Files
harbour-core/contrib/hbssl/evppkey.c
Przemysław Czerpak 74322e702c 2023-11-22 09:06 UTC+0100 Przemyslaw Czerpak (druzus/at/poczta.onet.pl)
* contrib/hbssl/hbssl.hbm
  * contrib/hbssl/hbssl.hbx
  * contrib/hbssl/hbssl.h
  + contrib/hbssl/rsa.c
    + added PRG functions for RSA encryption/decryption:
         RSA_size( <pKey> ) -> <nCipherBlockSize>
         RSA_public_encrypt( <pKey>, <cData>, @<cDataEnc> ;
                              [, <nPadding> = HB_RSA_PKCS1_PADDING ] ) ;
                  -> <nSize> > 0 | <nError> <= 0
         RSA_private_decrypt( <pKey>, <cDataEnc>, @<cDataDec> ;
                              [, <nPadding> = HB_RSA_PKCS1_PADDING ] ) ;
                  -> <nSize> > 0 | <nError> <= 0
         RSA_private_encrypt( <pKey>, <cData>, @<cDataEnc> ;
                              [, <nPadding> = HB_RSA_PKCS1_PADDING ] ) ;
                  -> <nSize> > 0 | <nError> <= 0
         RSA_public_decrypt( <pKey>, <cDataEnc>, @<cDataDec> ;
                              [, <nPadding> = HB_RSA_PKCS1_PADDING ] ) ;
                  -> <nSize> > 0 | <nError> <= 0
    + added C functions for manipulating RSA keys inside HB_ITEMs:
         HB_BOOL hb_RSA_is( int iParam );
         RSA *   hb_RSA_par( int iParam );
         void    hb_RSA_ret( RSA * rsa );

  * contrib/hbssl/pem.c
    + added support for RSA keys.
      Now the following PRG functions return RSA key which can be passed to
      RSA_* functions:
         PEM_READ_BIO_RSAPRIVATEKEY()
         PEM_READ_BIO_RSAPUBLICKEY()
         PEM_READ_BIO_RSA_PUBKEY()

  * contrib/hbssl/evppkey.c
    + added functions for EVP_PKEY encryption/decryption:
         EVP_PKEY_base_id( <pKey> ) -> <nType>
         EVP_PKEY_CTX_new( <pKey> ) -> <pKeyCTX>
         EVP_PKEY_encrypt_init( <pKeyCTX> ) -> <nResult> (1 - OK, <=0 - Error)
         EVP_PKEY_encrypt( <pKeyCTX>, @<cDataEnc>, <cData> ) ;
                  -> <nSize> > 0 | <nError> <= 0
         EVP_PKEY_decrypt_init( <pKeyCTX> ) -> <nResult> (1 - OK, <=0 - Error)
         EVP_PKEY_decrypt( <pKeyCTX>, @<cDataDec>, <cDataEnc> ) ;
                  -> <nSize> > 0 | <nError> <= 0
      Above functions can be used with keys loaded by:
         PEM_READ_PRIVATEKEY()
         PEM_READ_PUBKEY()
      In OpenSSL 3.0 typed functions like *RSA*, *DSA*, *DH*, ... are
      depreciated and common for different methods EVP ones should be
      used instead.
    + added support for RSA encryption/decryption in above functions in
      OpenSSL libraries prior 1.0.0 which do not have EVP_PKEY_CTX. RSA
      support is emulated by direct calls to RSA_* functions so now for
      RSA it's possible to use new functions with old OpenSSL libraries.

  * contrib/hbssl/hbssl.ch
    + added constants for RSA padding: HB_RSA_*_PADDING
    + added constants for EVP PKEY types: HB_EVP_PKEY_*

  * contrib/hbssl/hbssl.hbx
    + added new functions
2023-11-22 09:06:29 +01:00

498 lines
13 KiB
C

/*
* OpenSSL API (EVP PKEY) - Harbour interface.
*
* Copyright 2009 Viktor Szakats (vszakats.net/harbour)
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; see the file LICENSE.txt. If not, write to
* the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
* Boston, MA 02110-1301 USA (or visit https://www.gnu.org/licenses/).
*
* As a special exception, the Harbour Project gives permission for
* additional uses of the text contained in its release of Harbour.
*
* The exception is that, if you link the Harbour libraries with other
* files to produce an executable, this does not by itself cause the
* resulting executable to be covered by the GNU General Public License.
* Your use of that executable is in no way restricted on account of
* linking the Harbour library code into it.
*
* This exception does not however invalidate any other reasons why
* the executable file might be covered by the GNU General Public License.
