Head

GCC Code Coverage Report

Directory:	./		Exec	Total	Coverage
File:	usr.bin/openssl/genrsa.c	Lines:	85	105	81.0 %
Date:	2017-11-13	Branches:	48	73	65.8 %


/* $OpenBSD: genrsa.c,v 1.9 2017/01/20 08:57:12 deraadt Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 *
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 *
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 *
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 *
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include <openssl/opensslconf.h>

/* Until the key-gen callbacks are modified to use newer prototypes, we allow
 * deprecated functions for openssl-internal code */
#ifdef OPENSSL_NO_DEPRECATED
#undef OPENSSL_NO_DEPRECATED
#endif


#include <sys/types.h>
#include <sys/stat.h>

#include <stdio.h>
#include <string.h>

#include "apps.h"

#include <openssl/bio.h>
#include <openssl/bn.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/pem.h>
#include <openssl/rsa.h>
#include <openssl/x509.h>

#define DEFBITS	2048

static int genrsa_cb(int p, int n, BN_GENCB * cb);

int
genrsa_main(int argc, char **argv)
{
	BN_GENCB cb;
	int ret = 1;
	int i, num = DEFBITS;
	long l;
	const EVP_CIPHER *enc = NULL;
	unsigned long f4 = RSA_F4;
	char *outfile = NULL;
	char *passargout = NULL, *passout = NULL;
	BIO *out = NULL;
	BIGNUM *bn = BN_new();
	RSA *rsa = NULL;

	if (single_execution) {
		if (pledge("stdio cpath wpath rpath tty flock", NULL) == -1) {
			perror("pledge");
			exit(1);
		}
	}

	if (!bn)
		goto err;

	BN_GENCB_set(&cb, genrsa_cb, bio_err);

	if ((out = BIO_new(BIO_s_file())) == NULL) {
		BIO_printf(bio_err, "unable to create BIO for output\n");
		goto err;
	}
	argv++;
	argc--;
	for (;;) {
		if (argc <= 0)
			break;
		if (strcmp(*argv, "-out") == 0) {
			if (--argc < 1)
				goto bad;
			outfile = *(++argv);
		} else if (strcmp(*argv, "-3") == 0)
			f4 = 3;
		else if (strcmp(*argv, "-F4") == 0 || strcmp(*argv, "-f4") == 0)
			f4 = RSA_F4;
#ifndef OPENSSL_NO_DES
		else if (strcmp(*argv, "-des") == 0)
			enc = EVP_des_cbc();
		else if (strcmp(*argv, "-des3") == 0)
			enc = EVP_des_ede3_cbc();
#endif
#ifndef OPENSSL_NO_IDEA
		else if (strcmp(*argv, "-idea") == 0)
			enc = EVP_idea_cbc();
#endif
#ifndef OPENSSL_NO_AES
		else if (strcmp(*argv, "-aes128") == 0)
			enc = EVP_aes_128_cbc();
		else if (strcmp(*argv, "-aes192") == 0)
			enc = EVP_aes_192_cbc();
		else if (strcmp(*argv, "-aes256") == 0)
			enc = EVP_aes_256_cbc();
#endif
#ifndef OPENSSL_NO_CAMELLIA
		else if (strcmp(*argv, "-camellia128") == 0)
			enc = EVP_camellia_128_cbc();
		else if (strcmp(*argv, "-camellia192") == 0)
			enc = EVP_camellia_192_cbc();
		else if (strcmp(*argv, "-camellia256") == 0)
			enc = EVP_camellia_256_cbc();
#endif
		else if (strcmp(*argv, "-passout") == 0) {
			if (--argc < 1)
				goto bad;
			passargout = *(++argv);
		} else
			break;
		argv++;
		argc--;
	}
	if ((argc >= 1) && ((sscanf(*argv, "%d", &num) == 0) || (num < 0))) {
bad:
		BIO_printf(bio_err, "usage: genrsa [args] [numbits]\n");
		BIO_printf(bio_err, " -des            encrypt the generated key with DES in cbc mode\n");
		BIO_printf(bio_err, " -des3           encrypt the generated key with DES in ede cbc mode (168 bit key)\n");
#ifndef OPENSSL_NO_IDEA
		BIO_printf(bio_err, " -idea           encrypt the generated key with IDEA in cbc mode\n");
#endif
#ifndef OPENSSL_NO_AES
		BIO_printf(bio_err, " -aes128, -aes192, -aes256\n");
		BIO_printf(bio_err, "                 encrypt PEM output with cbc aes\n");
#endif
#ifndef OPENSSL_NO_CAMELLIA
		BIO_printf(bio_err, " -camellia128, -camellia192, -camellia256\n");
		BIO_printf(bio_err, "                 encrypt PEM output with cbc camellia\n");
#endif
		BIO_printf(bio_err, " -out file       output the key to 'file\n");
		BIO_printf(bio_err, " -passout arg    output file pass phrase source\n");
		BIO_printf(bio_err, " -f4             use F4 (0x10001) for the E value\n");
		BIO_printf(bio_err, " -3              use 3 for the E value\n");
		goto err;
	}

