1/* crypto/pem/pem.h */
2/* Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#ifndef HEADER_PEM_H
60#define HEADER_PEM_H
61
62#include <openssl/e_os2.h>
63#ifndef OPENSSL_NO_BIO
64#include <openssl/bio.h>
65#endif
66#ifndef OPENSSL_NO_STACK
67#include <openssl/stack.h>
68#endif
69#include <openssl/evp.h>
70#include <openssl/x509.h>
71#include <openssl/pem2.h>
72
73#ifdef  __cplusplus
74extern "C" {
75#endif
76
77#define PEM_BUFSIZE		1024
78
79#define PEM_OBJ_UNDEF		0
80#define PEM_OBJ_X509		1
81#define PEM_OBJ_X509_REQ	2
82#define PEM_OBJ_CRL		3
83#define PEM_OBJ_SSL_SESSION	4
84#define PEM_OBJ_PRIV_KEY	10
85#define PEM_OBJ_PRIV_RSA	11
86#define PEM_OBJ_PRIV_DSA	12
87#define PEM_OBJ_PRIV_DH		13
88#define PEM_OBJ_PUB_RSA		14
89#define PEM_OBJ_PUB_DSA		15
90#define PEM_OBJ_PUB_DH		16
91#define PEM_OBJ_DHPARAMS	17
92#define PEM_OBJ_DSAPARAMS	18
93#define PEM_OBJ_PRIV_RSA_PUBLIC	19
94#define PEM_OBJ_PRIV_ECDSA	20
95#define PEM_OBJ_PUB_ECDSA	21
96#define PEM_OBJ_ECPARAMETERS	22
97
98#define PEM_ERROR		30
99#define PEM_DEK_DES_CBC         40
100#define PEM_DEK_IDEA_CBC        45
101#define PEM_DEK_DES_EDE         50
102#define PEM_DEK_DES_ECB         60
103#define PEM_DEK_RSA             70
104#define PEM_DEK_RSA_MD2         80
105#define PEM_DEK_RSA_MD5         90
106
107#define PEM_MD_MD2		NID_md2
108#define PEM_MD_MD5		NID_md5
109#define PEM_MD_SHA		NID_sha
110#define PEM_MD_MD2_RSA		NID_md2WithRSAEncryption
111#define PEM_MD_MD5_RSA		NID_md5WithRSAEncryption
112#define PEM_MD_SHA_RSA		NID_sha1WithRSAEncryption
113
114#define PEM_STRING_X509_OLD	"X509 CERTIFICATE"
115#define PEM_STRING_X509		"CERTIFICATE"
116#define PEM_STRING_X509_PAIR	"CERTIFICATE PAIR"
117#define PEM_STRING_X509_TRUSTED	"TRUSTED CERTIFICATE"
118#define PEM_STRING_X509_REQ_OLD	"NEW CERTIFICATE REQUEST"
119#define PEM_STRING_X509_REQ	"CERTIFICATE REQUEST"
120#define PEM_STRING_X509_CRL	"X509 CRL"
121#define PEM_STRING_EVP_PKEY	"ANY PRIVATE KEY"
122#define PEM_STRING_PUBLIC	"PUBLIC KEY"
123#define PEM_STRING_RSA		"RSA PRIVATE KEY"
124#define PEM_STRING_RSA_PUBLIC	"RSA PUBLIC KEY"
125#define PEM_STRING_DSA		"DSA PRIVATE KEY"
126#define PEM_STRING_DSA_PUBLIC	"DSA PUBLIC KEY"
127#define PEM_STRING_PKCS7	"PKCS7"
128#define PEM_STRING_PKCS7_SIGNED	"PKCS #7 SIGNED DATA"
129#define PEM_STRING_PKCS8	"ENCRYPTED PRIVATE KEY"
130#define PEM_STRING_PKCS8INF	"PRIVATE KEY"
131#define PEM_STRING_DHPARAMS	"DH PARAMETERS"
132#define PEM_STRING_SSL_SESSION	"SSL SESSION PARAMETERS"
133#define PEM_STRING_DSAPARAMS	"DSA PARAMETERS"
134#define PEM_STRING_ECDSA_PUBLIC "ECDSA PUBLIC KEY"
135#define PEM_STRING_ECPARAMETERS "EC PARAMETERS"
136#define PEM_STRING_ECPRIVATEKEY	"EC PRIVATE KEY"
137#define PEM_STRING_CMS		"CMS"
138
139  /* Note that this structure is initialised by PEM_SealInit and cleaned up
140     by PEM_SealFinal (at least for now) */
141typedef struct PEM_Encode_Seal_st
142	{
143	EVP_ENCODE_CTX encode;
144	EVP_MD_CTX md;
145	EVP_CIPHER_CTX cipher;
146	} PEM_ENCODE_SEAL_CTX;
147
148/* enc_type is one off */
149#define PEM_TYPE_ENCRYPTED      10
150#define PEM_TYPE_MIC_ONLY       20
151#define PEM_TYPE_MIC_CLEAR      30
152#define PEM_TYPE_CLEAR		40
153
154typedef struct pem_recip_st
155	{
156	char *name;
157	X509_NAME *dn;
158
159	int cipher;
160	int key_enc;
161	/*	char iv[8]; unused and wrong size */
162	} PEM_USER;
163
164typedef struct pem_ctx_st
165	{
166	int type;		/* what type of object */
167
168	struct	{
169		int version;
