Update - OpenSSL 1.1.1-pre7-dev
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
/*
|
||||
* Generated by util/mkerr.pl DO NOT EDIT
|
||||
* Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
|
||||
* Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the OpenSSL license (the "License"). You may not use
|
||||
* this file except in compliance with the License. You can obtain a copy
|
||||
@@ -26,6 +26,7 @@ static const ERR_STRING_DATA PEM_str_functs[] = {
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_B2I, 0), "do_b2i"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_B2I_BIO, 0), "do_b2i_bio"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_BLOB_HEADER, 0), "do_blob_header"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_I2B, 0), "do_i2b"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PK8PKEY, 0), "do_pk8pkey"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PK8PKEY_FP, 0), "do_pk8pkey_fp"},
|
||||
{ERR_PACK(ERR_LIB_PEM, PEM_F_DO_PVK_BODY, 0), "do_PVK_body"},
|
||||
|
||||
+29
-33
@@ -1,5 +1,5 @@
|
||||
/*
|
||||
* Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
|
||||
* Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the OpenSSL license (the "License"). You may not use
|
||||
* this file except in compliance with the License. You can obtain a copy
|
||||
@@ -28,15 +28,16 @@ static int load_iv(char **fromp, unsigned char *to, int num);
|
||||
static int check_pem(const char *nm, const char *name);
|
||||
int pem_check_suffix(const char *pem_str, const char *suffix);
|
||||
|
||||
int PEM_def_callback(char *buf, int num, int w, void *key)
|
||||
int PEM_def_callback(char *buf, int num, int rwflag, void *userdata)
|
||||
{
|
||||
int i, j;
|
||||
int i, min_len;
|
||||
const char *prompt;
|
||||
|
||||
if (key) {
|
||||
i = strlen(key);
|
||||
/* We assume that the user passes a default password as userdata */
|
||||
if (userdata) {
|
||||
i = strlen(userdata);
|
||||
i = (i > num) ? num : i;
|
||||
memcpy(buf, key, i);
|
||||
memcpy(buf, userdata, i);
|
||||
return i;
|
||||
}
|
||||
|
||||
@@ -44,28 +45,22 @@ int PEM_def_callback(char *buf, int num, int w, void *key)
|
||||
if (prompt == NULL)
|
||||
prompt = "Enter PEM pass phrase:";
|
||||
|
||||
for (;;) {
|
||||
/*
|
||||
* We assume that w == 0 means decryption,
|
||||
* while w == 1 means encryption
|
||||
*/
|
||||
int min_len = w ? MIN_LENGTH : 0;
|
||||
/*
|
||||
* rwflag == 0 means decryption
|
||||
* rwflag == 1 means encryption
|
||||
*
|
||||
* We assume that for encryption, we want a minimum length, while for
|
||||
* decryption, we cannot know any minimum length, so we assume zero.
