2 /* Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com)
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
59 © Portions copyright (c) 2006 Nokia Corporation. All rights reserved.
67 #include <openssl/e_os2.h>
68 #ifndef OPENSSL_NO_BIO
69 #include <openssl/bio.h>
71 #ifndef OPENSSL_NO_STACK
72 #include <openssl/stack.h>
74 #include <openssl/evp.h>
75 #include <openssl/x509.h>
76 #include <openssl/pem2.h>
82 #define PEM_BUFSIZE 1024
84 #define PEM_OBJ_UNDEF 0
85 #define PEM_OBJ_X509 1
86 #define PEM_OBJ_X509_REQ 2
88 #define PEM_OBJ_SSL_SESSION 4
89 #define PEM_OBJ_PRIV_KEY 10
90 #define PEM_OBJ_PRIV_RSA 11
91 #define PEM_OBJ_PRIV_DSA 12
92 #define PEM_OBJ_PRIV_DH 13
93 #define PEM_OBJ_PUB_RSA 14
94 #define PEM_OBJ_PUB_DSA 15
95 #define PEM_OBJ_PUB_DH 16
96 #define PEM_OBJ_DHPARAMS 17
97 #define PEM_OBJ_DSAPARAMS 18
98 #define PEM_OBJ_PRIV_RSA_PUBLIC 19
99 #define PEM_OBJ_PRIV_ECDSA 20
100 #define PEM_OBJ_PUB_ECDSA 21
101 #define PEM_OBJ_ECPARAMETERS 22
104 #define PEM_DEK_DES_CBC 40
105 #define PEM_DEK_IDEA_CBC 45
106 #define PEM_DEK_DES_EDE 50
107 #define PEM_DEK_DES_ECB 60
108 #define PEM_DEK_RSA 70
109 #define PEM_DEK_RSA_MD2 80
110 #define PEM_DEK_RSA_MD5 90
112 #define PEM_MD_MD2 NID_md2
113 #define PEM_MD_MD5 NID_md5
114 #define PEM_MD_SHA NID_sha
115 #define PEM_MD_MD2_RSA NID_md2WithRSAEncryption
116 #define PEM_MD_MD5_RSA NID_md5WithRSAEncryption
117 #define PEM_MD_SHA_RSA NID_sha1WithRSAEncryption
119 #define PEM_STRING_X509_OLD "X509 CERTIFICATE"
120 #define PEM_STRING_X509 "CERTIFICATE"
121 #define PEM_STRING_X509_PAIR "CERTIFICATE PAIR"
122 #define PEM_STRING_X509_TRUSTED "TRUSTED CERTIFICATE"
123 #define PEM_STRING_X509_REQ_OLD "NEW CERTIFICATE REQUEST"
124 #define PEM_STRING_X509_REQ "CERTIFICATE REQUEST"
125 #define PEM_STRING_X509_CRL "X509 CRL"
126 #define PEM_STRING_EVP_PKEY "ANY PRIVATE KEY"
127 #define PEM_STRING_PUBLIC "PUBLIC KEY"
128 #define PEM_STRING_RSA "RSA PRIVATE KEY"
129 #define PEM_STRING_RSA_PUBLIC "RSA PUBLIC KEY"
130 #define PEM_STRING_DSA "DSA PRIVATE KEY"
131 #define PEM_STRING_DSA_PUBLIC "DSA PUBLIC KEY"
132 #define PEM_STRING_PKCS7 "PKCS7"
133 #define PEM_STRING_PKCS8 "ENCRYPTED PRIVATE KEY"
134 #define PEM_STRING_PKCS8INF "PRIVATE KEY"
135 #define PEM_STRING_DHPARAMS "DH PARAMETERS"
136 #define PEM_STRING_SSL_SESSION "SSL SESSION PARAMETERS"
137 #define PEM_STRING_DSAPARAMS "DSA PARAMETERS"
138 #define PEM_STRING_ECDSA_PUBLIC "ECDSA PUBLIC KEY"
139 #define PEM_STRING_ECPARAMETERS "EC PARAMETERS"
140 #define PEM_STRING_ECPRIVATEKEY "EC PRIVATE KEY"
142 /* Note that this structure is initialised by PEM_SealInit and cleaned up
143 by PEM_SealFinal (at least for now) */
144 typedef struct PEM_Encode_Seal_st
146 EVP_ENCODE_CTX encode;
148 EVP_CIPHER_CTX cipher;
149 } PEM_ENCODE_SEAL_CTX;
151 /* enc_type is one off */
152 #define PEM_TYPE_ENCRYPTED 10
153 #define PEM_TYPE_MIC_ONLY 20
154 #define PEM_TYPE_MIC_CLEAR 30
155 #define PEM_TYPE_CLEAR 40
157 typedef struct pem_recip_st
164 /* char iv[8]; unused and wrong size */
167 typedef struct pem_ctx_st
169 int type; /* what type of object */
180 /* unused, and wrong size
181 unsigned char iv[8]; */
184 PEM_USER *originator;
187 PEM_USER **recipient;
189 #ifndef OPENSSL_NO_STACK
190 STACK *x509_chain; /* certificate chain */
192 char *x509_chain; /* certificate chain */
194 EVP_MD *md; /* signature type */
196 int md_enc; /* is the md encrypted or not? */
