1/* apps/dsaparam.c */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#ifndef OPENSSL_NO_DSA
60#include <assert.h>
61#include <stdio.h>
62#include <stdlib.h>
63#include <time.h>
64#include <string.h>
65#include "apps.h"
66#include <openssl/bio.h>
67#include <openssl/err.h>
68#include <openssl/bn.h>
69#include <openssl/dsa.h>
70#include <openssl/x509.h>
71#include <openssl/pem.h>
72
73#undef PROG
74#define PROG	dsaparam_main
75
76/* -inform arg	- input format - default PEM (DER or PEM)
77 * -outform arg - output format - default PEM
78 * -in arg	- input file - default stdin
79 * -out arg	- output file - default stdout
80 * -noout
81 * -text
82 * -C
83 * -noout
84 * -genkey
85 */
86
87static void MS_CALLBACK dsa_cb(int p, int n, void *arg);
88
89int MAIN(int, char **);
90
91int MAIN(int argc, char **argv)
92	{
93#ifndef OPENSSL_NO_ENGINE
94	ENGINE *e = NULL;
95#endif
96	DSA *dsa=NULL;
97	int i,badops=0,text=0;
98	BIO *in=NULL,*out=NULL;
99	int informat,outformat,noout=0,C=0,ret=1;
100	char *infile,*outfile,*prog,*inrand=NULL;
101	int numbits= -1,num,genkey=0;
102	int need_rand=0;
103#ifndef OPENSSL_NO_ENGINE
104	char *engine=NULL;
105#endif
106
107	apps_startup();
108
109	if (bio_err == NULL)
110		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
111			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
112
113	if (!load_config(bio_err, NULL))
114		goto end;
115
116	infile=NULL;
117	outfile=NULL;
118	informat=FORMAT_PEM;
119	outformat=FORMAT_PEM;
120
121	prog=argv[0];
122	argc--;
123	argv++;
124	while (argc >= 1)
125		{
126		if 	(strcmp(*argv,"-inform") == 0)
127			{
128			if (--argc < 1) goto bad;
129			informat=str2fmt(*(++argv));
130			}
131		else if (strcmp(*argv,"-outform") == 0)
132			{
133			if (--argc < 1) goto bad;
134			outformat=str2fmt(*(++argv));
135			}
136		else if (strcmp(*argv,"-in") == 0)
137			{
138			if (--argc < 1) goto bad;
139			infile= *(++argv);
140			}
141		else if (strcmp(*argv,"-out") == 0)
142			{
143			if (--argc < 1) goto bad;
144			outfile= *(++argv);
145			}
146#ifndef OPENSSL_NO_ENGINE
147		else if(strcmp(*argv, "-engine") == 0)
148			{
149			if (--argc < 1) goto bad;
150			engine = *(++argv);
151			}
152#endif
153		else if (strcmp(*argv,"-text") == 0)
154			text=1;
155		else if (strcmp(*argv,"-C") == 0)
156			C=1;
157		else if (strcmp(*argv,"-genkey") == 0)
158			{
159			genkey=1;
160			need_rand=1;
161			}
162		else if (strcmp(*argv,"-rand") == 0)
163			{
164			if (--argc < 1) goto bad;
165			inrand= *(++argv);
166			need_rand=1;
167			}
168		else if (strcmp(*argv,"-noout") == 0)
169			noout=1;
170		else if (sscanf(*argv,"%d",&num) == 1)
171			{
172			/* generate a key */
173			numbits=num;
174			need_rand=1;
175			}
176		else
177			{
178			BIO_printf(bio_err,"unknown option %s\n",*argv);
179			badops=1;
180			break;
181			}
182		argc--;
183		argv++;
184		}
185
186	if (badops)
187		{
188bad:
189		BIO_printf(bio_err,"%s [options] [bits] <infile >outfile\n",prog);
190		BIO_printf(bio_err,"where options are\n");
191		BIO_printf(bio_err," -inform arg   input format - DER or PEM\n");
192		BIO_printf(bio_err," -outform arg  output format - DER or PEM\n");
193		BIO_printf(bio_err," -in arg       input file\n");
194		BIO_printf(bio_err," -out arg      output file\n");
195		BIO_printf(bio_err," -text         print as text\n");
196		BIO_printf(bio_err," -C            Output C code\n");
197		BIO_printf(bio_err," -noout        no output\n");
198		BIO_printf(bio_err," -genkey       generate a DSA key\n");
199		BIO_printf(bio_err," -rand         files to use for random number input\n");
200#ifndef OPENSSL_NO_ENGINE
201		BIO_printf(bio_err," -engine e     use engine e, possibly a hardware device.\n");
202#endif
203		BIO_printf(bio_err," number        number of bits to use for generating private key\n");
204		goto end;
205		}
206
207	ERR_load_crypto_strings();
208
209	in=BIO_new(BIO_s_file());
210	out=BIO_new(BIO_s_file());
211	if ((in == NULL) || (out == NULL))
212		{
213		ERR_print_errors(bio_err);
214		goto end;
215		}
216
217	if (infile == NULL)
218		BIO_set_fp(in,stdin,BIO_NOCLOSE);
219	else
220		{
221		if (BIO_read_filename(in,infile) <= 0)
222			{
223			perror(infile);
224			goto end;
225			}
226		}
227	if (outfile == NULL)
228		{
229		BIO_set_fp(out,stdout,BIO_NOCLOSE);
230#ifdef OPENSSL_SYS_VMS
231		{
232		BIO *tmpbio = BIO_new(BIO_f_linebuffer());
