Annotation of embedaddon/strongswan/src/pki/commands/pub.c, revision 1.1
1.1 ! misho 1: /*
! 2: * Copyright (C) 2009 Martin Willi
! 3: * Copyright (C) 2015-2017 Andreas Steffen
! 4: * HSR Hochschule fuer Technik Rapperswil
! 5: *
! 6: * This program is free software; you can redistribute it and/or modify it
! 7: * under the terms of the GNU General Public License as published by the
! 8: * Free Software Foundation; either version 2 of the License, or (at your
! 9: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
! 10: *
! 11: * This program is distributed in the hope that it will be useful, but
! 12: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
! 13: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
! 14: * for more details.
! 15: */
! 16:
! 17: #include <errno.h>
! 18:
! 19: #include "pki.h"
! 20:
! 21: #include <credentials/certificates/certificate.h>
! 22: #include <credentials/certificates/x509.h>
! 23:
! 24: /**
! 25: * Extract a public key from a private key/certificate
! 26: */
! 27: static int pub()
! 28: {
! 29: cred_encoding_type_t form = PUBKEY_SPKI_ASN1_DER;
! 30: credential_type_t type = CRED_PRIVATE_KEY;
! 31: int subtype = KEY_ANY;
! 32: certificate_t *cert;
! 33: private_key_t *private;
! 34: public_key_t *public;
! 35: chunk_t encoding;
! 36: char *file = NULL, *keyid = NULL;
! 37: void *cred;
! 38: char *arg;
! 39:
! 40: while (TRUE)
! 41: {
! 42: switch (command_getopt(&arg))
! 43: {
! 44: case 'h':
! 45: return command_usage(NULL);
! 46: case 't':
! 47: if (streq(arg, "rsa"))
! 48: {
! 49: type = CRED_PRIVATE_KEY;
! 50: subtype = KEY_RSA;
! 51: }
! 52: else if (streq(arg, "ecdsa"))
! 53: {
! 54: type = CRED_PRIVATE_KEY;
! 55: subtype = KEY_ECDSA;
! 56: }
! 57: else if (streq(arg, "bliss"))
! 58: {
! 59: type = CRED_PRIVATE_KEY;
! 60: subtype = KEY_BLISS;
! 61: }
! 62: else if (streq(arg, "priv"))
! 63: {
! 64: type = CRED_PRIVATE_KEY;
! 65: subtype = KEY_ANY;
! 66: }
! 67: else if (streq(arg, "pub"))
! 68: {
! 69: type = CRED_PUBLIC_KEY;
! 70: subtype = KEY_ANY;
! 71: }
! 72: else if (streq(arg, "pkcs10"))
! 73: {
! 74: type = CRED_CERTIFICATE;
! 75: subtype = CERT_PKCS10_REQUEST;
! 76: }
! 77: else if (streq(arg, "x509"))
! 78: {
! 79: type = CRED_CERTIFICATE;
! 80: subtype = CERT_X509;
! 81: }
! 82: else
! 83: {
! 84: return command_usage("invalid input type");
! 85: }
! 86: continue;
! 87: case 'f':
! 88: if (!get_form(arg, &form, CRED_PUBLIC_KEY))
! 89: {
! 90: return command_usage("invalid output format");
! 91: }
! 92: continue;
! 93: case 'i':
! 94: file = arg;
! 95: continue;
! 96: case 'x':
! 97: keyid = arg;
! 98: continue;
! 99: case EOF:
! 100: break;
! 101: default:
! 102: return command_usage("invalid --pub option");
! 103: }
! 104: break;
! 105: }
! 106: if (file)
! 107: {
! 108: cred = lib->creds->create(lib->creds, type, subtype,
! 109: BUILD_FROM_FILE, file, BUILD_END);
! 110: }
! 111: else if (keyid)
! 112: {
! 113: chunk_t chunk;
! 114:
! 115: chunk = chunk_from_hex(chunk_create(keyid, strlen(keyid)), NULL);
! 116: cred = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, KEY_ANY,
! 117: BUILD_PKCS11_KEYID, chunk, BUILD_END);
! 118: free(chunk.ptr);
! 119: }
! 120: else
! 121: {
! 122: chunk_t chunk;
! 123:
! 124: set_file_mode(stdin, CERT_ASN1_DER);
! 125: if (!chunk_from_fd(0, &chunk))
! 126: {
! 127: fprintf(stderr, "reading input failed: %s\n", strerror(errno));
! 128: return 1;
! 129: }
! 130: cred = lib->creds->create(lib->creds, type, subtype,
! 131: BUILD_BLOB, chunk, BUILD_END);
! 132: free(chunk.ptr);
! 133: }
! 134:
! 135: if (type == CRED_PRIVATE_KEY)
! 136: {
! 137: private = cred;
! 138: if (!private)
! 139: {
! 140: fprintf(stderr, "parsing private key failed\n");
! 141: return 1;
! 142: }
! 143: public = private->get_public_key(private);
! 144: private->destroy(private);
! 145: }
! 146: else if (type == CRED_PUBLIC_KEY)
! 147: {
! 148: public = cred;
! 149: if (!public)
! 150: {
! 151: fprintf(stderr, "parsing public key failed\n");
! 152: return 1;
! 153: }
! 154: }
! 155: else
! 156: {
! 157: cert = cred;
! 158: if (!cert)
! 159: {
! 160: fprintf(stderr, "parsing certificate failed\n");
! 161: return 1;
! 162: }
! 163: public = cert->get_public_key(cert);
! 164: cert->destroy(cert);
! 165: }
! 166: if (!public)
! 167: {
! 168: fprintf(stderr, "extracting public key failed\n");
! 169: return 1;
! 170: }
! 171: if (!public->get_encoding(public, form, &encoding))
! 172: {
! 173: fprintf(stderr, "public key encoding failed\n");
! 174: public->destroy(public);
! 175: return 1;
! 176: }
! 177: public->destroy(public);
! 178: set_file_mode(stdout, form);
! 179: if (fwrite(encoding.ptr, encoding.len, 1, stdout) != 1)
! 180: {
! 181: fprintf(stderr, "writing public key failed\n");
! 182: free(encoding.ptr);
! 183: return 1;
! 184: }
! 185: free(encoding.ptr);
! 186: return 0;
! 187: }
! 188:
! 189: /**
! 190: * Register the command.
! 191: */
! 192: static void __attribute__ ((constructor))reg()
! 193: {
! 194: command_register((command_t) {
! 195: pub, 'p', "pub",
! 196: "extract the public key from a private key/certificate",
! 197: {"[--in file|--keyid hex] [--type rsa|ecdsa|bliss|priv|pub|pkcs10|x509]",
! 198: "[--outform der|pem|dnskey|sshkey]"},
! 199: {
! 200: {"help", 'h', 0, "show usage information"},
! 201: {"in", 'i', 1, "input file, default: stdin"},
! 202: {"keyid", 'x', 1, "smartcard or TPM private key object handle"},
! 203: {"type", 't', 1, "type of credential, default: priv"},
! 204: {"outform", 'f', 1, "encoding of extracted public key, default: der"},
! 205: }
! 206: });
! 207: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to pub.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / pki / commands