• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9 
10 #include "e_os.h"
11 #include <stdio.h>
12 #include <string.h>
13 #include "internal/conf.h"
14 #include "crypto/ctype.h"
15 #include <openssl/crypto.h>
16 #include <openssl/err.h>
17 #include <openssl/conf.h>
18 #include <openssl/conf_api.h>
19 #include "conf_local.h"
20 #include <openssl/lhash.h>
21 
22 static CONF_METHOD *default_CONF_method = NULL;
23 
24 /* Init a 'CONF' structure from an old LHASH */
25 
CONF_set_nconf(CONF * conf,LHASH_OF (CONF_VALUE)* hash)26 void CONF_set_nconf(CONF *conf, LHASH_OF(CONF_VALUE) *hash)
27 {
28     if (default_CONF_method == NULL)
29         default_CONF_method = NCONF_default();
30 
31     default_CONF_method->init(conf);
32     conf->data = hash;
33 }
34 
35 /*
36  * The following section contains the "CONF classic" functions, rewritten in
37  * terms of the new CONF interface.
38  */
39 
CONF_set_default_method(CONF_METHOD * meth)40 int CONF_set_default_method(CONF_METHOD *meth)
41 {
42     default_CONF_method = meth;
43     return 1;
44 }
45 
LHASH_OF(CONF_VALUE)46 LHASH_OF(CONF_VALUE) *CONF_load(LHASH_OF(CONF_VALUE) *conf, const char *file,
47                                 long *eline)
48 {
49     LHASH_OF(CONF_VALUE) *ltmp;
50     BIO *in = NULL;
51 
52 #ifdef OPENSSL_SYS_VMS
53     in = BIO_new_file(file, "r");
54 #else
55     in = BIO_new_file(file, "rb");
56 #endif
57     if (in == NULL) {
58         ERR_raise(ERR_LIB_CONF, ERR_R_SYS_LIB);
59         return NULL;
60     }
61 
62     ltmp = CONF_load_bio(conf, in, eline);
63     BIO_free(in);
64 
65     return ltmp;
66 }
67 
68 #ifndef OPENSSL_NO_STDIO
LHASH_OF(CONF_VALUE)69 LHASH_OF(CONF_VALUE) *CONF_load_fp(LHASH_OF(CONF_VALUE) *conf, FILE *fp,
70                                    long *eline)
71 {
72     BIO *btmp;
73     LHASH_OF(CONF_VALUE) *ltmp;
74     if ((btmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
75         ERR_raise(ERR_LIB_CONF, ERR_R_BUF_LIB);
76         return NULL;
77     }
78     ltmp = CONF_load_bio(conf, btmp, eline);
79     BIO_free(btmp);
80     return ltmp;
81 }
82 #endif
83 
LHASH_OF(CONF_VALUE)84 LHASH_OF(CONF_VALUE) *CONF_load_bio(LHASH_OF(CONF_VALUE) *conf, BIO *bp,
85                                     long *eline)
86 {
87     CONF ctmp;
88     int ret;
89 
90     CONF_set_nconf(&ctmp, conf);
91 
92     ret = NCONF_load_bio(&ctmp, bp, eline);
93     if (ret)
94         return ctmp.data;
95     return NULL;
96 }
97 
STACK_OF(CONF_VALUE)98 STACK_OF(CONF_VALUE) *CONF_get_section(LHASH_OF(CONF_VALUE) *conf,
99                                        const char *section)
100 {
101     if (conf == NULL) {
102         return NULL;
103     } else {
104         CONF ctmp;
105 
106         CONF_set_nconf(&ctmp, conf);
107         return NCONF_get_section(&ctmp, section);
108     }
109 }
110 
CONF_get_string(LHASH_OF (CONF_VALUE)* conf,const char * group,const char * name)111 char *CONF_get_string(LHASH_OF(CONF_VALUE) *conf, const char *group,
112                       const char *name)
113 {
114     if (conf == NULL) {
115         return NCONF_get_string(NULL, group, name);
116     } else {
117         CONF ctmp;
118 
119         CONF_set_nconf(&ctmp, conf);
120         return NCONF_get_string(&ctmp, group, name);
121     }
122 }
123 
CONF_get_number(LHASH_OF (CONF_VALUE)* conf,const char * group,const char * name)124 long CONF_get_number(LHASH_OF(CONF_VALUE) *conf, const char *group,
125                      const char *name)
126 {
127     int status;
