2 * Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
10 #include <openssl/opensslconf.h>
13 #include <openssl/err.h>
14 #include <openssl/pem.h>
15 #include <openssl/store.h>
17 typedef enum OPTION_choice {
18 OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_ENGINE, OPT_OUT, OPT_PASSIN,
22 const OPTIONS storeutl_options[] = {
23 {OPT_HELP_STR, 1, '-', "Usage: %s [options] uri\nValid options are:\n"},
24 {"help", OPT_HELP, '-', "Display this summary"},
25 {"out", OPT_OUT, '>', "Output file - default stdout"},
26 {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
27 {"text", OPT_TEXT, '-', "Print a text form of the objects"},
28 {"noout", OPT_NOOUT, '-', "No PEM output, just status"},
29 #ifndef OPENSSL_NO_ENGINE
30 {"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
35 int storeutl_main(int argc, char *argv[])
37 OSSL_STORE_CTX *store_ctx = NULL;
38 int ret = 1, noout = 0, text = 0, items = 0;
39 char *outfile = NULL, *passin = NULL, *passinarg = NULL;
43 char *prog = opt_init(argc, argv, storeutl_options);
44 PW_CB_DATA pw_cb_data;
46 while ((o = opt_next()) != OPT_EOF) {
51 BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
54 opt_help(storeutl_options);
61 passinarg = opt_arg();
70 e = setup_engine(opt_arg(), 0);
74 argc = opt_num_rest();
78 BIO_printf(bio_err, "%s: No URI given, nothing to do...\n", prog);
82 BIO_printf(bio_err, "%s: Unknown extra parameters after URI\n", prog);
86 if (!app_passwd(passinarg, NULL, &passin, NULL)) {
87 BIO_printf(bio_err, "Error getting passwords\n");
90 pw_cb_data.password = passin;
91 pw_cb_data.prompt_info = argv[0];
93 out = bio_open_default(outfile, 'w', FORMAT_TEXT);
97 if ((store_ctx = OSSL_STORE_open(argv[0], get_ui_method(), &pw_cb_data,
98 NULL, NULL)) == NULL) {
99 BIO_printf(bio_err, "Couldn't open file or uri %s\n", argv[0]);
100 ERR_print_errors(bio_err);
104 /* From here on, we count errors, and we'll return the count at the end */
108 OSSL_STORE_INFO *info = OSSL_STORE_load(store_ctx);
109 int type = info == NULL ? 0 : OSSL_STORE_INFO_get_type(info);
110 const char *infostr =
111 info == NULL ? NULL : OSSL_STORE_INFO_type_string(type);
114 if (OSSL_STORE_eof(store_ctx))
117 if (OSSL_STORE_error(store_ctx)) {
118 ERR_print_errors(bio_err);
124 "ERROR: OSSL_STORE_load() returned NULL without "
125 "eof or error indications\n");
126 BIO_printf(bio_err, " This is an error in the loader\n");
127 ERR_print_errors(bio_err);
132 if (type == OSSL_STORE_INFO_NAME) {
133 const char *name = OSSL_STORE_INFO_get0_NAME(info);
134 const char *desc = OSSL_STORE_INFO_get0_NAME_description(info);
135 BIO_printf(bio_out, "%d: %s: %s\n", items, infostr, name);
137 BIO_printf(bio_out, "%s\n", desc);
139 BIO_printf(bio_out, "%d: %s\n", items, infostr);
143 * Unfortunately, PEM_X509_INFO_write_bio() is sorely lacking in
144 * functionality, so we must figure out how exactly to write things
148 case OSSL_STORE_INFO_NAME:
150 case OSSL_STORE_INFO_PARAMS:
152 EVP_PKEY_print_params(out, OSSL_STORE_INFO_get0_PARAMS(info),
155 PEM_write_bio_Parameters(out,
156 OSSL_STORE_INFO_get0_PARAMS(info));
158 case OSSL_STORE_INFO_PKEY:
160 EVP_PKEY_print_private(out, OSSL_STORE_INFO_get0_PKEY(info),
163 PEM_write_bio_PrivateKey(out, OSSL_STORE_INFO_get0_PKEY(info),
164 NULL, NULL, 0, NULL, NULL);
166 case OSSL_STORE_INFO_CERT:
168 X509_print(out, OSSL_STORE_INFO_get0_CERT(info));
170 PEM_write_bio_X509(out, OSSL_STORE_INFO_get0_CERT(info));
172 case OSSL_STORE_INFO_CRL:
174 X509_CRL_print(out, OSSL_STORE_INFO_get0_CRL(info));
176 PEM_write_bio_X509_CRL(out, OSSL_STORE_INFO_get0_CRL(info));
179 BIO_printf(bio_err, "!!! Unknown code\n");
184 OSSL_STORE_INFO_free(info);
186 BIO_printf(out, "Total found: %d\n", items);
188 if (!OSSL_STORE_close(store_ctx)) {
189 ERR_print_errors(bio_err);
196 OPENSSL_free(passin);