1: /*
2: * Copyright (C) 2009 Martin Willi
3: * Copyright (C) 2017 Andreas Steffen
4: * HSR Hochschule fuer Technik Rapperswil
5: *
6: * This program is free software; you can redistribute it and/or modify it
7: * under the terms of the GNU General Public License as published by the
8: * Free Software Foundation; either version 2 of the License, or (at your
9: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
10: *
11: * This program is distributed in the hope that it will be useful, but
12: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
13: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
14: * for more details.
15: */
16:
17: #include <errno.h>
18:
19: #include "pki.h"
20:
21: #include <credentials/certificates/certificate.h>
22: #include <credentials/certificates/x509.h>
23:
24: typedef enum {
25: FORMAT_PRETTY,
26: FORMAT_HEX,
27: FORMAT_BASE64,
28: FORMAT_BINARY,
29: } format_t;
30:
31: /**
32: * Print a single keyid in the requested format
33: */
34: static bool print_id(chunk_t id, format_t format, char *desc)
35: {
36: chunk_t chunk;
37:
38: switch (format)
39: {
40: case FORMAT_PRETTY:
41: printf("%s:\n %#B\n", desc, &id);
42: break;
43: case FORMAT_HEX:
44: chunk = chunk_to_hex(id, NULL, FALSE);
45: printf("%.*s\n", (int)chunk.len, chunk.ptr);
46: chunk_free(&chunk);
47: break;
48: case FORMAT_BASE64:
49: chunk = chunk_to_base64(id, NULL);
50: printf("%.*s\n", (int)chunk.len, chunk.ptr);
51: chunk_free(&chunk);
52: break;
53: case FORMAT_BINARY:
54: if (fwrite(id.ptr, id.len, 1, stdout) != 1)
55: {
56: fprintf(stderr, "writing %s failed\n", desc);
57: return FALSE;
58: }
59: break;
60: }
61: return TRUE;
62: }
63:
64: /**
65: * Calculate the keyid of a key/certificate
66: */
67: static int keyid()
68: {
69: credential_type_t type = CRED_PRIVATE_KEY;
70: int subtype = KEY_ANY;
71: certificate_t *cert;
72: private_key_t *private;
73: public_key_t *public;
74: format_t format = FORMAT_PRETTY;
75: enum {
76: ID_TYPE_ALL,
77: ID_TYPE_SPK,
78: ID_TYPE_SPKI,
79: } id_type = FORMAT_PRETTY;
80: char *file = NULL, *keyid = NULL;
81: void *cred;
82: chunk_t id, spk = chunk_empty, spki = chunk_empty;
83: char *arg;
84:
85: while (TRUE)
86: {
87: switch (command_getopt(&arg))
88: {
89: case 'h':
90: return command_usage(NULL);
91: case 't':
92: if (streq(arg, "rsa") ||
93: streq(arg, "rsa-priv"))
94: {
95: type = CRED_PRIVATE_KEY;
96: subtype = KEY_RSA;
97: }
98: else if (streq(arg, "ecdsa") ||
99: streq(arg, "ecdsa-priv"))
100: {
101: type = CRED_PRIVATE_KEY;
102: subtype = KEY_ECDSA;
103: }
104: else if (streq(arg, "bliss") ||
105: streq(arg, "bliss-priv"))
106: {
107: type = CRED_PRIVATE_KEY;
108: subtype = KEY_BLISS;
109: }
110: else if (streq(arg, "priv"))
111: {
112: type = CRED_PRIVATE_KEY;
113: subtype = KEY_ANY;
114: }
115: else if (streq(arg, "pub"))
116: {
117: type = CRED_PUBLIC_KEY;
118: subtype = KEY_ANY;
119: }
120: else if (streq(arg, "pkcs10"))
121: {
122: type = CRED_CERTIFICATE;
123: subtype = CERT_PKCS10_REQUEST;
124: }
125: else if (streq(arg, "x509"))
126: {
127: type = CRED_CERTIFICATE;
128: subtype = CERT_X509;
129: }
130: else
131: {
132: return command_usage( "invalid input type");
133: }
134: continue;
135: case 'I':
136: if (streq(arg, "spk"))
137: {
138: id_type = ID_TYPE_SPK;
139: }
140: else if (streq(arg, "spki"))
141: {
142: id_type = ID_TYPE_SPKI;
143: }
144: else if (!streq(arg, "all"))
145: {
146: return command_usage( "invalid id type");
147: }
148: continue;
149: case 'f':
150: if (streq(arg, "hex"))
151: {
152: format = FORMAT_HEX;
153: }
154: else if (streq(arg, "base64"))
155: {
156: format = FORMAT_BASE64;
157: }
158: else if (streq(arg, "bin"))
159: {
