diff options
Diffstat (limited to 'src/lib/libcrypto/x509/by_file.c')
| -rw-r--r-- | src/lib/libcrypto/x509/by_file.c | 272 |
1 files changed, 129 insertions, 143 deletions
diff --git a/src/lib/libcrypto/x509/by_file.c b/src/lib/libcrypto/x509/by_file.c index 57b08ee094..474d13bf0e 100644 --- a/src/lib/libcrypto/x509/by_file.c +++ b/src/lib/libcrypto/x509/by_file.c | |||
| @@ -69,9 +69,9 @@ | |||
| 69 | #ifndef OPENSSL_NO_STDIO | 69 | #ifndef OPENSSL_NO_STDIO |
| 70 | 70 | ||
| 71 | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc, | 71 | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc, |
| 72 | long argl, char **ret); | 72 | long argl, char **ret); |
| 73 | X509_LOOKUP_METHOD x509_file_lookup= | 73 | |
| 74 | { | 74 | X509_LOOKUP_METHOD x509_file_lookup = { |
| 75 | "Load file into cache", | 75 | "Load file into cache", |
| 76 | NULL, /* new */ | 76 | NULL, /* new */ |
| 77 | NULL, /* free */ | 77 | NULL, /* free */ |
| @@ -82,211 +82,199 @@ X509_LOOKUP_METHOD x509_file_lookup= | |||
| 82 | NULL, /* get_by_issuer_serial */ | 82 | NULL, /* get_by_issuer_serial */ |
| 83 | NULL, /* get_by_fingerprint */ | 83 | NULL, /* get_by_fingerprint */ |
| 84 | NULL, /* get_by_alias */ | 84 | NULL, /* get_by_alias */ |
| 85 | }; | 85 | }; |
| 86 | 86 | ||
| 87 | X509_LOOKUP_METHOD *X509_LOOKUP_file(void) | 87 | X509_LOOKUP_METHOD |
| 88 | { | 88 | *X509_LOOKUP_file(void) |
| 89 | return(&x509_file_lookup); | 89 | { |
| 90 | } | 90 | return (&x509_file_lookup); |
| 91 | } | ||
| 91 | 92 | ||
| 92 | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl, | 93 | static int |
| 93 | char **ret) | 94 | by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl, |
| 94 | { | 95 | char **ret) |
| 95 | int ok=0; | 96 | { |
| 97 | int ok = 0; | ||
| 96 | char *file; | 98 | char *file; |
| 97 | 99 | ||
| 98 | switch (cmd) | 100 | switch (cmd) { |
| 99 | { | ||
| 100 | case X509_L_FILE_LOAD: | 101 | case X509_L_FILE_LOAD: |
| 101 | if (argl == X509_FILETYPE_DEFAULT) | 102 | if (argl == X509_FILETYPE_DEFAULT) { |
| 102 | { | ||
| 103 | file = (char *)getenv(X509_get_default_cert_file_env()); | 103 | file = (char *)getenv(X509_get_default_cert_file_env()); |
| 104 | if (file) | 104 | if (file) |
| 105 | ok = (X509_load_cert_crl_file(ctx,file, | 105 | ok = (X509_load_cert_crl_file(ctx, file, |
| 106 | X509_FILETYPE_PEM) != 0); | 106 | X509_FILETYPE_PEM) != 0); |
| 107 | |||
| 108 | else | 107 | else |
| 109 | ok = (X509_load_cert_crl_file(ctx,X509_get_default_cert_file(), | 108 | ok = (X509_load_cert_crl_file(ctx, |
| 110 | X509_FILETYPE_PEM) != 0); | 109 | X509_get_default_cert_file(), |
| 110 | X509_FILETYPE_PEM) != 0); | ||
| 111 | 111 | ||
| 112 | if (!ok) | 112 | if (!ok) { |
| 113 | { | 113 | X509err(X509_F_BY_FILE_CTRL, |
| 114 | X509err(X509_F_BY_FILE_CTRL,X509_R_LOADING_DEFAULTS); | 114 | X509_R_LOADING_DEFAULTS); |
| 115 | } | ||
| 116 | } | 115 | } |
| 117 | else | 116 | } else { |
| 118 | { | 117 | if (argl == X509_FILETYPE_PEM) |
| 119 | if(argl == X509_FILETYPE_PEM) | 118 | ok = (X509_load_cert_crl_file(ctx, argp, |
| 120 | ok = (X509_load_cert_crl_file(ctx,argp, | 119 | X509_FILETYPE_PEM) != 0); |
| 121 | X509_FILETYPE_PEM) != 0); | ||
