1 | /* |
2 | * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved. |
3 | * |
4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at |
7 | * https://www.openssl.org/source/license.html |
8 | */ |
9 | |
10 | #include <stdio.h> |
11 | #include <time.h> |
12 | #include <errno.h> |
13 | |
14 | #include "internal/cryptlib.h" |
15 | #include <openssl/buffer.h> |
16 | #include <openssl/x509.h> |
17 | #include <openssl/pem.h> |
18 | #include "x509_local.h" |
19 | |
20 | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argc, |
21 | long argl, char **ret); |
22 | static X509_LOOKUP_METHOD x509_file_lookup = { |
23 | "Load file into cache" , |
24 | NULL, /* new_item */ |
25 | NULL, /* free */ |
26 | NULL, /* init */ |
27 | NULL, /* shutdown */ |
28 | by_file_ctrl, /* ctrl */ |
29 | NULL, /* get_by_subject */ |
30 | NULL, /* get_by_issuer_serial */ |
31 | NULL, /* get_by_fingerprint */ |
32 | NULL, /* get_by_alias */ |
33 | }; |
34 | |
35 | X509_LOOKUP_METHOD *X509_LOOKUP_file(void) |
36 | { |
37 | return &x509_file_lookup; |
38 | } |
39 | |
40 | static int by_file_ctrl(X509_LOOKUP *ctx, int cmd, const char *argp, |
41 | long argl, char **ret) |
42 | { |
43 | int ok = 0; |
44 | const char *file; |
45 | |
46 | switch (cmd) { |
47 | case X509_L_FILE_LOAD: |
48 | if (argl == X509_FILETYPE_DEFAULT) { |
49 | file = ossl_safe_getenv(X509_get_default_cert_file_env()); |
50 | if (file) |
51 | ok = (X509_load_cert_crl_file(ctx, file, |
52 | X509_FILETYPE_PEM) != 0); |
53 | |
54 | else |
55 | ok = (X509_load_cert_crl_file |
56 | (ctx, X509_get_default_cert_file(), |
57 | X509_FILETYPE_PEM) != 0); |
58 | |
59 | if (!ok) { |
60 | X509err(X509_F_BY_FILE_CTRL, X509_R_LOADING_DEFAULTS); |
61 | } |
62 | } else { |
63 | if (argl == X509_FILETYPE_PEM) |
64 | ok = (X509_load_cert_crl_file(ctx, argp, |
65 | X509_FILETYPE_PEM) != 0); |
66 | else |
67 | ok = (X509_load_cert_file(ctx, argp, (int)argl) != 0); |
68 | } |
69 | break; |
70 | } |
71 | return ok; |
72 | } |
73 | |
74 | int X509_load_cert_file(X509_LOOKUP *ctx, const char *file, int type) |
75 | { |
76 | int ret = 0; |
77 | BIO *in = NULL; |
78 | int i, count = 0; |
79 | X509 *x = NULL; |
80 | |
81 | in = BIO_new(BIO_s_file()); |
82 | |
83 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
84 | X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_SYS_LIB); |
85 | goto err; |
86 | } |
87 | |
88 | if (type == X509_FILETYPE_PEM) { |
89 | for (;;) { |
90 | x = PEM_read_bio_X509_AUX(in, NULL, NULL, "" ); |
91 | if (x == NULL) { |
92 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
93 | PEM_R_NO_START_LINE) && (count > 0)) { |
94 | ERR_clear_error(); |
95 | break; |
96 | } else { |
97 | X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_PEM_LIB); |
98 | goto err; |
99 | } |
100 | } |
101 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
102 | if (!i) |
103 | goto err; |
104 | count++; |
105 | X509_free(x); |
106 | x = NULL; |
107 | } |
108 | ret = count; |
109 | } else if (type == X509_FILETYPE_ASN1) { |
110 | x = d2i_X509_bio(in, NULL); |
111 | if (x == NULL) { |
112 | X509err(X509_F_X509_LOAD_CERT_FILE, ERR_R_ASN1_LIB); |
113 | goto err; |
114 | } |
115 | i = X509_STORE_add_cert(ctx->store_ctx, x); |
116 | if (!i) |