*
* This exception applies only to the code released by the Harbour
* Project under the name Harbour. If you copy code from other
* Harbour Project or Free Software Foundation releases into a copy of
* Harbour, as the General Public License permits, the exception does
* not apply to the code that you add in this way. To avoid misleading
* anyone as to the status of such modified files, you must delete
* this exception notice from them.
*
* If you write modifications of your own for Harbour, it is your choice
* whether to permit this exception to apply to your modifications.
* If you do not wish that, delete this exception notice.
*
*/
#include "hbssl.h"
#include "hbapiitm.h"
#include <openssl/evp.h>
#include <openssl/rsa.h>
static HB_GARBAGE_FUNC( EVP_PKEY_release )
{
void ** ph = ( void ** ) Cargo;
/* Check if pointer is not NULL to avoid multiple freeing */
if( ph && *ph )
{
/* Destroy the object */
EVP_PKEY_free( ( EVP_PKEY * ) *ph );
/* set pointer to NULL just in case */
*ph = NULL;
}
}
static const HB_GC_FUNCS s_gcEVP_PKEY_funcs =
{
EVP_PKEY_release,
hb_gcDummyMark
};
HB_BOOL hb_EVP_PKEY_is( int iParam )
{
return hb_parptrGC( &s_gcEVP_PKEY_funcs, iParam ) != NULL;
}
EVP_PKEY * hb_EVP_PKEY_par( int iParam )
{
void ** ph = ( void ** ) hb_parptrGC( &s_gcEVP_PKEY_funcs, iParam );
return ph ? ( EVP_PKEY * ) *ph : NULL;
}
void hb_EVP_PKEY_ret( EVP_PKEY * pkey )
{
void ** ph = ( void ** ) hb_gcAllocate( sizeof( EVP_PKEY * ), &s_gcEVP_PKEY_funcs );
*ph = pkey;
hb_retptrGC( ph );
}
static HB_GARBAGE_FUNC( EVP_PKEY_CTX_release )
{
void ** ph = ( void ** ) Cargo;
/* Check if pointer is not NULL to avoid multiple freeing */
if( ph && *ph )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY_CTX_free( ( EVP_PKEY_CTX * ) *ph );
#endif
/* set pointer to NULL just in case */
*ph = NULL;
}
}
static const HB_GC_FUNCS s_gcEVP_PKEY_CTX_funcs =
{
EVP_PKEY_CTX_release,
hb_gcDummyMark
};
#if 0
static HB_BOOL hb_EVP_PKEY_CTX_is( int iParam )
{
return hb_parptrGC( &s_gcEVP_PKEY_CTX_funcs, iParam ) != NULL;
}
#endif
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
static EVP_PKEY_CTX * hb_EVP_PKEY_CTX_par( int iParam )
{
void ** ph = ( void ** ) hb_parptrGC( &s_gcEVP_PKEY_CTX_funcs, iParam );
return ph ? ( EVP_PKEY_CTX * ) *ph : NULL;
}
static void hb_EVP_PKEY_CTX_ret( EVP_PKEY_CTX * pkey )
{
void ** ph = ( void ** ) hb_gcAllocate( sizeof( EVP_PKEY_CTX * ), &s_gcEVP_PKEY_CTX_funcs );
*ph = pkey;
hb_retptrGC( ph );
}
#endif
HB_FUNC( EVP_PKEY_NEW )
{
hb_EVP_PKEY_ret( EVP_PKEY_new() );
}
HB_FUNC( EVP_PKEY_TYPE )
{
hb_retni( EVP_PKEY_type( hb_parni( 1 ) ) );
}
HB_FUNC( EVP_PKEY_BASE_ID )
{
if( hb_EVP_PKEY_is( 1 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
if( pkey )
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
hb_retni( EVP_PKEY_base_id( pkey ) );
#else
hb_retni( EVP_PKEY_type( hb_parni( 1 ) ) );
#endif
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_SIZE )
{
if( hb_EVP_PKEY_is( 1 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
if( pkey )
hb_retni( EVP_PKEY_size( pkey ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_BITS )
{
if( hb_EVP_PKEY_is( 1 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
if( pkey )
hb_retni( EVP_PKEY_bits( pkey ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_ASSIGN )