128     long result = 0;
129 
130     ERR_set_mark();
131     if (conf == NULL) {
132         status = NCONF_get_number_e(NULL, group, name, &result);
133     } else {
134         CONF ctmp;
135 
136         CONF_set_nconf(&ctmp, conf);
137         status = NCONF_get_number_e(&ctmp, group, name, &result);
138     }
139     ERR_pop_to_mark();
140     return status == 0 ? 0L : result;
141 }
142 
CONF_free(LHASH_OF (CONF_VALUE)* conf)143 void CONF_free(LHASH_OF(CONF_VALUE) *conf)
144 {
145     CONF ctmp;
146     CONF_set_nconf(&ctmp, conf);
147     NCONF_free_data(&ctmp);
148 }
149 
150 #ifndef OPENSSL_NO_STDIO
CONF_dump_fp(LHASH_OF (CONF_VALUE)* conf,FILE * out)151 int CONF_dump_fp(LHASH_OF(CONF_VALUE) *conf, FILE *out)
152 {
153     BIO *btmp;
154     int ret;
155 
156     if ((btmp = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
157         ERR_raise(ERR_LIB_CONF, ERR_R_BUF_LIB);
158         return 0;
159     }
160     ret = CONF_dump_bio(conf, btmp);
161     BIO_free(btmp);
162     return ret;
163 }
164 #endif
165 
CONF_dump_bio(LHASH_OF (CONF_VALUE)* conf,BIO * out)166 int CONF_dump_bio(LHASH_OF(CONF_VALUE) *conf, BIO *out)
167 {
168     CONF ctmp;
169 
170     CONF_set_nconf(&ctmp, conf);
171     return NCONF_dump_bio(&ctmp, out);
172 }
173 
174 /*
175  * The following section contains the "New CONF" functions.  They are
176  * completely centralised around a new CONF structure that may contain
177  * basically anything, but at least a method pointer and a table of data.
178  * These functions are also written in terms of the bridge functions used by
179  * the "CONF classic" functions, for consistency.
180  */
181 
NCONF_new_ex(OSSL_LIB_CTX * libctx,CONF_METHOD * meth)182 CONF *NCONF_new_ex(OSSL_LIB_CTX *libctx, CONF_METHOD *meth)
183 {
184     CONF *ret;
185 
186     if (meth == NULL)
187         meth = NCONF_default();
188 
189     ret = meth->create(meth);
190     if (ret == NULL) {
191         ERR_raise(ERR_LIB_CONF, ERR_R_MALLOC_FAILURE);
192         return NULL;
193     }
194     ret->libctx = libctx;
195 
196     return ret;
197 }
198 
NCONF_new(CONF_METHOD * meth)199 CONF *NCONF_new(CONF_METHOD *meth)
200 {
201     return NCONF_new_ex(NULL, meth);
202 }
203 
NCONF_free(CONF * conf)204 void NCONF_free(CONF *conf)
205 {
206     if (conf == NULL)
207         return;
208     conf->meth->destroy(conf);
209 }
210 
NCONF_free_data(CONF * conf)211 void NCONF_free_data(CONF *conf)
212 {
213     if (conf == NULL)
214         return;
215     conf->meth->destroy_data(conf);
216 }
217 
NCONF_get0_libctx(const CONF * conf)218 OSSL_LIB_CTX *NCONF_get0_libctx(const CONF *conf)
219 {
220     return conf->libctx;
221 }
222 
223 typedef STACK_OF(OPENSSL_CSTRING) SECTION_NAMES;
224 
225 IMPLEMENT_LHASH_DOALL_ARG_CONST(CONF_VALUE, SECTION_NAMES);
226 
collect_section_name(const CONF_VALUE * v,SECTION_NAMES * names)227 static void collect_section_name(const CONF_VALUE *v, SECTION_NAMES *names)
228 {
229     /* A section is a CONF_VALUE with name == NULL */
230     if (v->name == NULL)
231         sk_OPENSSL_CSTRING_push(names, v->section);
232 }
233 
section_name_cmp(OPENSSL_CSTRING const * a,OPENSSL_CSTRING const * b)234 static int section_name_cmp(OPENSSL_CSTRING const *a, OPENSSL_CSTRING const *b)
235 {
236     return strcmp(*a, *b);
237 }
238 
STACK_OF(OPENSSL_CSTRING)239 STACK_OF(OPENSSL_CSTRING) *NCONF_get_section_names(const CONF *cnf)
240 {
241     SECTION_NAMES *names;
242 
243     if ((names = sk_OPENSSL_CSTRING_new(section_name_cmp)) == NULL)
