DSA_PUBKEY
, DSA
)
629 DECLARE_PEM_rw_const(DSAparams
, DSA
)
633 #ifndef OPENSSL_NO_EC
634 DECLARE_PEM_rw_const(ECPKParameters
, EC_GROUP
)
635 DECLARE_PEM_rw_cb(ECPrivateKey
, EC_KEY
)
636 DECLARE_PEM_rw(EC_PUBKEY
, EC_KEY
)
639 #ifndef OPENSSL_NO_DH
641 DECLARE_PEM_rw_const(DHparams
, DH
)
645 DECLARE_PEM_rw_cb(PrivateKey
, EVP_PKEY
)
647 DECLARE_PEM_rw(PUBKEY
, EVP_PKEY
)
649 int PEM_write_bio_PKCS8PrivateKey_nid(BIO
*bp
, EVP_PKEY
*x
, int nid
,
650 char *kstr
, int klen
,
651 pem_password_cb
*cb
, void *u
);
652 int PEM_write_bio_PKCS8PrivateKey(BIO
*, EVP_PKEY
*, const EVP_CIPHER
*,
653 char *, int, pem_password_cb
*, void *);
654 int i2d_PKCS8PrivateKey_bio(BIO
*bp
, EVP_PKEY
*x
, const EVP_CIPHER
*enc
,
655 char *kstr
, int klen
,
656 pem_password_cb
*cb
, void *u
);
657 int i2d_PKCS8PrivateKey_nid_bio(BIO
*bp
, EVP_PKEY
*x
, int nid
,
658 char *kstr
, int klen
,
659 pem_password_cb
*cb
, void *u
);
660 EVP_PKEY
*d2i_PKCS8PrivateKey_bio(BIO
*bp
, EVP_PKEY
**x
, pem_password_cb
*cb
, void *u
);
662 int i2d_PKCS8PrivateKey_fp(FILE *fp
, EVP_PKEY
*x
, const EVP_CIPHER
*enc
,
663 char *kstr
, int klen
,
664 pem_password_cb
*cb
, void *u
);
665 int i2d_PKCS8PrivateKey_nid_fp(FILE *fp
, EVP_PKEY
*x
, int nid
,
666 char *kstr
, int klen
,
667 pem_password_cb
*cb
, void *u
);
668 int PEM_write_PKCS8PrivateKey_nid(FILE *fp
, EVP_PKEY
*x
, int nid
,
669 char *kstr
, int klen
,
670 pem_password_cb
*cb
, void *u
);
672 EVP_PKEY
*d2i_PKCS8PrivateKey_fp(FILE *fp
, EVP_PKEY
**x
, pem_password_cb
*cb
, void *u
);
674 int PEM_write_PKCS8PrivateKey(FILE *fp
,EVP_PKEY
*x
,const EVP_CIPHER
*enc
,
675 char *kstr
,int klen
, pem_password_cb
*cd
, void *u
);
677 #endif /* SSLEAY_MACROS */
680 /* BEGIN ERROR CODES */
681 /* The following lines are auto generated by the script mkerr.pl. Any changes
682 * made after this point may be overwritten when the script is next run.
684 void ERR_load_PEM_strings(void);
686 /* Error codes for the PEM functions. */
688 /* Function codes. */
689 #define PEM_F_D2I_PKCS8PRIVATEKEY_BIO 120
690 #define PEM_F_D2I_PKCS8PRIVATEKEY_FP 121
691 #define PEM_F_DO_PK8PKEY 126
692 #define PEM_F_DO_PK8PKEY_FP 125
693 #define PEM_F_LOAD_IV 101
694 #define PEM_F_PEM_ASN1_READ 102
695 #define PEM_F_PEM_ASN1_READ_BIO 103
696 #define PEM_F_PEM_ASN1_WRITE 104
697 #define PEM_F_PEM_ASN1_WRITE_BIO 105
698 #define PEM_F_PEM_DEF_CALLBACK 100
699 #define PEM_F_PEM_DO_HEADER 106
700 #define PEM_F_PEM_F_PEM_WRITE_PKCS8PRIVATEKEY 118
701 #define PEM_F_PEM_GET_EVP_CIPHER_INFO 107
702 #define PEM_F_PEM_PK8PKEY 119
703 #define PEM_F_PEM_READ 108
704 #define PEM_F_PEM_READ_BIO 109
705 #define PEM_F_PEM_READ_BIO_PRIVATEKEY 123
706 #define PEM_F_PEM_READ_PRIVATEKEY 124
707 #define PEM_F_PEM_SEALFINAL 110
708 #define PEM_F_PEM_SEALINIT 111
709 #define PEM_F_PEM_SIGNFINAL 112
710 #define PEM_F_PEM_WRITE 113
711 #define PEM_F_PEM_WRITE_BIO 114
712 #define PEM_F_PEM_X509_INFO_READ 115
713 #define PEM_F_PEM_X509_INFO_READ_BIO 116
714 #define PEM_F_PEM_X509_INFO_WRITE_BIO 117
717 #define PEM_R_BAD_BASE64_DECODE 100
718 #define PEM_R_BAD_DECRYPT 101
719 #define PEM_R_BAD_END_LINE 102
720 #define PEM_R_BAD_IV_CHARS 103
721 #define PEM_R_BAD_PASSWORD_READ 104
722 #define PEM_R_ERROR_CONVERTING_PRIVATE_KEY 115
723 #define PEM_R_NOT_DEK_INFO 105
724 #define PEM_R_NOT_ENCRYPTED 106
725 #define PEM_R_NOT_PROC_TYPE 107
726 #define PEM_R_NO_START_LINE 108
727 #define PEM_R_PROBLEMS_GETTING_PASSWORD 109
728 #define PEM_R_PUBLIC_KEY_NO_RSA 110
729 #define PEM_R_READ_KEY 111
730 #define PEM_R_SHORT_HEADER 112
731 #define PEM_R_UNSUPPORTED_CIPHER 113
732 #define PEM_R_UNSUPPORTED_ENCRYPTION 114