170		int mode;
171		} proc_type;
172
173	char *domain;
174
175	struct	{
176		int cipher;
177	/* unused, and wrong size
178	   unsigned char iv[8]; */
179		} DEK_info;
180
181	PEM_USER *originator;
182
183	int num_recipient;
184	PEM_USER **recipient;
185
186#ifndef OPENSSL_NO_STACK
187	STACK *x509_chain;	/* certificate chain */
188#else
189	char *x509_chain;	/* certificate chain */
190#endif
191	EVP_MD *md;		/* signature type */
192
193	int md_enc;		/* is the md encrypted or not? */
194	int md_len;		/* length of md_data */
195	char *md_data;		/* message digest, could be pkey encrypted */
196
197	EVP_CIPHER *dec;	/* date encryption cipher */
198	int key_len;		/* key length */
199	unsigned char *key;	/* key */
200	/* unused, and wrong size
201	   unsigned char iv[8]; */
202
203
204	int  data_enc;		/* is the data encrypted */
205	int data_len;
206	unsigned char *data;
207	} PEM_CTX;
208
209/* These macros make the PEM_read/PEM_write functions easier to maintain and
210 * write. Now they are all implemented with either:
211 * IMPLEMENT_PEM_rw(...) or IMPLEMENT_PEM_rw_cb(...)
212 */
213
214#ifdef OPENSSL_NO_FP_API
215
216#define IMPLEMENT_PEM_read_fp(name, type, str, asn1) /**/
217#define IMPLEMENT_PEM_write_fp(name, type, str, asn1) /**/
218#define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) /**/
219#define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) /**/
220#define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) /**/
221
222#else
223
224#define IMPLEMENT_PEM_read_fp(name, type, str, asn1) \
225type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u)\
226{ \
227    return (type*)PEM_ASN1_read(CHECKED_D2I_OF(type, d2i_##asn1), \
228				str, fp, \
229				CHECKED_PPTR_OF(type, x), \
230				cb, u); \
231}
232
233#define IMPLEMENT_PEM_write_fp(name, type, str, asn1) \
234int PEM_write_##name(FILE *fp, type *x) \
235{ \
236    return PEM_ASN1_write(CHECKED_I2D_OF(type, i2d_##asn1), \
237			  str, fp, \
238			  CHECKED_PTR_OF(type, x), \
239			  NULL, NULL, 0, NULL, NULL); \
240}
241
242#define IMPLEMENT_PEM_write_fp_const(name, type, str, asn1) \
243int PEM_write_##name(FILE *fp, const type *x) \
244{ \
245    return PEM_ASN1_write(CHECKED_I2D_OF(const type, i2d_##asn1), \
246			  str, fp, \
247			  CHECKED_PTR_OF(const type, x), \
248			  NULL, NULL, 0, NULL, NULL); \
249}
250
251#define IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1) \
252int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
253	     unsigned char *kstr, int klen, pem_password_cb *cb, \
254		  void *u) \
255	{ \
256	    return PEM_ASN1_write(CHECKED_I2D_OF(type, i2d_##asn1), \
257				  str, fp, \
258				  CHECKED_PTR_OF(type, x), \
259				  enc, kstr, klen, cb, u); \
260	}
261
262#define IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1) \
263int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
264	     unsigned char *kstr, int klen, pem_password_cb *cb, \
265		  void *u) \
266	{ \
267	    return PEM_ASN1_write(CHECKED_I2D_OF(const type, i2d_##asn1), \
268				  str, fp, \
269				  CHECKED_PTR_OF(const type, x), \
270				  enc, kstr, klen, cb, u); \
271	}
272
273#endif
274
275#define IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
276type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u)\
277{ \
278    return (type*)PEM_ASN1_read_bio(CHECKED_D2I_OF(type, d2i_##asn1), \
279				    str, bp, \
280				    CHECKED_PPTR_OF(type, x), \
281				    cb, u); \
282}
283