| 122 | else | 120 | else |
| 123 | ok = (X509_load_cert_file(ctx,argp,(int)argl) != 0); | 121 | ok = (X509_load_cert_file(ctx, |
| 124 | } | 122 | argp,(int)argl) != 0); |
| 125 | break; | ||
| 126 | } | 123 | } |
| 127 | return(ok); | 124 | break; |
| 128 | } | 125 | } |
| 126 | return (ok); | ||
| 127 | } | ||
| 129 | 128 | ||
| 130 | int X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type) | 129 | int |
| 131 | { | 130 | X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type) |
| 132 | int ret=0; | 131 | { |
| 133 | BIO *in=NULL; | 132 | int ret = 0; |
| 134 | int i,count=0; | 133 | BIO *in = NULL; |
| 135 | X509 *x=NULL; | 134 | int i, count = 0; |
| 135 | X509 *x = NULL; | ||
| 136 | 136 | ||
| 137 | if (file == NULL) return(1); | 137 | if (file == NULL) |
| 138 | in=BIO_new(BIO_s_file_internal()); | 138 | return (1); |
| 139 | in = BIO_new(BIO_s_file_internal()); | ||
| 139 | 140 | ||
| 140 | if ((in == NULL) || (BIO_read_filename(in,file) <= 0)) | 141 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
| 141 | { | 142 | X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_SYS_LIB); |
| 142 | X509err(X509_F_X509_LOAD_CERT_FILE,ERR_R_SYS_LIB); | ||
| 143 | goto err; | 143 | goto err; |
| 144 | } | 144 | } |
| 145 | 145 | ||
| 146 | if (type == X509_FILETYPE_PEM) | 146 | if (type == X509_FILETYPE_PEM) { |
| 147 | { | 147 | for (;;) { |
| 148 | for (;;) | 148 | x = PEM_read_bio_X509_AUX(in, NULL, NULL, NULL); |
| 149 | { | 149 | if (x == NULL) { |
| 150 | x=PEM_read_bio_X509_AUX(in,NULL,NULL,NULL); | ||
| 151 | if (x == NULL) | ||
| 152 | { | ||
| 153 | if ((ERR_GET_REASON(ERR_peek_last_error()) == | 150 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
| 154 | PEM_R_NO_START_LINE) && (count > 0)) | 151 | PEM_R_NO_START_LINE) && (count > 0)) { |
| 155 | { | ||
| 156 | ERR_clear_error(); | 152 | ERR_clear_error(); |
| 157 | break; | 153 | break; |
| 158 | } | 154 | } else { |
| 159 | else | ||
| 160 | { | ||
| 161 | X509err(X509_F_X509_LOAD_CERT_FILE, | 155 | X509err(X509_F_X509_LOAD_CERT_FILE, |
| 162 | ERR_R_PEM_LIB); | 156 | ERR_R_PEM_LIB); |
| 163 | goto err; | 157 | goto err; |
| 164 | } | ||
| 165 | } | 158 | } |
| 166 | i=X509_STORE_add_cert(ctx->store_ctx,x); | 159 | } |
| 167 | if (!i) goto err; | 160 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
| 161 | if (!i) | ||
| 162 | goto err; | ||
| 168 | count++; | 163 | count++; |
| 169 | X509_free(x); | 164 | X509_free(x); |
| 170 | x=NULL; | 165 | x = NULL; |
| 171 | } | ||
| 172 | ret=count; | ||
| 173 | } | 166 | } |
| 174 | else if (type == X509_FILETYPE_ASN1) | 167 | ret = count; |
| 175 | { | 168 | } else if (type == X509_FILETYPE_ASN1) { |
| 176 | x=d2i_X509_bio(in,NULL); | 169 | x = d2i_X509_bio(in, NULL); |
| 177 | if (x == NULL) | 170 | if (x == NULL) { |
| 178 | { | 171 | X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_ASN1_LIB); |
| 179 | X509err(X509_F_X509_LOAD_CERT_FILE,ERR_R_ASN1_LIB); | ||
| 180 | goto err; | 172 | goto err; |
| 181 | } | ||
| 182 | i=X509_STORE_add_cert(ctx->store_ctx,x); | ||
| 183 | if (!i) goto err; | ||
| 184 | ret=i; | ||
| 185 | } | 173 | } |
| 186 | else | 174 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