	if (!app_passwd(bio_err, NULL, passargout, NULL, &passout)) {
		BIO_printf(bio_err, "Error getting password\n");
		goto err;
	}

	if (outfile == NULL) {
		BIO_set_fp(out, stdout, BIO_NOCLOSE);
	} else {
		if (BIO_write_filename(out, outfile) <= 0) {
			perror(outfile);
			goto err;
		}
	}

	BIO_printf(bio_err, "Generating RSA private key, %d bit long modulus\n",
	    num);
	rsa = RSA_new();
	if (!rsa)
		goto err;

	if (!BN_set_word(bn, f4) || !RSA_generate_key_ex(rsa, num, bn, &cb))
		goto err;

	/*
	 * We need to do the following for when the base number size is <
	 * long, esp windows 3.1 :-(.
	 */
	l = 0L;
	for (i = 0; i < rsa->e->top; i++) {
#ifndef _LP64
		l <<= BN_BITS4;
		l <<= BN_BITS4;
#endif
		l += rsa->e->d[i];
	}
	BIO_printf(bio_err, "e is %ld (0x%lX)\n", l, l);
	{
		PW_CB_DATA cb_data;
		cb_data.password = passout;
		cb_data.prompt_info = outfile;
		if (!PEM_write_bio_RSAPrivateKey(out, rsa, enc, NULL, 0,
			password_callback, &cb_data))
			goto err;
	}

	ret = 0;
err:
	if (bn)
		BN_free(bn);
	if (rsa)
		RSA_free(rsa);
	if (out)
		BIO_free_all(out);
	free(passout);
	if (ret != 0)
		ERR_print_errors(bio_err);

	return (ret);
}

static int
genrsa_cb(int p, int n, BN_GENCB * cb)
{
	char c = '*';

	if (p == 0)
		c = '.';
	if (p == 1)
		c = '+';
	if (p == 2)
		c = '*';
	if (p == 3)
		c = '\n';
	BIO_write(cb->arg, &c, 1);
	(void) BIO_flush(cb->arg);
	return 1;
}


Generated by: GCOVR (Version 3.3)

