1/*
2 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License").  You may not use
5 * this file except in compliance with the License.  You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10#include "apps.h"
11#include <openssl/bio.h>
12#include <openssl/err.h>
13#include <openssl/rand.h>
14#include <openssl/conf.h>
15
16static char *save_rand_file;
17static STACK_OF(OPENSSL_STRING) *randfiles;
18
19void app_RAND_load_conf(CONF *c, const char *section)
20{
21    const char *randfile = NCONF_get_string(c, section, "RANDFILE");
22
23    if (randfile == NULL) {
24        ERR_clear_error();
25        return;
26    }
27    if (RAND_load_file(randfile, -1) < 0) {
28        BIO_printf(bio_err, "Can't load %s into RNG\n", randfile);
29        ERR_print_errors(bio_err);
30    }
31    if (save_rand_file == NULL) {
32        save_rand_file = OPENSSL_strdup(randfile);
33        /* If some internal memory errors have occurred */
34        if (save_rand_file == NULL) {
35            BIO_printf(bio_err, "Can't duplicate %s\n", randfile);
36            ERR_print_errors(bio_err);
37        }
38    }
39}
40
41static int loadfiles(char *name)
42{
43    char *p;
44    int last, ret = 1;
45
46    for ( ; ; ) {
47        last = 0;
48        for (p = name; *p != '\0' && *p != LIST_SEPARATOR_CHAR; p++)
49            continue;
50        if (*p == '\0')
51            last = 1;
52        *p = '\0';
53        if (RAND_load_file(name, -1) < 0) {
54            BIO_printf(bio_err, "Can't load %s into RNG\n", name);
55            ERR_print_errors(bio_err);
56            ret = 0;
57        }
58        if (last)
59            break;
60        name = p + 1;
61        if (*name == '\0')
62            break;
63    }
64    return ret;
65}
66
67int app_RAND_load(void)
68{
69    char *p;
70    int i, ret = 1;
71
72    for (i = 0; i < sk_OPENSSL_STRING_num(randfiles); i++) {
73        p = sk_OPENSSL_STRING_value(randfiles, i);
74        if (!loadfiles(p))
75            ret = 0;
76    }
77    sk_OPENSSL_STRING_free(randfiles);
78    return ret;
79}
80
81int app_RAND_write(void)
82{
83    int ret = 1;
84
85    if (save_rand_file == NULL)
86        return 1;
87    if (RAND_write_file(save_rand_file) == -1) {
88        BIO_printf(bio_err, "Cannot write random bytes:\n");
89        ERR_print_errors(bio_err);
90        ret = 0;
91    }
92    OPENSSL_free(save_rand_file);
93    save_rand_file =  NULL;
94    return ret;
95}
96
97
98/*
99 * See comments in opt_verify for explanation of this.
100 */
101enum r_range { OPT_R_ENUM };
102
103int opt_rand(int opt)
104{
105    switch ((enum r_range)opt) {
106    case OPT_R__FIRST:
107    case OPT_R__LAST:
108        break;
109    case OPT_R_RAND:
110        if (randfiles == NULL
111                && (randfiles = sk_OPENSSL_STRING_new_null()) == NULL)
112            return 0;
113        if (!sk_OPENSSL_STRING_push(randfiles, opt_arg()))
114            return 0;
115        break;
116    case OPT_R_WRITERAND:
117        OPENSSL_free(save_rand_file);
118        save_rand_file = OPENSSL_strdup(opt_arg());
119        if (save_rand_file == NULL)
120            return 0;
121        break;
122    }
123    return 1;
124}
125