284#define IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
285int PEM_write_bio_##name(BIO *bp, type *x) \
286{ \
287    return PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d_##asn1), \
288			      str, bp, \
289			      CHECKED_PTR_OF(type, x), \
290			      NULL, NULL, 0, NULL, NULL); \
291}
292
293#define IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
294int PEM_write_bio_##name(BIO *bp, const type *x) \
295{ \
296    return PEM_ASN1_write_bio(CHECKED_I2D_OF(const type, i2d_##asn1), \
297			      str, bp, \
298			      CHECKED_PTR_OF(const type, x), \
299			      NULL, NULL, 0, NULL, NULL); \
300}
301
302#define IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
303int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
304	     unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
305	{ \
306	    return PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d_##asn1), \
307				      str, bp, \
308				      CHECKED_PTR_OF(type, x), \
309				      enc, kstr, klen, cb, u); \
310	}
311
312#define IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
313int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
314	     unsigned char *kstr, int klen, pem_password_cb *cb, void *u) \
315	{ \
316	    return PEM_ASN1_write_bio(CHECKED_I2D_OF(const type, i2d_##asn1), \
317				      str, bp, \
318				      CHECKED_PTR_OF(const type, x), \
319				      enc, kstr, klen, cb, u); \
320	}
321
322#define IMPLEMENT_PEM_write(name, type, str, asn1) \
323	IMPLEMENT_PEM_write_bio(name, type, str, asn1) \
324	IMPLEMENT_PEM_write_fp(name, type, str, asn1)
325
326#define IMPLEMENT_PEM_write_const(name, type, str, asn1) \
327	IMPLEMENT_PEM_write_bio_const(name, type, str, asn1) \
328	IMPLEMENT_PEM_write_fp_const(name, type, str, asn1)
329
330#define IMPLEMENT_PEM_write_cb(name, type, str, asn1) \
331	IMPLEMENT_PEM_write_cb_bio(name, type, str, asn1) \
332	IMPLEMENT_PEM_write_cb_fp(name, type, str, asn1)
333
334#define IMPLEMENT_PEM_write_cb_const(name, type, str, asn1) \
335	IMPLEMENT_PEM_write_cb_bio_const(name, type, str, asn1) \
336	IMPLEMENT_PEM_write_cb_fp_const(name, type, str, asn1)
337
338#define IMPLEMENT_PEM_read(name, type, str, asn1) \
339	IMPLEMENT_PEM_read_bio(name, type, str, asn1) \
340	IMPLEMENT_PEM_read_fp(name, type, str, asn1)
341
342#define IMPLEMENT_PEM_rw(name, type, str, asn1) \
343	IMPLEMENT_PEM_read(name, type, str, asn1) \
344	IMPLEMENT_PEM_write(name, type, str, asn1)
345
346#define IMPLEMENT_PEM_rw_const(name, type, str, asn1) \
347	IMPLEMENT_PEM_read(name, type, str, asn1) \
348	IMPLEMENT_PEM_write_const(name, type, str, asn1)
349
350#define IMPLEMENT_PEM_rw_cb(name, type, str, asn1) \
351	IMPLEMENT_PEM_read(name, type, str, asn1) \
352	IMPLEMENT_PEM_write_cb(name, type, str, asn1)
353
354/* These are the same except they are for the declarations */
355
356#if defined(OPENSSL_SYS_WIN16) || defined(OPENSSL_NO_FP_API)
357
358#define DECLARE_PEM_read_fp(name, type) /**/
359#define DECLARE_PEM_write_fp(name, type) /**/
360#define DECLARE_PEM_write_fp_const(name, type) /**/
361#define DECLARE_PEM_write_cb_fp(name, type) /**/
362
363#else
364
365#define DECLARE_PEM_read_fp(name, type) \
366	type *PEM_read_##name(FILE *fp, type **x, pem_password_cb *cb, void *u);
367
368#define DECLARE_PEM_write_fp(name, type) \
369	int PEM_write_##name(FILE *fp, type *x);
370
371#define DECLARE_PEM_write_fp_const(name, type) \
372	int PEM_write_##name(FILE *fp, const type *x);
