crypto/engine/eng_pkey.c

   1 /*
   2  * Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 /* We need to use some engine deprecated APIs */
  11 #define OPENSSL_SUPPRESS_DEPRECATED
  12
  13 #include "eng_local.h"
  14
  15 /* Basic get/set stuff */
  16
  17 int ENGINE_set_load_privkey_function(ENGINE *e,
  18                                      ENGINE_LOAD_KEY_PTR loadpriv_f)
  19 {
  20     e->load_privkey = loadpriv_f;
  21     return 1;
  22 }
  23
  24 int ENGINE_set_load_pubkey_function(ENGINE *e, ENGINE_LOAD_KEY_PTR loadpub_f)
  25 {
  26     e->load_pubkey = loadpub_f;
  27     return 1;
  28 }
  29
  30 int ENGINE_set_load_ssl_client_cert_function(ENGINE *e,
  31                                              ENGINE_SSL_CLIENT_CERT_PTR
  32                                              loadssl_f)
  33 {
  34     e->load_ssl_client_cert = loadssl_f;
  35     return 1;
  36 }
  37
  38 ENGINE_LOAD_KEY_PTR ENGINE_get_load_privkey_function(const ENGINE *e)
  39 {
  40     return e->load_privkey;
  41 }
  42
  43 ENGINE_LOAD_KEY_PTR ENGINE_get_load_pubkey_function(const ENGINE *e)
  44 {
  45     return e->load_pubkey;
  46 }
  47
  48 ENGINE_SSL_CLIENT_CERT_PTR ENGINE_get_ssl_client_cert_function(const ENGINE
  49                                                                *e)
  50 {
  51     return e->load_ssl_client_cert;
  52 }
  53
  54 /* API functions to load public/private keys */
  55
  56 EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
  57                                   UI_METHOD *ui_method, void *callback_data)
  58 {
  59     EVP_PKEY *pkey;
  60
  61     if (e == NULL) {
  62         ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
  63                   ERR_R_PASSED_NULL_PARAMETER);
  64         return 0;
  65     }
  66     CRYPTO_THREAD_write_lock(global_engine_lock);
  67     if (e->funct_ref == 0) {
  68         CRYPTO_THREAD_unlock(global_engine_lock);
  69         ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY, ENGINE_R_NOT_INITIALISED);
  70         return 0;
  71     }
  72     CRYPTO_THREAD_unlock(global_engine_lock);
  73     if (!e->load_privkey) {
  74         ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
  75                   ENGINE_R_NO_LOAD_FUNCTION);
  76         return 0;
  77     }
  78     pkey = e->load_privkey(e, key_id, ui_method, callback_data);
  79     if (pkey == NULL) {
  80         ENGINEerr(ENGINE_F_ENGINE_LOAD_PRIVATE_KEY,
  81                   ENGINE_R_FAILED_LOADING_PRIVATE_KEY);
  82         return 0;
  83     }
  84     return pkey;
  85 }
  86
  87 EVP_PKEY *ENGINE_load_public_key(ENGINE *e, const char *key_id,
  88                                  UI_METHOD *ui_method, void *callback_data)
  89 {
  90     EVP_PKEY *pkey;
  91
  92     if (e == NULL) {
  93         ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY,
  94                   ERR_R_PASSED_NULL_PARAMETER);
  95         return 0;
  96     }
  97     CRYPTO_THREAD_write_lock(global_engine_lock);
  98     if (e->funct_ref == 0) {
  99         CRYPTO_THREAD_unlock(global_engine_lock);
 100         ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY, ENGINE_R_NOT_INITIALISED);
 101         return 0;
 102     }
 103     CRYPTO_THREAD_unlock(global_engine_lock);
 104     if (!e->load_pubkey) {
 105         ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY, ENGINE_R_NO_LOAD_FUNCTION);
 106         return 0;
 107     }
 108     pkey = e->load_pubkey(e, key_id, ui_method, callback_data);
 109     if (pkey == NULL) {
 110         ENGINEerr(ENGINE_F_ENGINE_LOAD_PUBLIC_KEY,
 111                   ENGINE_R_FAILED_LOADING_PUBLIC_KEY);
 112         return 0;
 113     }
 114     return pkey;
 115 }
 116
 117 int ENGINE_load_ssl_client_cert(ENGINE *e, SSL *s,
 118                                 STACK_OF(X509_NAME) *ca_dn, X509 **pcert,
 119                                 EVP_PKEY **ppkey, STACK_OF(X509) **pother,
 120                                 UI_METHOD *ui_method, void *callback_data)
 121 {
 122
 123     if (e == NULL) {
 124         ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
 125                   ERR_R_PASSED_NULL_PARAMETER);
 126         return 0;
 127     }
 128     CRYPTO_THREAD_write_lock(global_engine_lock);
 129     if (e->funct_ref == 0) {
 130         CRYPTO_THREAD_unlock(global_engine_lock);
 131         ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
 132                   ENGINE_R_NOT_INITIALISED);
 133         return 0;
 134     }
 135     CRYPTO_THREAD_unlock(global_engine_lock);
 136     if (!e->load_ssl_client_cert) {
 137         ENGINEerr(ENGINE_F_ENGINE_LOAD_SSL_CLIENT_CERT,
 138                   ENGINE_R_NO_LOAD_FUNCTION);
 139         return 0;
 140     }
 141     return e->load_ssl_client_cert(e, s, ca_dn, pcert, ppkey, pother,
 142                                    ui_method, callback_data);
 143 }