197 int md_len; /* length of md_data */
198 char *md_data; /* message digest, could be pkey encrypted */
200 EVP_CIPHER *dec; /* date encryption cipher */
201 int key_len; /* key length */
202 unsigned char *key; /* key */
203 /* unused, and wrong size
204 unsigned char iv[8]; */
207 int data_enc; /* is the data encrypted */
212 /* These macros make the PEM_read/PEM_write functions easier to maintain and
213 * write. Now they are all implemented with either:
214 * IMPLEMENT_PEM_rw(...) or IMPLEMENT_PEM_rw_cb(...)
217 #ifdef OPENSSL_NO_FP_API
219 #define IMPLEMENT_PEM_read_fp(name, type, str, asn1) /**/
220 #define IMPLEMENT_PEM_write_fp(name, type, str, asn1) /**/
221 #define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) /**/
225 #define IMPLEMENT_PEM_read_fp(name, type, str, asn1) \
226 EXPORT_C type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u)\
228 return (type*)PEM_ASN1_read(CHECKED_D2I_OF(type, d2i_##asn1), \
230 CHECKED_PPTR_OF(type, x), \
234 #define IMPLEMENT_PEM_write_fp(name, type, str, asn1) \
235 EXPORT_C int PEM_write_##name(FILE *fp, type *x) \
237 return PEM_ASN1_write(CHECKED_I2D_OF(type, i2d_##asn1), \
239 CHECKED_PTR_OF(type, x), \
240 NULL, NULL, 0, NULL, NULL); \
243 #define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) \
244 EXPORT_C int PEM_write_##name(FILE *fp, const type *x) \
246 return PEM_ASN1_write(CHECKED_I2D_OF(const type, i2d_##asn1), \
248 CHECKED_PTR_OF(const type, x), \
249 NULL, NULL, 0, NULL, NULL); \
252 #define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) \
253 EXPORT_C int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
254 unsigned char *kstr, int klen, pem_password_cb *cb, \
257 return PEM_ASN1_write(CHECKED_I2D_OF(type, i2d_##asn1), \
259 CHECKED_PTR_OF(type, x), \
260 enc, kstr, klen, cb, u); \
263 #define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) \
264 EXPORT_C int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
265 unsigned char *kstr, int klen, pem_password_cb *cb, \
268 return PEM_ASN1_write(CHECKED_I2D_OF(const type, i2d_##asn1), \
270 CHECKED_PTR_OF(const type, x), \
271 enc, kstr, klen, cb, u); \
276 #define IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
277 EXPORT_C type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u)\
279 return (type*)PEM_ASN1_read_bio(CHECKED_D2I_OF(type, d2i_##asn1), \
281 CHECKED_PPTR_OF(type, x), \
285 #define IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
286 EXPORT_C int PEM_write_bio_##name(BIO *bp, type *x) \
288 return PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d_##asn1), \
290 CHECKED_PTR_OF(type, x), \
291 NULL, NULL, 0, NULL, NULL); \
294 #define IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
295 EXPORT_C int PEM_write_bio_##name(BIO *bp, const type *x) \
297 return PEM_ASN1_write_bio(CHECKED_I2D_OF(const type, i2d_##asn1), \
299 CHECKED_PTR_OF(const type, x), \
300 NULL, NULL, 0, NULL, NULL); \
303 #define IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
304 EXPORT_C int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
305 unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
307 return PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d_##asn1), \
309 CHECKED_PTR_OF(type, x), \
310 enc, kstr, klen, cb, u); \
313 #define IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
314 EXPORT_C int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
315 unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