373
374#define DECLARE_PEM_write_cb_fp(name, type) \
375	int PEM_write_##name(FILE *fp, type *x, const EVP_CIPHER *enc, \
376	     unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
377
378#endif
379
380#ifndef OPENSSL_NO_BIO
381#define DECLARE_PEM_read_bio(name, type) \
382	type *PEM_read_bio_##name(BIO *bp, type **x, pem_password_cb *cb, void *u);
383
384#define DECLARE_PEM_write_bio(name, type) \
385	int PEM_write_bio_##name(BIO *bp, type *x);
386
387#define DECLARE_PEM_write_bio_const(name, type) \
388	int PEM_write_bio_##name(BIO *bp, const type *x);
389
390#define DECLARE_PEM_write_cb_bio(name, type) \
391	int PEM_write_bio_##name(BIO *bp, type *x, const EVP_CIPHER *enc, \
392	     unsigned char *kstr, int klen, pem_password_cb *cb, void *u);
393
394#else
395
396#define DECLARE_PEM_read_bio(name, type) /**/
397#define DECLARE_PEM_write_bio(name, type) /**/
398#define DECLARE_PEM_write_bio_const(name, type) /**/
399#define DECLARE_PEM_write_cb_bio(name, type) /**/
400
401#endif
402
403#define DECLARE_PEM_write(name, type) \
404	DECLARE_PEM_write_bio(name, type) \
405	DECLARE_PEM_write_fp(name, type)
406
407#define DECLARE_PEM_write_const(name, type) \
408	DECLARE_PEM_write_bio_const(name, type) \
409	DECLARE_PEM_write_fp_const(name, type)
410
411#define DECLARE_PEM_write_cb(name, type) \
412	DECLARE_PEM_write_cb_bio(name, type) \
413	DECLARE_PEM_write_cb_fp(name, type)
414
415#define DECLARE_PEM_read(name, type) \
416	DECLARE_PEM_read_bio(name, type) \
417	DECLARE_PEM_read_fp(name, type)
418
419#define DECLARE_PEM_rw(name, type) \
420	DECLARE_PEM_read(name, type) \
421	DECLARE_PEM_write(name, type)
422
423#define DECLARE_PEM_rw_const(name, type) \
424	DECLARE_PEM_read(name, type) \
425	DECLARE_PEM_write_const(name, type)
426
427#define DECLARE_PEM_rw_cb(name, type) \
428	DECLARE_PEM_read(name, type) \
429	DECLARE_PEM_write_cb(name, type)
430
431#ifdef SSLEAY_MACROS
432
433#define PEM_write_SSL_SESSION(fp,x) \
434		PEM_ASN1_write((int (*)())i2d_SSL_SESSION, \
435			PEM_STRING_SSL_SESSION,fp, (char *)x, NULL,NULL,0,NULL,NULL)
436#define PEM_write_X509(fp,x) \
437		PEM_ASN1_write((int (*)())i2d_X509,PEM_STRING_X509,fp, \
438			(char *)x, NULL,NULL,0,NULL,NULL)
439#define PEM_write_X509_REQ(fp,x) PEM_ASN1_write( \
440		(int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,fp,(char *)x, \
441			NULL,NULL,0,NULL,NULL)
442#define PEM_write_X509_CRL(fp,x) \
443		PEM_ASN1_write((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL, \
444			fp,(char *)x, NULL,NULL,0,NULL,NULL)
445#define	PEM_write_RSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
446		PEM_ASN1_write((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,fp,\
447			(char *)x,enc,kstr,klen,cb,u)
448#define	PEM_write_RSAPublicKey(fp,x) \
449		PEM_ASN1_write((int (*)())i2d_RSAPublicKey,\
450			PEM_STRING_RSA_PUBLIC,fp,(char *)x,NULL,NULL,0,NULL,NULL)
451#define	PEM_write_DSAPrivateKey(fp,x,enc,kstr,klen,cb,u) \
452		PEM_ASN1_write((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,fp,\
453			(char *)x,enc,kstr,klen,cb,u)
454#define	PEM_write_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
455		PEM_ASN1_write((int (*)())i2d_PrivateKey,\
456		(((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
457			bp,(char *)x,enc,kstr,klen,cb,u)
458#define PEM_write_PKCS7(fp,x) \
459		PEM_ASN1_write((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,fp, \
460			(char *)x, NULL,NULL,0,NULL,NULL)
