|
 |
5eb4589 |
diff -up openssl-1.0.0/crypto/pem/pem_all.c.pkcs8 openssl-1.0.0/crypto/pem/pem_all.c
|
|
|
5eb4589 |
--- openssl-1.0.0/crypto/pem/pem_all.c.pkcs8 2006-11-06 20:53:37.000000000 +0100
|
|
|
5eb4589 |
+++ openssl-1.0.0/crypto/pem/pem_all.c 2012-04-26 17:17:35.765317652 +0200
|
|
|
5eb4589 |
@@ -147,7 +147,37 @@ IMPLEMENT_PEM_rw(PKCS7, PKCS7, PEM_STRIN
|
|
|
5eb4589 |
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE,
|
|
|
5eb4589 |
PEM_STRING_X509, NETSCAPE_CERT_SEQUENCE)
|
|
|
5eb4589 |
+#ifdef OPENSSL_FIPS
|
|
|
5eb4589 |
|
|
|
5eb4589 |
+static int fips_PEM_write_bio_PrivateKey(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+ {
|
|
|
5eb4589 |
+ if (FIPS_mode())
|
|
|
5eb4589 |
+ return PEM_write_bio_PKCS8PrivateKey(bp, x, enc,
|
|
|
5eb4589 |
+ (char *)kstr, klen, cb, u);
|
|
|
5eb4589 |
+ else
|
|
|
5eb4589 |
+ return PEM_ASN1_write_bio((i2d_of_void *)i2d_PrivateKey,
|
|
|
5eb4589 |
+ ((x->type == EVP_PKEY_DSA)?PEM_STRING_DSA:(x->type == EVP_PKEY_RSA)?PEM_STRING_RSA:PEM_STRING_ECPRIVATEKEY),
|
|
|
5eb4589 |
+ bp,x,enc,kstr,klen,cb,u);
|
|
|
5eb4589 |
+ }
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#ifndef OPENSSL_NO_FP_API
|
|
|
5eb4589 |
+static int fips_PEM_write_PrivateKey(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+ {
|
|
|
5eb4589 |
+ if (FIPS_mode())
|
|
|
5eb4589 |
+ return PEM_write_PKCS8PrivateKey(fp, x, enc,
|
|
|
5eb4589 |
+ (char *)kstr, klen, cb, u);
|
|
|
5eb4589 |
+ else
|
|
|
5eb4589 |
+ return PEM_ASN1_write((i2d_of_void *)i2d_PrivateKey,
|
|
|
5eb4589 |
+ ((x->type == EVP_PKEY_DSA)?PEM_STRING_DSA:(x->type == EVP_PKEY_RSA)?PEM_STRING_RSA:PEM_STRING_ECPRIVATEKEY),
|
|
|
5eb4589 |
+ fp,x,enc,kstr,klen,cb,u);
|
|
|
5eb4589 |
+ }
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
|
|
|
5eb4589 |
#ifndef OPENSSL_NO_RSA
|
|
|
5eb4589 |
|
|
|
5eb4589 |
@@ -193,7 +223,49 @@ RSA *PEM_read_RSAPrivateKey(FILE *fp, RS
|
|
|
5eb4589 |
|
|
|
5eb4589 |
#endif
|
|
|
5eb4589 |
|
|
|
5eb4589 |
+#ifdef OPENSSL_FIPS
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+int PEM_write_bio_RSAPrivateKey(BIO *bp, RSA *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+ EVP_PKEY_set1_RSA(k, x);
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+ ret = fips_PEM_write_bio_PrivateKey(bp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#ifndef OPENSSL_NO_FP_API
|
|
|
5eb4589 |
+int PEM_write_RSAPrivateKey(FILE *fp, RSA *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+ EVP_PKEY_set1_RSA(k, x);
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+ ret = fips_PEM_write_PrivateKey(fp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#else
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_write_cb_const(RSAPrivateKey, RSA, PEM_STRING_RSA, RSAPrivateKey)
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw_const(RSAPublicKey, RSA, PEM_STRING_RSA_PUBLIC, RSAPublicKey)