| 187 | { | 175 | if (!i) |
| 188 | X509err(X509_F_X509_LOAD_CERT_FILE,X509_R_BAD_X509_FILETYPE); | 176 | goto err; |
| 177 | ret = i; | ||
| 178 | } else { | ||
| 179 | X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_BAD_X509_FILETYPE); | ||
| 189 | goto err; | 180 | goto err; |
| 190 | } | ||
| 191 | err: | ||
| 192 | if (x != NULL) X509_free(x); | ||
| 193 | if (in != NULL) BIO_free(in); | ||
| 194 | return(ret); | ||
| 195 | } | 181 | } |
| 182 | err: | ||
| 183 | if (x != NULL) | ||
| 184 | X509_free(x); | ||
| 185 | if (in != NULL) | ||
| 186 | BIO_free(in); | ||
| 187 | return (ret); | ||
| 188 | } | ||
| 196 | 189 | ||
| 197 | int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type) | 190 | int |
| 198 | { | 191 | X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type) |
| 199 | int ret=0; | 192 | { |
| 200 | BIO *in=NULL; | 193 | int ret = 0; |
| 201 | int i,count=0; | 194 | BIO *in = NULL; |
| 202 | X509_CRL *x=NULL; | 195 | int i, count = 0; |
| 196 | X509_CRL *x = NULL; | ||
| 203 | 197 | ||
| 204 | if (file == NULL) return(1); | 198 | if (file == NULL) |
| 205 | in=BIO_new(BIO_s_file_internal()); | 199 | return (1); |
| 200 | in = BIO_new(BIO_s_file_internal()); | ||
| 206 | 201 | ||
| 207 | if ((in == NULL) || (BIO_read_filename(in,file) <= 0)) | 202 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
| 208 | { | 203 | X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_SYS_LIB); |
| 209 | X509err(X509_F_X509_LOAD_CRL_FILE,ERR_R_SYS_LIB); | ||
| 210 | goto err; | 204 | goto err; |
| 211 | } | 205 | } |
| 212 | 206 | ||
| 213 | if (type == X509_FILETYPE_PEM) | 207 | if (type == X509_FILETYPE_PEM) { |
| 214 | { | 208 | for (;;) { |
| 215 | for (;;) | 209 | x = PEM_read_bio_X509_CRL(in, NULL, NULL, NULL); |
| 216 | { | 210 | if (x == NULL) { |
| 217 | x=PEM_read_bio_X509_CRL(in,NULL,NULL,NULL); | ||
| 218 | if (x == NULL) | ||
| 219 | { | ||
| 220 | if ((ERR_GET_REASON(ERR_peek_last_error()) == | 211 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
| 221 | PEM_R_NO_START_LINE) && (count > 0)) | 212 | PEM_R_NO_START_LINE) && (count > 0)) { |
| 222 | { | ||
| 223 | ERR_clear_error(); | 213 | ERR_clear_error(); |
| 224 | break; | 214 | break; |
| 225 | } | 215 | } else { |
| 226 | else | ||
| 227 | { | ||
| 228 | X509err(X509_F_X509_LOAD_CRL_FILE, | 216 | X509err(X509_F_X509_LOAD_CRL_FILE, |
| 229 | ERR_R_PEM_LIB); | 217 | ERR_R_PEM_LIB); |
| 230 | goto err; | 218 | goto err; |
| 231 | } | ||
| 232 | } | 219 | } |
| 233 | i=X509_STORE_add_crl(ctx->store_ctx,x); | 220 | } |
| 234 | if (!i) goto err; | 221 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
| 222 | if (!i) | ||
| 223 | goto err; | ||
| 235 | count++; | 224 | count++; |
| 236 | X509_CRL_free(x); | 225 | X509_CRL_free(x); |
| 237 | x=NULL; | 226 | x = NULL; |
| 238 | } | ||
| 239 | ret=count; | ||
| 240 | } | 227 | } |
| 241 | else if (type == X509_FILETYPE_ASN1) | 228 | ret = count; |
| 242 | { | 229 | } else if (type == X509_FILETYPE_ASN1) { |
| 243 | x=d2i_X509_CRL_bio(in,NULL); | 230 | x = d2i_X509_CRL_bio(in, NULL); |
| 244 | if (x == NULL) | 231 | if (x == NULL) { |
| 245 | { | 232 | X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_ASN1_LIB); |
