Annotation of embedaddon/strongswan/src/pki/commands/pkcs12.c, revision 1.1
1.1 ! misho 1: /*
! 2: * Copyright (C) 2014 Tobias Brunner
! 3: * HSR Hochschule fuer Technik Rapperswil
! 4: *
! 5: * This program is free software; you can redistribute it and/or modify it
! 6: * under the terms of the GNU General Public License as published by the
! 7: * Free Software Foundation; either version 2 of the License, or (at your
! 8: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
! 9: *
! 10: * This program is distributed in the hope that it will be useful, but
! 11: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
! 12: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
! 13: * for more details.
! 14: */
! 15:
! 16: #include <errno.h>
! 17:
! 18: #include "pki.h"
! 19:
! 20: #include <credentials/certificates/x509.h>
! 21: #include <credentials/containers/pkcs12.h>
! 22:
! 23: /**
! 24: * Show info about PKCS#12 container
! 25: */
! 26: static int show(pkcs12_t *pkcs12)
! 27: {
! 28: enumerator_t *enumerator;
! 29: certificate_t *cert;
! 30: private_key_t *key;
! 31: int index = 1;
! 32:
! 33: printf("Certificates:\n");
! 34: enumerator = pkcs12->create_cert_enumerator(pkcs12);
! 35: while (enumerator->enumerate(enumerator, &cert))
! 36: {
! 37: x509_t *x509 = (x509_t*)cert;
! 38:
! 39: if (x509->get_flags(x509) & X509_CA)
! 40: {
! 41: printf("[%2d] \"%Y\" (CA)\n", index++, cert->get_subject(cert));
! 42: }
! 43: else
! 44: {
! 45: printf("[%2d] \"%Y\"\n", index++, cert->get_subject(cert));
! 46: }
! 47: }
! 48: enumerator->destroy(enumerator);
! 49:
! 50: printf("Private keys:\n");
! 51: enumerator = pkcs12->create_key_enumerator(pkcs12);
! 52: while (enumerator->enumerate(enumerator, &key))
! 53: {
! 54: printf("[%2d] %N %d bits\n", index++, key_type_names,
! 55: key->get_type(key), key->get_keysize(key));
! 56: }
! 57: enumerator->destroy(enumerator);
! 58: return 0;
! 59: }
! 60:
! 61: static int export(pkcs12_t *pkcs12, int index, char *outform)
! 62: {
! 63: cred_encoding_type_t form;
! 64: enumerator_t *enumerator;
! 65: certificate_t *cert;
! 66: private_key_t *key;
! 67: chunk_t encoding;
! 68: int i = 1;
! 69:
! 70: enumerator = pkcs12->create_cert_enumerator(pkcs12);
! 71: while (enumerator->enumerate(enumerator, &cert))
! 72: {
! 73: if (i++ == index)
! 74: {
! 75: form = CERT_ASN1_DER;
! 76: if (outform && !get_form(outform, &form, CRED_CERTIFICATE))
! 77: {
! 78: enumerator->destroy(enumerator);
! 79: return command_usage("invalid output format");
! 80: }
! 81: if (cert->get_encoding(cert, form, &encoding))
! 82: {
! 83: set_file_mode(stdout, form);
! 84: if (fwrite(encoding.ptr, encoding.len, 1, stdout) == 1)
! 85: {
! 86: free(encoding.ptr);
! 87: enumerator->destroy(enumerator);
! 88: return 0;
! 89: }
! 90: free(encoding.ptr);
! 91: }
! 92: fprintf(stderr, "certificate export failed\n");
! 93: enumerator->destroy(enumerator);
! 94: return 1;
! 95: }
! 96: }
! 97: enumerator->destroy(enumerator);
! 98:
! 99: enumerator = pkcs12->create_key_enumerator(pkcs12);
! 100: while (enumerator->enumerate(enumerator, &key))
! 101: {
! 102: if (i++ == index)
! 103: {
! 104: form = PRIVKEY_ASN1_DER;
! 105: if (outform && !get_form(outform, &form, CRED_PRIVATE_KEY))
! 106: {
! 107: enumerator->destroy(enumerator);
! 108: return command_usage("invalid output format");
! 109: }