461#define PEM_write_DHparams(fp,x) \
462		PEM_ASN1_write((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,fp,\
463			(char *)x,NULL,NULL,0,NULL,NULL)
464
465#define PEM_write_NETSCAPE_CERT_SEQUENCE(fp,x) \
466                PEM_ASN1_write((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
467			PEM_STRING_X509,fp, \
468                        (char *)x, NULL,NULL,0,NULL,NULL)
469
470#define	PEM_read_SSL_SESSION(fp,x,cb,u) (SSL_SESSION *)PEM_ASN1_read( \
471	(char *(*)())d2i_SSL_SESSION,PEM_STRING_SSL_SESSION,fp,(char **)x,cb,u)
472#define	PEM_read_X509(fp,x,cb,u) (X509 *)PEM_ASN1_read( \
473	(char *(*)())d2i_X509,PEM_STRING_X509,fp,(char **)x,cb,u)
474#define	PEM_read_X509_REQ(fp,x,cb,u) (X509_REQ *)PEM_ASN1_read( \
475	(char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,fp,(char **)x,cb,u)
476#define	PEM_read_X509_CRL(fp,x,cb,u) (X509_CRL *)PEM_ASN1_read( \
477	(char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,fp,(char **)x,cb,u)
478#define	PEM_read_RSAPrivateKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
479	(char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,fp,(char **)x,cb,u)
480#define	PEM_read_RSAPublicKey(fp,x,cb,u) (RSA *)PEM_ASN1_read( \
481	(char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,fp,(char **)x,cb,u)
482#define	PEM_read_DSAPrivateKey(fp,x,cb,u) (DSA *)PEM_ASN1_read( \
483	(char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,fp,(char **)x,cb,u)
484#define	PEM_read_PrivateKey(fp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read( \
485	(char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,fp,(char **)x,cb,u)
486#define	PEM_read_PKCS7(fp,x,cb,u) (PKCS7 *)PEM_ASN1_read( \
487	(char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,fp,(char **)x,cb,u)
488#define	PEM_read_DHparams(fp,x,cb,u) (DH *)PEM_ASN1_read( \
489	(char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,fp,(char **)x,cb,u)
490
491#define PEM_read_NETSCAPE_CERT_SEQUENCE(fp,x,cb,u) \
492		(NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read( \
493        (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,fp,\
494							(char **)x,cb,u)
495
496#define PEM_write_bio_X509(bp,x) \
497		PEM_ASN1_write_bio((int (*)())i2d_X509,PEM_STRING_X509,bp, \
498			(char *)x, NULL,NULL,0,NULL,NULL)
499#define PEM_write_bio_X509_REQ(bp,x) PEM_ASN1_write_bio( \
500		(int (*)())i2d_X509_REQ,PEM_STRING_X509_REQ,bp,(char *)x, \
501			NULL,NULL,0,NULL,NULL)
502#define PEM_write_bio_X509_CRL(bp,x) \
503		PEM_ASN1_write_bio((int (*)())i2d_X509_CRL,PEM_STRING_X509_CRL,\
504			bp,(char *)x, NULL,NULL,0,NULL,NULL)
505#define	PEM_write_bio_RSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
506		PEM_ASN1_write_bio((int (*)())i2d_RSAPrivateKey,PEM_STRING_RSA,\
507			bp,(char *)x,enc,kstr,klen,cb,u)
508#define	PEM_write_bio_RSAPublicKey(bp,x) \
509		PEM_ASN1_write_bio((int (*)())i2d_RSAPublicKey, \
510			PEM_STRING_RSA_PUBLIC,\
511			bp,(char *)x,NULL,NULL,0,NULL,NULL)
512#define	PEM_write_bio_DSAPrivateKey(bp,x,enc,kstr,klen,cb,u) \
513		PEM_ASN1_write_bio((int (*)())i2d_DSAPrivateKey,PEM_STRING_DSA,\
514			bp,(char *)x,enc,kstr,klen,cb,u)
515#define	PEM_write_bio_PrivateKey(bp,x,enc,kstr,klen,cb,u) \
516		PEM_ASN1_write_bio((int (*)())i2d_PrivateKey,\
517		(((x)->type == EVP_PKEY_DSA)?PEM_STRING_DSA:PEM_STRING_RSA),\
518			bp,(char *)x,enc,kstr,klen,cb,u)
519#define PEM_write_bio_PKCS7(bp,x) \
520		PEM_ASN1_write_bio((int (*)())i2d_PKCS7,PEM_STRING_PKCS7,bp, \
