Newer
Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
#include <stdio.h>
#include <stdlib.h>
#include <openssl/crypto.h>
#include <openssl/err.h>
#include <openssl/pem.h>
#include <openssl/rand.h>
int
main (int argc, char *argv[])
{
int encrypt;
PKCS7 *pkcs7;
const EVP_CIPHER *cipher;
STACK_OF (X509) * certs;
X509 *cert;
EVP_PKEY *pkey;
FILE *fp;
BIO *pkcs7_bio, *in, *out;
OpenSSL_add_all_algorithms ();
ERR_load_crypto_strings ();
seed_prng ();
--argc, ++argv;
if (argc < 2)
{
fprintf (stderr, "Usage: ed (encrypt|decrypt) [privkey.pem] cert.pem "
"...\n");
goto err;
}
if (!strcmp (*argv, "encrypt"))
encrypt = 1;
else if (!strcmp (*argv, "decrypt"))
encrypt = 0;
else
{
fprintf (stderr, "Usage: ed (encrypt|decrypt) [privkey.pem] cert.pem "
"...\n");
goto err;
}
--argc, ++argv;
/* setup the BIO objects for stdin and stdout */
if (!(in = BIO_new_fp (stdin, BIO_NOCLOSE)) ||
!(out = BIO_new_fp (stdout, BIO_NOCLOSE)))
{
fprintf (stderr, "Error creating BIO objects\n");
goto err;
}
if (encrypt)
{
/* choose cipher and read in all certificates as encryption targets */
cipher = EVP_des_ede3_cbc ();
certs = sk_X509_new_null ();
while (argc)
{
X509 *tmp;
if (!(fp = fopen (*argv, "r")) ||
!(tmp = PEM_read_X509 (fp, NULL, NULL, NULL)))
{
fprintf (stderr, "Error reading encryption certificate in %s\n",
*argv);
goto err;
}
sk_X509_push (certs, tmp);
fclose (fp);
--argc, ++argv;
}
if (!(pkcs7 = PKCS7_encrypt (certs, in, cipher, 0)))
{
ERR_print_errors_fp (stderr);
fprintf (stderr, "Error making the PKCS#7 object\n");
goto err;
}
if (SMIME_write_PKCS7 (out, pkcs7, in, 0) != 1)
{
fprintf (stderr, "Error writing the S/MIME data\n");
goto err;
}
}
else
{
if (!(fp = fopen (*argv, "r")) ||
!(pkey = PEM_read_PrivateKey (fp, NULL, NULL, NULL)))
{
fprintf (stderr, "Error reading private key in %s\n", *argv);
goto err;
}
fclose (fp);
--argc, ++argv;
if (!(fp = fopen (*argv, "r")) ||
!(cert = PEM_read_X509 (fp, NULL, NULL, NULL)))
{
fprintf (stderr, "Error reading decryption certificate in %s\n",
*argv);
goto err;
}
fclose (fp);
--argc, ++argv;
if (argc)
fprintf (stderr, "Warning: excess parameters specified. "
"Ignoring...\n");
if (!(pkcs7 = SMIME_read_PKCS7 (in, &pkcs7_bio)))
{
fprintf (stderr, "Error reading PKCS#7 object\n");
goto err;
}
if (PKCS7_decrypt (pkcs7, pkey, cert, out, 0) != 1)
{
fprintf (stderr, "Error decrypting PKCS#7 object\n");
goto err;
}
}
return 0;
err:
return -1;
}