! 110: if (key->get_encoding(key, form, &encoding))
! 111: {
! 112: set_file_mode(stdout, form);
! 113: if (fwrite(encoding.ptr, encoding.len, 1, stdout) == 1)
! 114: {
! 115: free(encoding.ptr);
! 116: enumerator->destroy(enumerator);
! 117: return 0;
! 118: }
! 119: free(encoding.ptr);
! 120: }
! 121: fprintf(stderr, "private key export failed\n");
! 122: enumerator->destroy(enumerator);
! 123: return 0;
! 124: }
! 125: }
! 126: enumerator->destroy(enumerator);
! 127:
! 128: fprintf(stderr, "invalid index %d\n", index);
! 129: return 1;
! 130: }
! 131:
! 132:
! 133: /**
! 134: * Handle PKCs#12 containers
! 135: */
! 136: static int pkcs12()
! 137: {
! 138: char *arg, *file = NULL, *outform = NULL;
! 139: pkcs12_t *p12 = NULL;
! 140: int res = 1, index = 0;
! 141: enum {
! 142: OP_NONE,
! 143: OP_LIST,
! 144: OP_EXPORT,
! 145: } op = OP_NONE;
! 146:
! 147: while (TRUE)
! 148: {
! 149: switch (command_getopt(&arg))
! 150: {
! 151: case 'h':
! 152: return command_usage(NULL);
! 153: case 'i':
! 154: file = arg;
! 155: continue;
! 156: case 'l':
! 157: if (op != OP_NONE)
! 158: {
! 159: goto invalid;
! 160: }
! 161: op = OP_LIST;
! 162: continue;
! 163: case 'e':
! 164: if (op != OP_NONE)
! 165: {
! 166: goto invalid;
! 167: }
! 168: op = OP_EXPORT;
! 169: index = atoi(arg);
! 170: continue;
! 171: case 'f':
! 172: outform = arg;
! 173: continue;
! 174: case EOF:
! 175: break;
! 176: default:
! 177: invalid:
! 178: return command_usage("invalid --pkcs12 option");
! 179: }
! 180: break;
! 181: }
! 182:
! 183: if (file)
! 184: {
! 185: p12 = lib->creds->create(lib->creds, CRED_CONTAINER, CONTAINER_PKCS12,
! 186: BUILD_FROM_FILE, file, BUILD_END);
! 187: }
! 188: else
! 189: {
! 190: chunk_t chunk;
! 191:
! 192: set_file_mode(stdin, CERT_ASN1_DER);
! 193: if (!chunk_from_fd(0, &chunk))
! 194: {
! 195: fprintf(stderr, "reading input failed: %s\n", strerror(errno));
! 196: return 1;
! 197: }
! 198: p12 = lib->creds->create(lib->creds, CRED_CONTAINER, CONTAINER_PKCS12,
! 199: BUILD_BLOB, chunk, BUILD_END);
! 200: free(chunk.ptr);
! 201: }
! 202:
! 203: if (!p12)
! 204: {
! 205: fprintf(stderr, "reading input failed!\n");
! 206: goto end;
! 207: }
! 208:
! 209: switch (op)
! 210: {
! 211: case OP_LIST:
! 212: res = show(p12);
! 213: break;
! 214: case OP_EXPORT:
! 215: res = export(p12, index, outform);
! 216: break;
! 217: default:
! 218: p12->container.destroy(&p12->container);
! 219: return command_usage(NULL);
! 220: }
! 221:
! 222: end:
! 223: if (p12)
! 224: {
! 225: p12->container.destroy(&p12->container);
! 226: }
! 227: return res;
! 228: }
! 229:
! 230: /**
! 231: * Register the command.
! 232: */
! 233: static void __attribute__ ((constructor))reg()
! 234: {
! 235: command_register((command_t) {
! 236: pkcs12, 'u', "pkcs12", "PKCS#12 functions",
! 237: {"--export index|--list [--in file]",
! 238: "[--outform der|pem]"},
! 239: {
! 240: {"help", 'h', 0, "show usage information"},
! 241: {"in", 'i', 1, "input file, default: stdin"},
! 242: {"list", 'l', 0, "list certificates and keys"},
! 243: {"export", 'e', 1, "export the credential with the given index"},
! 244: {"outform", 'f', 1, "encoding of exported credentials, default: der"},
! 245: }
! 246: });
! 247: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to pkcs12.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / pki / commands