117 | goto err; |
118 | ret = i; |
119 | } else { |
120 | X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_BAD_X509_FILETYPE); |
121 | goto err; |
122 | } |
123 | if (ret == 0) |
124 | X509err(X509_F_X509_LOAD_CERT_FILE, X509_R_NO_CERTIFICATE_FOUND); |
125 | err: |
126 | X509_free(x); |
127 | BIO_free(in); |
128 | return ret; |
129 | } |
130 | |
131 | int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type) |
132 | { |
133 | int ret = 0; |
134 | BIO *in = NULL; |
135 | int i, count = 0; |
136 | X509_CRL *x = NULL; |
137 | |
138 | in = BIO_new(BIO_s_file()); |
139 | |
140 | if ((in == NULL) || (BIO_read_filename(in, file) <= 0)) { |
141 | X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_SYS_LIB); |
142 | goto err; |
143 | } |
144 | |
145 | if (type == X509_FILETYPE_PEM) { |
146 | for (;;) { |
147 | x = PEM_read_bio_X509_CRL(in, NULL, NULL, "" ); |
148 | if (x == NULL) { |
149 | if ((ERR_GET_REASON(ERR_peek_last_error()) == |
150 | PEM_R_NO_START_LINE) && (count > 0)) { |
151 | ERR_clear_error(); |
152 | break; |
153 | } else { |
154 | X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_PEM_LIB); |
155 | goto err; |
156 | } |
157 | } |
158 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
159 | if (!i) |
160 | goto err; |
161 | count++; |
162 | X509_CRL_free(x); |
163 | x = NULL; |
164 | } |
165 | ret = count; |
166 | } else if (type == X509_FILETYPE_ASN1) { |
167 | x = d2i_X509_CRL_bio(in, NULL); |
168 | if (x == NULL) { |
169 | X509err(X509_F_X509_LOAD_CRL_FILE, ERR_R_ASN1_LIB); |
170 | goto err; |
171 | } |
172 | i = X509_STORE_add_crl(ctx->store_ctx, x); |
173 | if (!i) |
174 | goto err; |
175 | ret = i; |
176 | } else { |
177 | X509err(X509_F_X509_LOAD_CRL_FILE, X509_R_BAD_X509_FILETYPE); |
178 | goto err; |
179 | } |
180 | if (ret == 0) |
181 | X509err(X509_F_X509_LOAD_CRL_FILE, X509_R_NO_CRL_FOUND); |
182 | err: |
183 | X509_CRL_free(x); |
184 | BIO_free(in); |
185 | return ret; |
186 | } |
187 | |
188 | int X509_load_cert_crl_file(X509_LOOKUP *ctx, const char *file, int type) |
189 | { |
190 | STACK_OF(X509_INFO) *inf; |
191 | X509_INFO *itmp; |
192 | BIO *in; |
193 | int i, count = 0; |
194 | |
195 | if (type != X509_FILETYPE_PEM) |
196 | return X509_load_cert_file(ctx, file, type); |
197 | in = BIO_new_file(file, "r" ); |
198 | if (!in) { |
199 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_SYS_LIB); |
200 | return 0; |
201 | } |
202 | inf = PEM_X509_INFO_read_bio(in, NULL, NULL, "" ); |
203 | BIO_free(in); |
204 | if (!inf) { |
205 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE, ERR_R_PEM_LIB); |
206 | return 0; |
207 | } |
208 | for (i = 0; i < sk_X509_INFO_num(inf); i++) { |
209 | itmp = sk_X509_INFO_value(inf, i); |
210 | if (itmp->x509) { |
211 | if (!X509_STORE_add_cert(ctx->store_ctx, itmp->x509)) |
212 | goto err; |
213 | count++; |
214 | } |
215 | if (itmp->crl) { |
216 | if (!X509_STORE_add_crl(ctx->store_ctx, itmp->crl)) |
217 | goto err; |
218 | count++; |
219 | } |
220 | } |
221 | if (count == 0) |
222 | X509err(X509_F_X509_LOAD_CERT_CRL_FILE, |
223 | X509_R_NO_CERTIFICATE_OR_CRL_FOUND); |
224 | err: |
225 | sk_X509_INFO_pop_free(inf, X509_INFO_free); |
226 | return count; |
227 | } |
228 | |