244         return NULL;
245     lh_CONF_VALUE_doall_SECTION_NAMES(cnf->data, collect_section_name, names);
246     sk_OPENSSL_CSTRING_sort(names);
247     return names;
248 }
249 
NCONF_load(CONF * conf,const char * file,long * eline)250 int NCONF_load(CONF *conf, const char *file, long *eline)
251 {
252     if (conf == NULL) {
253         ERR_raise(ERR_LIB_CONF, CONF_R_NO_CONF);
254         return 0;
255     }
256 
257     return conf->meth->load(conf, file, eline);
258 }
259 
260 #ifndef OPENSSL_NO_STDIO
NCONF_load_fp(CONF * conf,FILE * fp,long * eline)261 int NCONF_load_fp(CONF *conf, FILE *fp, long *eline)
262 {
263     BIO *btmp;
264     int ret;
265     if ((btmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) {
266         ERR_raise(ERR_LIB_CONF, ERR_R_BUF_LIB);
267         return 0;
268     }
269     ret = NCONF_load_bio(conf, btmp, eline);
270     BIO_free(btmp);
271     return ret;
272 }
273 #endif
274 
NCONF_load_bio(CONF * conf,BIO * bp,long * eline)275 int NCONF_load_bio(CONF *conf, BIO *bp, long *eline)
276 {
277     if (conf == NULL) {
278         ERR_raise(ERR_LIB_CONF, CONF_R_NO_CONF);
279         return 0;
280     }
281 
282     return conf->meth->load_bio(conf, bp, eline);
283 }
284 
STACK_OF(CONF_VALUE)285 STACK_OF(CONF_VALUE) *NCONF_get_section(const CONF *conf, const char *section)
286 {
287     if (conf == NULL) {
288         ERR_raise(ERR_LIB_CONF, CONF_R_NO_CONF);
289         return NULL;
290     }
291 
292     if (section == NULL) {
293         ERR_raise(ERR_LIB_CONF, CONF_R_NO_SECTION);
294         return NULL;
295     }
296 
297     return _CONF_get_section_values(conf, section);
298 }
299 
NCONF_get_string(const CONF * conf,const char * group,const char * name)300 char *NCONF_get_string(const CONF *conf, const char *group, const char *name)
301 {
302     char *s = _CONF_get_string(conf, group, name);
303 
304     /*
305      * Since we may get a value from an environment variable even if conf is
306      * NULL, let's check the value first
307      */
308     if (s)
309         return s;
310 
311     if (conf == NULL) {
312         ERR_raise(ERR_LIB_CONF, CONF_R_NO_CONF_OR_ENVIRONMENT_VARIABLE);
313         return NULL;
314     }
315     ERR_raise_data(ERR_LIB_CONF, CONF_R_NO_VALUE,
316                    "group=%s name=%s", group, name);
317     return NULL;
318 }
319 
default_is_number(const CONF * conf,char c)320 static int default_is_number(const CONF *conf, char c)
321 {
322     return ossl_isdigit(c);
323 }
324 
default_to_int(const CONF * conf,char c)325 static int default_to_int(const CONF *conf, char c)
326 {
327     return (int)(c - '0');
328 }
329 
NCONF_get_number_e(const CONF * conf,const char * group,const char * name,long * result)330 int NCONF_get_number_e(const CONF *conf, const char *group, const char *name,
331                        long *result)
332 {
333     char *str;
334     long res;
335     int (*is_number)(const CONF *, char) = &default_is_number;
336     int (*to_int)(const CONF *, char) = &default_to_int;
337 
338     if (result == NULL) {
339         ERR_raise(ERR_LIB_CONF, ERR_R_PASSED_NULL_PARAMETER);
340         return 0;
341     }
342 
343     str = NCONF_get_string(conf, group, name);
344 
345     if (str == NULL)
346         return 0;
347 
348     if (conf != NULL) {
349         if (conf->meth->is_number != NULL)
350             is_number = conf->meth->is_number;
351         if (conf->meth->to_int != NULL)
352             to_int = conf->meth->to_int;
353     }