Line	Branch	Exec	Source
1			/* $OpenBSD: genrsa.c,v 1.9 2017/01/20 08:57:12 deraadt Exp $ */
2			/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3			* All rights reserved.
4			*
5			* This package is an SSL implementation written
6			* by Eric Young (eay@cryptsoft.com).
7			* The implementation was written so as to conform with Netscapes SSL.
8			*
9			* This library is free for commercial and non-commercial use as long as
10			* the following conditions are aheared to. The following conditions
11			* apply to all code found in this distribution, be it the RC4, RSA,
12			* lhash, DES, etc., code; not just the SSL code. The SSL documentation
13			* included with this distribution is covered by the same copyright terms
14			* except that the holder is Tim Hudson (tjh@cryptsoft.com).
15			*
16			* Copyright remains Eric Young's, and as such any Copyright notices in
17			* the code are not to be removed.
18			* If this package is used in a product, Eric Young should be given attribution
19			* as the author of the parts of the library used.
20			* This can be in the form of a textual message at program startup or
21			* in documentation (online or textual) provided with the package.
22			*
23			* Redistribution and use in source and binary forms, with or without
24			* modification, are permitted provided that the following conditions
25			* are met:
26			* 1. Redistributions of source code must retain the copyright
27			* notice, this list of conditions and the following disclaimer.
28			* 2. Redistributions in binary form must reproduce the above copyright
29			* notice, this list of conditions and the following disclaimer in the
30			* documentation and/or other materials provided with the distribution.
31			* 3. All advertising materials mentioning features or use of this software
32			* must display the following acknowledgement:
33			* "This product includes cryptographic software written by
34			* Eric Young (eay@cryptsoft.com)"
35			* The word 'cryptographic' can be left out if the rouines from the library
36			* being used are not cryptographic related :-).
37			* 4. If you include any Windows specific code (or a derivative thereof) from
38			* the apps directory (application code) you must include an acknowledgement:
39			* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40			*
41			* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42			* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43			* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44			* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45			* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46			* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47			* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48			* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49			* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50			* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51			* SUCH DAMAGE.
52			*
53			* The licence and distribution terms for any publically available version or
54			* derivative of this code cannot be changed. i.e. this code cannot simply be
55			* copied and put under another distribution licence
56			* [including the GNU Public Licence.]
57			*/
58
59			#include <openssl/opensslconf.h>
60
61			/* Until the key-gen callbacks are modified to use newer prototypes, we allow
62			* deprecated functions for openssl-internal code */
63			#ifdef OPENSSL_NO_DEPRECATED
64			#undef OPENSSL_NO_DEPRECATED
65			#endif
66
67
68			#include <sys/types.h>
69			#include <sys/stat.h>
70
71			#include <stdio.h>
72			#include <string.h>
73
74			#include "apps.h"
75
76			#include <openssl/bio.h>
77			#include <openssl/bn.h>
78			#include <openssl/err.h>
79			#include <openssl/evp.h>
80			#include <openssl/pem.h>
81			#include <openssl/rsa.h>
82			#include <openssl/x509.h>
83
84			#define DEFBITS 2048
85
86			static int genrsa_cb(int p, int n, BN_GENCB * cb);
87
88			int
89			genrsa_main(int argc, char **argv)
90			{
91		24	BN_GENCB cb;
92			int ret = 1;
93		12	int i, num = DEFBITS;
94			long l;
95			const EVP_CIPHER *enc = NULL;
96			unsigned long f4 = RSA_F4;
97			char *outfile = NULL;
98		12	char passargout = NULL, passout = NULL;
99			BIO *out = NULL;
100		12	BIGNUM *bn = BN_new();
101			RSA *rsa = NULL;
102
103	✓✗	12	if (single_execution) {
104	✗✓	12	if (pledge("stdio cpath wpath rpath tty flock", NULL) == -1) {
105			perror("pledge");
106			exit(1);
107			}
108			}
109
110	✓✗	12	if (!bn)
111			goto err;
112
113		12	BN_GENCB_set(&cb, genrsa_cb, bio_err);
114
115	✗✓	12	if ((out = BIO_new(BIO_s_file())) == NULL) {
