2 * Copyright 2006-2018 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
15 #include <openssl/pem.h>
16 #include <openssl/err.h>
17 #include <openssl/evp.h>
19 typedef enum OPTION_choice {
20 OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
21 OPT_IN, OPT_OUT, OPT_TEXT, OPT_NOOUT,
25 const OPTIONS pkeyparam_options[] = {
26 OPT_SECTION("General"),
27 {"help", OPT_HELP, '-', "Display this summary"},
28 #ifndef OPENSSL_NO_ENGINE
29 {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
31 {"check", OPT_CHECK, '-', "Check key param consistency"},
34 {"in", OPT_IN, '<', "Input file"},
36 OPT_SECTION("Output"),
37 {"out", OPT_OUT, '>', "Output file"},
38 {"text", OPT_TEXT, '-', "Print parameters as text"},
39 {"noout", OPT_NOOUT, '-', "Don't output encoded parameters"},
43 int pkeyparam_main(int argc, char **argv)
46 BIO *in = NULL, *out = NULL;
47 EVP_PKEY *pkey = NULL;
48 EVP_PKEY_CTX *ctx = NULL;
49 int text = 0, noout = 0, ret = EXIT_FAILURE, check = 0, r;
51 char *infile = NULL, *outfile = NULL, *prog;
54 prog = opt_init(argc, argv, pkeyparam_options);
55 while ((o = opt_next()) != OPT_EOF) {
60 BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
63 opt_help(pkeyparam_options);
73 e = setup_engine(opt_arg(), 0);
86 argc = opt_num_rest();
90 in = bio_open_default(infile, 'r', FORMAT_PEM);
93 out = bio_open_default(outfile, 'w', FORMAT_PEM);
96 pkey = PEM_read_bio_Parameters(in, NULL);
98 BIO_printf(bio_err, "Error reading parameters\n");
99 ERR_print_errors(bio_err);
104 ctx = EVP_PKEY_CTX_new(pkey, e);
106 ERR_print_errors(bio_err);
110 r = EVP_PKEY_param_check(ctx);
113 BIO_printf(out, "Parameters are valid\n");
116 * Note: at least for RSA keys if this function returns
117 * -1, there will be no error reasons.
119 BIO_printf(out, "Parameters are invalid\n");
121 while ((err = ERR_peek_error()) != 0) {
122 BIO_printf(out, "Detailed error: %s\n",
123 ERR_reason_error_string(err));
124 ERR_get_error(); /* remove err from error stack */
131 PEM_write_bio_Parameters(out, pkey);
134 EVP_PKEY_print_params(out, pkey, 0, NULL);
139 EVP_PKEY_CTX_free(ctx);