317 return PEM_ASN1_write_bio(CHECKED_I2D_OF(const type, i2d_##asn1), \
319 CHECKED_PTR_OF(const type, x), \
320 enc, kstr, klen, cb, u); \
323 #define IMPLEMENT_PEM_write(name, type, str, asn1) \
324 IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
325 IMPLEMENT_PEM_write_fp(name, type, str, asn1)
327 #define IMPLEMENT_PEM_write_const(name, type, str, asn1) \
328 IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
329 IMPLEMENT_PEM_write_fp_const(name, type, str, asn1)
331 #define IMPLEMENT_PEM_write_cb(name, type, str, asn1) \
332 IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
333 IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1)
335 #define IMPLEMENT_PEM_write_cb_const(name, type, str, asn1) \
336 IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
337 IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1)
339 #define IMPLEMENT_PEM_read(name, type, str, asn1) \
340 IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
341 IMPLEMENT_PEM_read_fp(name, type, str, asn1)
343 #define IMPLEMENT_PEM_rw(name, type, str, asn1) \
344 IMPLEMENT_PEM_read(name, type, str, asn1) \
345 IMPLEMENT_PEM_write(name, type, str, asn1)
347 #define IMPLEMENT_PEM_rw_const(name, type, str, asn1) \
348 IMPLEMENT_PEM_read(name, type, str, asn1) \
349 IMPLEMENT_PEM_write_const(name, type, str, asn1)
351 #define IMPLEMENT_PEM_rw_cb(name, type, str, asn1) \
352 IMPLEMENT_PEM_read(name, type, str, asn1) \
353 IMPLEMENT_PEM_write_cb(name, type, str, asn1)
355 /* These are the same except they are for the declarations */
357 #if defined(OPENSSL_SYS_WIN16) || defined(OPENSSL_NO_FP_API)
359 #define DECLARE_PEM_read_fp(name, type) /**/
360 #define DECLARE_PEM_write_fp(name, type) /**/
361 #define DECLARE_PEM_write_cb_fp(name, type) /**/
365 #define DECLARE_PEM_read_fp(name, type) \
366 IMPORT_C type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u);
368 #define DECLARE_PEM_write_fp(name, type) \
369 IMPORT_C int PEM_write_##name(FILE *fp, type *x);
371 #define DECLARE_PEM_write_fp_const(name, type) \
372 IMPORT_C int PEM_write_##name(FILE *fp, const type *x);
374 #define DECLARE_PEM_write_cb_fp(name, type) \
375 IMPORT_C int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
376 unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
380 #ifndef OPENSSL_NO_BIO
381 #define DECLARE_PEM_read_bio(name, type) \
382 IMPORT_C type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u);
384 #define DECLARE_PEM_write_bio(name, type) \
385 IMPORT_C int PEM_write_bio_##name(BIO *bp, type *x);
387 #define DECLARE_PEM_write_bio_const(name, type) \
388 IMPORT_C int PEM_write_bio_##name(BIO *bp, const type *x);
390 #define DECLARE_PEM_write_cb_bio(name, type) \
391 IMPORT_C int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
392 unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
396 #define DECLARE_PEM_read_bio(name, type) /**/
397 #define DECLARE_PEM_write_bio(name, type) /**/
398 #define DECLARE_PEM_write_cb_bio(name, type) /**/
402 #define DECLARE_PEM_write(name, type) \
403 DECLARE_PEM_write_bio(name, type) \
404 DECLARE_PEM_write_fp(name, type)
406 #define DECLARE_PEM_write_const(name, type) \
407 DECLARE_PEM_write_bio_const(name, type) \
408 DECLARE_PEM_write_fp_const(name, type)
410 #define DECLARE_PEM_write_cb(name, type) \
411 DECLARE_PEM_write_cb_bio(name, type) \
412 DECLARE_PEM_write_cb_fp(name, type)
414 #define DECLARE_PEM_read(name, type) \