521			(char *)x, NULL,NULL,0,NULL,NULL)
522#define PEM_write_bio_DHparams(bp,x) \
523		PEM_ASN1_write_bio((int (*)())i2d_DHparams,PEM_STRING_DHPARAMS,\
524			bp,(char *)x,NULL,NULL,0,NULL,NULL)
525#define PEM_write_bio_DSAparams(bp,x) \
526		PEM_ASN1_write_bio((int (*)())i2d_DSAparams, \
527			PEM_STRING_DSAPARAMS,bp,(char *)x,NULL,NULL,0,NULL,NULL)
528
529#define PEM_write_bio_NETSCAPE_CERT_SEQUENCE(bp,x) \
530                PEM_ASN1_write_bio((int (*)())i2d_NETSCAPE_CERT_SEQUENCE, \
531			PEM_STRING_X509,bp, \
532                        (char *)x, NULL,NULL,0,NULL,NULL)
533
534#define	PEM_read_bio_X509(bp,x,cb,u) (X509 *)PEM_ASN1_read_bio( \
535	(char *(*)())d2i_X509,PEM_STRING_X509,bp,(char **)x,cb,u)
536#define	PEM_read_bio_X509_REQ(bp,x,cb,u) (X509_REQ *)PEM_ASN1_read_bio( \
537	(char *(*)())d2i_X509_REQ,PEM_STRING_X509_REQ,bp,(char **)x,cb,u)
538#define	PEM_read_bio_X509_CRL(bp,x,cb,u) (X509_CRL *)PEM_ASN1_read_bio( \
539	(char *(*)())d2i_X509_CRL,PEM_STRING_X509_CRL,bp,(char **)x,cb,u)
540#define	PEM_read_bio_RSAPrivateKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
541	(char *(*)())d2i_RSAPrivateKey,PEM_STRING_RSA,bp,(char **)x,cb,u)
542#define	PEM_read_bio_RSAPublicKey(bp,x,cb,u) (RSA *)PEM_ASN1_read_bio( \
543	(char *(*)())d2i_RSAPublicKey,PEM_STRING_RSA_PUBLIC,bp,(char **)x,cb,u)
544#define	PEM_read_bio_DSAPrivateKey(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
545	(char *(*)())d2i_DSAPrivateKey,PEM_STRING_DSA,bp,(char **)x,cb,u)
546#define	PEM_read_bio_PrivateKey(bp,x,cb,u) (EVP_PKEY *)PEM_ASN1_read_bio( \
547	(char *(*)())d2i_PrivateKey,PEM_STRING_EVP_PKEY,bp,(char **)x,cb,u)
548
549#define	PEM_read_bio_PKCS7(bp,x,cb,u) (PKCS7 *)PEM_ASN1_read_bio( \
550	(char *(*)())d2i_PKCS7,PEM_STRING_PKCS7,bp,(char **)x,cb,u)
551#define	PEM_read_bio_DHparams(bp,x,cb,u) (DH *)PEM_ASN1_read_bio( \
552	(char *(*)())d2i_DHparams,PEM_STRING_DHPARAMS,bp,(char **)x,cb,u)
553#define	PEM_read_bio_DSAparams(bp,x,cb,u) (DSA *)PEM_ASN1_read_bio( \
554	(char *(*)())d2i_DSAparams,PEM_STRING_DSAPARAMS,bp,(char **)x,cb,u)
555
556#define PEM_read_bio_NETSCAPE_CERT_SEQUENCE(bp,x,cb,u) \
557		(NETSCAPE_CERT_SEQUENCE *)PEM_ASN1_read_bio( \
558        (char *(*)())d2i_NETSCAPE_CERT_SEQUENCE,PEM_STRING_X509,bp,\
559							(char **)x,cb,u)
560
561#endif
562
563#if 1
564/* "userdata": new with OpenSSL 0.9.4 */
565typedef int pem_password_cb(char *buf, int size, int rwflag, void *userdata);
566#else
567/* OpenSSL 0.9.3, 0.9.3a */
568typedef int pem_password_cb(char *buf, int size, int rwflag);
569#endif
570
571int	PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher);
572int	PEM_do_header (EVP_CIPHER_INFO *cipher, unsigned char *data,long *len,
573	pem_password_cb *callback,void *u);
574
575#ifndef OPENSSL_NO_BIO
576int	PEM_read_bio(BIO *bp, char **name, char **header,
577		unsigned char **data,long *len);
578int	PEM_write_bio(BIO *bp,const char *name,char *hdr,unsigned char *data,
579		long len);
580int PEM_bytes_read_bio(unsigned char **pdata, long *plen, char **pnm, const char *name, BIO *bp,
581	     pem_password_cb *cb, void *u);
582void *	PEM_ASN1_read_bio(d2i_of_void *d2i, const char *name, BIO *bp,
583			  void **x, pem_password_cb *cb, void *u);
584
585#define PEM_ASN1_read_bio_of(type,d2i,name,bp,x,cb,u) \
586    ((type*)PEM_ASN1_read_bio(CHECKED_D2I_OF(type, d2i), \
587			      name, bp,			\
588			      CHECKED_PPTR_OF(type, x), \
589			      cb, u))
590