354     for (res = 0; is_number(conf, *str); str++) {
355         const int d = to_int(conf, *str);
356 
357         if (res > (LONG_MAX - d) / 10L) {
358             ERR_raise(ERR_LIB_CONF, CONF_R_NUMBER_TOO_LARGE);
359             return 0;
360         }
361         res = res * 10 + d;
362     }
363 
364     *result = res;
365     return 1;
366 }
367 
_CONF_get_number(const CONF * conf,const char * section,const char * name)368 long _CONF_get_number(const CONF *conf, const char *section,
369                       const char *name)
370 {
371     int status;
372     long result = 0;
373 
374     ERR_set_mark();
375     status = NCONF_get_number_e(conf, section, name, &result);
376     ERR_pop_to_mark();
377     return status == 0 ? 0L : result;
378 }
379 
380 #ifndef OPENSSL_NO_STDIO
NCONF_dump_fp(const CONF * conf,FILE * out)381 int NCONF_dump_fp(const CONF *conf, FILE *out)
382 {
383     BIO *btmp;
384     int ret;
385     if ((btmp = BIO_new_fp(out, BIO_NOCLOSE)) == NULL) {
386         ERR_raise(ERR_LIB_CONF, ERR_R_BUF_LIB);
387         return 0;
388     }
389     ret = NCONF_dump_bio(conf, btmp);
390     BIO_free(btmp);
391     return ret;
392 }
393 #endif
394 
NCONF_dump_bio(const CONF * conf,BIO * out)395 int NCONF_dump_bio(const CONF *conf, BIO *out)
396 {
397     if (conf == NULL) {
398         ERR_raise(ERR_LIB_CONF, CONF_R_NO_CONF);
399         return 0;
400     }
401 
402     return conf->meth->dump(conf, out);
403 }
404 
405 /*
406  * These routines call the C malloc/free, to avoid intermixing with
407  * OpenSSL function pointers before the library is initialized.
408  */
OPENSSL_INIT_new(void)409 OPENSSL_INIT_SETTINGS *OPENSSL_INIT_new(void)
410 {
411     OPENSSL_INIT_SETTINGS *ret = malloc(sizeof(*ret));
412 
413     if (ret == NULL)
414         return NULL;
415 
416     memset(ret, 0, sizeof(*ret));
417     ret->flags = DEFAULT_CONF_MFLAGS;
418 
419     return ret;
420 }
421 
422 
423 #ifndef OPENSSL_NO_STDIO
OPENSSL_INIT_set_config_filename(OPENSSL_INIT_SETTINGS * settings,const char * filename)424 int OPENSSL_INIT_set_config_filename(OPENSSL_INIT_SETTINGS *settings,
425                                      const char *filename)
426 {
427     char *newfilename = NULL;
428 
429     if (filename != NULL) {
430         newfilename = strdup(filename);
431         if (newfilename == NULL)
432             return 0;
433     }
434 
435     free(settings->filename);
436     settings->filename = newfilename;
437 
438     return 1;
439 }
440 
OPENSSL_INIT_set_config_file_flags(OPENSSL_INIT_SETTINGS * settings,unsigned long flags)441 void OPENSSL_INIT_set_config_file_flags(OPENSSL_INIT_SETTINGS *settings,
442                                         unsigned long flags)
443 {
444     settings->flags = flags;
445 }
446 
OPENSSL_INIT_set_config_appname(OPENSSL_INIT_SETTINGS * settings,const char * appname)447 int OPENSSL_INIT_set_config_appname(OPENSSL_INIT_SETTINGS *settings,
448                                     const char *appname)
449 {
450     char *newappname = NULL;
451 
452     if (appname != NULL) {
453         newappname = strdup(appname);
454         if (newappname == NULL)
455             return 0;
456     }
457 
458     free(settings->appname);
459     settings->appname = newappname;
460 
461     return 1;
462 }
463 #endif
464 
OPENSSL_INIT_free(OPENSSL_INIT_SETTINGS * settings)465 void OPENSSL_INIT_free(OPENSSL_INIT_SETTINGS *settings)
466 {
467     free(settings->filename);
468     free(settings->appname);
469     free(settings);
470 }
471