415 DECLARE_PEM_read_bio(name, type) \
416 DECLARE_PEM_read_fp(name, type)
418 #define DECLARE_PEM_rw(name, type) \
419 DECLARE_PEM_read(name, type) \
420 DECLARE_PEM_write(name, type)
422 #define DECLARE_PEM_rw_const(name, type) \
423 DECLARE_PEM_read(name, type) \
424 DECLARE_PEM_write_const(name, type)
426 #define DECLARE_PEM_rw_cb(name, type) \
427 DECLARE_PEM_read(name, type) \
428 DECLARE_PEM_write_cb(name, type)
432 #define PEM_write_SSL_SESSION(fp,x) \
433 PEM_ASN1_write((int (*)())i2d_SSL_SESSION, \
434 PEM_STRING_SSL_SESSION,fp, (char *)x, NULL,NULL,0,NULL,NULL)
435 #define PEM_write_X509(fp,x) \
436 PEM_ASN1_write((int (*)())i2d_X509,PEM_STRING_X509,fp, \
437 (char *)x, NULL,NULL,0,NULL,NULL)
438 #define PEM_write_X509_REQ(fp,x) PEM_ASN1_write( \
439 (int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,fp,(char *)x, \
440 NULL,NULL,0,NULL,NULL)
441 #define PEM_write_X509_CRL(fp,x) \
442 PEM_ASN1_write((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL, \
443 fp,(char *)x, NULL,NULL,0,NULL,NULL)
444 #define PEM_write_RSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
445 PEM_ASN1_write((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,fp,\
446 (char *)x,enc,kstr,klen,cb,u)
447 #define PEM_write_RSAPublicKey(fp,x) \
448 PEM_ASN1_write((int (*)())i2d_RSAPublicKey,\
449 PEM_STRING_RSA_PUBLIC,fp,(char *)x,NULL,NULL,0,NULL,NULL)
450 #define PEM_write_DSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
451 PEM_ASN1_write((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,fp,\
452 (char *)x,enc,kstr,klen,cb,u)
453 #define PEM_write_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
454 PEM_ASN1_write((int (*)())i2d_PrivateKey,\
455 (((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
456 bp,(char *)x,enc,kstr,klen,cb,u)
457 #define PEM_write_PKCS7(fp,x) \
458 PEM_ASN1_write((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,fp, \
459 (char *)x, NULL,NULL,0,NULL,NULL)
460 #define PEM_write_DHparams(fp,x) \
461 PEM_ASN1_write((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,fp,\
462 (char *)x,NULL,NULL,0,NULL,NULL)
464 #define PEM_write_NETSCAPE_CERT_SEQUENCE(fp,x) \
465 PEM_ASN1_write((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
466 PEM_STRING_X509,fp, \
467 (char *)x, NULL,NULL,0,NULL,NULL)
469 #define PEM_read_SSL_SESSION(fp,x,cb,u) (SSL_SESSION *)PEM_ASN1_read( \
470 (char *(*)())d2i_SSL_SESSION,PEM_STRING_SSL_SESSION,fp,(char **)x,cb,u)
471 #define PEM_read_X509(fp,x,cb,u) (X509 *)PEM_ASN1_read( \
472 (char *(*)())d2i_X509,PEM_STRING_X509,fp,(char **)x,cb,u)
473 #define PEM_read_X509_REQ(fp,x,cb,u) (X509_REQ *)PEM_ASN1_read( \
474 (char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,fp,(char **)x,cb,u)
475 #define PEM_read_X509_CRL(fp,x,cb,u) (X509_CRL *)PEM_ASN1_read( \
476 (char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,fp,(char **)x,cb,u)
477 #define PEM_read_RSAPrivateKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
478 (char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,fp,(char **)x,cb,u)
479 #define PEM_read_RSAPublicKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
480 (char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,fp,(char **)x,cb,u)
481 #define PEM_read_DSAPrivateKey(fp,x,cb,u) (DSA *)PEM_ASN1_read( \
482 (char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,fp,(char **)x,cb,u)
483 #define PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read( \
