/src/libressl/crypto/x509/by_file.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* $OpenBSD: by_file.c,v 1.31 2024/08/31 10:19:17 tb Exp $ */ |
2 | | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | | * All rights reserved. |
4 | | * |
5 | | * This package is an SSL implementation written |
6 | | * by Eric Young (eay@cryptsoft.com). |
7 | | * The implementation was written so as to conform with Netscapes SSL. |
8 | | * |
9 | | * This library is free for commercial and non-commercial use as long as |
10 | | * the following conditions are aheared to. The following conditions |
11 | | * apply to all code found in this distribution, be it the RC4, RSA, |
12 | | * lhash, DES, etc., code; not just the SSL code. The SSL documentation |
13 | | * included with this distribution is covered by the same copyright terms |
14 | | * except that the holder is Tim Hudson (tjh@cryptsoft.com). |
15 | | * |
16 | | * Copyright remains Eric Young's, and as such any Copyright notices in |
17 | | * the code are not to be removed. |
18 | | * If this package is used in a product, Eric Young should be given attribution |
19 | | * as the author of the parts of the library used. |
20 | | * This can be in the form of a textual message at program startup or |
21 | | * in documentation (online or textual) provided with the package. |
22 | | * |
23 | | * Redistribution and use in source and binary forms, with or without |
24 | | * modification, are permitted provided that the following conditions |
25 | | * are met: |
26 | | * 1. Redistributions of source code must retain the copyright |
27 | | * notice, this list of conditions and the following disclaimer. |
28 | | * 2. Redistributions in binary form must reproduce the above copyright |
29 | | * notice, this list of conditions and the following disclaimer in the |
30 | | * documentation and/or other materials provided with the distribution. |
31 | | * 3. All advertising materials mentioning features or use of this software |
32 | | * must display the following acknowledgement: |
33 | | * "This product includes cryptographic software written by |
34 | | * Eric Young (eay@cryptsoft.com)" |
35 | | * The word 'cryptographic' can be left out if the rouines from the library |
36 | | * being used are not cryptographic related :-). |
37 | | * 4. If you include any Windows specific code (or a derivative thereof) from |
38 | | * the apps directory (application code) you must include an acknowledgement: |
39 | | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" |
40 | | * |
41 | | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
42 | | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
43 | | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
44 | | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
45 | | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
46 | | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
47 | | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
48 | | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
49 | | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
50 | | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
51 | | * SUCH DAMAGE. |
52 | | * |
53 | | * The licence and distribution terms for any publically available version or |
54 | | * derivative of this code cannot be changed. i.e. this code cannot simply be |
55 | | * copied and put under another distribution licence |
56 | | * [including the GNU Public Licence.] |
57 | | */ |
58 | | |
59 | | #include <errno.h> |
60 | | #include <stdio.h> |
61 | | #include <time.h> |
62 | | #include <unistd.h> |
63 | | |
64 | | #include <openssl/buffer.h> |
65 | | #include <openssl/err.h> |
66 | | #include <openssl/pem.h> |
67 | | #include <openssl/x509.h> |
68 | | |
69 | | #include "x509_local.h" |
70 | | |
71 | | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc, |
72 | | long argl, char **ret); |
73 | | |
74 | | static const X509_LOOKUP_METHOD x509_file_lookup = { |
75 | | .name = "Load file into cache", |
76 | | .new_item = NULL, |
77 | | .free = NULL, |
78 | | .ctrl = by_file_ctrl, |
79 | | .get_by_subject = NULL, |
80 | | }; |
81 | | |
82 | | const X509_LOOKUP_METHOD * |
83 | | X509_LOOKUP_file(void) |
84 | 0 | { |
85 | 0 | return &x509_file_lookup; |
86 | 0 | } |
87 | | LCRYPTO_ALIAS(X509_LOOKUP_file); |
88 | | |
89 | | static int |
90 | | by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, long argl, |
91 | | char **ret) |
92 | 0 | { |
93 | 0 | const char *file = argp; |
94 | 0 | int type = argl; |
95 | |
|
96 | 0 | if (cmd != X509_L_FILE_LOAD) |
97 | 0 | return 0; |
98 | | |
99 | 0 | if (argl == X509_FILETYPE_DEFAULT) { |
100 | 0 | file = X509_get_default_cert_file(); |
101 | 0 | type = X509_FILETYPE_PEM; |
102 | 0 | } |