| 246 | X509err(X509_F_X509_LOAD_CRL_FILE,ERR_R_ASN1_LIB); | ||
| 247 | goto err; | 233 | goto err; |
| 248 | } | ||
| 249 | i=X509_STORE_add_crl(ctx->store_ctx,x); | ||
| 250 | if (!i) goto err; | ||
| 251 | ret=i; | ||
| 252 | } | 234 | } |
| 253 | else | 235 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
| 254 | { | 236 | if (!i) |
| 255 | X509err(X509_F_X509_LOAD_CRL_FILE,X509_R_BAD_X509_FILETYPE); | 237 | goto err; |
| 238 | ret = i; | ||
| 239 | } else { | ||
| 240 | X509err(X509_F_X509_LOAD_CRL_FILE, X509_R_BAD_X509_FILETYPE); | ||
| 256 | goto err; | 241 | goto err; |
| 257 | } | ||
| 258 | err: | ||
| 259 | if (x != NULL) X509_CRL_free(x); | ||
| 260 | if (in != NULL) BIO_free(in); | ||
| 261 | return(ret); | ||
| 262 | } | 242 | } |
| 243 | err: | ||
| 244 | if (x != NULL) | ||
| 245 | X509_CRL_free(x); | ||
| 246 | if (in != NULL) | ||
| 247 | BIO_free(in); | ||
| 248 | return (ret); | ||
| 249 | } | ||
| 263 | 250 | ||
| 264 | int X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type) | 251 | int |
| 252 | X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type) | ||
| 265 | { | 253 | { |
| 266 | STACK_OF(X509_INFO) *inf; | 254 | STACK_OF(X509_INFO) *inf; |
| 267 | X509_INFO *itmp; | 255 | X509_INFO *itmp; |
| 268 | BIO *in; | 256 | BIO *in; |
| 269 | int i, count = 0; | 257 | int i, count = 0; |
| 270 | if(type != X509_FILETYPE_PEM) | 258 | if (type != X509_FILETYPE_PEM) |
| 271 | return X509_load_cert_file(ctx, file, type); | 259 | return X509_load_cert_file(ctx, file, type); |
| 272 | in = BIO_new_file(file, "r"); | 260 | in = BIO_new_file(file, "r"); |
| 273 | if(!in) { | 261 | if (!in) { |
| 274 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE,ERR_R_SYS_LIB); | 262 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_SYS_LIB); |
| 275 | return 0; | 263 | return 0; |
| 276 | } | 264 | } |
| 277 | inf = PEM_X509_INFO_read_bio(in, NULL, NULL, NULL); | 265 | inf = PEM_X509_INFO_read_bio(in, NULL, NULL, NULL); |
| 278 | BIO_free(in); | 266 | BIO_free(in); |
| 279 | if(!inf) { | 267 | if (!inf) { |
| 280 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE,ERR_R_PEM_LIB); | 268 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_PEM_LIB); |
| 281 | return 0; | 269 | return 0; |
| 282 | } | 270 | } |
| 283 | for(i = 0; i < sk_X509_INFO_num(inf); i++) { | 271 | for (i = 0; i < sk_X509_INFO_num(inf); i++) { |
| 284 | itmp = sk_X509_INFO_value(inf, i); | 272 | itmp = sk_X509_INFO_value(inf, i); |
| 285 | if(itmp->x509) { | 273 | if (itmp->x509) { |
| 286 | X509_STORE_add_cert(ctx->store_ctx, itmp->x509); | 274 | X509_STORE_add_cert(ctx->store_ctx, itmp->x509); |
| 287 | count++; | 275 | count++; |
| 288 | } | 276 | } |
| 289 | if(itmp->crl) { | 277 | if (itmp->crl) { |
| 290 | X509_STORE_add_crl(ctx->store_ctx, itmp->crl); | 278 | X509_STORE_add_crl(ctx->store_ctx, itmp->crl); |
| 291 | count++; | 279 | count++; |
| 292 | } | 280 | } |
| @@ -295,6 +283,4 @@ int X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type) | |||
| 295 | return count; | 283 | return count; |
| 296 | } | 284 | } |
| 297 | 285 | ||
| 298 | |||
| 299 | #endif /* OPENSSL_NO_STDIO */ | 286 | #endif /* OPENSSL_NO_STDIO */ |
| 300 | |||