484 (char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,fp,(char **)x,cb,u)
485 #define PEM_read_PKCS7(fp,x,cb,u) (PKCS7 *)PEM_ASN1_read( \
486 (char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,fp,(char **)x,cb,u)
487 #define PEM_read_DHparams(fp,x,cb,u) (DH *)PEM_ASN1_read( \
488 (char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,fp,(char **)x,cb,u)
490 #define PEM_read_NETSCAPE_CERT_SEQUENCE(fp,x,cb,u) \
491 (NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read( \
492 (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,fp,\
495 #define PEM_write_bio_X509(bp,x) \
496 PEM_ASN1_write_bio((int (*)())i2d_X509,PEM_STRING_X509,bp, \
497 (char *)x, NULL,NULL,0,NULL,NULL)
498 #define PEM_write_bio_X509_REQ(bp,x) PEM_ASN1_write_bio( \
499 (int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,bp,(char *)x, \
500 NULL,NULL,0,NULL,NULL)
501 #define PEM_write_bio_X509_CRL(bp,x) \
502 PEM_ASN1_write_bio((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL,\
503 bp,(char *)x, NULL,NULL,0,NULL,NULL)
504 #define PEM_write_bio_RSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
505 PEM_ASN1_write_bio((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,\
506 bp,(char *)x,enc,kstr,klen,cb,u)
507 #define PEM_write_bio_RSAPublicKey(bp,x) \
508 PEM_ASN1_write_bio((int (*)())i2d_RSAPublicKey, \
509 PEM_STRING_RSA_PUBLIC,\
510 bp,(char *)x,NULL,NULL,0,NULL,NULL)
511 #define PEM_write_bio_DSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
512 PEM_ASN1_write_bio((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,\
513 bp,(char *)x,enc,kstr,klen,cb,u)
514 #define PEM_write_bio_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
515 PEM_ASN1_write_bio((int (*)())i2d_PrivateKey,\
516 (((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
517 bp,(char *)x,enc,kstr,klen,cb,u)
518 #define PEM_write_bio_PKCS7(bp,x) \
519 PEM_ASN1_write_bio((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,bp, \
520 (char *)x, NULL,NULL,0,NULL,NULL)
521 #define PEM_write_bio_DHparams(bp,x) \
522 PEM_ASN1_write_bio((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,\
523 bp,(char *)x,NULL,NULL,0,NULL,NULL)
524 #define PEM_write_bio_DSAparams(bp,x) \
525 PEM_ASN1_write_bio((int (*)())i2d_DSAparams, \
526 PEM_STRING_DSAPARAMS,bp,(char *)x,NULL,NULL,0,NULL,NULL)
528 #define PEM_write_bio_NETSCAPE_CERT_SEQUENCE(bp,x) \
529 PEM_ASN1_write_bio((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
530 PEM_STRING_X509,bp, \
531 (char *)x, NULL,NULL,0,NULL,NULL)
533 #define PEM_read_bio_X509(bp,x,cb,u) (X509 *)PEM_ASN1_read_bio( \
534 (char *(*)())d2i_X509,PEM_STRING_X509,bp,(char **)x,cb,u)
535 #define PEM_read_bio_X509_REQ(bp,x,cb,u) (X509_REQ *)PEM_ASN1_read_bio( \
536 (char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,bp,(char **)x,cb,u)
537 #define PEM_read_bio_X509_CRL(bp,x,cb,u) (X509_CRL *)PEM_ASN1_read_bio( \
538 (char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,bp,(char **)x,cb,u)
539 #define PEM_read_bio_RSAPrivateKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
540 (char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,bp,(char **)x,cb,u)
541 #define PEM_read_bio_RSAPublicKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
542 (char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,bp,(char **)x,cb,u)
543 #define PEM_read_bio_DSAPrivateKey(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