|
||||
*/
|
||||
min_len = rwflag ? MIN_LENGTH : 0;
|
||||
|
||||
i = EVP_read_pw_string_min(buf, min_len, num, prompt, w);
|
||||
if (i != 0) {
|
||||
PEMerr(PEM_F_PEM_DEF_CALLBACK, PEM_R_PROBLEMS_GETTING_PASSWORD);
|
||||
memset(buf, 0, (unsigned int)num);
|
||||
return -1;
|
||||
}
|
||||
j = strlen(buf);
|
||||
if (min_len && j < min_len) {
|
||||
fprintf(stderr,
|
||||
"phrase is too short, needs to be at least %d chars\n",
|
||||
min_len);
|
||||
} else
|
||||
break;
|
||||
i = EVP_read_pw_string_min(buf, min_len, num, prompt, rwflag);
|
||||
if (i != 0) {
|
||||
PEMerr(PEM_F_PEM_DEF_CALLBACK, PEM_R_PROBLEMS_GETTING_PASSWORD);
|
||||
memset(buf, 0, (unsigned int)num);
|
||||
return -1;
|
||||
}
|
||||
return j;
|
||||
return strlen(buf);
|
||||
}
|
||||
|
||||
void PEM_proc_type(char *buf, int type)
|
||||
@@ -435,7 +430,7 @@ int PEM_do_header(EVP_CIPHER_INFO *cipher, unsigned char *data, long *plen,
|
||||
keylen = PEM_def_callback(buf, PEM_BUFSIZE, 0, u);
|
||||
else
|
||||
keylen = callback(buf, PEM_BUFSIZE, 0, u);
|
||||
if (keylen <= 0) {
|
||||
if (keylen < 0) {
|
||||
PEMerr(PEM_F_PEM_DO_HEADER, PEM_R_BAD_PASSWORD_READ);
|
||||
return 0;
|
||||
}
|
||||
@@ -610,6 +605,7 @@ int PEM_write_bio(BIO *bp, const char *name, const char *header,
|
||||
unsigned char *buf = NULL;
|
||||
EVP_ENCODE_CTX *ctx = EVP_ENCODE_CTX_new();
|
||||
int reason = ERR_R_BUF_LIB;
|
||||
int retval = 0;
|
||||
|
||||
if (ctx == NULL) {
|
||||
reason = ERR_R_MALLOC_FAILURE;
|
||||
@@ -654,14 +650,14 @@ int PEM_write_bio(BIO *bp, const char *name, const char *header,
|
||||
(BIO_write(bp, name, nlen) != nlen) ||
|
||||
(BIO_write(bp, "-----\n", 6) != 6))
|
||||
goto err;
|
||||
OPENSSL_clear_free(buf, PEM_BUFSIZE * 8);
|
||||
EVP_ENCODE_CTX_free(ctx);
|
||||
return i + outl;
|
||||
retval = i + outl;
|
||||
|
||||
err:
|
||||
OPENSSL_clear_free(buf, PEM_BUFSIZE * 8);
|
||||
if (retval == 0)
|
||||
PEMerr(PEM_F_PEM_WRITE_BIO, reason);
|
||||
EVP_ENCODE_CTX_free(ctx);
|
||||
PEMerr(PEM_F_PEM_WRITE_BIO, reason);
|
||||
return 0;
|
||||
OPENSSL_clear_free(buf, PEM_BUFSIZE * 8);
|
||||
return retval;
|
||||
}
|
||||
|
||||
#ifndef OPENSSL_NO_STDIO
|
||||
|
||||
@@ -124,7 +124,7 @@ EVP_PKEY *d2i_PKCS8PrivateKey_bio(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
|
||||
klen = cb(psbuf, PEM_BUFSIZE, 0, u);
|
||||
else
|
||||
klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
|
||||
if (klen <= 0) {
|
||||
if (klen < 0) {
|
||||
PEMerr(PEM_F_D2I_PKCS8PRIVATEKEY_BIO, PEM_R_BAD_PASSWORD_READ);
|
||||
X509_SIG_free(p8);
|
||||
return NULL;
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
/*
|
||||
* Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
|
||||
* Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the OpenSSL license (the "License"). You may not use
|
||||
* this file except in compliance with the License. You can obtain a copy
|
||||
@@ -33,7 +33,7 @@ EVP_PKEY *PEM_read_bio_PrivateKey(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
|
||||
EVP_PKEY *ret = NULL;
|
||||
|
||||
if (!PEM_bytes_read_bio_secmem(&data, &len, &nm, PEM_STRING_EVP_PKEY, bp,
|
||||
cb, u))
|
||||
cb, u))
|
||||
return NULL;
|
||||
p = data;
|
||||
|
||||
@@ -60,7 +60,7 @@ EVP_PKEY *PEM_read_bio_PrivateKey(BIO *bp, EVP_PKEY **x, pem_password_cb *cb,
|
||||
klen = cb(psbuf, PEM_BUFSIZE, 0, u);
|
||||
else
|
||||
klen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
|
||||
if (klen <= 0) {
|
||||
if (klen < 0) {
|
||||
PEMerr(PEM_F_PEM_READ_BIO_PRIVATEKEY, PEM_R_BAD_PASSWORD_READ);
|
||||
X509_SIG_free(p8);
|
||||
goto err;
|
||||
|
||||
+20
-9
@@ -1,5 +1,5 @@
|
||||
/*
|
||||
* Copyright 2005-2016 The OpenSSL Project Authors. All Rights Reserved.