116			BIO_printf(bio_err, "unable to create BIO for output\n");
117			goto err;
118			}
119		12	argv++;
120		12	argc--;
121		32	for (;;) {
122	✓✓	32	if (argc <= 0)
123			break;
124	✓✓	28	if (strcmp(*argv, "-out") == 0) {
125	✓✗	8	if (--argc < 1)
126			goto bad;
127		8	outfile = *(++argv);
128	✗✓	28	} else if (strcmp(*argv, "-3") == 0)
129			f4 = 3;
130	✓✗✓✓	40	else if (strcmp(argv, "-F4") == 0 \|\| strcmp(argv, "-f4") == 0)
131		4	f4 = RSA_F4;
132			#ifndef OPENSSL_NO_DES
133	✗✓	16	else if (strcmp(*argv, "-des") == 0)
134			enc = EVP_des_cbc();
135	✗✓	16	else if (strcmp(*argv, "-des3") == 0)
136			enc = EVP_des_ede3_cbc();
137			#endif
138			#ifndef OPENSSL_NO_IDEA
139	✗✓	16	else if (strcmp(*argv, "-idea") == 0)
140			enc = EVP_idea_cbc();
141			#endif
142			#ifndef OPENSSL_NO_AES
143	✗✓	16	else if (strcmp(*argv, "-aes128") == 0)
144			enc = EVP_aes_128_cbc();
145	✗✓	16	else if (strcmp(*argv, "-aes192") == 0)
146			enc = EVP_aes_192_cbc();
147	✓✓	16	else if (strcmp(*argv, "-aes256") == 0)
148		4	enc = EVP_aes_256_cbc();
149			#endif
150			#ifndef OPENSSL_NO_CAMELLIA
151	✗✓	12	else if (strcmp(*argv, "-camellia128") == 0)
152			enc = EVP_camellia_128_cbc();
153	✗✓	12	else if (strcmp(*argv, "-camellia192") == 0)
154			enc = EVP_camellia_192_cbc();
155	✗✓	12	else if (strcmp(*argv, "-camellia256") == 0)
156			enc = EVP_camellia_256_cbc();
157			#endif
158	✓✓	12	else if (strcmp(*argv, "-passout") == 0) {
159	✓✗	4	if (--argc < 1)
160			goto bad;
161		4	passargout = *(++argv);
162			} else
163			break;
164		20	argv++;
165		20	argc--;
166			}
167	✓✓✓✓	20	if ((argc >= 1) && ((sscanf(*argv, "%d", &num) == 0) \|\| (num < 0))) {
168			bad:
169		4	BIO_printf(bio_err, "usage: genrsa [args] [numbits]\n");
170		4	BIO_printf(bio_err, " -des encrypt the generated key with DES in cbc mode\n");
171		4	BIO_printf(bio_err, " -des3 encrypt the generated key with DES in ede cbc mode (168 bit key)\n");
172			#ifndef OPENSSL_NO_IDEA
173		4	BIO_printf(bio_err, " -idea encrypt the generated key with IDEA in cbc mode\n");
174			#endif
175			#ifndef OPENSSL_NO_AES
176		4	BIO_printf(bio_err, " -aes128, -aes192, -aes256\n");
177		4	BIO_printf(bio_err, " encrypt PEM output with cbc aes\n");
178			#endif
179			#ifndef OPENSSL_NO_CAMELLIA
180		4	BIO_printf(bio_err, " -camellia128, -camellia192, -camellia256\n");
181		4	BIO_printf(bio_err, " encrypt PEM output with cbc camellia\n");
182			#endif
183		4	BIO_printf(bio_err, " -out file output the key to 'file\n");
184		4	BIO_printf(bio_err, " -passout arg output file pass phrase source\n");
185		4	BIO_printf(bio_err, " -f4 use F4 (0x10001) for the E value\n");
186		4	BIO_printf(bio_err, " -3 use 3 for the E value\n");
187		4	goto err;
188			}
189
190	✗✓	8	if (!app_passwd(bio_err, NULL, passargout, NULL, &passout)) {
191			BIO_printf(bio_err, "Error getting password\n");
192			goto err;
193			}
194
195	✗✓	8	if (outfile == NULL) {
196			BIO_set_fp(out, stdout, BIO_NOCLOSE);
197			} else {
198	✗✓	8	if (BIO_write_filename(out, outfile) <= 0) {
199			perror(outfile);
200			goto err;
201			}
202			}
203
204		16	BIO_printf(bio_err, "Generating RSA private key, %d bit long modulus\n",
205		8	num);
206		8	rsa = RSA_new();
207	✓✗	8	if (!rsa)
208			goto err;
209
210	✓✗✓✗	16	if (!BN_set_word(bn, f4) \|\| !RSA_generate_key_ex(rsa, num, bn, &cb))
211			goto err;
212
213			/*
214			* We need to do the following for when the base number size is <
215			* long, esp windows 3.1 :-(.
216			*/
217			l = 0L;
218	✓✓	32	for (i = 0; i < rsa->e->top; i++) {
219			#ifndef _LP64
220			l <<= BN_BITS4;
221			l <<= BN_BITS4;
222			#endif
223		8	l += rsa->e->d[i];
224			}
225		8	BIO_printf(bio_err, "e is %ld (0x%lX)\n", l, l);
226			{
227		8	PW_CB_DATA cb_data;
228		8	cb_data.password = passout;
229		8	cb_data.prompt_info = outfile;
230	✗✓	8	if (!PEM_write_bio_RSAPrivateKey(out, rsa, enc, NULL, 0,
231			password_callback, &cb_data))
232			goto err;
233	✓✓✓	32	}
234
235		8	ret = 0;
236			err:
237	✓✗	12	if (bn)
238		12	BN_free(bn);
239	✓✓	12	if (rsa)
240		8	RSA_free(rsa);
241	✓✗	12	if (out)
242		12	BIO_free_all(out);
243		12	free(passout);
244	✓✓	12	if (ret != 0)
245		4	ERR_print_errors(bio_err);
246
247		12	return (ret);
248		12	}
249
250			static int
251			genrsa_cb(int p, int n, BN_GENCB * cb)
252			{
253		2014	char c = '*';
254
255		1007	if (p == 0)
256			c = '.';
257		1007	if (p == 1)
258			c = '+';
259		1007	if (p == 2)
260			c = '*';
261		1007	if (p == 3)
262			c = '\n';
263		1007	BIO_write(cb->arg, &c, 1);
264		1007	(void) BIO_flush(cb->arg);
265		1007	return 1;
266		1007	}