233		out = BIO_push(tmpbio, out);
234		}
235#endif
236		}
237	else
238		{
239		if (BIO_write_filename(out,outfile) <= 0)
240			{
241			perror(outfile);
242			goto end;
243			}
244		}
245
246#ifndef OPENSSL_NO_ENGINE
247        e = setup_engine(bio_err, engine, 0);
248#endif
249
250	if (need_rand)
251		{
252		app_RAND_load_file(NULL, bio_err, (inrand != NULL));
253		if (inrand != NULL)
254			BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
255				app_RAND_load_files(inrand));
256		}
257
258	if (numbits > 0)
259		{
260		assert(need_rand);
261		BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
262	        BIO_printf(bio_err,"This could take some time\n");
263	        dsa=DSA_generate_parameters(num,NULL,0,NULL,NULL, dsa_cb,bio_err);
264		}
265	else if	(informat == FORMAT_ASN1)
266		dsa=d2i_DSAparams_bio(in,NULL);
267	else if (informat == FORMAT_PEM)
268		dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
269	else
270		{
271		BIO_printf(bio_err,"bad input format specified\n");
272		goto end;
273		}
274	if (dsa == NULL)
275		{
276		BIO_printf(bio_err,"unable to load DSA parameters\n");
277		ERR_print_errors(bio_err);
278		goto end;
279		}
280
281	if (text)
282		{
283		DSAparams_print(out,dsa);
284		}
285
286	if (C)
287		{
288		unsigned char *data;
289		int l,len,bits_p,bits_q,bits_g;
290
291		len=BN_num_bytes(dsa->p);
292		bits_p=BN_num_bits(dsa->p);
293		bits_q=BN_num_bits(dsa->q);
294		bits_g=BN_num_bits(dsa->g);
295		data=(unsigned char *)OPENSSL_malloc(len+20);
296		if (data == NULL)
297			{
298			perror("OPENSSL_malloc");
299			goto end;
300			}
301		l=BN_bn2bin(dsa->p,data);
302		printf("static unsigned char dsa%d_p[]={",bits_p);
303		for (i=0; i<l; i++)
304			{
305			if ((i%12) == 0) printf("\n\t");
306			printf("0x%02X,",data[i]);
307			}
308		printf("\n\t};\n");
309
310		l=BN_bn2bin(dsa->q,data);
311		printf("static unsigned char dsa%d_q[]={",bits_p);
312		for (i=0; i<l; i++)
313			{
314			if ((i%12) == 0) printf("\n\t");
315			printf("0x%02X,",data[i]);
316			}
317		printf("\n\t};\n");
318
319		l=BN_bn2bin(dsa->g,data);
320		printf("static unsigned char dsa%d_g[]={",bits_p);
321		for (i=0; i<l; i++)
322			{
323			if ((i%12) == 0) printf("\n\t");
324			printf("0x%02X,",data[i]);
325			}
326		printf("\n\t};\n\n");
327
328		printf("DSA *get_dsa%d()\n\t{\n",bits_p);
329		printf("\tDSA *dsa;\n\n");
330		printf("\tif ((dsa=DSA_new()) == NULL) return(NULL);\n");
331		printf("\tdsa->p=BN_bin2bn(dsa%d_p,sizeof(dsa%d_p),NULL);\n",
332			bits_p,bits_p);
333		printf("\tdsa->q=BN_bin2bn(dsa%d_q,sizeof(dsa%d_q),NULL);\n",
334			bits_p,bits_p);
335		printf("\tdsa->g=BN_bin2bn(dsa%d_g,sizeof(dsa%d_g),NULL);\n",
336			bits_p,bits_p);
337		printf("\tif ((dsa->p == NULL) || (dsa->q == NULL) || (dsa->g == NULL))\n");
338		printf("\t\t{ DSA_free(dsa); return(NULL); }\n");
339		printf("\treturn(dsa);\n\t}\n");
340		}
341
342
343	if (!noout)
344		{
345		if 	(outformat == FORMAT_ASN1)
346			i=i2d_DSAparams_bio(out,dsa);
347		else if (outformat == FORMAT_PEM)
348			i=PEM_write_bio_DSAparams(out,dsa);
349		else	{
350			BIO_printf(bio_err,"bad output format specified for outfile\n");
351			goto end;
352			}
353		if (!i)
354			{
355			BIO_printf(bio_err,"unable to write DSA parameters\n");
356			ERR_print_errors(bio_err);
357			goto end;
358			}
359		}
360	if (genkey)
361		{
362		DSA *dsakey;
363
364		assert(need_rand);
365		if ((dsakey=DSAparams_dup(dsa)) == NULL) goto end;
366		if (!DSA_generate_key(dsakey)) goto end;
367		if 	(outformat == FORMAT_ASN1)
368			i=i2d_DSAPrivateKey_bio(out,dsakey);
369		else if (outformat == FORMAT_PEM)
370			i=PEM_write_bio_DSAPrivateKey(out,dsakey,NULL,NULL,0,NULL,NULL);
371		else	{
372			BIO_printf(bio_err,"bad output format specified for outfile\n");
373			goto end;
374			}
375		DSA_free(dsakey);
376		}
377	if (need_rand)
378		app_RAND_write_file(NULL, bio_err);
379	ret=0;
380end:
381	if (in != NULL) BIO_free(in);
382	if (out != NULL) BIO_free_all(out);
383	if (dsa != NULL) DSA_free(dsa);
384	apps_shutdown();
385	OPENSSL_EXIT(ret);
386	}
387
388static void MS_CALLBACK dsa_cb(int p, int n, void *arg)
389	{
390	char c='*';
391
392	if (p == 0) c='.';
393	if (p == 1) c='+';
394	if (p == 2) c='*';
395	if (p == 3) c='\n';
396	BIO_write(arg,&c,1);
397	(void)BIO_flush(arg);
398#ifdef LINT
399	p=n;
400#endif
401	}
402#endif
403