|
||||
* Copyright 2005-2018 The OpenSSL Project Authors. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the OpenSSL license (the "License"). You may not use
|
||||
* this file except in compliance with the License. You can obtain a copy
|
||||
@@ -285,14 +285,17 @@ static EVP_PKEY *b2i_dss(const unsigned char **in,
|
||||
goto memerr;
|
||||
|
||||
BN_CTX_free(ctx);
|
||||
ctx = NULL;
|
||||
}
|
||||
if (!DSA_set0_pqg(dsa, pbn, qbn, gbn))
|
||||
goto memerr;
|
||||
pbn = qbn = gbn = NULL;
|
||||
if (!DSA_set0_key(dsa, pub_key, priv_key))
|
||||
goto memerr;
|
||||
pub_key = priv_key = NULL;
|
||||
|
||||
EVP_PKEY_set1_DSA(ret, dsa);
|
||||
if (!EVP_PKEY_set1_DSA(ret, dsa))
|
||||
goto memerr;
|
||||
DSA_free(dsa);
|
||||
*in = p;
|
||||
return ret;
|
||||
@@ -345,12 +348,19 @@ static EVP_PKEY *b2i_rsa(const unsigned char **in,
|
||||
goto memerr;
|
||||
if (!read_lebn(&pin, nbyte, &d))
|
||||
goto memerr;
|
||||
RSA_set0_factors(rsa, p, q);
|
||||
RSA_set0_crt_params(rsa, dmp1, dmq1, iqmp);
|
||||
if (!RSA_set0_factors(rsa, p, q))
|
||||
goto memerr;
|
||||
p = q = NULL;
|
||||
if (!RSA_set0_crt_params(rsa, dmp1, dmq1, iqmp))
|
||||
goto memerr;
|
||||
dmp1 = dmq1 = iqmp = NULL;
|
||||
}
|
||||
RSA_set0_key(rsa, n, e, d);
|
||||
if (!RSA_set0_key(rsa, n, e, d))
|
||||
goto memerr;
|
||||
n = e = d = NULL;
|
||||
|
||||
EVP_PKEY_set1_RSA(ret, rsa);
|
||||
if (!EVP_PKEY_set1_RSA(ret, rsa))
|
||||
goto memerr;
|
||||
RSA_free(rsa);
|
||||
*in = pin;
|
||||
return ret;
|
||||
@@ -434,9 +444,10 @@ static int do_i2b(unsigned char **out, EVP_PKEY *pk, int ispub)
|
||||
if (*out)
|
||||
p = *out;
|
||||
else {
|
||||
p = OPENSSL_malloc(outlen);
|
||||
if (p == NULL)
|
||||
if ((p = OPENSSL_malloc(outlen)) == NULL) {
|
||||
PEMerr(PEM_F_DO_I2B, ERR_R_MALLOC_FAILURE);
|
||||
return -1;
|
||||
}
|
||||
*out = p;
|
||||
noinc = 1;
|
||||
}
|
||||
@@ -675,7 +686,7 @@ static EVP_PKEY *do_PVK_body(const unsigned char **in,
|
||||
inlen = cb(psbuf, PEM_BUFSIZE, 0, u);
|
||||
else
|
||||
inlen = PEM_def_callback(psbuf, PEM_BUFSIZE, 0, u);
|
||||
if (inlen <= 0) {
|
||||
if (inlen < 0) {
|
||||
PEMerr(PEM_F_DO_PVK_BODY, PEM_R_BAD_PASSWORD_READ);
|
||||
goto err;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user