2 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/pkcs12.h>
15 ASN1_TYPE *PKCS12_SAFEBAG_get0_attr(PKCS12_SAFEBAG *bag, int attr_nid)
17 return PKCS12_get_attr_gen(bag->attrib, attr_nid);
20 ASN1_TYPE *PKCS8_get_attr(PKCS8_PRIV_KEY_INFO *p8, int attr_nid)
22 return PKCS12_get_attr_gen(PKCS8_pkey_get0_attrs(p8), attr_nid);
25 PKCS8_PRIV_KEY_INFO *PKCS12_SAFEBAG_get0_p8inf(PKCS12_SAFEBAG *bag)
27 if (PKCS12_SAFEBAG_get_nid(bag) != NID_keyBag)
29 return bag->value.keybag;
32 X509_SIG *PKCS12_SAFEBAG_get0_pkcs8(PKCS12_SAFEBAG *bag)
34 if (OBJ_obj2nid(bag->type) != NID_pkcs8ShroudedKeyBag)
36 return bag->value.shkeybag;
39 STACK_OF(PKCS12_SAFEBAG) *PKCS12_SAFEBAG_get0_safes(PKCS12_SAFEBAG *bag)
41 if (OBJ_obj2nid(bag->type) != NID_safeContentsBag)
43 return bag->value.safes;
46 ASN1_OBJECT *PKCS12_SAFEBAG_get0_type(PKCS12_SAFEBAG *bag)
51 int PKCS12_SAFEBAG_get_nid(PKCS12_SAFEBAG *bag)
53 return OBJ_obj2nid(bag->type);
56 int PKCS12_SAFEBAG_get_bag_nid(PKCS12_SAFEBAG *bag)
58 int btype = PKCS12_SAFEBAG_get_nid(bag);
60 if (btype != NID_certBag && btype != NID_crlBag && btype != NID_secretBag)
62 return OBJ_obj2nid(bag->value.bag->type);
65 X509 *PKCS12_SAFEBAG_get1_cert(PKCS12_SAFEBAG *bag)
67 if (PKCS12_SAFEBAG_get_nid(bag) != NID_certBag)
69 if (OBJ_obj2nid(bag->value.bag->type) != NID_x509Certificate)
71 return ASN1_item_unpack(bag->value.bag->value.octet,
72 ASN1_ITEM_rptr(X509));
75 X509_CRL *PKCS12_SAFEBAG_get1_crl(PKCS12_SAFEBAG *bag)
77 if (PKCS12_SAFEBAG_get_nid(bag) != NID_crlBag)
79 if (OBJ_obj2nid(bag->value.bag->type) != NID_x509Crl)
81 return ASN1_item_unpack(bag->value.bag->value.octet,
82 ASN1_ITEM_rptr(X509_CRL));
85 PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_cert(X509 *x509)
87 return PKCS12_item_pack_safebag(x509, ASN1_ITEM_rptr(X509),
88 NID_x509Certificate, NID_certBag);
91 PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_crl(X509_CRL *crl)
93 return PKCS12_item_pack_safebag(crl, ASN1_ITEM_rptr(X509_CRL),
94 NID_x509Crl, NID_crlBag);
97 /* Turn PKCS8 object into a keybag */
99 PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_p8inf(PKCS8_PRIV_KEY_INFO *p8)
101 PKCS12_SAFEBAG *bag = PKCS12_SAFEBAG_new();
104 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_P8INF, ERR_R_MALLOC_FAILURE);
107 bag->type = OBJ_nid2obj(NID_keyBag);
108 bag->value.keybag = p8;
112 /* Turn PKCS8 object into a shrouded keybag */
114 PKCS12_SAFEBAG *PKCS12_SAFEBAG_create0_pkcs8(X509_SIG *p8)
116 PKCS12_SAFEBAG *bag = PKCS12_SAFEBAG_new();
118 /* Set up the safe bag */
120 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE0_PKCS8, ERR_R_MALLOC_FAILURE);
123 bag->type = OBJ_nid2obj(NID_pkcs8ShroudedKeyBag);
124 bag->value.shkeybag = p8;
128 PKCS12_SAFEBAG *PKCS12_SAFEBAG_create_pkcs8_encrypt(int pbe_nid,
132 int saltlen, int iter,
133 PKCS8_PRIV_KEY_INFO *p8inf)
136 const EVP_CIPHER *pbe_ciph;
139 pbe_ciph = EVP_get_cipherbynid(pbe_nid);
144 p8 = PKCS8_encrypt(pbe_nid, pbe_ciph, pass, passlen, salt, saltlen, iter,
148 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE_PKCS8_ENCRYPT, ERR_R_MALLOC_FAILURE);
152 bag = PKCS12_SAFEBAG_create0_pkcs8(p8);
155 PKCS12err(PKCS12_F_PKCS12_SAFEBAG_CREATE_PKCS8_ENCRYPT, ERR_R_MALLOC_FAILURE);