544 (char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,bp,(char **)x,cb,u)
545 #define PEM_read_bio_PrivateKey(bp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read_bio( \
546 (char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,bp,(char **)x,cb,u)
548 #define PEM_read_bio_PKCS7(bp,x,cb,u) (PKCS7 *)PEM_ASN1_read_bio( \
549 (char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,bp,(char **)x,cb,u)
550 #define PEM_read_bio_DHparams(bp,x,cb,u) (DH *)PEM_ASN1_read_bio( \
551 (char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,bp,(char **)x,cb,u)
552 #define PEM_read_bio_DSAparams(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
553 (char *(*)())d2i_DSAparams,PEM_STRING_DSAPARAMS,bp,(char **)x,cb,u)
555 #define PEM_read_bio_NETSCAPE_CERT_SEQUENCE(bp,x,cb,u) \
556 (NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read_bio( \
557 (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,bp,\
563 /* "userdata": new with OpenSSL 0.9.4 */
564 typedef int pem_password_cb(char *buf, int size, int rwflag, void *userdata);
566 /* OpenSSL 0.9.3, 0.9.3a */
567 typedef int pem_password_cb(char *buf, int size, int rwflag);
570 IMPORT_C int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher);
571 IMPORT_C int PEM_do_header (EVP_CIPHER_INFO *cipher, unsigned char *data,long *len,
572 pem_password_cb *callback,void *u);
574 #ifndef OPENSSL_NO_BIO
575 IMPORT_C int PEM_read_bio(BIO *bp, char **name, char **header,
576 unsigned char **data,long *len);
577 IMPORT_C int PEM_write_bio(BIO *bp,const char *name,char *hdr,unsigned char *data,
579 IMPORT_C int PEM_bytes_read_bio(unsigned char **pdata, long *plen, char **pnm, const char *name, BIO *bp,
580 pem_password_cb *cb, void *u);
581 IMPORT_C void * PEM_ASN1_read_bio(d2i_of_void *d2i, const char *name, BIO *bp,
582 void **x, pem_password_cb *cb, void *u);
584 #define PEM_ASN1_read_bio_of(type,d2i,name,bp,x,cb,u) \
585 ((type*)PEM_ASN1_read_bio(CHECKED_D2I_OF(type, d2i), \
587 CHECKED_PPTR_OF(type, x), \
590 IMPORT_C int PEM_ASN1_write_bio(i2d_of_void *i2d,const char *name,BIO *bp,char *x,
591 const EVP_CIPHER *enc,unsigned char *kstr,int klen,
592 pem_password_cb *cb, void *u);
594 #define PEM_ASN1_write_bio_of(type,i2d,name,bp,x,enc,kstr,klen,cb,u) \
595 (PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d), \
597 CHECKED_PTR_OF(type, x), \
598 enc, kstr, klen, cb, u))
600 IMPORT_C STACK_OF(X509_INFO) * PEM_X509_INFO_read_bio(BIO *bp, STACK_OF(X509_INFO) *sk, pem_password_cb *cb, void *u);
601 IMPORT_C int PEM_X509_INFO_write_bio(BIO *bp,X509_INFO *xi, EVP_CIPHER *enc,
602 unsigned char *kstr, int klen, pem_password_cb *cd, void *u);
605 #ifndef OPENSSL_SYS_WIN16
606 IMPORT_C int PEM_read(FILE *fp, char **name, char **header,
607 unsigned char **data,long *len);
608 IMPORT_C int PEM_write(FILE *fp,char *name,char *hdr,unsigned char *data,long len);
609 IMPORT_C void * PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
610 pem_password_cb *cb, void *u);
611 IMPORT_C int PEM_ASN1_write(i2d_of_void *i2d,const char *name,FILE *fp,
612 char *x,const EVP_CIPHER *enc,unsigned char *kstr,
613 int klen,pem_password_cb *callback, void *u);
614 IMPORT_C STACK_OF(X509_INFO) * PEM_X509_INFO_read(FILE *fp, STACK_OF(X509_INFO) *sk,
615 pem_password_cb *cb, void *u);
618 IMPORT_C int PEM_SealInit(PEM_ENCODE_SEAL_CTX *ctx, EVP_CIPHER *type,
619 EVP_MD *md_type, unsigned char **ek, int *ekl,