591int	PEM_ASN1_write_bio(i2d_of_void *i2d,const char *name,BIO *bp,char *x,
592			   const EVP_CIPHER *enc,unsigned char *kstr,int klen,
593			   pem_password_cb *cb, void *u);
594
595#define PEM_ASN1_write_bio_of(type,i2d,name,bp,x,enc,kstr,klen,cb,u) \
596    (PEM_ASN1_write_bio(CHECKED_I2D_OF(type, i2d), \
597			name, bp,		   \
598			CHECKED_PTR_OF(type, x), \
599			enc, kstr, klen, cb, u))
600
601STACK_OF(X509_INFO) *	PEM_X509_INFO_read_bio(BIO *bp, STACK_OF(X509_INFO) *sk, pem_password_cb *cb, void *u);
602int	PEM_X509_INFO_write_bio(BIO *bp,X509_INFO *xi, EVP_CIPHER *enc,
603		unsigned char *kstr, int klen, pem_password_cb *cd, void *u);
604#endif
605
606#ifndef OPENSSL_SYS_WIN16
607int	PEM_read(FILE *fp, char **name, char **header,
608		unsigned char **data,long *len);
609int	PEM_write(FILE *fp,char *name,char *hdr,unsigned char *data,long len);
610void *  PEM_ASN1_read(d2i_of_void *d2i, const char *name, FILE *fp, void **x,
611		      pem_password_cb *cb, void *u);
612int	PEM_ASN1_write(i2d_of_void *i2d,const char *name,FILE *fp,
613		       char *x,const EVP_CIPHER *enc,unsigned char *kstr,
614		       int klen,pem_password_cb *callback, void *u);
615STACK_OF(X509_INFO) *	PEM_X509_INFO_read(FILE *fp, STACK_OF(X509_INFO) *sk,
616	pem_password_cb *cb, void *u);
617#endif
618
619int	PEM_SealInit(PEM_ENCODE_SEAL_CTX *ctx, EVP_CIPHER *type,
620		EVP_MD *md_type, unsigned char **ek, int *ekl,
621		unsigned char *iv, EVP_PKEY **pubk, int npubk);
622void	PEM_SealUpdate(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *out, int *outl,
623		unsigned char *in, int inl);
624int	PEM_SealFinal(PEM_ENCODE_SEAL_CTX *ctx, unsigned char *sig,int *sigl,
625		unsigned char *out, int *outl, EVP_PKEY *priv);
626
627void    PEM_SignInit(EVP_MD_CTX *ctx, EVP_MD *type);
628void    PEM_SignUpdate(EVP_MD_CTX *ctx,unsigned char *d,unsigned int cnt);
629int	PEM_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
630		unsigned int *siglen, EVP_PKEY *pkey);
631
632int	PEM_def_callback(char *buf, int num, int w, void *key);
633void	PEM_proc_type(char *buf, int type);
634void	PEM_dek_info(char *buf, const char *type, int len, char *str);
635
636#ifndef SSLEAY_MACROS
637
638#include <openssl/symhacks.h>
639
640DECLARE_PEM_rw(X509, X509)
641
642DECLARE_PEM_rw(X509_AUX, X509)
643
644DECLARE_PEM_rw(X509_CERT_PAIR, X509_CERT_PAIR)
645
646DECLARE_PEM_rw(X509_REQ, X509_REQ)
647DECLARE_PEM_write(X509_REQ_NEW, X509_REQ)
648
649DECLARE_PEM_rw(X509_CRL, X509_CRL)
650
651DECLARE_PEM_rw(PKCS7, PKCS7)
652
653DECLARE_PEM_rw(NETSCAPE_CERT_SEQUENCE, NETSCAPE_CERT_SEQUENCE)
654
655DECLARE_PEM_rw(PKCS8, X509_SIG)
656
657DECLARE_PEM_rw(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
658
659#ifndef OPENSSL_NO_RSA
660
661DECLARE_PEM_rw_cb(RSAPrivateKey, RSA)
662
663DECLARE_PEM_rw_const(RSAPublicKey, RSA)
664DECLARE_PEM_rw(RSA_PUBKEY, RSA)
665
666#endif
667
668#ifndef OPENSSL_NO_DSA
669
670DECLARE_PEM_rw_cb(DSAPrivateKey, DSA)
671
672DECLARE_PEM_rw(DSA_PUBKEY, DSA)
673
674DECLARE_PEM_rw_const(DSAparams, DSA)
675
676#endif
677
678#ifndef OPENSSL_NO_EC
679DECLARE_PEM_rw_const(ECPKParameters, EC_GROUP)
680DECLARE_PEM_rw_cb(ECPrivateKey, EC_KEY)
681DECLARE_PEM_rw(EC_PUBKEY, EC_KEY)
682#endif
683
684#ifndef OPENSSL_NO_DH
685
686DECLARE_PEM_rw_const(DHparams, DH)
687
688#endif
689
690DECLARE_PEM_rw_cb(PrivateKey, EVP_PKEY)
691
692DECLARE_PEM_rw(PUBKEY, EVP_PKEY)
693
694int PEM_write_bio_PKCS8PrivateKey_nid(BIO *bp, EVP_PKEY *x, int nid,
