A local copy of OpenSSL from GitHub
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

187 lines
5.7 KiB

  1. /*
  2. * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. #include <stdio.h>
  10. #include <stdlib.h>
  11. #include <string.h>
  12. #include <openssl/pem.h>
  13. #include <openssl/err.h>
  14. #include <openssl/pkcs12.h>
  15. #include "p12_local.h"
  16. DEFINE_STACK_OF(PKCS12_SAFEBAG)
  17. /* PKCS#12 password change routine */
  18. static int newpass_p12(PKCS12 *p12, const char *oldpass, const char *newpass);
  19. static int newpass_bags(STACK_OF(PKCS12_SAFEBAG) *bags, const char *oldpass,
  20. const char *newpass);
  21. static int newpass_bag(PKCS12_SAFEBAG *bag, const char *oldpass,
  22. const char *newpass);
  23. static int alg_get(const X509_ALGOR *alg, int *pnid, int *piter,
  24. int *psaltlen);
  25. /*
  26. * Change the password on a PKCS#12 structure.
  27. */
  28. int PKCS12_newpass(PKCS12 *p12, const char *oldpass, const char *newpass)
  29. {
  30. /* Check for NULL PKCS12 structure */
  31. if (p12 == NULL) {
  32. PKCS12err(PKCS12_F_PKCS12_NEWPASS,
  33. PKCS12_R_INVALID_NULL_PKCS12_POINTER);
  34. return 0;
  35. }
  36. /* Check the mac */
  37. if (!PKCS12_verify_mac(p12, oldpass, -1)) {
  38. PKCS12err(PKCS12_F_PKCS12_NEWPASS, PKCS12_R_MAC_VERIFY_FAILURE);
  39. return 0;
  40. }
  41. if (!newpass_p12(p12, oldpass, newpass)) {
  42. PKCS12err(PKCS12_F_PKCS12_NEWPASS, PKCS12_R_PARSE_ERROR);
  43. return 0;
  44. }
  45. return 1;
  46. }
  47. /* Parse the outer PKCS#12 structure */
  48. static int newpass_p12(PKCS12 *p12, const char *oldpass, const char *newpass)
  49. {
  50. STACK_OF(PKCS7) *asafes = NULL, *newsafes = NULL;
  51. STACK_OF(PKCS12_SAFEBAG) *bags = NULL;
  52. int i, bagnid, pbe_nid = 0, pbe_iter = 0, pbe_saltlen = 0;
  53. PKCS7 *p7, *p7new;
  54. ASN1_OCTET_STRING *p12_data_tmp = NULL, *macoct = NULL;
  55. unsigned char mac[EVP_MAX_MD_SIZE];
  56. unsigned int maclen;
  57. int rv = 0;
  58. if ((asafes = PKCS12_unpack_authsafes(p12)) == NULL)
  59. goto err;
  60. if ((newsafes = sk_PKCS7_new_null()) == NULL)
  61. goto err;
  62. for (i = 0; i < sk_PKCS7_num(asafes); i++) {
  63. p7 = sk_PKCS7_value(asafes, i);
  64. bagnid = OBJ_obj2nid(p7->type);
  65. if (bagnid == NID_pkcs7_data) {
  66. bags = PKCS12_unpack_p7data(p7);
  67. } else if (bagnid == NID_pkcs7_encrypted) {
  68. bags = PKCS12_unpack_p7encdata(p7, oldpass, -1);
  69. if (!alg_get(p7->d.encrypted->enc_data->algorithm,
  70. &pbe_nid, &pbe_iter, &pbe_saltlen))
  71. goto err;
  72. } else {
  73. continue;
  74. }
  75. if (bags == NULL)
  76. goto err;
  77. if (!newpass_bags(bags, oldpass, newpass))
  78. goto err;
  79. /* Repack bag in same form with new password */
  80. if (bagnid == NID_pkcs7_data)
  81. p7new = PKCS12_pack_p7data(bags);
  82. else