103 | 0 | if (X509_load_cert_crl_file(ctx, file, type) != 0) |
104 | 0 | return 1; |
105 | 0 | if (argl == X509_FILETYPE_DEFAULT) |
106 | 0 | X509error(X509_R_LOADING_DEFAULTS); |
107 | |
|
108 | 0 | return 0; |
109 | 0 | } |
110 | | |
111 | | int |
112 | | X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type) |
113 | 0 | { |
114 | 0 | int ret = 0; |
115 | 0 | BIO *in = NULL; |
116 | 0 | int i, count = 0; |
117 | 0 | X509 *x = NULL; |
118 | |
|
119 | 0 | in = BIO_new(BIO_s_file()); |
120 | |
|
121 | 0 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
122 | 0 | X509error(ERR_R_SYS_LIB); |
123 | 0 | goto err; |
124 | 0 | } |
125 | | |
126 | 0 | if (type == X509_FILETYPE_PEM) { |
127 | 0 | for (;;) { |
128 | 0 | x = PEM_read_bio_X509_AUX(in, NULL, NULL, ""); |
129 | 0 | if (x == NULL) { |
130 | 0 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
131 | 0 | PEM_R_NO_START_LINE) && (count > 0)) { |
132 | 0 | ERR_clear_error(); |
133 | 0 | break; |
134 | 0 | } else { |
135 | 0 | X509error(ERR_R_PEM_LIB); |
136 | 0 | goto err; |
137 | 0 | } |
138 | 0 | } |
139 | 0 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
140 | 0 | if (!i) |
141 | 0 | goto err; |
142 | 0 | count++; |
143 | 0 | X509_free(x); |
144 | 0 | x = NULL; |
145 | 0 | } |
146 | 0 | ret = count; |
147 | 0 | } else if (type == X509_FILETYPE_ASN1) { |
148 | 0 | x = d2i_X509_bio(in, NULL); |
149 | 0 | if (x == NULL) { |
150 | 0 | X509error(ERR_R_ASN1_LIB); |
151 | 0 | goto err; |
152 | 0 | } |
153 | 0 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
154 | 0 | if (!i) |
155 | 0 | goto err; |
156 | 0 | ret = i; |
157 | 0 | } else { |
158 | 0 | X509error(X509_R_BAD_X509_FILETYPE); |
159 | 0 | goto err; |
160 | 0 | } |
161 | 0 | err: |
162 | 0 | X509_free(x); |
163 | 0 | BIO_free(in); |
164 | 0 | return ret; |
165 | 0 | } |
166 | | LCRYPTO_ALIAS(X509_load_cert_file); |
167 | | |
168 | | int |
169 | | X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type) |
170 | 0 | { |
171 | 0 | int ret = 0; |
172 | 0 | BIO *in = NULL; |
173 | 0 | int i, count = 0; |
174 | 0 | X509_CRL *x = NULL; |
175 | |
|
176 | 0 | in = BIO_new(BIO_s_file()); |
177 | |
|
178 | 0 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
179 | 0 | X509error(ERR_R_SYS_LIB); |
180 | 0 | goto err; |
181 | 0 | } |
182 | | |
183 | 0 | if (type == X509_FILETYPE_PEM) { |
184 | 0 | for (;;) { |
185 | 0 | x = PEM_read_bio_X509_CRL(in, NULL, NULL, ""); |
186 | 0 | if (x == NULL) { |
187 | 0 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
188 | 0 | PEM_R_NO_START_LINE) && (count > 0)) { |
189 | 0 | ERR_clear_error(); |
190 | 0 | break; |
191 | 0 | } else { |
192 | 0 | X509error(ERR_R_PEM_LIB); |
193 | 0 | goto err; |
194 | 0 | } |
195 | 0 | } |
196 | 0 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
197 | 0 | if (!i) |
198 | 0 | goto err; |
199 | 0 | count++; |
200 | 0 | X509_CRL_free(x); |
201 | 0 | x = NULL; |
202 | 0 | } |
203 | 0 | ret = count; |
204 | 0 | } else if (type == X509_FILETYPE_ASN1) { |
205 | 0 | x = d2i_X509_CRL_bio(in, NULL); |
206 | 0 | if (x == NULL) { |
207 | 0 | X509error(ERR_R_ASN1_LIB); |
208 | 0 | goto err; |
209 | 0 | } |
210 | 0 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
211 | 0 | if (!i) |
212 | 0 | goto err; |
213 | 0 | ret = i; |
214 | 0 | } else { |
215 | 0 | X509error(X509_R_BAD_X509_FILETYPE); |
216 | 0 | goto err; |
217 | 0 | } |
218 | 0 | err: |
219 | 0 | X509_CRL_free(x); |
220 | 0 | BIO_free(in); |
221 | 0 | return ret; |
222 | 0 | } |
223 | | LCRYPTO_ALIAS(X509_load_crl_file); |
224 | | |
225 | | int |
226 | | X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type) |
227 | 0 | { |
228 | 0 | STACK_OF(X509_INFO) *inf; |
229 | 0 | X509_INFO *itmp; |
230 | 0 | BIO *in; |
231 | 0 | int i, count = 0; |
232 | |
|
233 | 0 | if (type != X509_FILETYPE_PEM) |
234 | 0 | return X509_load_cert_file(ctx, file, type); |
235 | 0 | in = BIO_new_file(file, "r"); |
236 | 0 | if (!in) { |
237 | 0 | X509error(ERR_R_SYS_LIB); |
238 | 0 | return 0; |
239 | 0 | } |
240 | 0 | inf = PEM_X509_INFO_read_bio(in, NULL, NULL, ""); |
241 | 0 | BIO_free(in); |
242 | 0 | if (!inf) { |
243 | 0 | X509error(ERR_R_PEM_LIB); |
244 | 0 | return 0; |
245 | 0 | } |
246 | 0 | for (i = 0; i < sk_X509_INFO_num(inf); i++) { |
247 | 0 | itmp = sk_X509_INFO_value(inf, i); |
248 | 0 | if (itmp->x509) { |
249 | 0 | X509_STORE_add_cert(ctx->store_ctx, itmp->x509); |
250 | 0 | count++; |
251 | 0 | } |
252 | 0 | if (itmp->crl) { |
253 | 0 | X509_STORE_add_crl(ctx->store_ctx, itmp->crl); |
254 | 0 | count++; |
255 | 0 | } |
256 | 0 | } |
257 | 0 | if (count == 0) |
258 | 0 | X509error(X509_R_NO_CERTIFICATE_OR_CRL_FOUND); |
259 | 0 | sk_X509_INFO_pop_free(inf, X509_INFO_free); |
260 | 0 | return count; |
261 | 0 | } |
262 | | LCRYPTO_ALIAS(X509_load_cert_crl_file); |