620 unsigned char *iv, EVP_PKEY **pubk, int npubk);
621 IMPORT_C void PEM_SealUpdate(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *out, int *outl,
622 unsigned char *in, int inl);
623 IMPORT_C int PEM_SealFinal(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *sig,int *sigl,
624 unsigned char *out, int *outl, EVP_PKEY *priv);
626 IMPORT_C void PEM_SignInit(EVP_MD_CTX *ctx, EVP_MD *type);
627 IMPORT_C void PEM_SignUpdate(EVP_MD_CTX *ctx,unsigned char *d,unsigned int cnt);
628 IMPORT_C int PEM_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
629 unsigned int *siglen, EVP_PKEY *pkey);
631 IMPORT_C int PEM_def_callback(char *buf, int num, int w, void *key);
632 IMPORT_C void PEM_proc_type(char *buf, int type);
633 IMPORT_C void PEM_dek_info(char *buf, const char *type, int len, char *str);
635 #ifndef SSLEAY_MACROS
637 #include <openssl/symhacks.h>
639 DECLARE_PEM_rw(X509, X509)
641 DECLARE_PEM_rw(X509_AUX, X509)
643 DECLARE_PEM_rw(X509_CERT_PAIR, X509_CERT_PAIR)
645 DECLARE_PEM_rw(X509_REQ, X509_REQ)
646 DECLARE_PEM_write(X509_REQ_NEW, X509_REQ)
648 DECLARE_PEM_rw(X509_CRL, X509_CRL)
650 DECLARE_PEM_rw(PKCS7, PKCS7)
652 DECLARE_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE)
654 DECLARE_PEM_rw(PKCS8, X509_SIG)
656 DECLARE_PEM_rw(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
658 #ifndef OPENSSL_NO_RSA
660 DECLARE_PEM_rw_cb(RSAPrivateKey, RSA)
662 DECLARE_PEM_rw_const(RSAPublicKey, RSA)
663 DECLARE_PEM_rw(RSA_PUBKEY, RSA)
667 #ifndef OPENSSL_NO_DSA
669 DECLARE_PEM_rw_cb(DSAPrivateKey, DSA)
671 DECLARE_PEM_rw(DSA_PUBKEY, DSA)
673 DECLARE_PEM_rw_const(DSAparams, DSA)
677 #ifndef OPENSSL_NO_EC
678 DECLARE_PEM_rw_const(ECPKParameters, EC_GROUP)
679 DECLARE_PEM_rw_cb(ECPrivateKey, EC_KEY)
680 DECLARE_PEM_rw(EC_PUBKEY, EC_KEY)
683 #ifndef OPENSSL_NO_DH
685 DECLARE_PEM_rw_const(DHparams, DH)
689 DECLARE_PEM_rw_cb(PrivateKey, EVP_PKEY)
691 DECLARE_PEM_rw(PUBKEY, EVP_PKEY)
693 IMPORT_C int PEM_write_bio_PKCS8PrivateKey_nid(BIO *bp, EVP_PKEY *x, int nid,
694 char *kstr, int klen,
695 pem_password_cb *cb, void *u);
696 IMPORT_C int PEM_write_bio_PKCS8PrivateKey(BIO *, EVP_PKEY *, const EVP_CIPHER *,
697 char *, int, pem_password_cb *, void *);
698 IMPORT_C int i2d_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
699 char *kstr, int klen,
700 pem_password_cb *cb, void *u);
701 IMPORT_C int i2d_PKCS8PrivateKey_nid_bio(BIO *bp, EVP_PKEY *x, int nid,
702 char *kstr, int klen,
703 pem_password_cb *cb, void *u);
704 IMPORT_C EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb, void *u);
706 IMPORT_C int i2d_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
707 char *kstr, int klen,
708 pem_password_cb *cb, void *u);
709 IMPORT_C int i2d_PKCS8PrivateKey_nid_fp(FILE *fp, EVP_PKEY *x, int nid,
710 char *kstr, int klen,
711 pem_password_cb *cb, void *u);
712 IMPORT_C int PEM_write_PKCS8PrivateKey_nid(FILE *fp, EVP_PKEY *x, int nid,
713 char *kstr, int klen,
714 pem_password_cb *cb, void *u);
716 IMPORT_C EVP_PKEY *d2i_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY **x, pem_password_cb *cb, void *u);
718 IMPORT_C int PEM_write_PKCS8PrivateKey(FILE *fp,EVP_PKEY *x,const EVP_CIPHER *enc,
719 char *kstr,int klen, pem_password_cb *cd, void *u);
721 #endif /* SSLEAY_MACROS */
724 /* BEGIN ERROR CODES */
725 /* The following lines are auto generated by the script mkerr.pl. Any changes
726 * made after this point may be overwritten when the script is next run.