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw(RSA_PUBKEY, RSA, PEM_STRING_PUBLIC, RSA_PUBKEY)
|
|
|
5eb4589 |
|
|
|
5eb4589 |
@@ -223,7 +295,47 @@ DSA *PEM_read_bio_DSAPrivateKey(BIO *bp,
|
|
|
5eb4589 |
return pkey_get_dsa(pktmp, dsa); /* will free pktmp */
|
|
|
5eb4589 |
}
|
|
|
5eb4589 |
|
|
|
5eb4589 |
+#ifdef OPENSSL_FIPS
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+int PEM_write_bio_DSAPrivateKey(BIO *bp, DSA *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+ EVP_PKEY_set1_DSA(k, x);
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+ ret = fips_PEM_write_bio_PrivateKey(bp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#ifndef OPENSSL_NO_FP_API
|
|
|
5eb4589 |
+int PEM_write_DSAPrivateKey(FILE *fp, DSA *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+ EVP_PKEY_set1_DSA(k, x);
|
|
|
5eb4589 |
+ ret = fips_PEM_write_PrivateKey(fp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#else
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_write_cb_const(DSAPrivateKey, DSA, PEM_STRING_DSA, DSAPrivateKey)
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw(DSA_PUBKEY, DSA, PEM_STRING_PUBLIC, DSA_PUBKEY)
|
|
|
5eb4589 |
|
|
|
5eb4589 |
#ifndef OPENSSL_NO_FP_API
|
|
|
5eb4589 |
@@ -269,8 +381,49 @@ EC_KEY *PEM_read_bio_ECPrivateKey(BIO *b
|
|
|
5eb4589 |
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw_const(ECPKParameters, EC_GROUP, PEM_STRING_ECPARAMETERS, ECPKParameters)
|
|
|
5eb4589 |
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#ifdef OPENSSL_FIPS
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+int PEM_write_bio_ECPrivateKey(BIO *bp, EC_KEY *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+ EVP_PKEY_set1_EC_KEY(k, x);
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+ ret = fips_PEM_write_bio_PrivateKey(bp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#ifndef OPENSSL_NO_FP_API
|
|
|
5eb4589 |
+int PEM_write_ECPrivateKey(FILE *fp, EC_KEY *x, const EVP_CIPHER *enc,
|
|
|
5eb4589 |
+ unsigned char *kstr, int klen,
|
|
|
5eb4589 |
+ pem_password_cb *cb, void *u)
|
|
|
5eb4589 |
+{
|
|
|
5eb4589 |
+ EVP_PKEY *k;
|
|
|
5eb4589 |
+ int ret;
|
|
|
5eb4589 |
+ k = EVP_PKEY_new();
|
|
|
5eb4589 |
+ if (!k)
|
|
|
5eb4589 |
+ return 0;
|
|
|
5eb4589 |
+ EVP_PKEY_set1_EC_KEY(k, x);
|
|
|
5eb4589 |
+ ret = fips_PEM_write_PrivateKey(fp, k, enc, kstr, klen, cb, u);
|
|
|
5eb4589 |
+ EVP_PKEY_free(k);
|
|
|
5eb4589 |
+ return ret;
|
|
|
5eb4589 |
+}
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
+#else
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_write_cb(ECPrivateKey, EC_KEY, PEM_STRING_ECPRIVATEKEY, ECPrivateKey)
|
|
|
5eb4589 |
|
|
|
5eb4589 |
+#endif
|
|
|
5eb4589 |
+
|
|
|
5eb4589 |
IMPLEMENT_PEM_rw(EC_PUBKEY, EC_KEY, PEM_STRING_PUBLIC, EC_PUBKEY)
|
|
|
5eb4589 |
|
|
|
5eb4589 |
#ifndef OPENSSL_NO_FP_API
|