  83. p7new = PKCS12_pack_p7encdata(pbe_nid, newpass, -1, NULL,
  84. pbe_saltlen, pbe_iter, bags);
  85. if (p7new == NULL || !sk_PKCS7_push(newsafes, p7new))
  86. goto err;
  87. sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
  88. bags = NULL;
  89. }
  90. /* Repack safe: save old safe in case of error */
  91. p12_data_tmp = p12->authsafes->d.data;
  92. if ((p12->authsafes->d.data = ASN1_OCTET_STRING_new()) == NULL)
  93. goto err;
  94. if (!PKCS12_pack_authsafes(p12, newsafes))
  95. goto err;
  96. if (!PKCS12_gen_mac(p12, newpass, -1, mac, &maclen))
  97. goto err;
  98. X509_SIG_getm(p12->mac->dinfo, NULL, &macoct);
  99. if (!ASN1_OCTET_STRING_set(macoct, mac, maclen))
  100. goto err;
  101. rv = 1;
  102. err:
  103. /* Restore old safe if necessary */
  104. if (rv == 1) {
  105. ASN1_OCTET_STRING_free(p12_data_tmp);
  106. } else if (p12_data_tmp != NULL) {
  107. ASN1_OCTET_STRING_free(p12->authsafes->d.data);
  108. p12->authsafes->d.data = p12_data_tmp;
  109. }
  110. sk_PKCS12_SAFEBAG_pop_free(bags, PKCS12_SAFEBAG_free);
  111. sk_PKCS7_pop_free(asafes, PKCS7_free);
  112. sk_PKCS7_pop_free(newsafes, PKCS7_free);
  113. return rv;
  114. }
  115. static int newpass_bags(STACK_OF(PKCS12_SAFEBAG) *bags, const char *oldpass,
  116. const char *newpass)
  117. {
  118. int i;
  119. for (i = 0; i < sk_PKCS12_SAFEBAG_num(bags); i++) {
  120. if (!newpass_bag(sk_PKCS12_SAFEBAG_value(bags, i), oldpass, newpass))
  121. return 0;
  122. }
  123. return 1;
  124. }
  125. /* Change password of safebag: only needs handle shrouded keybags */
  126. static int newpass_bag(PKCS12_SAFEBAG *bag, const char *oldpass,
  127. const char *newpass)
  128. {
  129. PKCS8_PRIV_KEY_INFO *p8;
  130. X509_SIG *p8new;
  131. int p8_nid, p8_saltlen, p8_iter;
  132. const X509_ALGOR *shalg;
  133. if (PKCS12_SAFEBAG_get_nid(bag) != NID_pkcs8ShroudedKeyBag)
  134. return 1;
  135. if ((p8 = PKCS8_decrypt(bag->value.shkeybag, oldpass, -1)) == NULL)
  136. return 0;
  137. X509_SIG_get0(bag->value.shkeybag, &shalg, NULL);
  138. if (!alg_get(shalg, &p8_nid, &p8_iter, &p8_saltlen))
  139. return 0;
  140. p8new = PKCS8_encrypt(p8_nid, NULL, newpass, -1, NULL, p8_saltlen,
  141. p8_iter, p8);
  142. PKCS8_PRIV_KEY_INFO_free(p8);
  143. if (p8new == NULL)
  144. return 0;
  145. X509_SIG_free(bag->value.shkeybag);
  146. bag->value.shkeybag = p8new;
  147. return 1;
  148. }
  149. static int alg_get(const X509_ALGOR *alg, int *pnid, int *piter,
  150. int *psaltlen)
  151. {
  152. PBEPARAM *pbe;
  153. pbe = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBEPARAM), alg->parameter);
  154. if (pbe == NULL)
  155. return 0;
  156. *pnid = OBJ_obj2nid(alg->algorithm);
  157. *piter = ASN1_INTEGER_get(pbe->iter);
  158. *psaltlen = pbe->salt->length;
  159. PBEPARAM_free(pbe);
  160. return 1;
  161. }