{
if( hb_EVP_PKEY_is( 1 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
if( pkey )
/* QUESTION: Is hb_openssl_strdup() okay here? [vszakats] */
hb_retni( EVP_PKEY_assign( pkey, hb_parni( 2 ), hb_openssl_strdup( hb_parcx( 3 ) ) ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_ASSIGN_RSA )
{
#ifndef OPENSSL_NO_RSA
if( hb_EVP_PKEY_is( 1 ) && HB_ISPOINTER( 2 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
RSA * key = ( RSA * ) hb_parptr( 2 );
if( pkey && key )
hb_retni( EVP_PKEY_assign_RSA( pkey, key ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#endif
}
HB_FUNC( EVP_PKEY_ASSIGN_DSA )
{
#ifndef OPENSSL_NO_DSA
if( hb_EVP_PKEY_is( 1 ) && HB_ISPOINTER( 2 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
DSA * key = ( DSA * ) hb_parptr( 2 );
if( pkey && key )
hb_retni( EVP_PKEY_assign_DSA( pkey, key ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#endif
}
HB_FUNC( EVP_PKEY_ASSIGN_DH )
{
#ifndef OPENSSL_NO_RSA
if( hb_EVP_PKEY_is( 1 ) && HB_ISPOINTER( 2 ) )
{
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
DH * key = ( DH * ) hb_parptr( 2 );
if( pkey && key )
hb_retni( EVP_PKEY_assign_DH( pkey, key ) );
}
else
hb_errRT_BASE( EG_ARG, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
#endif
}
HB_FUNC( EVP_PKEY_CTX_NEW )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY * pkey = hb_EVP_PKEY_par( 1 );
if( pkey )
{
hb_EVP_PKEY_CTX_ret( EVP_PKEY_CTX_new( pkey, ( ENGINE * ) hb_parptr( 2 ) ) );
}
#else
if( hb_RSA_is( 1 ) )
{
hb_itemReturn( hb_param( 1, HB_IT_POINTER ) );
}
#endif
else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_ENCRYPT_INIT )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY_CTX * ctx = hb_EVP_PKEY_CTX_par( 1 );
if( ctx )
{
hb_retni( EVP_PKEY_encrypt_init( ctx ) );
}
#else
if( hb_RSA_is( 1 ) )
{
hb_retni( 1 );
}
#endif
else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
#if OPENSSL_VERSION_NUMBER >= 0x10100000L
#define HB_RSA_KEY_ISPRIVATE( rsa ) ( RSA_get0_d( rsa ) != NULL )
#else
#define HB_RSA_KEY_ISPRIVATE( rsa ) ( ( rsa )->d != NULL )
#endif
HB_FUNC( EVP_PKEY_ENCRYPT )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY_CTX * ctx = hb_EVP_PKEY_CTX_par( 1 );
if( ctx )
{
const unsigned char * in = ( const unsigned char * ) hb_parcx( 3 );
size_t inlen = ( size_t ) hb_parclen( 3 ), outlen = 0;
unsigned char * buffer = NULL;
int ret;
ret = EVP_PKEY_encrypt( ctx, NULL, &outlen, in, inlen );
if( ret > 0 )
{
buffer = ( unsigned char * ) hb_xgrab( outlen + 1 );
ret = EVP_PKEY_encrypt( ctx, buffer, &outlen, in, inlen );
if( ret > 0 )
{
if( ! hb_storclen_buffer( ( char * ) buffer, outlen, 2 ) )
ret = 0;
}
}
if( ret <= 0 )
{
if( buffer )
hb_xfree( buffer );
hb_storc( NULL, 2 );
}
hb_retni( ret );
}
#else
if( hb_RSA_is( 1 ) )
{
RSA * rsa = hb_RSA_par( 1 );
const unsigned char * from = ( const unsigned char * ) hb_parcx( 3 );
int flen = ( int ) hb_parclen( 3 );
unsigned char * buffer;
int ret;
buffer = ( unsigned char * ) hb_xgrab( RSA_size( rsa ) + 1 );
if( HB_RSA_KEY_ISPRIVATE( rsa ) )
/* private key */
ret = RSA_private_encrypt( flen, HB_UNCONST( from ), buffer, rsa, RSA_PKCS1_PADDING );
else
/* public key */
ret = RSA_public_encrypt( flen, HB_UNCONST( from ), buffer, rsa, RSA_PKCS1_PADDING );
if( ret > 0 )
{