728 IMPORT_C void ERR_load_PEM_strings(void);
730 /* Error codes for the PEM functions. */
732 /* Function codes. */
733 #define PEM_F_D2I_PKCS8PRIVATEKEY_BIO 120
734 #define PEM_F_D2I_PKCS8PRIVATEKEY_FP 121
735 #define PEM_F_DO_PK8PKEY 126
736 #define PEM_F_DO_PK8PKEY_FP 125
737 #define PEM_F_LOAD_IV 101
738 #define PEM_F_PEM_ASN1_READ 102
739 #define PEM_F_PEM_ASN1_READ_BIO 103
740 #define PEM_F_PEM_ASN1_WRITE 104
741 #define PEM_F_PEM_ASN1_WRITE_BIO 105
742 #define PEM_F_PEM_DEF_CALLBACK 100
743 #define PEM_F_PEM_DO_HEADER 106
744 #define PEM_F_PEM_F_PEM_WRITE_PKCS8PRIVATEKEY 118
745 #define PEM_F_PEM_GET_EVP_CIPHER_INFO 107
746 #define PEM_F_PEM_PK8PKEY 119
747 #define PEM_F_PEM_READ 108
748 #define PEM_F_PEM_READ_BIO 109
749 #define PEM_F_PEM_READ_BIO_PRIVATEKEY 123
750 #define PEM_F_PEM_READ_PRIVATEKEY 124
751 #define PEM_F_PEM_SEALFINAL 110
752 #define PEM_F_PEM_SEALINIT 111
753 #define PEM_F_PEM_SIGNFINAL 112
754 #define PEM_F_PEM_WRITE 113
755 #define PEM_F_PEM_WRITE_BIO 114
756 #define PEM_F_PEM_X509_INFO_READ 115
757 #define PEM_F_PEM_X509_INFO_READ_BIO 116
758 #define PEM_F_PEM_X509_INFO_WRITE_BIO 117
761 #define PEM_R_BAD_BASE64_DECODE 100
762 #define PEM_R_BAD_DECRYPT 101
763 #define PEM_R_BAD_END_LINE 102
764 #define PEM_R_BAD_IV_CHARS 103
765 #define PEM_R_BAD_PASSWORD_READ 104
766 #define PEM_R_ERROR_CONVERTING_PRIVATE_KEY 115
767 #define PEM_R_NOT_DEK_INFO 105
768 #define PEM_R_NOT_ENCRYPTED 106
769 #define PEM_R_NOT_PROC_TYPE 107
770 #define PEM_R_NO_START_LINE 108
771 #define PEM_R_PROBLEMS_GETTING_PASSWORD 109
772 #define PEM_R_PUBLIC_KEY_NO_RSA 110
773 #define PEM_R_READ_KEY 111
774 #define PEM_R_SHORT_HEADER 112
775 #define PEM_R_UNSUPPORTED_CIPHER 113
776 #define PEM_R_UNSUPPORTED_ENCRYPTION 114