695				  char *kstr, int klen,
696				  pem_password_cb *cb, void *u);
697int PEM_write_bio_PKCS8PrivateKey(BIO *, EVP_PKEY *, const EVP_CIPHER *,
698                                  char *, int, pem_password_cb *, void *);
699int i2d_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY *x, const EVP_CIPHER *enc,
700				  char *kstr, int klen,
701				  pem_password_cb *cb, void *u);
702int i2d_PKCS8PrivateKey_nid_bio(BIO *bp, EVP_PKEY *x, int nid,
703				  char *kstr, int klen,
704				  pem_password_cb *cb, void *u);
705EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb, void *u);
706
707int i2d_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY *x, const EVP_CIPHER *enc,
708				  char *kstr, int klen,
709				  pem_password_cb *cb, void *u);
710int i2d_PKCS8PrivateKey_nid_fp(FILE *fp, EVP_PKEY *x, int nid,
711				  char *kstr, int klen,
712				  pem_password_cb *cb, void *u);
713int PEM_write_PKCS8PrivateKey_nid(FILE *fp, EVP_PKEY *x, int nid,
714				  char *kstr, int klen,
715				  pem_password_cb *cb, void *u);
716
717EVP_PKEY *d2i_PKCS8PrivateKey_fp(FILE *fp, EVP_PKEY **x, pem_password_cb *cb, void *u);
718
719int PEM_write_PKCS8PrivateKey(FILE *fp,EVP_PKEY *x,const EVP_CIPHER *enc,
720			      char *kstr,int klen, pem_password_cb *cd, void *u);
721
722#endif /* SSLEAY_MACROS */
723
724
725/* BEGIN ERROR CODES */
726/* The following lines are auto generated by the script mkerr.pl. Any changes
727 * made after this point may be overwritten when the script is next run.
728 */
729void ERR_load_PEM_strings(void);
730
731/* Error codes for the PEM functions. */
732
733/* Function codes. */
734#define PEM_F_D2I_PKCS8PRIVATEKEY_BIO			 120
735#define PEM_F_D2I_PKCS8PRIVATEKEY_FP			 121
736#define PEM_F_DO_PK8PKEY				 126
737#define PEM_F_DO_PK8PKEY_FP				 125
738#define PEM_F_LOAD_IV					 101
739#define PEM_F_PEM_ASN1_READ				 102
740#define PEM_F_PEM_ASN1_READ_BIO				 103
741#define PEM_F_PEM_ASN1_WRITE				 104
742#define PEM_F_PEM_ASN1_WRITE_BIO			 105
743#define PEM_F_PEM_DEF_CALLBACK				 100
744#define PEM_F_PEM_DO_HEADER				 106
745#define PEM_F_PEM_F_PEM_WRITE_PKCS8PRIVATEKEY		 118
746#define PEM_F_PEM_GET_EVP_CIPHER_INFO			 107
747#define PEM_F_PEM_PK8PKEY				 119
748#define PEM_F_PEM_READ					 108
749#define PEM_F_PEM_READ_BIO				 109
750#define PEM_F_PEM_READ_BIO_PRIVATEKEY			 123
751#define PEM_F_PEM_READ_PRIVATEKEY			 124
752#define PEM_F_PEM_SEALFINAL				 110
753#define PEM_F_PEM_SEALINIT				 111
754#define PEM_F_PEM_SIGNFINAL				 112
755#define PEM_F_PEM_WRITE					 113
756#define PEM_F_PEM_WRITE_BIO				 114
757#define PEM_F_PEM_X509_INFO_READ			 115
758#define PEM_F_PEM_X509_INFO_READ_BIO			 116
759#define PEM_F_PEM_X509_INFO_WRITE_BIO			 117
760
761/* Reason codes. */
762#define PEM_R_BAD_BASE64_DECODE				 100
763#define PEM_R_BAD_DECRYPT				 101
764#define PEM_R_BAD_END_LINE				 102
765#define PEM_R_BAD_IV_CHARS				 103
766#define PEM_R_BAD_PASSWORD_READ				 104
767#define PEM_R_ERROR_CONVERTING_PRIVATE_KEY		 115
768#define PEM_R_NOT_DEK_INFO				 105
769#define PEM_R_NOT_ENCRYPTED				 106
770#define PEM_R_NOT_PROC_TYPE				 107
771#define PEM_R_NO_START_LINE				 108
772#define PEM_R_PROBLEMS_GETTING_PASSWORD			 109
773#define PEM_R_PUBLIC_KEY_NO_RSA				 110
774#define PEM_R_READ_KEY					 111
775#define PEM_R_SHORT_HEADER				 112
776#define PEM_R_UNSUPPORTED_CIPHER			 113
777#define PEM_R_UNSUPPORTED_ENCRYPTION			 114
778
779#ifdef  __cplusplus
780}
781#endif
782#endif
783