if( ! hb_storclen_buffer( ( char * ) buffer, ret, 2 ) )
ret = 0;
}
if( ret <= 0 )
{
if( buffer )
hb_xfree( buffer );
hb_storc( NULL, 2 );
}
hb_retni( ret );
}
#endif
else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_DECRYPT_INIT )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY_CTX * ctx = hb_EVP_PKEY_CTX_par( 1 );
if( ctx )
{
hb_retni( EVP_PKEY_decrypt_init( ctx ) );
}
#else
if( hb_RSA_is( 1 ) )
{
hb_retni( 1 );
}
#endif
else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
HB_FUNC( EVP_PKEY_DECRYPT )
{
#if OPENSSL_VERSION_NUMBER >= 0x10000000L
EVP_PKEY_CTX * ctx = hb_EVP_PKEY_CTX_par( 1 );
if( ctx )
{
const unsigned char * in = ( const unsigned char * ) hb_parcx( 3 );
size_t inlen = ( size_t ) hb_parclen( 3 ), outlen = 0;
unsigned char * buffer = NULL;
int ret;
ret = EVP_PKEY_decrypt( ctx, NULL, &outlen, in, inlen );
if( ret > 0 )
{
buffer = ( unsigned char * ) hb_xgrab( outlen + 1 );
ret = EVP_PKEY_decrypt( ctx, buffer, &outlen, in, inlen );
if( ret > 0 )
{
if( ! hb_storclen_buffer( ( char * ) buffer, outlen, 2 ) )
ret = 0;
}
}
if( ret <= 0 )
{
if( buffer )
hb_xfree( buffer );
hb_storc( NULL, 2 );
}
hb_retni( ret );
}
#else
if( hb_RSA_is( 1 ) )
{
RSA * rsa = hb_RSA_par( 1 );
const unsigned char * from = ( const unsigned char * ) hb_parcx( 3 );
int flen = ( int ) hb_parclen( 3 );
unsigned char * buffer;
int ret;
buffer = ( unsigned char * ) hb_xgrab( RSA_size( rsa ) + 1 );
if( HB_RSA_KEY_ISPRIVATE( rsa ) )
/* private key */
ret = RSA_private_decrypt( flen, HB_UNCONST( from ), buffer, rsa, RSA_PKCS1_PADDING );
else
/* public key */
ret = RSA_public_decrypt( flen, HB_UNCONST( from ), buffer, rsa, RSA_PKCS1_PADDING );
if( ret > 0 )
{
buffer = ( unsigned char * ) hb_xrealloc( buffer, ret + 1 );
if( ! hb_storclen_buffer( ( char * ) buffer, ret, 2 ) )
ret = 0;
}
if( ret <= 0 )
{
if( buffer )
hb_xfree( buffer );
hb_storc( NULL, 2 );
}
hb_retni( ret );
}
#endif
else
hb_errRT_BASE( EG_NOFUNC, 2010, NULL, HB_ERR_FUNCNAME, HB_ERR_ARGS_BASEPARAMS );
}
#if 0
int EVP_PKEY_set1_RSA( EVP_PKEY * pkey, RSA * key );
int EVP_PKEY_set1_DSA( EVP_PKEY * pkey, DSA * key );
int EVP_PKEY_set1_DH( EVP_PKEY * pkey, DH * key );
int EVP_PKEY_set1_EC_KEY( EVP_PKEY * pkey, EC_KEY * key );
RSA * EVP_PKEY_get1_RSA( EVP_PKEY * pkey );
DSA * EVP_PKEY_get1_DSA( EVP_PKEY * pkey );
DH * EVP_PKEY_get1_DH( EVP_PKEY * pkey );
EC_KEY * EVP_PKEY_get1_EC_KEY( EVP_PKEY * pkey );
/* These changed in 0.9.9 to something different, they weren't probably documented before. */
int EVP_PKEY_decrypt( unsigned char * dec_key, const unsigned char * enc_key, int enc_key_len, EVP_PKEY * private_key );
int EVP_PKEY_encrypt( unsigned char * enc_key, const unsigned char * key, int key_len, EVP_PKEY * pub_key );
/* 1.0.0 */
int EVP_PKEY_sign_init( EVP_PKEY_CTX * ctx );
int EVP_PKEY_sign( EVP_PKEY_CTX * ctx,
unsigned char * sig, size_t * siglen,
const unsigned char * tbs, size_t tbslen );
int EVP_PKEY_verify_init( EVP_PKEY_CTX * ctx );
int EVP_PKEY_verify( EVP_PKEY_CTX * ctx,
const unsigned char * sig, size_t siglen,
const unsigned char * tbs, size_t tbslen );
int EVP_PKEY_verify_recover_init( EVP_PKEY_CTX * ctx );
int EVP_PKEY_verify_recover( EVP_PKEY_CTX * ctx,
unsigned char * rout, size_t * routlen,
const unsigned char * sig, size_t siglen );
#endif