From 36082a2fe36ecd800d784ae44c14f1f18c66a7e9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 28 Apr 2024 09:33:12 +0200 Subject: Adding upstream version 3.7.9. Signed-off-by: Daniel Baumann --- src/certtool-extras.c | 136 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 136 insertions(+) create mode 100644 src/certtool-extras.c (limited to 'src/certtool-extras.c') diff --git a/src/certtool-extras.c b/src/certtool-extras.c new file mode 100644 index 0000000..7ae54fa --- /dev/null +++ b/src/certtool-extras.c @@ -0,0 +1,136 @@ +/* + * Copyright (C) 2012 Lucas Fisher *lucas.fisher [at] gmail.com* + * Copyright (C) 2012 Free Software Foundation, Inc. + * + * This file is part of GnuTLS. + * + * GnuTLS is free software: you can redistribute it and/or modify it + * under the terms of the GNU General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * GnuTLS is distributed in the hope that it will be useful, but + * WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program. If not, see + * . + */ + +#include + +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include "certtool-common.h" +#include "certtool-cfg.h" + + +#define MAX_KEYS 256 + +/* Loads a x509 private key list + */ +gnutls_x509_privkey_t *load_privkey_list(int mand, size_t * privkey_size, + common_info_st * info) +{ + static gnutls_x509_privkey_t key[MAX_KEYS]; + char *ptr; + int ret, i; + gnutls_datum_t dat, file_data; + int ptr_size; + unsigned int flags = 0; + const char *pass; + + *privkey_size = 0; + fprintf(stderr, "Loading private key list...\n"); + + if (info->privkey == NULL) { + if (mand) { + fprintf(stderr, "missing --load-privkey"); + exit(1); + } else + return NULL; + } + + ret = gnutls_load_file(info->privkey, &file_data); + if (ret < 0) { + fprintf(stderr, "%s", info->privkey); + exit(1); + } + + ptr = (void *) file_data.data; + ptr_size = file_data.size; + + for (i = 0; i < MAX_KEYS; i++) { + ret = gnutls_x509_privkey_init(&key[i]); + if (ret < 0) { + fprintf(stderr, "privkey_init: %s", + gnutls_strerror(ret)); + exit(1); + } + + dat.data = (void *) ptr; + dat.size = ptr_size; + + ret = + gnutls_x509_privkey_import2(key[i], &dat, + info->incert_format, NULL, + 0); + if (ret == GNUTLS_E_DECRYPTION_FAILED) { + pass = get_password(info, &flags, 0); + ret = + gnutls_x509_privkey_import2(key[i], &dat, + info-> + incert_format, + pass, flags); + } + + if (ret < 0 && *privkey_size > 0) + break; + if (ret < 0) { + fprintf(stderr, "privkey_import: %s", + gnutls_strerror(ret)); + exit(1); + } + + (*privkey_size)++; + + if (info->incert_format != GNUTLS_X509_FMT_PEM) + break; + + ptr = strstr(ptr, "---END"); + if (ptr == NULL) + break; + ptr++; + + ptr_size = file_data.size; + ptr_size -= + ((unsigned char *) ptr - + (unsigned char *) file_data.data); + + if (ptr_size < 0) + break; + + } + + gnutls_free(file_data.data); + fprintf(stderr, "Loaded %d private keys.\n", (int) *privkey_size); + + return key; +} -- cgit v1.2.3