160: format = FORMAT_BINARY;
161: }
162: else if (!streq(arg, "pretty"))
163: {
164: return command_usage( "invalid output format");
165: }
166: continue;
167: case 'i':
168: file = arg;
169: continue;
170: case 'x':
171: keyid = arg;
172: continue;
173: case EOF:
174: break;
175: default:
176: return command_usage("invalid --keyid option");
177: }
178: break;
179: }
180: if (file)
181: {
182: cred = lib->creds->create(lib->creds, type, subtype,
183: BUILD_FROM_FILE, file, BUILD_END);
184: }
185: else if (keyid)
186: {
187: chunk_t chunk;
188:
189: chunk = chunk_from_hex(chunk_create(keyid, strlen(keyid)), NULL);
190: cred = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, KEY_ANY,
191: BUILD_PKCS11_KEYID, chunk, BUILD_END);
192: free(chunk.ptr);
193: }
194: else
195: {
196: chunk_t chunk;
197:
198: set_file_mode(stdin, CERT_ASN1_DER);
199: if (!chunk_from_fd(0, &chunk))
200: {
201: fprintf(stderr, "reading input failed: %s\n", strerror(errno));
202: return 1;
203: }
204: cred = lib->creds->create(lib->creds, type, subtype,
205: BUILD_BLOB, chunk, BUILD_END);
206: free(chunk.ptr);
207: }
208: if (!cred)
209: {
210: fprintf(stderr, "parsing input failed\n");
211: return 1;
212: }
213:
214: if (type == CRED_PRIVATE_KEY)
215: {
216: private = cred;
217: if (private->get_fingerprint(private, KEYID_PUBKEY_SHA1, &id))
218: {
219: spk = chunk_clone(id);
220: }
221: if (private->get_fingerprint(private, KEYID_PUBKEY_INFO_SHA1, &id))
222: {
223: spki = chunk_clone(id);
224: }
225: private->destroy(private);
226: }
227: else if (type == CRED_PUBLIC_KEY)
228: {
229: public = cred;
230: if (public->get_fingerprint(public, KEYID_PUBKEY_SHA1, &id))
231: {
232: spk = chunk_clone(id);
233: }
234: if (public->get_fingerprint(public, KEYID_PUBKEY_INFO_SHA1, &id))
235: {
236: spki = chunk_clone(id);
237: }
238: public->destroy(public);
239: }
240: else
241: {
242: cert = cred;
243: public = cert->get_public_key(cert);
244: if (!public)
245: {
246: fprintf(stderr, "extracting public key from certificate failed");
247: return 1;
248: }
249: if (public->get_fingerprint(public, KEYID_PUBKEY_SHA1, &id))
250: {
251: spk = chunk_clone(id);
252: }
253: if (public->get_fingerprint(public, KEYID_PUBKEY_INFO_SHA1, &id))
254: {
255: spki = chunk_clone(id);
256: }
257: public->destroy(public);
258: cert->destroy(cert);
259: }
260:
261: if (id_type == ID_TYPE_ALL || id_type == ID_TYPE_SPK)
262: {
263: if (!spk.len ||
264: !print_id(spk, format, "subjkey (SHA-1 of subjectPublicKey)"))
265: {
266: return 1;
267: }
268: }
269: if (id_type == ID_TYPE_ALL || id_type == ID_TYPE_SPKI)
270: {
271: if (!spki.len ||
272: !print_id(spki, format, "keyid (SHA-1 of subjectPublicKeyInfo)"))
273: {
274: return 1;
275: }
276: }
277: chunk_free(&spk);
278: chunk_free(&spki);
279: return 0;
280: }
281:
282: /**
283: * Register the command.
284: */
285: static void __attribute__ ((constructor))reg()
286: {
287: command_register((command_t)
288: { keyid, 'k', "keyid",
289: "calculate key identifiers of a key/certificate",
290: {"[--in file|--keyid hex] [--type priv|rsa|ecdsa|bliss|pub|pkcs10|x509]",
291: "[--id all|spk|spki] [--format pretty|hex|base64|bin]"},
292: {
293: {"help", 'h', 0, "show usage information"},
294: {"in", 'i', 1, "input file, default: stdin"},
295: {"keyid", 'x', 1, "smartcard or TPM private key object handle"},
296: {"type", 't', 1, "type of key, default: priv"},
297: {"id", 'I', 1, "type of identifier, default: all"},
298: {"format", 'f', 1, "output format, default: pretty"},
299: }
300: });
301: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to keyid.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / pki / commands